4540 lines
296 KiB
Plaintext
4540 lines
296 KiB
Plaintext
Volatility 3 Framework 2.27.0
|
||
|
||
Offset Name
|
||
|
||
0xb482b0ef9220 \$Mft::$BITMAP
|
||
0xb482b0ef9390 \$BitMap
|
||
0xb482b0ef9670 \$LogFile
|
||
0xb482b0ef9ac0 TxfLog
|
||
0xb482b0ef9c30 \$MftMirr
|
||
0xb482b0efa640 \$Directory
|
||
0xb482b0efa7b0 \$Secure:$SDS:$DATA
|
||
0xb482b0efac00 \$Mft
|
||
0xb482b32c5950 \$MapAttributeValue
|
||
0xb482b3a30220 \$Directory
|
||
0xb482b3a30390 \:$I30:$INDEX_ALLOCATION
|
||
0xb482b3a30670 \Windows\System32\drivers\Dumpstorport.sys
|
||
0xb482b3a307e0 \$Extend\$Deleted:$I30:$INDEX_ALLOCATION
|
||
0xb482b3a30950 \$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000002
|
||
0xb482b3a30ac0 \$Extend\$RmMetadata\$Repair:$Corrupt:$DATA
|
||
0xb482b3a30da0 \$Secure:$SII:$INDEX_ALLOCATION
|
||
0xb482b3a31080 \$Extend:$I30:$INDEX_ALLOCATION
|
||
0xb482b3a311f0 \Device\HarddiskVolume3\$Extend\$RmMetadata\$TxfLog\$TxfLog
|
||
0xb482b3a31360 \$Extend\$UsnJrnl:$J:$DATA
|
||
0xb482b3a31640 \Windows\System32\drivers\vmrawdsk.sys
|
||
0xb482b3a317b0 \Windows\System32\drivers\stornvme.sys
|
||
0xb482b3a31a90 \$Extend\$RmMetadata\$TxfLog\$TxfLog.blf
|
||
0xb482b3a31c00 \$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000001
|
||
0xb482b3a31d70 \$Extend\$RmMetadata\$Repair:$Verify:$DATA
|
||
0xb482b3a31ee0 \$Extend\$RmMetadata\$Repair
|
||
0xb482b3a950b0 \:$I30:$INDEX_ALLOCATION
|
||
0xb482b3a95220 \Device\HarddiskVolume3\$Extend\$RmMetadata\$TxfLog\$TxfLog
|
||
0xb482b3a95390 \$Directory
|
||
0xb482b3a95500 \Windows\security\EDP\Logs\AppLearning_1.etl
|
||
0xb482b3a957e0 \Device\HarddiskVolume3\$Extend\$RmMetadata\$TxfLog\$TxfLog
|
||
0xb482b3a95950 \$Extend\$Reparse:$R:$INDEX_ALLOCATION
|
||
0xb482b3a95ac0 \$Extend\$RmMetadata\$Txf:$I30:$INDEX_ALLOCATION
|
||
0xb482b3a96080 \$Extend\$RmMetadata\$TxfLog\$Tops:$T:$DATA
|
||
0xb482b3a961f0 \Windows\System32\drivers\crashdmp.sys
|
||
0xb482b3a96360 \$Extend\$RmMetadata\$TxfLog\$Tops
|
||
0xb482b3a964d0 \$Directory
|
||
0xb482b3a967b0 \$Directory
|
||
0xb482b3a96a90 \$Directory
|
||
0xb482b3a96c00 KtmLog
|
||
0xb482b3a96d70 \Windows\System32\drivers\en-US\ntfs.sys.mui
|
||
0xb482b3ae4220 \Windows\System32\drivers\null.sys
|
||
0xb482b3ae4390 \Windows\System32\ntdll.dll
|
||
0xb482b3ae4670 \Windows\System32\vertdll.dll
|
||
0xb482b3ae47e0 \$Directory
|
||
0xb482b3ae4ac0 \$MapAttributeValue
|
||
0xb482b3ae4c30 \Windows\System32\drivers\cdrom.sys
|
||
0xb482b3ae5080 \$PrepareToShrinkFileSize
|
||
0xb482b3ae5360 \$Directory
|
||
0xb482b3ae54d0 \Windows\System32\drivers\tbs.sys
|
||
0xb482b3ae5640 \Windows\System32\drivers\dumpfve.sys
|
||
0xb482b3ae5a90 \Windows\System32\drivers\wd\WdNisDrv.sys
|
||
0xb482b3ae5ee0 \Windows\System32\drivers\UCPD.sys
|
||
0xb482b3ae61c0 \Windows\System32\drivers\applockerfltr.sys
|
||
0xb482b3ae64a0 \Windows\System32\drivers\filecrypt.sys
|
||
0xb482b3ae6a60 \$MapAttributeValue
|
||
0xb482b3ae6bd0 \Windows\SysWOW64\ntdll.dll
|
||
0xb482b3ae6d40 \Windows\System32\drivers\beep.sys
|
||
0xb482b3ae6eb0 \$MapAttributeValue
|
||
0xb482b3ae75e0 \$MapAttributeValue
|
||
0xb482b3af80d0 \Windows\System32\config\SAM.LOG1
|
||
0xb482b3af8260 \Windows\System32\config\SECURITY.LOG1
|
||
0xb482b3af8710 \Windows\System32\config\DEFAULT
|
||
0xb482b3af8bc0 \Windows\System32\config\DEFAULT.LOG1
|
||
0xb482b3af8d50 \Windows\System32\config\SAM.LOG2
|
||
0xb482b3af8ee0 \$Directory
|
||
0xb482b3af9200 \Windows\System32\config\DEFAULT.LOG2
|
||
0xb482b3af96b0 \Windows\System32\config\SECURITY.LOG2
|
||
0xb482b3b650b0 \$MapAttributeValue
|
||
0xb482b3b65500 \Windows\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_2753efdbb0d9a226\BasicDisplay.sys
|
||
0xb482b3b657e0 \Windows\System32\drivers\vwififlt.sys
|
||
0xb482b3b65ac0 \Windows\System32\drivers\npfs.sys
|
||
0xb482b3b65c30 \Windows\System32\drivers\ws2ifsl.sys
|
||
0xb482b3b65da0 \Windows\System32\drivers\tdx.sys
|
||
0xb482b3b661f0 \Windows\System32\drivers\netbt.sys
|
||
0xb482b3b664d0 \$MapAttributeValue
|
||
0xb482b3b66d70 \Windows\System32\DriverStore\FileRepository\basicrender.inf_amd64_be4cb8d455d1ca0d\BasicRender.sys
|
||
0xb482b3b67780 \$MapAttributeValue
|
||
0xb482b3b678f0 \$Directory
|
||
0xb482b3b67bd0 \Windows\System32\drivers\msfs.sys
|
||
0xb482b3b67d40 \Windows\System32\drivers\tdi.sys
|
||
0xb482b3b67eb0 \Windows\System32\drivers\afunix.sys
|
||
0xb482b3b68190 \Windows\System32\drivers\afd.sys
|
||
0xb482b3b68a30 \Windows\System32\drivers\cimfs.sys
|
||
0xb482b3b68ba0 \$Directory
|
||
0xb482b3bba0b0 \Windows\System32\drivers\pacer.sys
|
||
0xb482b3bba220 \Windows\System32\drivers\winhvr.sys
|
||
0xb482b3bba500 \Windows\System32\drivers\csc.sys
|
||
0xb482b3bba950 \Windows\System32\drivers\Vid.sys
|
||
0xb482b3bbada0 \$MapAttributeValue
|
||
0xb482b3bbb7b0 \Windows\System32\drivers\nsiproxy.sys
|
||
0xb482b3bbb920 \Windows\System32\drivers\netbios.sys
|
||
0xb482b3bbbc00 \Windows\System32\drivers\mssmbios.sys
|
||
0xb482b3bbbee0 \Windows\System32\drivers\rdbss.sys
|
||
0xb482b3bbc610 \$MapAttributeValue
|
||
0xb482b3bbca60 \$MapAttributeValue
|
||
0xb482b3bbcd40 \Windows\System32\drivers\npsvctrig.sys
|
||
0xb482b3bbd190 \Windows\System32\drivers\ndiscap.sys
|
||
0xb482b3bbd300 \$MapAttributeValue
|
||
0xb482b3bbd5e0 \Windows\System32\drivers\dfsc.sys
|
||
0xb482b3bfb0b0 \Windows\System32\drivers\i8042prt.sys
|
||
0xb482b3bfbda0 \Windows\System32\drivers\usbhub.sys
|
||
0xb482b3bfc1f0 \Windows\System32\DriverStore\FileRepository\umbus.inf_amd64_914dd46b4b013b1b\umbus.sys
|
||
0xb482b3bfc4d0 \Windows\System32\drivers\ahcache.sys
|
||
0xb482b3bfc7b0 \Windows\System32\l_intl.nls
|
||
0xb482b3bfcd70 \Windows\System32\drivers\kbdclass.sys
|
||
0xb482b3bfd330 \Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_8cf6fa9d3afdfa25\CompositeBus.sys
|
||
0xb482b3bfd610 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTDefenderApiLogger.etl
|
||
0xb482b3bfd8f0 \Windows\System32\smss.exe
|
||
0xb482b3bfda60 \Windows\System32\drivers\bfs.sys
|
||
0xb482b3bfdd40 \Windows\System32\C_437.NLS
|
||
0xb482b3bfdeb0 \Windows\System32\C_1252.NLS
|
||
0xb482b3bfe190 \$MapAttributeValue
|
||
0xb482b3bfe5e0 \SystemRoot\System32\Config\TxR\{2ad83873-efea-11ee-a54d-000d3a94eaa1}.TxR
|
||
0xb482b3bfe8c0 \Windows\bootstat.dat
|
||
0xb482b3bfeba0 \$Directory
|
||
0xb482b3bfed10 \$Directory
|
||
0xb482b3c760d0 \Windows\System32\config\SOFTWARE.LOG1
|
||
0xb482b3c76580 \Windows\System32\wevtsvc.dll
|
||
0xb482b3c768a0 \Windows
|
||
0xb482b3c76a30 \Windows\System32\comdlg32.dll
|
||
0xb482b3c76ee0 \Windows\System32\GdiPlus.dll
|
||
0xb482b3c77520 \Sessions
|
||
0xb482b3c776b0 \Windows\System32\setupapi.dll
|
||
0xb482b3c77840 \Windows\System32\oleaut32.dll
|
||
0xb482b3c77b60 \Windows\System32\combase.dll
|
||
0xb482b3c77e80 \Windows\System32\config\SOFTWARE.LOG2
|
||
0xb482b3ccf0e0 \$Mft::$BITMAP
|
||
0xb482b3ccf250 \$Directory
|
||
0xb482b3ccf3c0 \Windows\System32\drivers\appid.sys
|
||
0xb482b3ccf6a0 \:$I30:$INDEX_ALLOCATION
|
||
0xb482b3ccf810 \Windows\System32\drivers\CmBatt.sys
|
||
0xb482b3ccfaf0 \Device\HarddiskVolume4\$Extend\$RmMetadata\$TxfLog\$TxfLog
|
||
0xb482b3ccfdd0 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl
|
||
0xb482b3cd00b0 \$Directory
|
||
0xb482b3cd0390 \$MapAttributeValue
|
||
0xb482b3cd0500 \Windows\System32\drivers\intelppm.sys
|
||
0xb482b3cd0670 KtmLog
|
||
0xb482b3cd0c30 \$Directory
|
||
0xb482b3cd1080 \Windows\System32\drivers\vmmouse.sys
|
||
0xb482b3cd11f0 \$Directory
|
||
0xb482b3cd14d0 \$Extend:$I30:$INDEX_ALLOCATION
|
||
0xb482b3cd1640 \Windows\System32\drivers\usbccgp.sys
|
||
0xb482b3cd1a90 \$MapAttributeValue
|
||
0xb482b3cd1c00 \Windows\System32\drivers\vmusbmouse.sys
|
||
0xb482b3cd1d70 \Windows\System32\drivers\battc.sys
|
||
0xb482b3cd24a0 \Windows\System32\drivers\ksthunk.sys
|
||
0xb482b3cd2610 \Windows\System32\drivers\mouclass.sys
|
||
0xb482b3cd28f0 \$Directory
|
||
0xb482b3cd2a60 \$Secure:$SII:$INDEX_ALLOCATION
|
||
0xb482b3cd2bd0 \$Directory
|
||
0xb482b3cd2eb0 \Windows\System32\drivers\vmgencounter.sys
|
||
0xb482b3cd3300 \$Extend\$RmMetadata\$Repair
|
||
0xb482b3cd38c0 \Windows\security\EDP\Logs\AuditTCB_8.etl
|
||
0xb482b3cd4160 \$Directory
|
||
0xb482b3cd42d0 \$Directory
|
||
0xb482b3cd4440 \$Secure:$SDS:$DATA
|
||
0xb482b3cd45b0 \Windows\System32\drivers\USBHUB3.SYS
|
||
0xb482b3cd4890 \$PrepareToShrinkFileSize
|
||
0xb482b3cd4a00 \Windows\System32\drivers\NdisVirtualBus.sys
|
||
0xb482b3cd4b70 \Device\HarddiskVolume4\$Extend\$RmMetadata\$TxfLog\$TxfLog
|
||
0xb482b3cd4ce0 \$MapAttributeValue
|
||
0xb482b3cd59d0 \$MapAttributeValue
|
||
0xb482b3cd6100 \Windows\System32\drivers\hidusb.sys
|
||
0xb482b3cd6270 \Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_8b9dd76f362e3ec6\swenum.sys
|
||
0xb482b3cd66c0 \Windows\System32\drivers\usbport.sys
|
||
0xb482b3cd6830 \Windows\System32\drivers\portcls.sys
|
||
0xb482b3cd69a0 \Windows\security\EDP\Logs\AuditRegular_8.etl
|
||
0xb482b3cd7240 \Windows\System32\drivers\ks.sys
|
||
0xb482b3cd7690 \$MapAttributeValue
|
||
0xb482b3cd7970 \$Extend\$RmMetadata\$TxfLog\$TxfLog.blf
|
||
0xb482b3cd80a0 \$Extend\$Deleted:$I30:$INDEX_ALLOCATION
|
||
0xb482b3cd8940 \Windows\System32\drivers\usbehci.sys
|
||
0xb482b3cd8d90 \Windows\System32\drivers\usbuhci.sys
|
||
0xb482b3cd9070 \Windows\System32\drivers\hidclass.sys
|
||
0xb482b3cd91e0 \Device\HarddiskVolume4\$Extend\$RmMetadata\$TxfLog\$TxfLog
|
||
0xb482b3cd9350 \Windows\System32\drivers\drmk.sys
|
||
0xb482b3cd9630 \Windows\System32\drivers\hdaudbus.sys
|
||
0xb482b3cd97a0 \Windows\System32\drivers\rdpbus.sys
|
||
0xb482b3cd9910 \Windows\System32\drivers\hidparse.sys
|
||
0xb482b3cd9a80 \Windows\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp.sys
|
||
0xb482b3cd9d60 \$Directory
|
||
0xb482b3cd9ed0 \$Directory
|
||
0xb482b3cda1b0 \Windows\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp_loader.sys
|
||
0xb482b3cda600 \Windows\System32\drivers\usbd.sys
|
||
0xb482b3cdaa50 \$Extend\$RmMetadata\$TxfLog\$Tops:$T:$DATA
|
||
0xb482b3cdabc0 \$Extend\$RmMetadata\$Txf:$I30:$INDEX_ALLOCATION
|
||
0xb482b3cdaea0 \:$I30:$INDEX_ALLOCATION
|
||
0xb482b3cdb2f0 \$LogFile
|
||
0xb482b3cdb740 \Windows\System32\drivers\en-US\USBXHCI.SYS.mui
|
||
0xb482b3cdba20 \$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000001
|
||
0xb482b3cdbe70 \Windows\System32\drivers\USBXHCI.SYS
|
||
0xb482b3cdc430 \$Extend\$RmMetadata\$TxfLog\$Tops
|
||
0xb482b3cdc880 \Windows\System32\drivers\mouhid.sys
|
||
0xb482b3cdc9f0 \Windows\System32\drivers\fastfat.sys
|
||
0xb482b3cdce40 TxfLog
|
||
0xb482b3cdd400 \$Mft
|
||
0xb482b3cdd710 흨돍뒂흨돍뒂
|
||
0xb482b3cdd850 \$BitMap
|
||
0xb482b3cddb30 \$MftMirr
|
||
0xb482b3cddca0 \Windows\System32\drivers\HdAudio.sys
|
||
0xb482b3cdde10 \Windows\System32\drivers\Ucx01000.sys
|
||
0xb482b3cde0f0 \$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000002
|
||
0xb482b3cde540 \$Directory
|
||
0xb482b3cde820 \Windows\System32\drivers\e1i68x64.sys
|
||
0xb482b3d353f0 \Windows\System32\clbcatq.dll
|
||
0xb482b3d35710 \Windows\System32\nsi.dll
|
||
0xb482b3d35a30 \Windows\System32\psapi.dll
|
||
0xb482b3d35bc0 \Windows\System32\imm32.dll
|
||
0xb482b3d35d50 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_uk.pak
|
||
0xb482b3d36200 \Windows\System32\rpcrt4.dll
|
||
0xb482b3d36520 \Windows\System32\sechost.dll
|
||
0xb482b3d36b60 \Windows\System32\ole32.dll
|
||
0xb482b3d73260 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_vi.pak
|
||
0xb482b3d73710 \Windows\System32\wow64con.dll
|
||
0xb482b3d738a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\cs.pak
|
||
0xb482b3d73a30 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\da.pak
|
||
0xb482b3d73bc0 \Windows\System32\normaliz.dll
|
||
0xb482b3d73d50 \Windows\System32\shell32.dll
|
||
0xb482b3d73ee0 \Windows\System32\SHCore.dll
|
||
0xb482b3d74520 \Windows\System32\coml2.dll
|
||
0xb482b3d74840 \Windows\System32\wow64.dll
|
||
0xb482b3d749d0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\cy.pak
|
||
0xb482b3db10d0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\es-419.pak
|
||
0xb482b3db13f0 \Windows\System32\kernel32.dll
|
||
0xb482b3db1710 \Windows\System32\advapi32.dll
|
||
0xb482b3db18a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\el.pak
|
||
0xb482b3db1d50 \Windows\System32\shlwapi.dll
|
||
0xb482b3db1ee0 \Windows\System32\user32.dll
|
||
0xb482b3db2390 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\de.pak
|
||
0xb482b3db26b0 \Windows\System32\msctf.dll
|
||
0xb482b3db2840 \Windows\System32\Wldap32.dll
|
||
0xb482b3db2b60 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\en-GB.pak
|
||
0xb482b3db2e80 \Windows\System32\difxapi.dll
|
||
0xb482b3dd2260 \Windows\System32\wow64win.dll
|
||
0xb482b3dd2580 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\EdgeJourneys\EdgeJourneys.db-wal
|
||
0xb482b3dd2710 \Windows\System32\msvcrt.dll
|
||
0xb482b3dd28a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\es.pak
|
||
0xb482b3dd2bc0 \Windows\System32\ws2_32.dll
|
||
0xb482b3dd2d50 \Windows\System32\imagehlp.dll
|
||
0xb482b3dd2ee0 \Windows\System32\wow64base.dll
|
||
0xb482b3dd3200 \Windows\System32\KernelBase.dll
|
||
0xb482b3dd3390 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\eu.pak
|
||
0xb482b3dd3520 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\et.pak
|
||
0xb482b3dd39d0 \Windows\System32\gdi32.dll
|
||
0xb482b3dd3cf0 \Windows\System32\wow64cpu.dll
|
||
0xb482b3e5e3f0 \Windows\System32\win32u.dll
|
||
0xb482b3e5e710 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\fil.pak
|
||
0xb482b3e5e8a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\fi.pak
|
||
0xb482b3e5ed50 \Windows\System32\ucrtbase.dll
|
||
0xb482b3e5f200 \Windows\System32\crypt32.dll
|
||
0xb482b3e5f6b0 \Windows\System32\windows.storage.dll
|
||
0xb482b3e5fcf0 \Windows\System32\bcryptprimitives.dll
|
||
0xb482b3e5fe80 \Windows\System32\wintrust.dll
|
||
0xb482b3e860d0 \Windows\SysWOW64\wmp.dll
|
||
0xb482b3e868a0 \Windows\System32\comctl32.dll
|
||
0xb482b3e86ee0 \Windows\System32\gdi32full.dll
|
||
0xb482b3e8c260 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ga.pak
|
||
0xb482b3e8c8a0 \Windows\System32\WinTypes.dll
|
||
0xb482b3e8cbc0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\gd.pak
|
||
0xb482b3e8d390 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\gu.pak
|
||
0xb482b3e8d520 \Windows\SysWOW64\difxapi.dll
|
||
0xb482b3e8db60 \Windows\SysWOW64\SHCore.dll
|
||
0xb482b3e8dcf0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\gl.pak
|
||
0xb482b3e8e1a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\fr-CA.pak
|
||
0xb482b3e8e4c0 \Windows\SysWOW64\ucrtbase.dll
|
||
0xb482b3e8ee20 \Windows\SysWOW64\coml2.dll
|
||
0xb482b3e8f140 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\he.pak
|
||
0xb482b3e8f460 \Windows\SysWOW64\user32.dll
|
||
0xb482b3e8faa0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\fr.pak
|
||
0xb482b3e8fdc0 \Windows\System32\msvcp_win.dll
|
||
0xb482b3ea9230 \$Directory
|
||
0xb482b3ea93a0 \Windows\System32\LogFiles\CloudFiles\CldFlt0.etl
|
||
0xb482b3ea9510 \$PrepareToShrinkFileSize
|
||
0xb482b3ea9680 \Windows\System32\WDI\LogFiles\BootPerfDiagLogger.etl
|
||
0xb482b3ea9ad0 \Windows\System32\drivers\luafv.sys
|
||
0xb482b3ea9db0 \$Secure:$SDH:$INDEX_ALLOCATION
|
||
0xb482b3eaa200 \Windows\System32\drivers\lltdio.sys
|
||
0xb482b3eaa370 \Windows\System32\drivers\bindflt.sys
|
||
0xb482b3eaa650 \$Directory
|
||
0xb482b3eaa7c0 \Windows\System32\LogFiles\WMI\RadioMgr.etl
|
||
0xb482b3eaa930 \Windows\System32\drivers\monitor.sys
|
||
0xb482b3eaad80 \$PrepareToShrinkFileSize
|
||
0xb482b3eab060 \$Directory
|
||
0xb482b3eab1d0 \$ConvertToNonresident
|
||
0xb482b3eab340 \Windows\System32\LogFiles\WMI\LwtNetLog.etl
|
||
0xb482b3eab900 \$Directory
|
||
0xb482b3eabbe0 \$ConvertToNonresident
|
||
0xb482b3eabec0 \$MapAttributeValue
|
||
0xb482b3eac310 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl
|
||
0xb482b3eac480 \$MapAttributeValue
|
||
0xb482b3eac760 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl
|
||
0xb482b3eac8d0 \Windows\System32\config\BFS
|
||
0xb482b3eaca40 \$Directory
|
||
0xb482b3eacd20 \$Directory
|
||
0xb482b3eace90 \Windows\System32\drivers\cldflt.sys
|
||
0xb482b3ead170 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTDefenderAuditLogger.etl
|
||
0xb482b3ead450 \Windows\System32\LogFiles\WMI\ReFSLog.etl
|
||
0xb482b3ead5c0 \Windows\System32\drivers\DriverData\LogFiles\WMI\Microsoft-Windows-Rdp-Graphics-RdpIdd-Trace.etl
|
||
0xb482b3eada10 \$MapAttributeValue
|
||
0xb482b3eadb80 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl
|
||
0xb482b3eade60 \Windows\System32\LogFiles\WMI\NetCore.etl
|
||
0xb482b3eae420 \Windows\System32\LogFiles\WMI\NtfsLog.etl.008
|
||
0xb482b3eae870 \Windows\System32\LogFiles\WMI\Wifi.etl
|
||
0xb482b3eae9e0 \Windows\System32\WDI\LogFiles\WdiContextLog.etl.002
|
||
0xb482b3eaeb50 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTUBPM.etl
|
||
0xb482b3eaee30 \Windows\System32\config\TxR\{2ad83874-efea-11ee-a54d-000d3a94eaa1}.TMContainer00000000000000000001.regtrans-ms
|
||
0xb482b3eaf110 \Windows\System32\drivers\wcifs.sys
|
||
0xb482b3eaf280 \Windows\System32\config\TxR\{2ad83874-efea-11ee-a54d-000d3a94eaa1}.TMContainer00000000000000000002.regtrans-ms
|
||
0xb482b3eaf3f0 \$MapAttributeValue
|
||
0xb482b3eaf840 \$Directory
|
||
0xb482b3eaf9b0 \$MapAttributeValue
|
||
0xb482b3eafe40 <09>
|
||
0xb482b3eb00e0 \SystemRoot\System32\Config\TxR\{2ad83874-efea-11ee-a54d-000d3a94eaa1}.TM
|
||
0xb482b3eb0250 \Windows\System32\drivers\mslldp.sys
|
||
0xb482b3eb0530 \Windows\System32\drivers\udfs.sys
|
||
0xb482b3eb06a0 \Windows\System32\drivers\storqosflt.sys
|
||
0xb482b3eb0810 \Windows\System32\drivers\UnionFS.sys
|
||
0xb482b3eb0c60 \SystemRoot\System32\Config\TxR\{2ad83874-efea-11ee-a54d-000d3a94eaa1}.TM
|
||
0xb482b3eb0dd0 \Windows\System32\config\TxR\{2ad83874-efea-11ee-a54d-000d3a94eaa1}.TM.blf
|
||
0xb482b40c5bc0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\km.pak
|
||
0xb482b40c5d50 \Windows\SysWOW64\nsi.dll
|
||
0xb482b40c5ee0 \Windows\SysWOW64\bcryptprimitives.dll
|
||
0xb482b40c6200 \Windows\SysWOW64\shlwapi.dll
|
||
0xb482b40c6390 \Windows\SysWOW64\advapi32.dll
|
||
0xb482b40c6520 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\it.pak
|
||
0xb482b40c6840 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\hi.pak
|
||
0xb482b40c69d0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ka.pak
|
||
0xb482b40c6cf0 \Windows\SysWOW64\comdlg32.dll
|
||
0xb482b40c6e80 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\id.pak
|
||
0xb482b40c7330 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\kk.pak
|
||
0xb482b40c7650 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ja.pak
|
||
0xb482b40c77e0 \Windows\SysWOW64\oleaut32.dll
|
||
0xb482b40c7b00 \Windows\SysWOW64\msvcp_win.dll
|
||
0xb482b40c7e20 \Windows\SysWOW64\clbcatq.dll
|
||
0xb482b40c8140 \Windows\SysWOW64\ole32.dll
|
||
0xb482b40c82d0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\hr.pak
|
||
0xb482b40c8460 \Windows\SysWOW64\KernelBase.dll
|
||
0xb482b40c85f0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\is.pak
|
||
0xb482b40c8780 \Windows\SysWOW64\imagehlp.dll
|
||
0xb482b40c8dc0 \Windows\SysWOW64\comctl32.dll
|
||
0xb482b41130d0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ko.pak
|
||
0xb482b4113710 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\lo.pak
|
||
0xb482b41138a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\lt.pak
|
||
0xb482b4113bc0 \Windows\SysWOW64\shell32.dll
|
||
0xb482b4113ee0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ms.pak
|
||
0xb482b4114200 \Windows\SysWOW64\windows.storage.dll
|
||
0xb482b4114390 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\kn.pak
|
||
0xb482b4114520 \Windows\SysWOW64\WinTypes.dll
|
||
0xb482b41146b0 \Windows\SysWOW64\rpcrt4.dll
|
||
0xb482b4114840 \Windows\SysWOW64\kernel32.dll
|
||
0xb482b4114b60 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\lb.pak
|
||
0xb482b4114cf0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\mr.pak
|
||
0xb482b4114e80 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\kok.pak
|
||
0xb482b4115330 \Windows\SysWOW64\imm32.dll
|
||
0xb482b41154c0 \Windows\SysWOW64\gdi32full.dll
|
||
0xb482b41157e0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\lv.pak
|
||
0xb482b4115c90 \Windows\SysWOW64\crypt32.dll
|
||
0xb482b4116140 \Windows\SysWOW64\GdiPlus.dll
|
||
0xb482b41162d0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\mk.pak
|
||
0xb482b41165f0 \Windows\SysWOW64\win32u.dll
|
||
0xb482b4116780 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\mi.pak
|
||
0xb482b4116910 \Windows\SysWOW64\setupapi.dll
|
||
0xb482b4116c30 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ml.pak
|
||
0xb482b4116dc0 \Windows\SysWOW64\ws2_32.dll
|
||
0xb482b41610d0 \ProtectedPrefix\NetWorkService
|
||
0xb482b4161260 \Windows\SysWOW64\psapi.dll
|
||
0xb482b4161710 \ProtectedPrefix\NetWorkService
|
||
0xb482b41618a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\pt-BR.pak
|
||
0xb482b4161d50 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\nb.pak
|
||
0xb482b4161ee0 \Windows\SysWOW64\combase.dll
|
||
0xb482b4162200 \ProtectedPrefix\LocalService
|
||
0xb482b4162390 \ProtectedPrefix\Administrators
|
||
0xb482b41626b0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\mt.pak
|
||
0xb482b4162840 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\or.pak
|
||
0xb482b4162cf0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ne.pak
|
||
0xb482b4162e80 \Windows\SysWOW64\Wldap32.dll
|
||
0xb482b4163330 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\nl.pak
|
||
0xb482b4163650 \ProtectedPrefix
|
||
0xb482b41637e0 \Windows\SysWOW64\msctf.dll
|
||
0xb482b4163970 \Windows\SysWOW64\wintrust.dll
|
||
0xb482b4163b00 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\pt-PT.pak
|
||
0xb482b4163c90 \Windows\SysWOW64\normaliz.dll
|
||
0xb482b4164140 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\nn.pak
|
||
0xb482b4164460 \ProtectedPrefix\Administrators
|
||
0xb482b41645f0 \ProtectedPrefix\LocalService
|
||
0xb482b4164910 \ProtectedPrefix
|
||
0xb482b4164aa0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\pl.pak
|
||
0xb482b4164c30 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\pa.pak
|
||
0xb482b41690e0 \Windows\System32\config\SYSTEM
|
||
0xb482b4169270 \Windows\System32\winsrv.dll
|
||
0xb482b4169720 \EFI\Microsoft\Boot\BCD.LOG
|
||
0xb482b41698b0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ro.pak
|
||
0xb482b4169a40 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\qu.pak
|
||
0xb482b416a080 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\sv.pak
|
||
0xb482b416a530 \EFI\Microsoft\Boot\BCD
|
||
0xb482b416a850 \Windows\System32\csrsrv.dll
|
||
0xb482b416a9e0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\sl.pak
|
||
0xb482b416ab70 \Windows\bootstat.dat
|
||
0xb482b416ad00 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\sr-Latn-RS.pak
|
||
0xb482b416b660 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\sk.pak
|
||
0xb482b416b7f0 \pagefile.sys
|
||
0xb482b416b980 \Windows\System32\locale.nls
|
||
0xb482b416bca0 \$Directory
|
||
0xb482b416be30 \Windows\System32\config\SYSTEM.LOG2
|
||
0xb482b416c2e0 \Windows\System32\win32kbase.sys
|
||
0xb482b416c790 \Sessions\0\AppContainerNamedObjects
|
||
0xb482b416c920 \Windows\System32
|
||
0xb482b416cc40 :$VMCB$
|
||
0xb482b416d0f0 \Windows\System32\bcd.dll
|
||
0xb482b416d280 \Windows\System32\basesrv.dll
|
||
0xb482b416da50 \Windows\System32\csrss.exe
|
||
0xb482b416dd70 \Windows\System32\wininitext.dll
|
||
0xb482b416e090 \Windows\System32\win32kbase_rs.sys
|
||
0xb482b416e860 \EFI\Microsoft\Boot\BCD
|
||
0xb482b416e9f0 \Windows\System32\winsrvext.dll
|
||
0xb482b416eb80 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\sr-Cyrl-BA.pak
|
||
0xb482b416eea0 \$Directory
|
||
0xb482b416f1c0 \Windows\System32\drivers\dxgmms2.sys
|
||
0xb482b416f350 \Windows\System32\config\SYSTEM.LOG1
|
||
0xb482b416f4e0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\sq.pak
|
||
0xb482b416f800 \Windows\System32\en-US\winsrv.dll.mui
|
||
0xb482b416fb20 \Windows\System32\win32kfull.sys
|
||
0xb482b416fe40 \Windows\System32\en-US\win32kbase.sys.mui
|
||
0xb482b4170160 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\sr.pak
|
||
0xb482b41702f0 \Windows\System32\en-US\csrss.exe.mui
|
||
0xb482b4170610 \swapfile.sys
|
||
0xb482b4170c50 \Windows\System32\drivers\dxgmms1.sys
|
||
0xb482b4170de0 \DumpStack.log.tmp
|
||
0xb482b43f3270 \Windows\System32\bcrypt.dll
|
||
0xb482b43f3720 \Windows\System32\sxssrv.dll
|
||
0xb482b43f3a40 \Sessions\1\AppContainerNamedObjects
|
||
0xb482b43f3bd0 \Windows\System32\winlogon.exe
|
||
0xb482b43f3d60 \Windows\System32\umpdc.dll
|
||
0xb482b43f4080 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\heavy_ad_intervention_opt_out.db
|
||
0xb482b43f4210 \Windows\System32\powrprof.dll
|
||
0xb482b43f43a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\tr.pak
|
||
0xb482b43f46c0 \$Directory
|
||
0xb482b43f49e0 \Windows\System32\utcapi.dll
|
||
0xb482b43f4e90 \$Directory
|
||
0xb482b43f51b0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\tt.pak
|
||
0xb482b43f5340 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\PdfPreview\PdfPreviewHandler.dll
|
||
0xb482b43f54d0 \Windows\System32\en-US\user32.dll.mui
|
||
0xb482b43f6600 \Windows\System32\csrss.exe
|
||
0xb482b43f6790 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ta.pak
|
||
0xb482b43f6920 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\vi.pak
|
||
0xb482b43f6ab0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\zh-CN.pak
|
||
0xb482b43f70f0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\zh-TW.pak
|
||
0xb482b43f7280 \Windows\System32
|
||
0xb482b43f75a0 \$MapAttributeValue
|
||
0xb482b43f7730 \Windows\System32
|
||
0xb482b43f78c0 \Windows\System32
|
||
0xb482b43f7d70 \Windows\System32\wininit.exe
|
||
0xb482b43f8090 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\MEIPreload\preloaded_data.pb
|
||
0xb482b43f83b0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\th.pak
|
||
0xb482b43f8540 \Windows\System32\KBDSF.DLL
|
||
0xb482b43f86d0 \Windows\System32\dwmghost.dll
|
||
0xb482b43f89f0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ur.pak
|
||
0xb482b43f8d10 \Windows\System32
|
||
0xb482b43f91c0 \Windows\System32\en-US\sppsvc.exe.mui
|
||
0xb482b43f9b20 \Windows\System32\en-US\user32.dll.mui
|
||
0xb482b43fa7a0 \Windows\System32\profapi.dll
|
||
0xb482b4696100 \Windows\System32\aadcloudap.dll
|
||
0xb482b4696290 \Windows\System32\kerb3961.dll
|
||
0xb482b4696420 \$MapAttributeValue
|
||
0xb482b4696740 \Windows\apppatch\sysmain.sdb
|
||
0xb482b46968d0 \Windows\System32
|
||
0xb482b4696a60 \$Directory
|
||
0xb482b4696bf0 \$Directory
|
||
0xb482b4697230 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-LSA-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat
|
||
0xb482b46973c0 \Windows\System32\gmsaclient.dll
|
||
0xb482b46976e0 \Windows\System32\cryptdll.dll
|
||
0xb482b4697870 \Windows\System32\winsta.dll
|
||
0xb482b4697a00 \$MapAttributeValue
|
||
0xb482b4697d20 \TaskIndex
|
||
0xb482b46981d0 \$Directory
|
||
0xb482b4698360 \Windows\System32\lsass.exe
|
||
0xb482b4699170 \$Directory
|
||
0xb482b4699300 \Windows\System32\KerbClientShared.dll
|
||
0xb482b4699490 \Windows\apppatch\MergeSdbFilesSource\01DCA3237C6DC4C6.sysmain.sdb
|
||
0xb482b4699ad0 \Windows\System32\logoncli.dll
|
||
0xb482b4699c60 \Windows\System32\lsaadt.dll
|
||
0xb482b4699df0 \Windows\System32\cryptsp.dll
|
||
0xb482b469a110 \Windows\System32\samsrv.dll
|
||
0xb482b469a430 \InitShutdown
|
||
0xb482b469a5c0 \Windows\Fonts\SegoeIcons.ttf
|
||
0xb482b469a750 \InitShutdown
|
||
0xb482b469a8e0 \InitShutdown
|
||
0xb482b469ac00 \Windows\System32\cloudAP.dll
|
||
0xb482b469ad90 \Windows\System32
|
||
0xb482b469b0b0 \$Directory
|
||
0xb482b469b240 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat
|
||
0xb482b469ba10 \Windows\System32\devobj.dll
|
||
0xb482b469bba0 \Windows\System32\kerberos.dll
|
||
0xb482b469c9b0 \Windows\System32\en-US\lsasrv.dll.mui
|
||
0xb482b469ccd0 \$Directory
|
||
0xb482b469ce60 \Windows\System32\services.exe
|
||
0xb482b469d180 \Windows\System32\ntmarta.dll
|
||
0xb482b469d310 \Windows\System32\vbsapi.dll
|
||
0xb482b469d4a0 \Windows\System32\ncrypt.dll
|
||
0xb482b469d950 \$Directory
|
||
0xb482b469dae0 \Windows\System32\msprivs.dll
|
||
0xb482b469e2b0 \Windows\System32\UXInit.dll
|
||
0xb482b469e440 \Windows\System32\ServicingCommon.dll
|
||
0xb482b469e5d0 \Windows\System32\sxs.dll
|
||
0xb482b469e760 \Windows\System32\TSpkg.dll
|
||
0xb482b469e8f0 \Windows\System32\wldp.dll
|
||
0xb482b469ea80 \$Directory
|
||
0xb482b469f700 \Windows\System32\ntasn1.dll
|
||
0xb482b469fa20 \Windows\System32\mswsock.dll
|
||
0xb482b469fbb0 \Windows\Globalization\Sorting\SortDefault.nls
|
||
0xb482b469fed0 \Windows\System32\gpapi.dll
|
||
0xb482b46a06a0 \Windows\System32\userenv.dll
|
||
0xb482b46a09c0 \$Directory
|
||
0xb482b46a0b50 \Windows\SysWOW64\azroles.dll
|
||
0xb482b46a0e70 \$Directory
|
||
0xb482b46a1190 \$Directory
|
||
0xb482b46a17d0 \Windows\System32\en-US\w32time.dll.mui
|
||
0xb482b46a1c80 \Windows\System32\netprovfw.dll
|
||
0xb482b46a1e10 \Windows\System32\sspicli.dll
|
||
0xb482b46a22c0 \$Directory
|
||
0xb482b46a25e0 \Windows\System32\dsparse.dll
|
||
0xb482b46a2900 \Windows\System32\cryptbase.dll
|
||
0xb482b46a3580 \Windows\Fonts\SegUIVar.ttf
|
||
0xb482b46a3710 \Windows\System32\joinutil.dll
|
||
0xb482b46a38a0 \Windows\System32\NtlmShared.dll
|
||
0xb482b46a3a30 \Windows\System32\negoexts.dll
|
||
0xb482b46a3bc0 \Windows\System32\cfgmgr32.dll
|
||
0xb482b46a4200 \Windows\System32\EventAggregation.dll
|
||
0xb482b46a4840 \Windows\SysWOW64\logoncli.dll
|
||
0xb482b46a49d0 \Windows\System32\drivers\en-US\afd.sys.mui
|
||
0xb482b46a4b60 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat
|
||
0xb482b46a4cf0 \Windows\System32\msv1_0.dll
|
||
0xb482b46a5330 \Windows\System32\lsasrv.dll
|
||
0xb482b46a54c0 \Windows\System32\msasn1.dll
|
||
0xb482b46a5650 \Windows\System32\WinRtTracing.dll
|
||
0xb482b46a57e0 \Windows\System32\netlogon.dll
|
||
0xb482b46a5970 \Windows\System32\dpapi.dll
|
||
0xb482b46a5e20 \Windows\System32\pku2u.dll
|
||
0xb482b46a7100 \Windows\System32\umpo.dll
|
||
0xb482b46a7740 \Windows\System32\samcli.dll
|
||
0xb482b46a78d0 \CMNotify
|
||
0xb482b46a8550 \Windows\System32\schannel.dll
|
||
0xb482b46a86e0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat
|
||
0xb482b46a8b90 \Windows\System32\umpoext.dll
|
||
0xb482b46a8d20 \Windows\System32\wdigest.dll
|
||
0xb482b46a9360 \Windows\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dum64_10.dll
|
||
0xb482b46a94f0 \Windows\System32\slc.dll
|
||
0xb482b46aa490 \Windows\System32\hid.dll
|
||
0xb482b46aa620 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\mspdf.dll
|
||
0xb482b46aa7b0 \Windows\System32\SFAPM.dll
|
||
0xb482b46aa940 \lsass
|
||
0xb482b46ab110 \Windows\System32\C_28591.NLS
|
||
0xb482b46aba70 \Windows\System32\kernel.appcore.dll
|
||
0xb482b46abc00 \$MapAttributeValue
|
||
0xb482b46ac0b0 \Windows\System32\umpodev.dll
|
||
0xb482b46ac240 \ProgramData\Microsoft\Windows Defender\IMpService77BDAF73-B396-481F-9042-AD358843EC24.lock
|
||
0xb482b46ac560 \Windows\System32\rsaenh.dll
|
||
0xb482b46ac880 \Windows\System32\profext.dll
|
||
0xb482b46aca10 \Windows\System32\MicrosoftAccountCloudAP.dll
|
||
0xb482b46ad1e0 \Windows\System32\AUDIOKSE.dll
|
||
0xb482b46ad370 \$Directory
|
||
0xb482b46ad500 \$Directory
|
||
0xb482b46adb40 \Windows\System32\AudioEng.dll
|
||
0xb482b46adcd0 \Windows\Fonts\vgasys.fon
|
||
0xb482b46ae180 \$Directory
|
||
0xb482b46ae4a0 \ntsvcs
|
||
0xb482b46ae630 \Windows\ServiceState\wmansvc
|
||
0xb482b46ae7c0 \Windows\ServiceState
|
||
0xb482b46ae950 \ntsvcs
|
||
0xb482b46aeae0 \Windows\System32\scesrv.dll
|
||
0xb482b46aec70 \Windows\System32\FirewallAPI.dll
|
||
0xb482b46af120 \Windows\System32\dsrole.dll
|
||
0xb482b46af2b0 \Windows\System32\Windows.Perception.Stub.dll
|
||
0xb482b46af760 \Windows\System32\umpnpmgr.dll
|
||
0xb482b46afc10 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Network-Security-Core-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3915.cat
|
||
0xb482b46b0250 \Windows\System32\scecli.dll
|
||
0xb482b46b03e0 \$MapAttributeValue
|
||
0xb482b46b0700 \Windows\System32\winmm.dll
|
||
0xb482b46b0a20 \Windows\System32\netutils.dll
|
||
0xb482b46b0bb0 \Windows\System32\WMALFXGFXDSP.dll
|
||
0xb482b46b1380 \Windows\System32\sspisrv.dll
|
||
0xb482b46b1830 \Windows\System32\dpapisrv.dll
|
||
0xb482b46b19c0 \Windows\System32
|
||
0xb482b46b1b50 \$Directory
|
||
0xb482b46b1ce0 \Windows\System32\aadWamExtension.dll
|
||
0xb482b46b2190 \Windows\System32\fwbase.dll
|
||
0xb482b46b2320 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Network-Security-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3915.cat
|
||
0xb482b46b24b0 \Windows\ServiceState\EventLog
|
||
0xb482b46b2640 \Windows\ServiceState\WinHttpAutoProxySvc
|
||
0xb482b46b27d0 \CMApi
|
||
0xb482b46b2960 \Windows\System32\kdcpw.dll
|
||
0xb482b46b2c80 \ntsvcs
|
||
0xb482b46b3770 \Windows\System32\svchost.exe
|
||
0xb482b46b3c20 \Windows\System32\umpo-overrides.dll
|
||
0xb482b46b3db0 \$MapAttributeValue
|
||
0xb482b46b4580 \Windows\System32
|
||
0xb482b46b48a0 \CMNotify
|
||
0xb482b46b4a30 \Windows\System32\samlib.dll
|
||
0xb482b46b4bc0 \Windows\System32\WUDFPlatform.dll
|
||
0xb482b46b4ee0 \Windows\System32\authz.dll
|
||
0xb482b46b5200 \Windows\System32\fontdrvhost.exe
|
||
0xb482b46b5390 \Sessions\0\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523
|
||
0xb482b46b5520 \Windows\System32\IPHLPAPI.DLL
|
||
0xb482b46b5840 \Windows\Registration\R000000000006.clb
|
||
0xb482b46b5b60 \Windows\System32\dnsapi.dll
|
||
0xb482b46b5e80 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b46b61a0 \Sessions\1\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523
|
||
0xb482b46b6650 \Windows\System32\fontdrvhost.exe
|
||
0xb482b46b6c90 \Windows\System32\en-US\services.exe.mui
|
||
0xb482b47bd130 \Windows\System32\wbem\wmiprov.dll
|
||
0xb482b47bd450 \Windows\Fonts\segoeui.ttf
|
||
0xb482b47bd900 \Windows\Registration\R000000000006.clb
|
||
0xb482b47bda90 \Windows\System32\BrokerLib.dll
|
||
0xb482b47bddb0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat
|
||
0xb482b47be260 \Windows\Registration\R000000000006.clb
|
||
0xb482b47be3f0 \Windows\System32\loadperf.dll
|
||
0xb482b47be580 \$MapAttributeValue
|
||
0xb482b47be710 \Windows\System32\DWrite.dll
|
||
0xb482b47be8a0 \Windows\Resources\Themes\aero\aero.msstyles
|
||
0xb482b47bea30 \Windows\System32\lmhsvc.dll
|
||
0xb482b47beee0 \Windows\System32\SleepStudy\SleepStudyTraceSession.etl
|
||
0xb482b47bf6b0 \Windows\System32\embeddedmodesvcapi.dll
|
||
0xb482b47bf6e0 둻뒂둻뒂
|
||
0xb482b47bfb60 \Windows\System32\config\BBI.LOG2
|
||
0xb482b47bfcf0 \Windows\System32\uxtheme.dll
|
||
0xb482b47bfe80 \$Directory
|
||
0xb482b47c01a0 \Windows\WinSxS\Manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a.manifest
|
||
0xb482b47c0330 \$MapAttributeValue
|
||
0xb482b47c04c0 \Windows\System32\crypttpmeksvc.dll
|
||
0xb482b47c0650 \Windows\Fonts\marlett.ttf
|
||
0xb482b47c0b00 \Windows\System32
|
||
0xb482b47c1140 \Windows\System32
|
||
0xb482b47c12d0 \Windows\System32\apphelp.dll
|
||
0xb482b47c1460 \$Directory
|
||
0xb482b47c1780 \Windows\System32
|
||
0xb482b47c1910 \$Directory
|
||
0xb482b47c1c30 \Windows\System32\gpsvc.dll
|
||
0xb482b47c20e0 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b47c2590 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
|
||
0xb482b47c2720 \Windows\System32\SleepStudy\SleepStudyControlTraceSession.etl
|
||
0xb482b47c28b0 \Windows\System32\wbem\en-US\WmiApSrv.exe.mui
|
||
0xb482b47c3080 \Windows\SysWOW64\netlogon.dll
|
||
0xb482b47c3530 \Windows\System32\pfclient.dll
|
||
0xb482b47c39e0 \Device\HarddiskVolume3\Windows\ServiceProfiles\LocalService\NTUSER.DAT{67e8be70-0ec0-11f1-b1f7-bf1c161e67ad}.TM
|
||
0xb482b47c3b70 \Windows\ServiceProfiles\LocalService\NTUSER.DAT{67e8be70-0ec0-11f1-b1f7-bf1c161e67ad}.TMContainer00000000000000000002.regtrans-ms
|
||
0xb482b47c3d00 \Windows\System32\CredProvCommonCore.dll
|
||
0xb482b47c4340 \Windows\System32\cryptsvc.dll
|
||
0xb482b47c44d0 \Windows\System32\ReFsDedupSvc.exe
|
||
0xb482b47c4660 \Windows\System32\D3DCompiler_47.dll
|
||
0xb482b47c4980 \Windows\ServiceProfiles\NetworkService\NTUSER.DAT{2ad838bc-efea-11ee-a54d-000d3a94eaa1}.TM.blf
|
||
0xb482b47c4b10 \Windows\ServiceProfiles\NetworkService\NTUSER.DAT
|
||
0xb482b47c4ca0 \CMNotify
|
||
0xb482b47c5150 \$Directory
|
||
0xb482b47c52e0 \Windows\Registration\R000000000006.clb
|
||
0xb482b47c5470 \Windows\System32\dwminit.dll
|
||
0xb482b47c5600 \Windows\System32\svchost.exe
|
||
0xb482b47c5790 \Windows\System32\Microsoft.Internal.WarpPal.dll
|
||
0xb482b47c5920 \Windows\Fonts\micross.ttf
|
||
0xb482b47c5ab0 \Windows\System32\ISM.dll
|
||
0xb482b47c5c40 \Windows\System32\ResourcePolicyServer.dll
|
||
0xb482b47c5dd0 \Windows\ServiceProfiles\LocalService\NTUSER.DAT{67e8be70-0ec0-11f1-b1f7-bf1c161e67ad}.TM.blf
|
||
0xb482b47c6280 \Windows\System32\AppResolver.dll
|
||
0xb482b47c6410 \Windows\ServiceProfiles\LocalService\NTUSER.DAT{67e8be70-0ec0-11f1-b1f7-bf1c161e67ad}.TMContainer00000000000000000001.regtrans-ms
|
||
0xb482b47c65a0 \Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG1
|
||
0xb482b47c6730 \Device\HarddiskVolume3\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{2ad838bc-efea-11ee-a54d-000d3a94eaa1}.TM
|
||
0xb482b47c6be0 \$Directory
|
||
0xb482b47c6d70 \Windows\System32
|
||
0xb482b47c7090 \Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG2
|
||
0xb482b47c73b0 \Windows\System32\avrt.dll
|
||
0xb482b47c7540 \Windows\System32\RpcEpMap.dll
|
||
0xb482b47c76d0 \Device\HarddiskVolume3\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{2ad838bc-efea-11ee-a54d-000d3a94eaa1}.TM
|
||
0xb482b47c79f0 \Windows\System32\svchost.exe
|
||
0xb482b47c7d10 \Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG1
|
||
0xb482b47c81c0 \$Directory
|
||
0xb482b47c8350 \CMNotify
|
||
0xb482b47c84e0 \Windows\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dum64_loader.dll
|
||
0xb482b47c86a0 蛸둼뒂蛸둼뒂
|
||
0xb482b47c8800 \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthCore.dll
|
||
0xb482b47c8b20 \Windows\ServiceProfiles\NetworkService\NTUSER.DAT{2ad838bc-efea-11ee-a54d-000d3a94eaa1}.TMContainer00000000000000000002.regtrans-ms
|
||
0xb482b47c8cb0 \Device\HarddiskVolume3\Windows\ServiceProfiles\LocalService\NTUSER.DAT{67e8be70-0ec0-11f1-b1f7-bf1c161e67ad}.TM
|
||
0xb482b47c8e40 \Windows\System32\winnsi.dll
|
||
0xb482b47c92f0 \Windows\System32
|
||
0xb482b47c9480 \Windows\ServiceProfiles\NetworkService\NTUSER.DAT{2ad838bc-efea-11ee-a54d-000d3a94eaa1}.TMContainer00000000000000000001.regtrans-ms
|
||
0xb482b47c9610 \Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG2
|
||
0xb482b47c97a0 \Windows\ServiceProfiles\LocalService\NTUSER.DAT
|
||
0xb482b47c9930 \epmapper
|
||
0xb482b47c9c50 \epmapper
|
||
0xb482b47ca100 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
|
||
0xb482b47ca420 \Windows\System32\CatRoot
|
||
0xb482b47cabf0 \Endpoint
|
||
0xb482b47cb230 \Endpoint
|
||
0xb482b47cb3c0 \Windows\System32\cryptcatsvc.dll
|
||
0xb482b47cb550 \Windows\System32\CoreUIComponents.dll
|
||
0xb482b47cb870 \Winsock2\CatalogChangeListener-31c-0
|
||
0xb482b47cbd20 \Endpoint
|
||
0xb482b47cc360 \Windows\System32\uDWM.dll
|
||
0xb482b47cc4f0 \Windows\System32\dab.dll
|
||
0xb482b47cc6b0 윈둼뒂윈둼뒂
|
||
0xb482b47cc810 \Endpoint
|
||
0xb482b47cc9a0 \$Directory
|
||
0xb482b47ccb30 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
|
||
0xb482b47cd170 \epmapper
|
||
0xb482b47cd300 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b47cd620 \CMNotify
|
||
0xb482b47cd7b0 \Windows\System32\policymanager.dll
|
||
0xb482b47cd940 \Windows\System32
|
||
0xb482b47cdad0 \Endpoint
|
||
0xb482b47cdc60 \Windows\System32\smartscreen.exe
|
||
0xb482b47cddf0 \Windows\System32\smartscreenps.dll
|
||
0xb482b47ce5c0 \Endpoint
|
||
0xb482b47ce750 \Windows\System32\dwm.exe
|
||
0xb482b47cea70 \Endpoint
|
||
0xb482b47ced90 \Windows\System32\dwmredir.dll
|
||
0xb482b47cf3d0 \Windows\System32\WindowsCodecs.dll
|
||
0xb482b47cf560 \Winsock2\CatalogChangeListener-1e8-0
|
||
0xb482b47cf6f0 \Windows\System32\en-US\mswsock.dll.mui
|
||
0xb482b47cf880 \Windows\System32\RpcRtRemote.dll
|
||
0xb482b47cfa10 \Endpoint
|
||
0xb482b47cfba0 \CMNotify
|
||
0xb482b47d01e0 \Windows\System32\version.dll
|
||
0xb482b47d0690 \Windows\System32\d2d1.dll
|
||
0xb482b47d0820 \Windows\System32
|
||
0xb482b47d09b0 \Windows\System32\dabapi.dll
|
||
0xb482b47d0b40 \Windows\System32\dsreg.dll
|
||
0xb482b47d0cd0 \Endpoint
|
||
0xb482b47d1310 \CMNotify
|
||
0xb482b47d17c0 \Windows\System32\en-US\dwm.exe.mui
|
||
0xb482b47d1950 \Windows\System32\directxdatabasehelper.dll
|
||
0xb482b47d2440 \Windows\System32\CoreMessaging.dll
|
||
0xb482b47d2a80 \Windows\System32\ncbservice.dll
|
||
0xb482b47d2c10 \Endpoint
|
||
0xb482b47d2da0 \Winsock2\CatalogChangeListener-288-0
|
||
0xb482b47d30c0 \Windows\System32\en-US\wevtsvc.dll.mui
|
||
0xb482b47d3250 \Windows\System32\dcomp.dll
|
||
0xb482b47d3570 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b47d3890 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b47d3a20 \Windows\System32\rmclient.dll
|
||
0xb482b47d3bb0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
|
||
0xb482b47d3d40 \Windows\System32\dwmcore.dll
|
||
0xb482b47d41f0 \Endpoint
|
||
0xb482b47d4380 \Windows\System32\UserDeviceRegistration.dll
|
||
0xb482b47d46a0 \Windows\System32\ResourcePolicyClient.dll
|
||
0xb482b47d4ce0 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b47d5190 \Windows\System32\WindowManagementAPI.dll
|
||
0xb482b47d5320 \Endpoint
|
||
0xb482b47d54b0 \Windows\System32\psmsrv.dll
|
||
0xb482b47d57d0 \Windows\System32\bisrv.dll
|
||
0xb482b47d5af0 \Endpoint
|
||
0xb482b47d6130 \Windows\System32\svchost.exe
|
||
0xb482b47d62c0 \Windows\apppatch\DirectXApps.sdb
|
||
0xb482b47d6770 \Windows\System32\svchost.exe
|
||
0xb482b47d6900 \CMNotify
|
||
0xb482b47d6a90 \Windows\System32\dwmapi.dll
|
||
0xb482b47d6c20 \CMApi
|
||
0xb482b47d6db0 \Windows\System32\svchost.exe
|
||
0xb482b47d70d0 \Windows\System32\webauthn.dll
|
||
0xb482b47d7260 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b47d7580 \Windows\System32\wer.dll
|
||
0xb482b47d7710 \LSM_API_service
|
||
0xb482b47d78a0 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b47d7a30 \Windows\System32\d3d11.dll
|
||
0xb482b47d7ee0 \Windows\System32\SystemEventsBrokerServer.dll
|
||
0xb482b47d8390 \Windows\System32\usermgrcli.dll
|
||
0xb482b47d8520 \Windows\System32\wshhyperv.dll
|
||
0xb482b47d86b0 \LSM_API_service
|
||
0xb482b47d8840 \Winsock2\CatalogChangeListener-390-0
|
||
0xb482b47d8cf0 \Windows\System32\svchost.exe
|
||
0xb482b47d8e80 \Windows\System32\sysntfy.dll
|
||
0xb482b47d91a0 \Windows\System32\secur32.dll
|
||
0xb482b47d9330 \Windows\System32\DXCore.dll
|
||
0xb482b47d94c0 \Windows\System32\propsys.dll
|
||
0xb482b47d9650 \CMNotify
|
||
0xb482b47d97e0 \Windows\System32\taskschd.dll
|
||
0xb482b47d9970 \LSM_API_service
|
||
0xb482b47d9b00 \Windows\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\AAD.Core.dll
|
||
0xb482b47da140 \Windows\System32\TimeBrokerServer.dll
|
||
0xb482b47da2d0 \Windows\System32\PsmServiceExtHost.dll
|
||
0xb482b47da5f0 \Windows\System32\appvetwclientres.dll
|
||
0xb482b47daaa0 \Windows\System32\en-US\refsdedupsvc.exe.mui
|
||
0xb482b47db0e0 \Windows\System32\dxgi.dll
|
||
0xb482b47db270 \Windows\System32\wbem\en-US\WmiApSrv.exe.mui
|
||
0xb482b47dba40 \Windows\System32\wtsapi32.dll
|
||
0xb482b47dbbd0 \Windows\System32\svchost.exe
|
||
0xb482b47dc3a0 \Windows\System32\config\BBI
|
||
0xb482b47dc6c0 \Windows\System32
|
||
0xb482b47dc850 \Windows\Registration\R000000000006.clb
|
||
0xb482b47dc9e0 \Windows\System32\config\BBI.LOG1
|
||
0xb482b47dcb70 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-EnterpriseNetworking-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
|
||
0xb482b4a02130 \$Directory
|
||
0xb482b4a022c0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat
|
||
0xb482b4a02450 \CMNotify
|
||
0xb482b4a025e0 \Windows\System32\PortableDeviceApi.dll
|
||
0xb482b4a02770 \CMNotify
|
||
0xb482b4a02900 \Windows\Registration\R000000000006.clb
|
||
0xb482b4a02a90 \Windows\System32\winhttp.dll
|
||
0xb482b4a03260 \Windows\System32\DispBroker.Desktop.dll
|
||
0xb482b4a03580 \$Directory
|
||
0xb482b4a038a0 \$MapAttributeValue
|
||
0xb482b4a03a30 \CMNotify
|
||
0xb482b4a03bc0 \Endpoint
|
||
0xb482b4a03ee0 \Windows\System32\TimeBrokerClient.dll
|
||
0xb482b4a04390 \Windows\System32
|
||
0xb482b4a04520 \$Directory
|
||
0xb482b4a046b0 \Windows\System32\mobilenetworking.dll
|
||
0xb482b4a04840 \Windows\System32\httpprxc.dll
|
||
0xb482b4a049d0 \Windows\System32\wpdbusenum.dll
|
||
0xb482b4a04b60 \CMNotify
|
||
0xb482b4a04cf0 \CMNotify
|
||
0xb482b4a04e80 \CMNotify
|
||
0xb482b4a054c0 \Windows\System32\mscms.dll
|
||
0xb482b4a05650 \CMNotify
|
||
0xb482b4a057e0 \Windows\System32\CorePrivacySettingsStore.dll
|
||
0xb482b4a05970 \CMNotify
|
||
0xb482b4a05b00 \Windows\System32\svchost.exe
|
||
0xb482b4a06140 \Windows\System32\en-US\mprddm.dll.mui
|
||
0xb482b4a06780 \Windows\System32\BCP47mrm.dll
|
||
0xb482b4a06910 \Windows\System32\bi.dll
|
||
0xb482b4a06dc0 \Windows\System32
|
||
0xb482b4a070e0 \CMNotify
|
||
0xb482b4a07270 \CMNotify
|
||
0xb482b4a07400 \CMNotify
|
||
0xb482b4a07590 \Windows\SystemResources\Winlangdb.dll.mun
|
||
0xb482b4a078b0 \Windows\System32\DispBroker.dll
|
||
0xb482b4a07a40 \Windows\System32\UIAnimation.dll
|
||
0xb482b4a07ef0 \CMNotify
|
||
0xb482b4a08080 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b4a08210 \CMNotify
|
||
0xb482b4a086c0 \CMNotify
|
||
0xb482b4a08850 \Windows\System32\dhcpcsvc6.dll
|
||
0xb482b4a08d00 \$MapAttributeValue
|
||
0xb482b4a091b0 \CMNotify
|
||
0xb482b4a09340 \Windows\System32\en-US\winlangdb.dll.mui
|
||
0xb482b4a09980 \Windows\System32
|
||
0xb482b4a09e30 \Windows\System32\svchost.exe
|
||
0xb482b4a0a150 \Windows\System32\mprddm.dll
|
||
0xb482b4a0a600 \$Directory
|
||
0xb482b4a0a920 \Windows\System32
|
||
0xb482b4a0aab0 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b4a0add0 \Windows\System32\Windows.Graphics.dll
|
||
0xb482b4a0b0f0 \$Directory
|
||
0xb482b4a0b5a0 \Windows\System32\taskhostw.exe
|
||
0xb482b4a0b730 \CMNotify
|
||
0xb482b4a0ba50 \Windows\System32\Windows.UI.Xaml.dll
|
||
0xb482b4a0bbe0 \Windows\System32\WPTaskScheduler.dll
|
||
0xb482b4a0bd70 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat
|
||
0xb482b4a0c090 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b4a0c220 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b4a0c3b0 \CMNotify
|
||
0xb482b4a0c540 \Windows\System32\svchost.exe
|
||
0xb482b4a0c6d0 \$Directory
|
||
0xb482b4a0c860 \$Directory
|
||
0xb482b4a0c9f0 \CMNotify
|
||
0xb482b4a0cb80 \CMNotify
|
||
0xb482b4a0cd10 \Windows\System32\globinputhost.dll
|
||
0xb482b4a0d1c0 \$Directory
|
||
0xb482b4a0d4e0 \CMNotify
|
||
0xb482b4a0dcb0 \CMNotify
|
||
0xb482b4a0de40 \ProgramData\Microsoft\Windows Defender\Scans\mpcache-DADA29A4EF6E5A2D592C68A16E563385C71EF9D9.bin.79
|
||
0xb482b4a0e610 \Windows\System32\drivers\ntfs.sys
|
||
0xb482b4a0e930 \Windows\System32\PrintDeviceConfigurationService.dll
|
||
0xb482b4a0ec50 \Windows\System32\ncsi.dll
|
||
0xb482b4a0f100 \Endpoint
|
||
0xb482b4a0f290 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe
|
||
0xb482b4a0f5b0 \Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\LocalState\store.db
|
||
0xb482b4a0f740 \Windows\System32\en-US\netprofmsvc.dll.mui
|
||
0xb482b4a0f8d0 \CMNotify
|
||
0xb482b4a0fa60 \Winsock2\CatalogChangeListener-540-0
|
||
0xb482b4a0fd80 \Windows\System32
|
||
0xb482b4a100a0 \Windows\System32\taskcomp.dll
|
||
0xb482b4a103c0 \CMNotify
|
||
0xb482b4a10a00 \Windows\Registration\R000000000006.clb
|
||
0xb482b4a10d20 \Windows\System32\svchost.exe
|
||
0xb482b4a10eb0 \Windows\System32\schedsvc.dll
|
||
0xb482b4a11360 \CMNotify
|
||
0xb482b4a114f0 \Windows\System32\schedcli.dll
|
||
0xb482b4a11680 \Windows\System32\cmintegrator.dll
|
||
0xb482b4a11b30 \$Directory
|
||
0xb482b4a11cc0 \srvsvc
|
||
0xb482b4a11e50 \CMNotify
|
||
0xb482b4a12300 \Windows\System32\appidsvc.dll
|
||
0xb482b4a12490 \Windows\System32\svchost.exe
|
||
0xb482b4a12620 \Windows\System32\dhcpcsvc.dll
|
||
0xb482b4a12940 \CMApi
|
||
0xb482b4a12ad0 \Windows\System32
|
||
0xb482b4a13110 \CMNotify
|
||
0xb482b4a132a0 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b4a13430 \CMNotify
|
||
0xb482b4a138e0 \$Directory
|
||
0xb482b4a13a70 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b4a13c00 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\IrisService.dll
|
||
0xb482b4a13d90 \Windows\System32\Windows.UI.dll
|
||
0xb482b4a14240 \Windows\System32\netprofm.dll
|
||
0xb482b4a143d0 \$Directory
|
||
0xb482b4a14ba0 \Windows\System32\en-US\crypt32.dll.mui
|
||
0xb482b4a14ec0 \atsvc
|
||
0xb482b4a15370 \Windows\System32\CSystemEventsBrokerClient.dll
|
||
0xb482b4a15500 \$Directory
|
||
0xb482b4a15820 \$Directory
|
||
0xb482b4a15cd0 \Windows\System32\wincorlib.dll
|
||
0xb482b4a15e60 \$MapAttributeValue
|
||
0xb482b4a16180 \$Directory
|
||
0xb482b4a16630 \CMNotify
|
||
0xb482b4a167c0 \Windows\System32\wcmapi.dll
|
||
0xb482b4a16950 \Windows\System32\sppc.dll
|
||
0xb482b4a16ae0 \CMNotify
|
||
0xb482b4a16e00 \CMNotify
|
||
0xb482b4a172b0 \Windows\System32\UserMgrProxy.dll
|
||
0xb482b4a17440 \CMNotify
|
||
0xb482b4a17760 \CMNotify
|
||
0xb482b4a17c10 \atsvc
|
||
0xb482b4a180c0 \Endpoint
|
||
0xb482b4a18250 \CMNotify
|
||
0xb482b4a183e0 \$Directory
|
||
0xb482b4a18570 \Windows\System32\ubpm.dll
|
||
0xb482b4a18700 \Windows\Logs\StorGroupPolicy.log
|
||
0xb482b4a18890 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat
|
||
0xb482b4a18a20 \Windows\System32\en-US\combase.dll.mui
|
||
0xb482b4a18bb0 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b4a18d40 \Windows\Registration\R000000000006.clb
|
||
0xb482b4a19380 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b4a19510 \$Directory
|
||
0xb482b4a19830 \Windows\System32\profsvc.dll
|
||
0xb482b4a19b50 \Windows\System32\wevtapi.dll
|
||
0xb482b4a19ce0 \Windows\Tasks
|
||
0xb482b4a1a190 \Windows\System32\Windows.Gaming.Input.dll
|
||
0xb482b4a1a320 \atsvc
|
||
0xb482b4a1a4b0 \CMNotify
|
||
0xb482b4a1a7d0 \Windows\System32\LanguageOverlayUtil.dll
|
||
0xb482b4a1a960 \Windows\System32\winbio.dll
|
||
0xb482b4a1b2c0 \CMNotify
|
||
0xb482b4a1b450 \Windows\System32\netprofmsvc.dll
|
||
0xb482b4a1b5e0 \$Directory
|
||
0xb482b4a1b770 \Windows\System32\twinapi.appcore.dll
|
||
0xb482b4a1b900 \Windows\System32\GameInput.dll
|
||
0xb482b4a1bc20 \srvsvc
|
||
0xb482b4a1c3f0 \Windows\System32\DiagnosticDataSettings.dll
|
||
0xb482b4a1c580 \Windows\System32\nsisvc.dll
|
||
0xb482b4a1c710 \Windows\System32\usermgr.dll
|
||
0xb482b4a1c8a0 \Windows\System32\AppXDeploymentClient.dll
|
||
0xb482b4a1ca30 \Windows\System32\profsvcext.dll
|
||
0xb482b4a1cbc0 \$Directory
|
||
0xb482b4a1cd50 \Windows\System32\svchost.exe
|
||
0xb482b4a1d200 \CMNotify
|
||
0xb482b4a1d520 \$Directory
|
||
0xb482b4a1d6b0 \Windows\System32\MrmCoreR.dll
|
||
0xb482b4a1d840 \$Directory
|
||
0xb482b4a1d9d0 \CMNotify
|
||
0xb482b4a1db60 \Windows\System32\BCP47Langs.dll
|
||
0xb482b4a1e650 \CMNotify
|
||
0xb482b4a1e7e0 \Windows\System32\wlanapi.dll
|
||
0xb482b4a1e970 \CMNotify
|
||
0xb482b4a1eb00 \CMNotify
|
||
0xb482b4a1ec90 \Windows\System32\Winlangdb.dll
|
||
0xb482b4a1f140 \Windows\System32\wmiclnt.dll
|
||
0xb482b4a1f5f0 \Windows\System32\xmllite.dll
|
||
0xb482b4a1faa0 \Windows\System32\OneCoreUAPCommonProxyStub.dll
|
||
0xb482b4a1fc30 \Windows\Registration\R000000000006.clb
|
||
0xb482b4a1fdc0 \$Directory
|
||
0xb482b4a200e0 \CMNotify
|
||
0xb482b4a20270 \CMNotify
|
||
0xb482b4a20400 \CMNotify
|
||
0xb482b4a20590 \CMNotify
|
||
0xb482b4a208b0 \Windows\Registration\R000000000006.clb
|
||
0xb482b4a20bd0 \$Directory
|
||
0xb482b4a20ef0 \$Directory
|
||
0xb482b4a21210 \Windows\System32
|
||
0xb482b4a213a0 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b4a216c0 \Windows\System32\Windows.UI.Immersive.dll
|
||
0xb482b4a21850 \CMNotify
|
||
0xb482b4a219e0 \Endpoint
|
||
0xb482b4a21b70 \Windows\Fonts\StaticCache.dat
|
||
0xb482b4a21e90 \Endpoint
|
||
0xb482b4cb31a0 \Users\job\NTUSER.DAT{ca419014-0ec0-11f1-b1f8-000c29f29c8b}.TMContainer00000000000000000001.regtrans-ms
|
||
0xb482b4cb3330 \Device\HarddiskVolume3\Users\job\NTUSER.DAT{ca419014-0ec0-11f1-b1f8-000c29f29c8b}.TM
|
||
0xb482b4cb3650 \Windows\System32\es.dll
|
||
0xb482b4cb37e0 \eventlog
|
||
0xb482b4cb3970 \Users\job\NTUSER.DAT{ca419014-0ec0-11f1-b1f8-000c29f29c8b}.TMContainer00000000000000000002.regtrans-ms
|
||
0xb482b4cb3b00 \Windows\System32\audiosrv.dll
|
||
0xb482b4cb3c90 \Windows\System32\winevt\Logs\Windows PowerShell.evtx
|
||
0xb482b4cb4140 \CMApi
|
||
0xb482b4cb42d0 \$Directory
|
||
0xb482b4cb4460 \eventlog
|
||
0xb482b4cb45f0 \CMNotify
|
||
0xb482b4cb4780 \Device\HarddiskVolume3\Users\job\NTUSER.DAT{ca419014-0ec0-11f1-b1f8-000c29f29c8b}.TM
|
||
0xb482b4cb4910 \Windows\System32\wkscli.dll
|
||
0xb482b4cb4aa0 \Users\job\AppData\Local\Microsoft\Windows\UsrClass.dat
|
||
0xb482b4cb4c30 \Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat
|
||
0xb482b4cb50e0 \Windows\System32\PortableDeviceConnectApi.dll
|
||
0xb482b4cb5270 \Windows\System32\en-US\MMDevAPI.dll.mui
|
||
0xb482b4cb5590 \Users\job\NTUSER.DAT{ca419014-0ec0-11f1-b1f8-000c29f29c8b}.TM.blf
|
||
0xb482b4cb5720 \elineoutwave
|
||
0xb482b4cb5a40 \$Directory
|
||
0xb482b4cb5bd0 \Windows\System32\IDStore.dll
|
||
0xb482b4cb5d60 \CMNotify
|
||
0xb482b4cb5ef0 \Windows\System32\Windows.StateRepository.dll
|
||
0xb482b4cb6080 \Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Operational.evtx
|
||
0xb482b4cb63a0 \$Directory
|
||
0xb482b4cb6850 \$Directory
|
||
0xb482b4cb6d00 \$Directory
|
||
0xb482b4cb74d0 \Windows\System32\svchost.exe
|
||
0xb482b4cb77f0 \Windows\System32\en-US\NetworkIcon.dll.mui
|
||
0xb482b4cb7980 \Windows\System32\InputHost.dll
|
||
0xb482b4cb7b10 \Windows\System32\svchost.exe
|
||
0xb482b4cb7ca0 \Windows\System32\winevt\Logs\Key Management Service.evtx
|
||
0xb482b4cb7e30 \SwDevice
|
||
0xb482b4cb8150 \$Directory
|
||
0xb482b4cb8470 \Windows\System32\winevt\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx
|
||
0xb482b4cb8600 \Windows\System32\winevt\Logs\Internet Explorer.evtx
|
||
0xb482b4cb8790 \$Directory
|
||
0xb482b4cb8920 \Windows\System32\winevt\Logs\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx
|
||
0xb482b4cb8ab0 \eventlog
|
||
0xb482b4cb90f0 \$Directory
|
||
0xb482b4cb9280 \Windows\System32\TextInputFramework.dll
|
||
0xb482b4cb95a0 \Users\job\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2
|
||
0xb482b4cb9730 \Windows\System32\urlmon.dll
|
||
0xb482b4cb9a50 \$Directory
|
||
0xb482b4cb9be0 \Windows\System32\BthRadioMedia.dll
|
||
0xb482b4cba090 \Windows\System32\winevt\Logs\Microsoft-Windows-WebAuthN%4Operational.evtx
|
||
0xb482b4cba3b0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat
|
||
0xb482b4cba540 \Windows\Fonts\consola.ttf
|
||
0xb482b4cba860 \Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4LogonTasksChannel.evtx
|
||
0xb482b4cba9f0 \Windows\System32\iertutil.dll
|
||
0xb482b4cbad10 \Windows\System32\dhcpcore6.dll
|
||
0xb482b4cbaea0 \Windows\System32\winevt\Logs\Synced-Passkey-Provider%4Operatonal.evtx
|
||
0xb482b4cbb1c0 \Windows\System32\themeservice.dll
|
||
0xb482b4cbb350 \Windows\System32
|
||
0xb482b4cbb4e0 \Windows\System32\svchost.exe
|
||
0xb482b4cbb990 \elineouttopo
|
||
0xb482b4cbbcb0 \emicintopo
|
||
0xb482b4cbbe40 \CMNotify
|
||
0xb482b4cbc160 \$MapAttributeValue
|
||
0xb482b4cbc480 \Dev\Query
|
||
0xb482b4cbc610 \CMNotify
|
||
0xb482b4cbc7a0 \CMNotify
|
||
0xb482b4cbcc50 \Windows\System32\CompPkgSup.dll
|
||
0xb482b4cbd100 \CMNotify
|
||
0xb482b4cbd290 \Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4ActionCenter.evtx
|
||
0xb482b4cbd420 \Users\job\AppData\Local\Microsoft\Windows\UsrClass.dat{cab2c3c4-0e76-11f1-b1fc-000c29f29c8b}.TM.blf
|
||
0xb482b4cbd5b0 \Endpoint
|
||
0xb482b4cbd740 \emicinwave
|
||
0xb482b4cbd8d0 \Users\job\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1
|
||
0xb482b4cbdbf0 \Windows\System32\dnsrslvr.dll
|
||
0xb482b4cbdd80 \Windows\System32\WlanRadioManager.dll
|
||
0xb482b4cbe0a0 \Windows\System32\srvcli.dll
|
||
0xb482b4cbe230 \Windows\Branding\Basebrd\basebrd.dll
|
||
0xb482b4cbe550 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b4cbe870 \Windows\System32\netjoin.dll
|
||
0xb482b4cbea00 \$Directory
|
||
0xb482b4cbeb90 \Dev\Query
|
||
0xb482b4cbed20 \Windows\System32\perfproc.dll
|
||
0xb482b4cbeeb0 \Windows\System32\sysmain.dll
|
||
0xb482b4cbf1d0 \$Directory
|
||
0xb482b4cbf360 \elineouttopo
|
||
0xb482b4cbf4f0 \$Directory
|
||
0xb482b4cbf6b0 듋뒂듋뒂
|
||
0xb482b4cbf810 \Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Health.evtx
|
||
0xb482b4cbf9a0 \Windows\System32\en-US\AudioEndpointBuilder.dll.mui
|
||
0xb482b4cbfcc0 \Windows\System32\wuceffects.dll
|
||
0xb482b4cbfe50 \Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat.LOG1
|
||
0xb482b4cc0170 \$Directory
|
||
0xb482b4cc0490 \CMApi
|
||
0xb482b4cc0620 \Windows\System32
|
||
0xb482b4cc0940 \CMNotify
|
||
0xb482b4cc0c60 \$Directory
|
||
0xb482b4cc12a0 \emicintopo
|
||
0xb482b4cc1430 \Windows\System32\BluetoothApis.dll
|
||
0xb482b4cc15c0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msvcp140.dll
|
||
0xb482b4cc1750 \Windows\System32
|
||
0xb482b4cc18e0 \Windows\System32\smartscreen.exe
|
||
0xb482b4cc20b0 \Windows\System32\directmanipulation.dll
|
||
0xb482b4cc2240 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd
|
||
0xb482b4cc23d0 \SwDevice
|
||
0xb482b4cc2a10 \Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Cache%4Operational.evtx
|
||
0xb482b4cc2ba0 \Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat.LOG2
|
||
0xb482b4cc2ec0 \Windows\System32\winevt\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx
|
||
0xb482b4cc31e0 \Windows\System32\winevt\Logs\Plugin-Passkey-Providers%4Operational.evtx
|
||
0xb482b4cc3370 \Windows\System32
|
||
0xb482b4cc3500 \Users\job\AppData\Local\Microsoft\Windows\UsrClass.dat{cab2c3c4-0e76-11f1-b1fc-000c29f29c8b}.TMContainer00000000000000000002.regtrans-ms
|
||
0xb482b4cc3690 \Windows\System32\AudioSrvPolicyManager.dll
|
||
0xb482b4cc3820 \Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Operational.evtx
|
||
0xb482b4cc39b0 \Windows\System32\winevt\Logs\Microsoft-Windows-LiveId%4Operational.evtx
|
||
0xb482b4cc3cd0 \Users\job\AppData\Local\Microsoft\Windows\UsrClass.dat{cab2c3c4-0e76-11f1-b1fc-000c29f29c8b}.TMContainer00000000000000000001.regtrans-ms
|
||
0xb482b4cc44a0 \Windows\System32\imageres.dll
|
||
0xb482b4cc4630 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b4cc4950 \Windows\System32\vssapi.dll
|
||
0xb482b4cc4ae0 \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\UsrClass.dat{cab2c3c4-0e76-11f1-b1fc-000c29f29c8b}.TM
|
||
0xb482b4cc4c70 \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\UsrClass.dat{cab2c3c4-0e76-11f1-b1fc-000c29f29c8b}.TM
|
||
0xb482b4cc4e00 \$Directory
|
||
0xb482b4cc5440 \Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Restricted.evtx
|
||
0xb482b4cc55d0 \$CachedWriteThrough
|
||
0xb482b4cc5760 \Windows\Globalization\ICU\timezoneTypes.res
|
||
0xb482b4cc58f0 \Windows\System32
|
||
0xb482b4cc5c10 \lsass
|
||
0xb482b4cc5da0 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-shm
|
||
0xb482b4cc6250 \Windows\System32\drvstore.dll
|
||
0xb482b4cc63e0 \Windows\Globalization\ICU\zoneinfo64.res
|
||
0xb482b4cc6570 \Winsock2\CatalogChangeListener-454-0
|
||
0xb482b4cc6a20 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b4cc6bb0 \Windows\System32\winevt\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx
|
||
0xb482b4cc6d40 \Windows\System32\Windows.Devices.Radios.dll
|
||
0xb482b4cc71f0 \Windows\System32\en-US\vsstrace.dll.mui
|
||
0xb482b4cc7510 \$Directory
|
||
0xb482b4cc7830 \CMApi
|
||
0xb482b4cc7b50 \$CachedWriteThrough
|
||
0xb482b4cc8190 \$Directory
|
||
0xb482b4cc8320 \Windows\System32\authui.dll
|
||
0xb482b4cc8640 \CMNotify
|
||
0xb482b4cc8960 \Dev\Query
|
||
0xb482b4cc8af0 \Windows\System32\vsstrace.dll
|
||
0xb482b4cc8c80 \Windows\Fonts\SegUIVar.ttf
|
||
0xb482b4cc9130 \CMNotify
|
||
0xb482b4cc9900 \Windows\System32\Windows.Devices.Sensors.dll
|
||
0xb482b4cc9a90 \Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx
|
||
0xb482b4cc9c20 \Endpoint
|
||
0xb482b4cc9db0 \CMNotify
|
||
0xb482b4cca580 \Windows\System32\Windows.Internal.Devices.Lights.BacklightServer.dll
|
||
0xb482b4cca710 \CMApi
|
||
0xb482b4cca8a0 \CMNotify
|
||
0xb482b4ccabc0 \$Directory
|
||
0xb482b4ccad50 \CMNotify
|
||
0xb482b4ccb200 \Windows\Registration\R000000000006.clb
|
||
0xb482b4ccb520 \Windows\SystemResources\imageres.dll.mun
|
||
0xb482b4ccb840 \Endpoint
|
||
0xb482b4ccbb60 \$Directory
|
||
0xb482b4ccbcf0 \Windows\System32\Windows.UI.Xaml.Resources.Common.dll
|
||
0xb482b4ccbe80 \Windows\System32\FWPUCLNT.DLL
|
||
0xb482b4ccc7e0 \Windows\Branding\Basebrd\en-US\basebrd.dll.mui
|
||
0xb482b4ccc970 \Windows\System32\Windows.CloudStore.dll
|
||
0xb482b4ccd140 \$Directory
|
||
0xb482b4ccd2d0 \Windows\System32\perfc009.dat
|
||
0xb482b4ccd5f0 \Windows\System32\es.dll
|
||
0xb482b4ccdaa0 \Windows\System32\MTF.dll
|
||
0xb482b4cce0e0 \Windows\System32\shsvcs.dll
|
||
0xb482b4cce270 \Windows\System32\StateRepository.Core.dll
|
||
0xb482b4cce400 \Windows\System32\winevt\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx
|
||
0xb482b4cce590 \Windows\System32\stdole2.tlb
|
||
0xb482b4cce720 \$Directory
|
||
0xb482b4cce8b0 \Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Errors.evtx
|
||
0xb482b4ccea40 \Windows\System32\comres.dll
|
||
0xb482b4cced60 \Windows\System32\dhcpcore.dll
|
||
0xb482b4cceef0 \$Directory
|
||
0xb482b4ccf080 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b4ccf210 \Windows\System32\WwanRadioManager.dll
|
||
0xb482b4ccf3a0 \CMApi
|
||
0xb482b4ccf6c0 \Windows\System32\OneCoreCommonProxyStub.dll
|
||
0xb482b4ccfb70 \Windows\Registration\R000000000006.clb
|
||
0xb482b4ccfe90 \Windows\Globalization\ICU\windowsZones.res
|
||
0xb482b4cd0340 \Endpoint
|
||
0xb482b4cd0660 \Windows\Registration\R000000000006.clb
|
||
0xb482b4cd0980 \Windows\System32\winevt\Logs\Microsoft-Windows-StorageSpaces-Driver%4Diagnostic.evtx
|
||
0xb482b4cd12e0 \Windows\System32\Midi2.KSTransport.dll
|
||
0xb482b4cd1470 \Endpoint
|
||
0xb482b4cd1ab0 \Windows\Registration\R000000000006.clb
|
||
0xb482b4cd1c40 \Windows\System32\winevt\Logs\Microsoft-Windows-HotspotAuth%4Operational.evtx
|
||
0xb482b4cd2410 \Windows\System32\winevt\Logs\Microsoft-Windows-StorageSpaces-Driver%4Operational.evtx
|
||
0xb482b4cd25a0 \Dev\Query
|
||
0xb482b4cd2730 \$Directory
|
||
0xb482b4cd2d70 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b4cd3090 \Windows\System32\wwapi.dll
|
||
0xb482b4cd3220 \CMNotify
|
||
0xb482b4cd36d0 \Windows\System32\en-US\AudioSrv.dll.mui
|
||
0xb482b4cd3860 \Users\job\AppData\Local\Microsoft\Windows\Burn
|
||
0xb482b4cd3b80 \CMNotify
|
||
0xb482b4cd41c0 \$Directory
|
||
0xb482b4cd4670 \Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx
|
||
0xb482b4cd4800 \Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx
|
||
0xb482b4cd4b20 \Windows\System32\threadpoolwinrt.dll
|
||
0xb482b4cd4cb0 \Windows\System32\FntCache.dll
|
||
0xb482b4cd4e40 \Windows\System32\svchost.exe
|
||
0xb482b4cd52f0 \$Directory
|
||
0xb482b4cd5610 \Windows\System32\drivers\etc
|
||
0xb482b4cd57a0 \Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx
|
||
0xb482b4cd5c50 \Windows\System32\RTWorkQ.dll
|
||
0xb482b4cd6420 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db
|
||
0xb482b4cd68d0 \Windows\System32\Windows.UI.Xaml.Resources.21h1.dll
|
||
0xb482b4cd70a0 \Windows\System32\shacctprofile.dll
|
||
0xb482b4cd7230 \Windows\System32\XboxGipRadioManager.dll
|
||
0xb482b4cd73c0 \Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4WHC.evtx
|
||
0xb482b4cd7550 \Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4AppDefaults.evtx
|
||
0xb482b4cd76e0 \Windows\System32\en-US\datamap.0409.dat
|
||
0xb482b4cd7870 \Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx
|
||
0xb482b4cd7a00 \Windows\System32\Windows.Globalization.dll
|
||
0xb482b4cd7b90 \Windows\System32\Sens.dll
|
||
0xb482b4cd7d20 \Windows\System32\svchost.exe
|
||
0xb482b4cd7eb0 \$Directory
|
||
0xb482b4cd8360 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge.exe.sig
|
||
0xb482b4cd8680 \Windows\System32\mfplat.dll
|
||
0xb482b4cd8810 \Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4Operational.evtx
|
||
0xb482b4cd8b30 \Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx
|
||
0xb482b4cd8cc0 \Dev\Query
|
||
0xb482b4cd9300 \Windows\System32\MTFServer.dll
|
||
0xb482b4cd9940 \$Directory
|
||
0xb482b4cd9ad0 \CMNotify
|
||
0xb482b4cda430 \Windows\System32
|
||
0xb482b4cda5c0 \Dev\Query
|
||
0xb482b4cda8e0 \Windows\System32\NfcRadioMedia.dll
|
||
0xb482b4cdaa70 \Windows\System32\msutb.dll
|
||
0xb482b4cdad90 \Windows\System32\en-US\netmsg.dll.mui
|
||
0xb482b4cdb3d0 \Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\FontCache-System.dat
|
||
0xb482b4cdb6f0 \Windows\Fonts
|
||
0xb482b4cdb880 \Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx
|
||
0xb482b4cdba10 \Windows\System32\AudioEndpointBuilder.dll
|
||
0xb482b4cdbba0 \Dev\Query
|
||
0xb482b4cdbec0 \CMNotify
|
||
0xb482b4cdc1e0 \Windows\System32\AppXDeploymentServer.dll
|
||
0xb482b4cdc370 \Windows\System32\spoolsv.exe
|
||
0xb482b4cdc500 \Windows\System32
|
||
0xb482b4cdc820 \Windows\System32\en-US\ctfmon.exe.mui
|
||
0xb482b4cdc9b0 \Users\job\AppData\Local\Microsoft\Windows\Burn
|
||
0xb482b4cdcb40 \Windows\System32\FontProvider.dll
|
||
0xb482b4cdce60 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b4cdd310 \Windows\System32
|
||
0xb482b4cdd4a0 \$Directory
|
||
0xb482b4cdd630 \$Directory
|
||
0xb482b4cdd7c0 \ProgramData\Microsoft\Windows Defender\Scans\mpcache-DADA29A4EF6E5A2D592C68A16E563385C71EF9D9.bin.7C
|
||
0xb482b4cdd950 \$Directory
|
||
0xb482b4cddae0 \Windows\System32\MsCtfMonitor.dll
|
||
0xb482b4cddc70 \SwDevice
|
||
0xb482b4cde2b0 \Windows\Registration\R000000000006.clb
|
||
0xb482b4cde440 \Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-FontFace.dat
|
||
0xb482b4cde5d0 \Windows\System32\netmsg.dll
|
||
0xb482b4cde760 \Windows\System32\wtdsensor.dll
|
||
0xb482b4cdea80 \Windows\SysWOW64\TextShaping.dll
|
||
0xb482b4cdec10 \Windows\System32\InputLocaleManager.dll
|
||
0xb482b4cdf0c0 \Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx
|
||
0xb482b4cdf250 \Windows\Registration\R000000000006.clb
|
||
0xb482b4cdf570 \Windows\System32\NetworkUXBroker.dll
|
||
0xb482b4cdf890 \Windows\System32\winevt\Logs\Microsoft-Windows-User Device Registration%4Admin.evtx
|
||
0xb482b4cdfa20 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b4cdfbb0 \Windows\System32\FirewallAPI.dll
|
||
0xb482b4cdfd40 \Windows\System32\Windows.Media.Devices.dll
|
||
0xb482b4cdfed0 \Windows\System32
|
||
0xb482b4ce01f0 \SwDevice
|
||
0xb482b4ce0b50 \CMNotify
|
||
0xb482b4ce0ce0 \$Directory
|
||
0xb482b4ce0e70 \Windows\System32\wdmaud.drv
|
||
0xb482b4ce1190 \Windows\System32\MMDevAPI.dll
|
||
0xb482b4ce1320 \Windows\System32\NetworkIcon.dll
|
||
0xb482b4ce14b0 \Windows\SysWOW64\wbem\wmiutils.dll
|
||
0xb482b4ce17d0 \Windows\System32\InputSwitch.dll
|
||
0xb482b4ce1e10 \$Directory
|
||
0xb482b4ce2900 \Windows\System32\dusmsvc.dll
|
||
0xb482b4ce2a90 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b4ce2c20 \Dev\Query
|
||
0xb482b4ce2db0 \Windows\System32\PhotoMetadataHandler.dll
|
||
0xb482b4ce33f0 \Windows\System32\camext.dll
|
||
0xb482b4ce3710 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-wal
|
||
0xb482b4ce38a0 \Windows\System32\winevt\Logs\Microsoft-Windows-PCI%4Operational.evtx
|
||
0xb482b4ce3a30 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-shm
|
||
0xb482b4ce3bc0 \Windows\System32\en-US\FirewallAPI.dll.mui
|
||
0xb482b4ce3d50 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd
|
||
0xb482b4ce4200 \Windows\System32\en-US\gpsvc.dll.mui
|
||
0xb482b4ce4390 \Windows\System32\windowsudk.shellcommon.dll
|
||
0xb482b4ce4520 \Windows\System32\svchost.exe
|
||
0xb482b4ce49d0 \Windows\System32\en-US\crypt32.dll.mui
|
||
0xb482b4ce4b60 \$Directory
|
||
0xb482b4ce4cf0 \Windows\System32\winevt\Logs\Microsoft-Windows-StorageVolume%4Operational.evtx
|
||
0xb482b4ce51a0 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db-wal
|
||
0xb482b4ce54c0 \$MapAttributeValue
|
||
0xb482b4ce57e0 \Windows\System32\InputService.dll
|
||
0xb482b4ce5970 \Windows\System32\DAMediaManager.dll
|
||
0xb482b4ce5b00 \Windows\System32\rasadhlp.dll
|
||
0xb482b4ce5c90 \Dev\Query
|
||
0xb482b4ce5e20 \Dev\Query
|
||
0xb482b4ce62d0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-Core-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat
|
||
0xb482b4ce6460 \CMNotify
|
||
0xb482b4ce65f0 \Users\job\ntuser.dat.LOG2
|
||
0xb482b4ce6c30 \Users\job\ntuser.dat.LOG1
|
||
0xb482b4ce70e0 \Windows\System32\svchost.exe
|
||
0xb482b4ce7270 \Windows\System32\svchost.exe
|
||
0xb482b4ce78b0 \Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx
|
||
0xb482b4ce7bd0 \Windows\System32\HrtfApo.dll
|
||
0xb482b4ce8080 \Windows\System32\NcaApi.dll
|
||
0xb482b4ce8210 \Windows\System32\winevt\Logs\Microsoft-Windows-Partition%4Diagnostic.evtx
|
||
0xb482b4ce8850 \Windows\System32\TextInputMethodFormatter.dll
|
||
0xb482b4ce8d00 \Windows\System32\svchost.exe
|
||
0xb482b4ce8e90 \CMApi
|
||
0xb482b4ce91b0 \Users\job\NTUSER.DAT
|
||
0xb482b4ce9340 \Windows\System32\EthernetMediaManager.dll
|
||
0xb482b4ce97f0 \Windows\System32\perfh009.dat
|
||
0xb482b4ce9980 \CMNotify
|
||
0xb482b4ce9b10 \CMApi
|
||
0xb482b4cea2e0 \Windows\Globalization\ICU\icudtl.dat
|
||
0xb482b4cea790 \Windows\System32\ctfmon.exe
|
||
0xb482b4ceaab0 \Windows\System32\en-US\windows.storage.dll.mui
|
||
0xb482b4ceac40 \Windows\System32\RMapi.dll
|
||
0xb482b4ceadd0 \Windows\System32\AppxAllUserStore.dll
|
||
0xb482b4ceb0f0 \$Directory
|
||
0xb482b4ceb280 \$Directory
|
||
0xb482b4ceb5a0 \Windows\System32\MPSSVC.dll
|
||
0xb482b4ceb730 \Windows\System32\Windows.UI.Xaml.InkControls.dll
|
||
0xb482b4ceb8c0 \$Directory
|
||
0xb482b4ceba50 \Windows\System32\SecurityHealthUdk.dll
|
||
0xb482b4cebd70 \$Directory
|
||
0xb482b4cec220 \Windows\System32\security.dll
|
||
0xb482b4cec540 \Windows\Prefetch\SMARTSCREEN.EXE-EACC1250.pf
|
||
0xb482b4cec6d0 \Windows\System32\winevt\Logs\Microsoft-Windows-StorageVolume%4Diagnostic.evtx
|
||
0xb482b4cec860 \Windows\System32\Windows.UI.Core.TextInput.dll
|
||
0xb482b4cec9f0 \Windows\System32\Windows.UI.Xaml.Phone.dll
|
||
0xb482b4ced1c0 \$CachedWriteThrough
|
||
0xb482b4ced4e0 \Windows\System32\en-US\InputSwitch.dll.mui
|
||
0xb482b4cedcb0 \Dev\Query
|
||
0xb482b4cede40 \Windows\System32\dot3api.dll
|
||
0xb482b4cee160 \Windows\System32\Windows.UI.Xaml.Maps.dll
|
||
0xb482b4cee2f0 \Windows\System32\winmmbase.dll
|
||
0xb482b4cee7a0 \Windows\Registration\R000000000006.clb
|
||
0xb482b4cee930 \$Directory
|
||
0xb482b4ceec50 \$Directory
|
||
0xb482b4cef100 \Windows\System32\computenetwork.dll
|
||
0xb482b4cef290 \Windows\System32\Windows.StateRepositoryClient.dll
|
||
0xb482b4cef5b0 \Windows\System32\Windows.StateRepositoryCore.dll
|
||
0xb482b4cefbf0 \$Directory
|
||
0xb482b4cefd80 \$ConvertToNonresident
|
||
0xb482b4cf00a0 \Windows\System32\TextShaping.dll
|
||
0xb482b4cf0230 \Windows\System32
|
||
0xb482b4cf03c0 \$Directory
|
||
0xb482b4cf0550 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b4cf0b90 \Windows\System32\ssdpapi.dll
|
||
0xb482b4cf0d20 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b4cf0eb0 \Windows\System32\TabSvc.dll
|
||
0xb482b4cf11d0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat
|
||
0xb482b4cf1360 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b4cf1810 \Windows\System32\Windows.ApplicationModel.dll
|
||
0xb482b4cf1b30 \$Directory
|
||
0xb482b4cf1cc0 \Windows\System32\npmproxy.dll
|
||
0xb482b4cf1e50 \Windows\System32\winevt\Logs\Application.evtx
|
||
0xb482b4cf2300 \Windows\System32\winevt\Logs\System.evtx
|
||
0xb482b4cf2490 \Windows\System32\Windows.UI.Xaml.Controls.dll
|
||
0xb482b4cf27b0 \Windows\System32\winevt\Logs\Security.evtx
|
||
0xb482b4cf2ad0 \Windows\System32\winevt\Logs\HardwareEvents.evtx
|
||
0xb482b4cf2c60 \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db-wal
|
||
0xb482b4cf2df0 \Windows\System32\wcmsvc.dll
|
||
0xb482b4fc10c0 \Windows\System32\config\DRIVERS.LOG2
|
||
0xb482b4fc2090 \Windows\System32\config\DRIVERS{2ad838a4-efea-11ee-a54d-000d3a94eaa1}.TMContainer00000000000000000001.regtrans-ms
|
||
0xb482b4fc2930 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTTerminal-Services-LSM-ApplicationLag-5780.etl
|
||
0xb482b4fc2d80 \$MapAttributeValue
|
||
0xb482b4fc2ef0 \Device\HarddiskVolume3\Windows\System32\config\DRIVERS{2ad838a4-efea-11ee-a54d-000d3a94eaa1}.TM
|
||
0xb482b4fc31d0 \Windows\System32\drivers\wanarp.sys
|
||
0xb482b4fc48d0 \Windows\System32\drivers\bowser.sys
|
||
0xb482b4fc5170 \Windows\System32\config\DRIVERS.LOG1
|
||
0xb482b4fc5450 \Windows\System32\drivers\http.sys
|
||
0xb482b4fc5b80 \Windows\System32\config\DRIVERS
|
||
0xb482b4fc6420 \Windows\System32\drivers\mpsdrv.sys
|
||
0xb482b4fc69e0 \Windows\System32\drivers\rspndr.sys
|
||
0xb482b4fc7110 \$MapAttributeValue
|
||
0xb482b4fc79b0 \Windows\System32\drivers\mrxsmb20.sys
|
||
0xb482b4fc8af0 \Windows\System32\drivers\mrxsmb.sys
|
||
0xb482b5143c90 \Windows\System32\ProximityCommon.dll
|
||
0xb482b5143e20 \Windows\System32\wcmcsp.dll
|
||
0xb482b5144140 \Windows\System32\en-US\WsmRes.dll.mui
|
||
0xb482b51442d0 \CMNotify
|
||
0xb482b5144460 \Windows\System32\vcruntime140_1.dll
|
||
0xb482b5144780 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat
|
||
0xb482b5144910 \Windows\System32
|
||
0xb482b5144dc0 \Windows\System32\ProximityServicePal.dll
|
||
0xb482b5145270 \Windows\System32\MidiSrv.exe
|
||
0xb482b5145720 \$Directory
|
||
0xb482b5145bd0 \Windows\System32\BdeUISrv.exe
|
||
0xb482b5146210 \Windows\System32\ProximityCommonPal.dll
|
||
0xb482b5146530 \Windows\System32\en-US\bdesvc.dll.mui
|
||
0xb482b51469e0 \Windows\System32\dllhost.exe
|
||
0xb482b5146b70 \Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx
|
||
0xb482b5147340 \Windows\System32\en-US\mswsock.dll.mui
|
||
0xb482b5147660 \Windows\System32\wbemcomn.dll
|
||
0xb482b5147980 \$Directory
|
||
0xb482b5147e30 \Windows\System32\en-US\spoolsv.exe.mui
|
||
0xb482b5148470 \Windows\System32\fveapi.dll
|
||
0xb482b5148dd0 \Windows\Fonts\SegUIVar.ttf
|
||
0xb482b51495a0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat
|
||
0xb482b5149a50 \Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Audit.evtx
|
||
0xb482b5149be0 \Windows\System32\Taskmgr.exe
|
||
0xb482b514a090 \Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4FirewallDiagnostics.evtx
|
||
0xb482b514a220 \Windows\System32\wdi.dll
|
||
0xb482b514a540 \ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe
|
||
0xb482b514a6d0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
|
||
0xb482b514a9f0 \Program Files\VMware\VMware Tools\plugins\common\hgfsServer.dll
|
||
0xb482b514ab80 \Dev\Query
|
||
0xb482b514ad10 \Windows\System32
|
||
0xb482b514b1c0 \Windows\System32
|
||
0xb482b514b670 \Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx
|
||
0xb482b514b800 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd
|
||
0xb482b514b990 \Program Files\VMware\VMware Tools\plugins\common\hgfsUsability.dll
|
||
0xb482b514bb20 \Program Files\VMware\VMware Tools\hgfs.dll
|
||
0xb482b514bcb0 \Windows\System32\iphlpsvc.dll
|
||
0xb482b514be40 \Windows\System32\svchost.exe
|
||
0xb482b514c160 \$MapAttributeValue
|
||
0xb482b514c2f0 \Windows\System32
|
||
0xb482b514c480 \Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Security.evtx
|
||
0xb482b514c930 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b514cac0 \Windows\System32\mi.dll
|
||
0xb482b514cc50 \ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpSvc.dll
|
||
0xb482b514cde0 \Program Files\VMware\VMware Tools\guestStoreClient.dll
|
||
0xb482b514d100 \Windows\System32\en-US\ntmarta.dll.mui
|
||
0xb482b514d5b0 \CMNotify
|
||
0xb482b514d740 \Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx
|
||
0xb482b514da60 \Program Files\VMware\VMware Tools\pcre2-8.dll
|
||
0xb482b514e3c0 \Windows\System32\wbem\wbemprox.dll
|
||
0xb482b514e550 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-shm
|
||
0xb482b514eb90 \Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Operational.evtx
|
||
0xb482b514ed20 \$CachedWriteThrough
|
||
0xb482b514f1d0 \$Directory
|
||
0xb482b514f360 \Windows\System32\en-US\lsm.dll.mui
|
||
0xb482b514fb30 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b514fe50 \Windows\System32\miutils.dll
|
||
0xb482b5150300 \Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Dump%4Operational.evtx
|
||
0xb482b5150620 \$MapAttributeValue
|
||
0xb482b5150ad0 \Program Files\VMware\VMware Tools\VMware VGAuth\glib-2.0-0.dll
|
||
0xb482b51512a0 \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db
|
||
0xb482b51515c0 \$MapAttributeValue
|
||
0xb482b5151750 \Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx
|
||
0xb482b5151d90 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat
|
||
0xb482b51526f0 \Windows\System32\audiodg.exe
|
||
0xb482b5152ba0 \ProgramData\Microsoft\Windows Defender\Support\MPDeviceControl-20260221-005851.log
|
||
0xb482b5152ec0 \Program Files\VMware\VMware Tools\plugins\common\vix.dll
|
||
0xb482b5153690 \Windows\System32\svchost.exe
|
||
0xb482b51539b0 \Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx
|
||
0xb482b5153b40 \Windows\System32\drivers\en-US\srv2.sys.mui
|
||
0xb482b5153e60 \Windows\System32\wbem\WmiPerfInst.dll
|
||
0xb482b5154180 \Windows\System32\odbcint.dll
|
||
0xb482b5154310 \Windows\System32\en-US\bthserv.dll.mui
|
||
0xb482b51544a0 \Windows\System32\wfapigp.dll
|
||
0xb482b51547c0 \CMApi
|
||
0xb482b5154c70 \$Directory
|
||
0xb482b5154e00 \Windows\System32\winevt\Logs\Microsoft-Windows-Wcmsvc%4Operational.evtx
|
||
0xb482b51552b0 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b5155440 \$ConvertToNonresident
|
||
0xb482b51555d0 \ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpClient.dll
|
||
0xb482b5155760 \ProgramData\Microsoft\Windows Defender\Support\MPLog-20260221-005851.log
|
||
0xb482b5155a80 \Windows\System32\vcruntime140.dll
|
||
0xb482b5155c10 \ProgramData\Microsoft\Windows Defender\Support\MPScanSkip-20260221-005851.log
|
||
0xb482b5155da0 \Program Files\VMware\VMware Tools\VMware VGAuth\libxmlsec-openssl.dll
|
||
0xb482b51560c0 \Endpoint
|
||
0xb482b5156250 \CMNotify
|
||
0xb482b51563e0 \Windows\System32\mpr.dll
|
||
0xb482b5156570 \Program Files\VMware\VMware Tools\VMware VGAuth\intl.dll
|
||
0xb482b5156700 \Windows\System32
|
||
0xb482b5156bb0 \Program Files\VMware\VMware Tools\VMware VGAuth\libxml2.dll
|
||
0xb482b5156ed0 \Program Files\VMware\VMware Tools\VMware VGAuth\libcrypto-3-x64.dll
|
||
0xb482b5157380 \Program Files\VMware\VMware Tools\plugins\vmsvc\diskWiper.dll
|
||
0xb482b51579c0 \Endpoint
|
||
0xb482b5157b50 \Windows\System32
|
||
0xb482b5157ce0 \Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx
|
||
0xb482b5157e70 \Windows\Prefetch\BDEUISRV.EXE-7BC33651.pf
|
||
0xb482b5158190 \Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx
|
||
0xb482b51584b0 \Winsock2\CatalogChangeListener-94c-0
|
||
0xb482b5158640 \ProgramData\Microsoft\Windows Defender\Support\MpWppTracing-20260224-080601-00000003-fffffffeffffffff.bin
|
||
0xb482b51587d0 \Program Files\VMware\VMware Tools\plugins\vmsvc\guestInfo.dll
|
||
0xb482b5158960 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat
|
||
0xb482b5158e10 \Program Files\VMware\VMware Tools\VMware VGAuth\libssl-3-x64.dll
|
||
0xb482b5159130 \SwDevice
|
||
0xb482b5159450 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Kernel-Package-System-Counters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat
|
||
0xb482b51595e0 \$Directory
|
||
0xb482b5159770 \Windows\SysWOW64\WindowsCodecs.dll
|
||
0xb482b5159900 \Program Files\VMware\VMware Tools\VMware VGAuth\libxmlsec.dll
|
||
0xb482b5159c20 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b515a3f0 \Windows\System32\microsoft-windows-mptf-events.dll
|
||
0xb482b515a580 \Windows\System32\diagperf.dll
|
||
0xb482b515a8a0 \Endpoint
|
||
0xb482b515aee0 \$Directory
|
||
0xb482b515b390 \Endpoint
|
||
0xb482b515b520 \Windows\Registration\R000000000006.clb
|
||
0xb482b515b840 \Windows\System32\msacm32.drv
|
||
0xb482b515b9d0 \Windows\System32\Midi2.LoopbackMidiTransport.dll
|
||
0xb482b515be80 \Windows\System32\netapi32.dll
|
||
0xb482b515c1a0 \Program Files\VMware\VMware Tools\plugins\vmsvc\appInfo.dll
|
||
0xb482b515c4c0 \$MapAttributeValue
|
||
0xb482b515c650 \Program Files\VMware\VMware Tools\VMware VGAuth\pcre2-8.dll
|
||
0xb482b515c970 \$Directory
|
||
0xb482b515cb00 \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db-shm
|
||
0xb482b515d140 \Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4MSI and Script.evtx
|
||
0xb482b515d5f0 \Windows\System32\winevt\Logs\Microsoft-Windows-CloudFiles-Filter%4Operational.evtx
|
||
0xb482b515d780 \Windows\System32\drivers\ndis.sys
|
||
0xb482b515daa0 \Windows\System32\winevt\Logs\Microsoft-Windows-Containers-Wcifs%4Operational.evtx
|
||
0xb482b515dc30 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\edge_game_assist\EdgeGameAssist.msix
|
||
0xb482b515ddc0 \Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Audit.evtx
|
||
0xb482b515e0e0 \Windows\System32\BFE.DLL
|
||
0xb482b515e720 \Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx
|
||
0xb482b515e8b0 \Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Security.evtx
|
||
0xb482b515ed60 \Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx
|
||
0xb482b515eef0 \$Directory
|
||
0xb482b515f080 \CMNotify
|
||
0xb482b515f3a0 \Windows\System32\diagtrack.dll
|
||
0xb482b515f6c0 \Windows\Registration\R000000000006.clb
|
||
0xb482b515fd00 \Windows\System32\wsock32.dll
|
||
0xb482b51601b0 \Program Files\VMware\VMware Tools\plugins\vmsvc\autoLogon.dll
|
||
0xb482b51607f0 \Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx
|
||
0xb482b5160980 \Windows\System32\winevt\Logs\Microsoft-Windows-SMBClient%4Operational.evtx
|
||
0xb482b5160b10 \Windows\System32\drivers\storport.sys
|
||
0xb482b5160ca0 \Users\job\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat
|
||
0xb482b5160e30 \ProgramData\Microsoft\Windows Defender\Support\MpWppCoreTracing-20260224-090600-00000003-100000000.bin
|
||
0xb482b5161150 \$Directory
|
||
0xb482b5161470 \Windows\System32\wkssvc.dll
|
||
0xb482b5161790 \Windows\System32\tbs.dll
|
||
0xb482b5161920 \Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx
|
||
0xb482b5162a50 \Windows\System32\CapabilityAccessManager.Desktop.Storage.dll
|
||
0xb482b5162be0 \$Directory
|
||
0xb482b5162d70 \$Directory
|
||
0xb482b5163220 \$Directory
|
||
0xb482b5163540 \Windows\System32\en-US\vsstrace.dll.mui
|
||
0xb482b5163b80 \Windows\System32\sscore.dll
|
||
0xb482b51641c0 \Windows\System32\dbgcore.dll
|
||
0xb482b5164350 \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db-wal
|
||
0xb482b51644e0 \Windows\System32\drivers\winnat.sys
|
||
0xb482b5164670 \Windows\System32
|
||
0xb482b5164800 \Windows\System32\srvsvc.dll
|
||
0xb482b5164b20 \Windows\System32\drivers\en-US\mrxsmb.sys.mui
|
||
0xb482b5164e40 \Windows\System32\SystemSettings.DataModel.dll
|
||
0xb482b51652f0 \Windows\Registration\R000000000006.clb
|
||
0xb482b51657a0 \CMNotify
|
||
0xb482b5165930 \Windows\System32\en-US\bfe.dll.mui
|
||
0xb482b5165ac0 \Program Files\VMware\VMware Tools\plugins\vmsvc\hwUpgradeHelper.dll
|
||
0xb482b5165c50 \vgauth-service
|
||
0xb482b5166420 \Windows\System32\adhapi.dll
|
||
0xb482b51665b0 \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db-shm
|
||
0xb482b5166740 \Windows\System32\wpnservice.dll
|
||
0xb482b5166bf0 \Windows\Registration\R000000000006.clb
|
||
0xb482b5166d80 \$Directory
|
||
0xb482b51670a0 \ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe
|
||
0xb482b5167230 \Windows\System32\spinf.dll
|
||
0xb482b51673c0 \Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe
|
||
0xb482b51676e0 \Windows\System32\winevt\Logs\Microsoft-Windows-Containers-BindFlt%4Operational.evtx
|
||
0xb482b5167870 \Windows\System32\dbghelp.dll
|
||
0xb482b5168360 \Windows\System32\srumsvc.dll
|
||
0xb482b5168810 \Windows\System32\sscoreext.dll
|
||
0xb482b5168b30 \Windows\System32\fwpolicyiomgr.dll
|
||
0xb482b5168cc0 \Windows\System32\trkwks.dll
|
||
0xb482b5168e50 \$Directory
|
||
0xb482b5169170 \$Extend\$ObjId
|
||
0xb482b5169300 \$MapAttributeValue
|
||
0xb482b5169490 \Windows\System32
|
||
0xb482b51697b0 \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db
|
||
0xb482b5169940 \Windows\System32\msvcp140.dll
|
||
0xb482b5169ad0 \Program Files\VMware\VMware Tools\gobject-2.0-0.dll
|
||
0xb482b516a2a0 \Windows\System32
|
||
0xb482b516a430 \Windows\System32\winevt\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx
|
||
0xb482b516a5c0 \Windows\System32\comsvcs.dll
|
||
0xb482b516a8e0 \$Directory
|
||
0xb482b516aa70 \Windows\System32\en-US\wldap32.dll.mui
|
||
0xb482b516ac00 \Windows\System32\esent.dll
|
||
0xb482b516ad90 \SwDevice
|
||
0xb482b516b0b0 \Windows\System32\wbem\WMIsvc.dll
|
||
0xb482b516b3d0 \Program Files\VMware\VMware Tools\vm3dservice.exe
|
||
0xb482b516b560 \Windows\System32\pnpts.dll
|
||
0xb482b516b880 \Program Files\VMware\VMware Tools\icudt44l.dat
|
||
0xb482b516bba0 \Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx
|
||
0xb482b516bec0 \Program Files\VMware\VMware Tools\glib-2.0-0.dll
|
||
0xb482b516c1e0 \wkssvc
|
||
0xb482b516c690 \Windows\System32\advapi32res.dll
|
||
0xb482b516cb40 \Program Files\VMware\VMware Tools\plugins\vmsvc\resolutionSet.dll
|
||
0xb482b516d180 \Windows\System32\Midi2.VirtualMidiTransport.dll
|
||
0xb482b516d310 \CMNotify
|
||
0xb482b516d4a0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat
|
||
0xb482b516d7c0 \wkssvc
|
||
0xb482b516dae0 \Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Connectivity.evtx
|
||
0xb482b516dc70 \Program Files\VMware\VMware Tools\intl.dll
|
||
0xb482b516de00 \CMNotify
|
||
0xb482b516e120 \Program Files\VMware\VMware Tools\gmodule-2.0-0.dll
|
||
0xb482b516e2b0 \Program Files\VMware\VMware Tools\plugins\vmsvc\powerOps.dll
|
||
0xb482b516ea80 \$Directory
|
||
0xb482b516ec10 \Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx
|
||
0xb482b516f0c0 \trkwks
|
||
0xb482b516f250 \Windows\System32\wpncore.dll
|
||
0xb482b516f570 \$Directory
|
||
0xb482b516f700 \Windows\System32\pcasvc.dll
|
||
0xb482b516fa20 \Windows\System32\en-US\iphlpsvc.dll.mui
|
||
0xb482b516fd40 \trkwks
|
||
0xb482b516fed0 \Program Files\VMware\VMware Tools\plugins\vmsvc\timeSync.dll
|
||
0xb482b5170380 \Program Files\VMware\VMware Tools\vmtools.dll
|
||
0xb482b51706a0 \$Directory
|
||
0xb482b51709c0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Offline-Common-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat
|
||
0xb482b5170e70 \Windows\System32\BdeUISrv.exe
|
||
0xb482b5171190 \CMApi
|
||
0xb482b5171320 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\edge_game_assist\VERSION
|
||
0xb482b51714b0 \Windows\System32\drivers\vhdmp.sys
|
||
0xb482b5171640 \$Directory
|
||
0xb482b5171960 \trkwks
|
||
0xb482b5172130 \Windows\Registration\R000000000006.clb
|
||
0xb482b51722c0 \Windows\System32\adhsvc.dll
|
||
0xb482b5172450 \Windows\System32\winevt\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx
|
||
0xb482b5172a90 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG2
|
||
0xb482b5173580 \Windows\System32\dllhost.exe
|
||
0xb482b5173a30 \Windows\System32\midimap.dll
|
||
0xb482b5173bc0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Lxss-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat
|
||
0xb482b5174200 \$MapAttributeValue
|
||
0xb482b5174840 \$MapAttributeValue
|
||
0xb482b51749d0 \Windows\System32\AudioSes.dll
|
||
0xb482b5174b60 \Windows\System32\en-US\wdmaud.drv.mui
|
||
0xb482b5174cf0 \ProgramData\VMware\VMware VGAuth\logfile.txt.0
|
||
0xb482b5174e80 \CMNotify
|
||
0xb482b51754c0 \Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx
|
||
0xb482b5175970 \$Extend\$ObjId:$O:$INDEX_ALLOCATION
|
||
0xb482b5175b00 \Windows\System32\drivers\en-US\vhdmp.sys.mui
|
||
0xb482b5176140 \Windows\System32\StructuredQuery.dll
|
||
0xb482b51762d0 \$MapAttributeValue
|
||
0xb482b51765f0 \Windows\System32\radardt.dll
|
||
0xb482b5176dc0 \Program Files\VMware\VMware Tools\plugins\vmsvc\bitMapper.dll
|
||
0xb482b5177270 \Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelPerformanceCounters.dll
|
||
0xb482b5177590 \Windows\Temp\vmware-vmsvc-SYSTEM.log
|
||
0xb482b5177720 \Windows\System32\wininet.dll
|
||
0xb482b5177a40 \Program Files\VMware\VMware Tools\vmtoolsd.exe
|
||
0xb482b5177bd0 \System Volume Information\tracking.log
|
||
0xb482b5178080 \Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4CaptureMonitor.evtx
|
||
0xb482b5178210 \Windows\System32\vsocklib.dll
|
||
0xb482b51783a0 \Windows\Microsoft.NET\Framework64\v4.0.30319\en-US\ServiceModelPerformanceCounters.dll.mui
|
||
0xb482b5178530 \Windows\System32\fvecerts.dll
|
||
0xb482b51786c0 \Windows\System32\winsqlite3.dll
|
||
0xb482b5178850 \ProgramData\Microsoft\Windows\wfp\wfpdiag.etl
|
||
0xb482b5178e90 \$Directory
|
||
0xb482b5179340 \$Directory
|
||
0xb482b5179660 \Windows\System32\w32time.dll
|
||
0xb482b51797f0 \Windows\System32\CapabilityAccessManager.dll
|
||
0xb482b5179980 \Windows\System32\drivers\en-US\ndis.sys.mui
|
||
0xb482b5179b10 \CMNotify
|
||
0xb482b5179ca0 \Windows\Prefetch\BACKGROUNDTASKHOST.EXE-CAD1DF16.pf
|
||
0xb482b5179e30 \Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4Operational.evtx
|
||
0xb482b517a150 \Program Files\VMware\VMware Tools\plugins\vmsvc\autoUpgrade.dll
|
||
0xb482b517a600 \Windows\System32\httpprxm.dll
|
||
0xb482b517aab0 \CMNotify
|
||
0xb482b517ac40 \Windows\System32\en-US\advapi32res.dll.mui
|
||
0xb482b517b0f0 \Windows\System32\drivers\en-US\winnat.sys.mui
|
||
0xb482b517b280 \$ConvertToNonresident
|
||
0xb482b517b5a0 \Windows\System32\icu.dll
|
||
0xb482b517b8c0 \Dev\Query
|
||
0xb482b517ba50 \Dev\Query
|
||
0xb482b517bbe0 \CMNotify
|
||
0xb482b517c090 \Dev\Query
|
||
0xb482b517c3b0 \Windows\System32\en-US\Taskmgr.exe.mui
|
||
0xb482b517cb80 \Windows\System32\en-US\umpoext.dll.mui
|
||
0xb482b517cea0 \ProgramData\Microsoft\Windows Defender\Support\MpWppTracing-20260224-080601-00000003-fffffffeffffffff.bin
|
||
0xb482b517d1c0 \Windows\System32\msacm32.dll
|
||
0xb482b517d350 \$Directory
|
||
0xb482b517d4e0 \Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4PlaybackManager.evtx
|
||
0xb482b517d670 \Dev\Query
|
||
0xb482b517d800 \Windows\System32\winnlsres.dll
|
||
0xb482b517d990 \$MapAttributeValue
|
||
0xb482b517dcb0 \Windows\System32\en-US\winnlsres.dll.mui
|
||
0xb482b517de40 \CMNotify
|
||
0xb482b517e160 \Dev\Query
|
||
0xb482b517e480 \Dev\Query
|
||
0xb482b517e610 \Windows\System32\ProximityService.dll
|
||
0xb482b517e7a0 \Program Files\VMware\VMware Tools\plugins\vmsvc\componentMgr.dll
|
||
0xb482b517e930 \Windows\System32\webio.dll
|
||
0xb482b517ede0 \Dev\Query
|
||
0xb482b517f5b0 \Windows\System32\odbc32.dll
|
||
0xb482b517f8d0 \$MapAttributeValue
|
||
0xb482b517fa60 \Dev\Query
|
||
0xb482b517fbf0 \Dev\Query
|
||
0xb482b517fd80 \Dev\Query
|
||
0xb482b51800a0 \Dev\Query
|
||
0xb482b5180230 \Windows\Registration\R000000000006.clb
|
||
0xb482b51803c0 \ProgramData\Microsoft\Windows Defender\Support\MpWppCoreTracing-20260224-090600-00000003-100000000.bin
|
||
0xb482b5180a00 \Program Files\VMware\VMware Tools\vm3dservice.exe
|
||
0xb482b5180b90 \Windows\System32\wbem\MOF
|
||
0xb482b5180d20 \Dev\Query
|
||
0xb482b5180eb0 \Dev\Query
|
||
0xb482b51811d0 \Windows\System32\WsmRes.dll
|
||
0xb482b5181680 \Windows\System32\tdh.dll
|
||
0xb482b5181810 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat
|
||
0xb482b51819a0 \Windows\System32\pdh.dll
|
||
0xb482b5181e50 \ProgramData\Microsoft\Windows Defender\Scans\mpcache-DADA29A4EF6E5A2D592C68A16E563385C71EF9D9.bin.01
|
||
0xb482b5182490 \Windows\System32
|
||
0xb482b5182620 \Windows\Registration\R000000000006.clb
|
||
0xb482b5182940 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\edge_feedback\camera_mf_trace.wprp
|
||
0xb482b5203ef0 \Windows\System32\drivers\mmcss.sys
|
||
0xb482b52044b0 \Windows\System32\drivers\srvnet.sys
|
||
0xb482b5204620 \Windows\System32\drivers\srv2.sys
|
||
0xb482b5204900 \Windows\System32\drivers\Ndu.sys
|
||
0xb482b52072b0 \Windows\System32\drivers\vmmemctl.sys
|
||
0xb482b52083f0 \$MapAttributeValue
|
||
0xb482b52086d0 \Windows\System32\drivers\PEAuth.sys
|
||
0xb482b5209c60 \$MapAttributeValue
|
||
0xb482b5209dd0 \Windows\System32\drivers\tcpipreg.sys
|
||
0xb482b524edd0 \$NonCachedIo
|
||
0xb482b524f220 \
|
||
0xb482b52501f0 \$NonCachedIo
|
||
0xb482b52507b0 \Windows\System32\drivers\condrv.sys
|
||
0xb482b5250ee0 \Windows\System32\LogFiles\WMI\RtBackup\EtwRT1DSListener.etl
|
||
0xb482b5251780 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagtrack-Listener.etl
|
||
0xb482b5251bd0 \$NonCachedIo
|
||
0xb482b52525e0 \$NonCachedIo
|
||
0xb482b5252a30 \$NonCachedIo
|
||
0xb482b5252ba0 \$NonCachedIo
|
||
0xb482b52532d0 \$NonCachedIo
|
||
0xb482b5253720 \$NonCachedIo
|
||
0xb482b5257380 \$MapAttributeValue
|
||
0xb482b5259770 \$NonCachedIo
|
||
0xb482b525a2f0 \Windows\System32\drivers\wtd.sys
|
||
0xb482b525a5d0 \Windows\System32\drivers\vmhgfs.sys
|
||
0xb482b525a8b0 \$MapAttributeValue
|
||
0xb482b525ad00 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTWFP-IPsec Diagnostics.etl
|
||
0xb482b525cca0 \$PrepareToShrinkFileSize
|
||
0xb482b55641a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_en-GB.pak
|
||
0xb482b5564330 \Windows\System32
|
||
0xb482b5564650 \$Directory
|
||
0xb482b55647e0 \Windows\System32\svchost.exe
|
||
0xb482b5564970 \Windows\System32\en-US\wldap32.dll.mui
|
||
0xb482b55655f0 \Windows\System32\winevt\Logs\Microsoft-Windows-UniversalTelemetryClient%4Operational.evtx
|
||
0xb482b5565780 \Dev\Query
|
||
0xb482b5565c30 \Dev\Query
|
||
0xb482b5565dc0 \Windows\System32\webservices.dll
|
||
0xb482b55660e0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ca-Es-VALENCIA.pak
|
||
0xb482b5566400 \Windows\System32\MsDtc\MSDTC.LOG
|
||
0xb482b5566590 \Windows\System32\MsDtc\Trace\dtctrace.log
|
||
0xb482b55668b0 \Windows\System32\ClipboardServer.dll
|
||
0xb482b5566bd0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\internal.identity_helper.exe.manifest
|
||
0xb482b5566ef0 \Windows\System32\wbem\esscli.dll
|
||
0xb482b5567210 \$Directory
|
||
0xb482b5567530 \Windows\Registration\R000000000006.clb
|
||
0xb482b55676c0 \Windows\System32\wbem\wbemcore.dll
|
||
0xb482b5567850 \Windows\System32\wbem\fastprox.dll
|
||
0xb482b55679e0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\fa.pak
|
||
0xb482b5567d00 \Windows\System32\QuietHours.dll
|
||
0xb482b5567e90 \Windows\System32\wlidprov.dll
|
||
0xb482b55684d0 \Windows\System32\Windows.Shell.ServiceHostBuilder.dll
|
||
0xb482b55687f0 \$Directory
|
||
0xb482b5568b10 \Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
|
||
0xb482b5569150 \Windows\System32
|
||
0xb482b55692e0 \Windows\System32\BackgroundMediaPolicy.dll
|
||
0xb482b5569470 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\stable.copilot.identity_helper.exe.manifest
|
||
0xb482b5569790 \$Directory
|
||
0xb482b5569ab0 \Windows\System32\wpnsruprov.dll
|
||
0xb482b556a280 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\resources.pri
|
||
0xb482b556a410 \Windows\System32\perfos.dll
|
||
0xb482b556a730 \Windows\System32\appsruprov.dll
|
||
0xb482b556ad70 \Windows\System32\en-US\user32.dll.mui
|
||
0xb482b556b090 \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthHost.exe
|
||
0xb482b556b220 \ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\Drivers\ksld.sys
|
||
0xb482b556b540 \Windows\System32\en-US\crypt32.dll.mui
|
||
0xb482b556b6d0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_en-US.pak
|
||
0xb482b556b9f0 \Users\job\AppData\Local\Comms\UnistoreDB\tmp.edb
|
||
0xb482b556bb80 \Windows\System32\ShareHost.dll
|
||
0xb482b556c350 \Windows\Registration\R000000000006.clb
|
||
0xb482b556c4e0 \Windows\System32\StorageUsage.dll
|
||
0xb482b556c800 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\stable.identity_helper.exe.manifest
|
||
0xb482b556c990 \Windows\System32\cdpusersvc.dll
|
||
0xb482b556ce40 \Windows\System32\en-US\taskhostw.exe.mui
|
||
0xb482b556d480 \Windows\System32
|
||
0xb482b556d610 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b556d7a0 \Windows\System32\Windows.Web.dll
|
||
0xb482b556d930 \Windows\System32\wbem\wbemsvc.dll
|
||
0xb482b556dc50 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_es-419.pak
|
||
0xb482b556e290 \Windows\System32\en-US\msdtcVSp1res.dll.mui
|
||
0xb482b556e5b0 \Windows\System32\mssrch.dll
|
||
0xb482b556ea60 \Windows\System32\SmartCardBackgroundPolicy.dll
|
||
0xb482b556ebf0 \Windows\System32\dssenh.dll
|
||
0xb482b556ed80 \Windows\System32\wmidcom.dll
|
||
0xb482b556f0a0 \Windows\Registration\R000000000006.clb
|
||
0xb482b556f6e0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ca.pak
|
||
0xb482b556f710 땖뒂땖뒂
|
||
0xb482b5570360 \Windows\System32\sru\SRU.log
|
||
0xb482b55704f0 \Windows\SysWOW64\vcruntime140_clr0400.dll
|
||
0xb482b5570810 \Windows\System32\SettingsEnvironment.Desktop.dll
|
||
0xb482b55709a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_af.pak
|
||
0xb482b5570b30 \Windows\System32\gamestreamingext.dll
|
||
0xb482b5570e50 \Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx
|
||
0xb482b5571170 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_et.pak
|
||
0xb482b5571490 \Windows\System32\txflog.dll
|
||
0xb482b5571620 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b5571650 ᚨ땗뒂ᚨ땗뒂
|
||
0xb482b5571940 \Windows\System32\tquery.dll
|
||
0xb482b5571c60 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Installer\copilot_setup.exe
|
||
0xb482b5571df0 \Windows
|
||
0xb482b5572110 \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthHost.exe
|
||
0xb482b55725c0 \$Directory
|
||
0xb482b5572750 \Windows\System32\SebBackgroundManagerPolicy.dll
|
||
0xb482b55728e0 \Windows\System32\comsvcs.dll
|
||
0xb482b5572a70 \Windows\System32\sppsvc.exe
|
||
0xb482b5572d90 \Windows\System32\en-US\user32.dll.mui
|
||
0xb482b55730b0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_eu.pak
|
||
0xb482b5573560 \Windows\System32\ActivationManager.dll
|
||
0xb482b55736f0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Installer\msedge_7z.data
|
||
0xb482b5573a10 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_am.pak
|
||
0xb482b5573ba0 \Windows\System32\en-US\iphlpsvc.dll.mui
|
||
0xb482b5573d30 \Windows\Registration\R000000000006.clb
|
||
0xb482b55741e0 \$Directory
|
||
0xb482b5574370 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ar.pak
|
||
0xb482b5574820 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_kk.pak
|
||
0xb482b5574b40 \Windows\System32
|
||
0xb482b5575180 \Endpoint
|
||
0xb482b55757c0 \Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4WHC.evtx
|
||
0xb482b5575950 \$Directory
|
||
0xb482b5575c70 \Windows\System32\WSAIFabricHost.dll
|
||
0xb482b5575e00 \Windows\System32\cdp.dll
|
||
0xb482b5576120 \Windows\Registration\R000000000006.clb
|
||
0xb482b5576440 \Windows\System32\Windows.Devices.Enumeration.dll
|
||
0xb482b5576760 \Windows\System32\msdtc.exe
|
||
0xb482b55768f0 \Windows\SysWOW64\ucrtbase_clr0400.dll
|
||
0xb482b5576c10 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_es.pak
|
||
0xb482b55770c0 \Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\resources.pri
|
||
0xb482b5577570 \Windows\System32\msdtctm.dll
|
||
0xb482b5577700 \wkssvc
|
||
0xb482b5577ed0 \Windows\System32\UiaManager.dll
|
||
0xb482b5578380 \Windows\System32\sihost.exe
|
||
0xb482b5578510 \Endpoint
|
||
0xb482b55786d0 蜨땗뒂蜨땗뒂
|
||
0xb482b55789c0 \Windows\System32\pkeyhelper.dll
|
||
0xb482b5578b50 \Windows\System32\en-US\crypt32.dll.mui
|
||
0xb482b5578ce0 \Windows\System32\capauthz.dll
|
||
0xb482b5579190 \Windows\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{467943E8-27D5-4CDC-B8E0-FC9CC5256F9A}.crmlog
|
||
0xb482b5579320 \CMApi
|
||
0xb482b55794b0 \Windows\System32\notificationplatformcomponent.dll
|
||
0xb482b5579960 \Windows\System32\winevt\Logs\Microsoft-Windows-NCSI%4Operational.evtx
|
||
0xb482b5579e10 \Endpoint
|
||
0xb482b557a450 \Windows\System32\PlaySndSrv.dll
|
||
0xb482b557a5e0 \Windows\System32\ExecModelClient.dll
|
||
0xb482b557a770 \$CachedWriteThrough
|
||
0xb482b557adb0 \Windows\System32\twinui.pcshell.dll
|
||
0xb482b557b0d0 \Winsock2\CatalogChangeListener-30c-0
|
||
0xb482b557b3f0 \Endpoint
|
||
0xb482b557b580 \Windows\System32\resutils.dll
|
||
0xb482b557b710 \Windows\System32\stdole2.tlb
|
||
0xb482b557ba30 \ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpLics.dll
|
||
0xb482b557bbc0 \Windows\System32\cdpsvc.dll
|
||
0xb482b557bd50 \Windows\System32\clusapi.dll
|
||
0xb482b557bee0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\af.pak
|
||
0xb482b557c520 \Endpoint
|
||
0xb482b557c6b0 \Windows\System32\msdtclog.dll
|
||
0xb482b557c840 \Windows\System32\SecureTimeAggregator.dll
|
||
0xb482b557c9d0 \Windows\System32\DismApi.dll
|
||
0xb482b557cb60 \$Directory
|
||
0xb482b557ccf0 \Windows\System32\NotificationController.dll
|
||
0xb482b557d4c0 \CMNotify
|
||
0xb482b557d650 \Windows\System32\msxml6r.dll
|
||
0xb482b557d7e0 \Windows\System32
|
||
0xb482b557dc90 \Windows\System32\AppointmentActivation.dll
|
||
0xb482b557de20 \Windows\Registration\R000000000006.clb
|
||
0xb482b557e140 \Windows
|
||
0xb482b557e2d0 \Windows\System32\webthreatdefusersvc.dll
|
||
0xb482b557e460 \Windows\System32\AppContracts.dll
|
||
0xb482b557f400 \Windows\System32
|
||
0xb482b557f590 \$Directory
|
||
0xb482b557f720 \Windows\System32\cryptnet.dll
|
||
0xb482b557fd60 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b5580080 \Windows\System32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
|
||
0xb482b5580210 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\EdgeJourneys\EdgeJourneys.db
|
||
0xb482b55803a0 \$Directory
|
||
0xb482b5580850 \$Directory
|
||
0xb482b55809e0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\am.pak
|
||
0xb482b5580b70 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ar.pak
|
||
0xb482b5581340 \Windows\System32\msxml6.dll
|
||
0xb482b55817f0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_bn-IN.pak
|
||
0xb482b55822e0 \Windows\System32\SearchIndexerCore.dll
|
||
0xb482b5582600 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b5582790 \ProgramData\Microsoft\Windows\Caches\cversions.2.db
|
||
0xb482b5582ab0 \ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db
|
||
0xb482b5582c40 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\as.pak
|
||
0xb482b5582dd0 \Windows\System32\container.dll
|
||
0xb482b55830f0 \Windows\System32\en-US\crypt32.dll.mui
|
||
0xb482b5583730 \Windows\System32\sru\SRUDB.dat
|
||
0xb482b5583a50 \CMApi
|
||
0xb482b5583be0 \Windows\System32\taskhostw.exe
|
||
0xb482b55843b0 \$Directory
|
||
0xb482b55849f0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_sr-Latn-RS.pak
|
||
0xb482b5584d10 \CMNotify
|
||
0xb482b5585670 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_kn.pak
|
||
0xb482b5585800 \Windows\System32\svchost.exe
|
||
0xb482b5585990 \Windows\System32\en-US\MsCtfMonitor.dll.mui
|
||
0xb482b5586160 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_fil.pak
|
||
0xb482b55862f0 \Windows\System32\TileDataRepository.dll
|
||
0xb482b55867a0 \Windows\System32\en-US\propsys.dll.mui
|
||
0xb482b5586930 \Windows\System32\SndVolSSO.dll
|
||
0xb482b5586ac0 \Windows\System32\SppExtComObj.Exe
|
||
0xb482b5586c50 \Windows\System32\WpnUserService.dll
|
||
0xb482b5586de0 \Windows\System32
|
||
0xb482b5587100 \Windows\System32\cryptxml.dll
|
||
0xb482b5587290 \Windows\System32\en-US\taskhostw.exe.mui
|
||
0xb482b5587420 \Windows\System32\svchost.exe
|
||
0xb482b55878d0 \Windows\System32\en-US\windows.storage.dll.mui
|
||
0xb482b5587a60 \ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
|
||
0xb482b55883c0 \Windows\System32\Windows.System.Launcher.dll
|
||
0xb482b55886e0 \Windows\Registration\R000000000006.clb
|
||
0xb482b5588870 \Windows\System32\en-US\msdtc.exe.mui
|
||
0xb482b5588eb0 \Windows\System32\svchost.exe
|
||
0xb482b5589360 \Windows\System32\winevt\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx
|
||
0xb482b5589680 \Windows\System32\efswrt.dll
|
||
0xb482b55899a0 \Windows\Registration\R000000000006.clb
|
||
0xb482b5589b30 \Windows\System32\msdtcprx.dll
|
||
0xb482b5589cc0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\az.pak
|
||
0xb482b558a300 \Windows\System32\en-US\ESENT.dll.mui
|
||
0xb482b558a620 \Windows\System32
|
||
0xb482b558a7b0 \$Directory
|
||
0xb482b558adf0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ca.pak
|
||
0xb482b558b110 \Windows\System32\sru\SRUDB.jfm
|
||
0xb482b558b2a0 \CMNotify
|
||
0xb482b558ba70 \Users\job\AppData\Local\Microsoft\Windows\Notifications\WPNPRMRY.tmp
|
||
0xb482b558c0b0 \Windows\System32\mtxclu.dll
|
||
0xb482b558c6f0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_kok.pak
|
||
0xb482b558ca10 \Windows\System32\wbem\repdrvfs.dll
|
||
0xb482b558cd30 \Windows\System32\ktmw32.dll
|
||
0xb482b558d1e0 \Windows\System32\TokenBroker.dll
|
||
0xb482b558d370 \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthProxyStub.dll
|
||
0xb482b558d500 \Windows\System32\edputil.dll
|
||
0xb482b558d690 \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityConsentStorage.db
|
||
0xb482b558d820 \Windows\SystemResources\wininet.dll.mun
|
||
0xb482b558de60 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ca-Es-VALENCIA.pak
|
||
0xb482b558e4a0 \CMNotify
|
||
0xb482b558e630 \Windows\System32\CoreShellExtFramework.dll
|
||
0xb482b558e7c0 \Windows\System32\Windows.Storage.Search.dll
|
||
0xb482b558ee00 \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db-shm
|
||
0xb482b558f760 \Windows\System32\xolehlp.dll
|
||
0xb482b558f8f0 \Windows\System32\msdtcVSp1res.dll
|
||
0xb482b558fc10 \Windows\System32\wbem\wmiutils.dll
|
||
0xb482b558fda0 \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityConsentStorage.db-shm
|
||
0xb482b55903e0 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-shm
|
||
0xb482b5590700 \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthProxyStub.dll
|
||
0xb482b5590890 \Windows\System32\TenantRestrictionsPlugin.dll
|
||
0xb482b5590d40 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b5590ed0 \Windows\System32\wbem\Repository\OBJECTS.DATA
|
||
0xb482b55916a0 \Windows\System32\ncuprov.dll
|
||
0xb482b5591830 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-wal
|
||
0xb482b55919c0 \Windows\System32\OnDemandConnRouteHelper.dll
|
||
0xb482b5591b50 \Windows\System32\Windows.Networking.Connectivity.dll
|
||
0xb482b5591ce0 \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthSSO.dll
|
||
0xb482b5591e70 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_gl.pak
|
||
0xb482b5592320 \Windows\System32\wbem\Repository\MAPPING2.MAP
|
||
0xb482b55927d0 \$Directory
|
||
0xb482b5592af0 \Windows\System32\execmodelproxy.dll
|
||
0xb482b5592c80 \Windows\System32\Windows.Security.Authentication.Web.Core.dll
|
||
0xb482b55932c0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_cs.pak
|
||
0xb482b5593450 \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthSSO.dll
|
||
0xb482b55935e0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_gd.pak
|
||
0xb482b5593900 \Windows\Prefetch\PfPre_49d5e2e4.mkd
|
||
0xb482b5593c20 \Windows\System32\wbem\cimwin32.dll
|
||
0xb482b5594260 \Windows\System32\wbem\Repository\INDEX.BTR
|
||
0xb482b5594710 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b5594a30 \Windows\System32\sru\SRUDB.dat
|
||
0xb482b5594bc0 \Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
|
||
0xb482b5594d50 \Windows\System32\wbem\Repository\MAPPING1.MAP
|
||
0xb482b5594ee0 \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityConsentStorage.db-wal
|
||
0xb482b5595200 \Windows\System32\wbem\Repository\MAPPING3.MAP
|
||
0xb482b5595390 \Windows\System32\DesktopShellExt.dll
|
||
0xb482b5595520 \Windows\System32\framedynos.dll
|
||
0xb482b55956b0 \CMNotify
|
||
0xb482b5595840 \Windows\System32\en-US\lsm.dll.mui
|
||
0xb482b5595b60 \Windows\System32\energyprov.dll
|
||
0xb482b5595cf0 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd
|
||
0xb482b55961a0 \Windows\System32\SystemEventsBrokerClient.dll
|
||
0xb482b5596330 \Windows\System32\en-US\winnlsres.dll.mui
|
||
0xb482b55964c0 \Windows\System32\WindowManagement.dll
|
||
0xb482b5596650 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-wal
|
||
0xb482b5596c90 \Windows\System32\en-US\crypt32.dll.mui
|
||
0xb482b5597140 \Windows\System32\keyiso.dll
|
||
0xb482b55975f0 \Windows\System32\modernexecserver.dll
|
||
0xb482b5597780 \Windows\System32\wbem\WmiPrvSE.exe
|
||
0xb482b5597910 \Windows\System32\ssdpsrv.dll
|
||
0xb482b5597aa0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\beta.identity_helper.exe.manifest
|
||
0xb482b5597dc0 \Windows\System32\amsi.dll
|
||
0xb482b5598270 \Windows\System32\tokenbinding.dll
|
||
0xb482b5598720 \Users\job\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-shm
|
||
0xb482b55988b0 \Users\job\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-wal
|
||
0xb482b5598bd0 \Users\job\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db
|
||
0xb482b5599080 \CMApi
|
||
0xb482b5599850 \Windows\System32\gamemode.dll
|
||
0xb482b559a340 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-shm
|
||
0xb482b559a4d0 \Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
|
||
0xb482b559a660 \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthAgent.dll
|
||
0xb482b559a7f0 \Windows\System32\mdmregistration.dll
|
||
0xb482b559ab10 \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthAgent.dll
|
||
0xb482b559aca0 \Windows\System32\en-US\winsrv.dll.mui
|
||
0xb482b559ae30 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd
|
||
0xb482b559b150 \Windows\System32\wbem\en-US\cimwin32.dll.mui
|
||
0xb482b559b790 \Windows\System32
|
||
0xb482b559b920 \Windows\System32\eeprov.dll
|
||
0xb482b559bc40 \ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpOAV.dll
|
||
0xb482b559bdd0 \Users\job\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-shm
|
||
0xb482b559c410 \Windows\System32\sru\SRU.log
|
||
0xb482b559c730 \Windows\System32\wbem\wbemess.dll
|
||
0xb482b559ca50 \Windows\System32\wbem\WmiPrvSD.dll
|
||
0xb482b559cbe0 \CMNotify
|
||
0xb482b559d090 \Program Files (x86)\mRemoteNG
|
||
0xb482b559d220 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\internal.copilot.identity_helper.exe.manifest
|
||
0xb482b559d3b0 \Windows\System32\cscapi.dll
|
||
0xb482b559d540 \Windows\System32\vfuprov.dll
|
||
0xb482b559d6d0 \Windows\System32\twinui.appcore.dll
|
||
0xb482b559d860 \$Directory
|
||
0xb482b559d9f0 \CMNotify
|
||
0xb482b559db80 \CMApi
|
||
0xb482b559dd10 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_hi.pak
|
||
0xb482b559dea0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_lt.pak
|
||
0xb482b559e1c0 \Windows\System32\ncryptsslp.dll
|
||
0xb482b559e670 \srvsvc
|
||
0xb482b559e800 \srvsvc
|
||
0xb482b559e990 \Windows\System32\en-US\UserDataAccessRes.dll.mui
|
||
0xb482b559eb20 \Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.dll
|
||
0xb482b559ecb0 \CMNotify
|
||
0xb482b559ee40 \Windows\System32
|
||
0xb482b559f2f0 \Windows\System32\daxexec.dll
|
||
0xb482b559f610 \Windows\System32\en-US\user32.dll.mui
|
||
0xb482b559f7a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\dev.copilot.identity_helper.exe.manifest
|
||
0xb482b559f930 \Windows\System32\en-US\mswsock.dll.mui
|
||
0xb482b559fac0 \CMNotify
|
||
0xb482b55a0290 \Windows\System32\svchost.exe
|
||
0xb482b55a0420 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_de.pak
|
||
0xb482b55a08d0 \Windows\System32\Windows.StateRepositoryPS.dll
|
||
0xb482b55a0bf0 \Windows\System32\mtxoci.dll
|
||
0xb482b55a10a0 \Windows\System32\SleepStudy\ScreenOn\ScreenOnPowerStudyTraceSession-2026-02-24-09-06-02.etl
|
||
0xb482b55a1230 \Windows\System32\fcon.dll
|
||
0xb482b55a1550 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\dev.identity_helper.exe.manifest
|
||
0xb482b55a16e0 \Windows\Registration\R000000000006.clb
|
||
0xb482b55a1870 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\canary.identity_helper.exe.manifest
|
||
0xb482b55a1b90 \CMNotify
|
||
0xb482b55a1eb0 \Windows\System32\ncobjapi.dll
|
||
0xb482b55a2360 \Windows\System32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
|
||
0xb482b55a2810 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_el.pak
|
||
0xb482b55a29a0 \Windows\System32\svchost.exe
|
||
0xb482b55a2b30 \Windows\SysWOW64\mscoree.dll
|
||
0xb482b55a3170 \Windows\System32\PackageStateChangeHandler.dll
|
||
0xb482b55a3300 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b55a37b0 \Windows\System32\ACPBackgroundManagerPolicy.dll
|
||
0xb482b55a3ad0 \Windows\System32\nduprov.dll
|
||
0xb482b55a3c60 \Windows\System32\feclient.dll
|
||
0xb482b55a3df0 \Windows\System32\ncryptprov.dll
|
||
0xb482b5a43330 \Windows\System32\WinMetadata\Windows.Foundation.winmd
|
||
0xb482b5a434c0 \Program Files (x86)\Microsoft\EdgeUpdate\1.3.221.3\msedgeupdateres_en.dll
|
||
0xb482b5a43650 \$Directory
|
||
0xb482b5a43b00 \Windows\System32
|
||
0xb482b5a43c90 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_100_percent.pak
|
||
0xb482b5a43e20 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
|
||
0xb482b5a442d0 \CMApi
|
||
0xb482b5a44460 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\icudtl.dat
|
||
0xb482b5a44780 \$Directory
|
||
0xb482b5a44910 \Users\job\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000003.db
|
||
0xb482b5a44aa0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\LOG
|
||
0xb482b5a44c30 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Cookies
|
||
0xb482b5a450e0 \Windows\System32\DevDispItemProvider.dll
|
||
0xb482b5a45400 \$Directory
|
||
0xb482b5a45590 \$Directory
|
||
0xb482b5a458b0 \Windows\UUS\Packages\Preview\amd64\UpdatePlatformAggregators.dll
|
||
0xb482b5a45a40 \ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db
|
||
0xb482b5a45d60 \$Directory
|
||
0xb482b5a46080 \Windows\System32\UpdateReboot.dll
|
||
0xb482b5a46210 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\v8_context_snapshot.bin
|
||
0xb482b5a463a0 \Windows\UUS\Packages\Preview
|
||
0xb482b5a46850 \Windows\SysWOW64\cryptbase.dll
|
||
0xb482b5a469e0 \Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.ThemeVS2013.dll
|
||
0xb482b5a46e90 \Windows\System32\en-US\InputSwitch.dll.mui
|
||
0xb482b5a471b0 \Windows\System32\windowsperformancerecordercontrol.dll
|
||
0xb482b5a47340 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
|
||
0xb482b5a47660 \Windows\System32
|
||
0xb482b5a47980 \Windows\System32\en-US\combase.dll.mui
|
||
0xb482b5a47b10 \Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.ThemeVS2003.dll
|
||
0xb482b5a47e30 \Windows\System32\C_1250.NLS
|
||
0xb482b5a48150 \$MapAttributeValue
|
||
0xb482b5a48470 \$Directory
|
||
0xb482b5a48600 \Windows\SysWOW64\kernel.appcore.dll
|
||
0xb482b5a48790 \Windows\SystemResources\Windows.UI.ControlCenter\Windows.UI.ControlCenter.pri
|
||
0xb482b5a48920 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
|
||
0xb482b5a48ab0 \Windows\UUS\Packages\Preview\amd64\UusFailover.dll
|
||
0xb482b5a48c40 \Windows\System32\UIAutomationCore.dll
|
||
0xb482b5a48dd0 \ProgramData\Microsoft\Windows Defender\Scans\mpcache-DADA29A4EF6E5A2D592C68A16E563385C71EF9D9.bin.91
|
||
0xb482b5a490f0 \Windows\System32\en-US\MMDevAPI.dll.mui
|
||
0xb482b5a49280 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Cookies
|
||
0xb482b5a49730 \ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db-wal
|
||
0xb482b5a498c0 \Windows\System32\Windows.Networking.HostName.dll
|
||
0xb482b5a49be0 \Windows\System32\C_1253.NLS
|
||
0xb482b5a4a090 \Windows\System32\MpeCm.dll
|
||
0xb482b5a4a220 \$MapAttributeValue
|
||
0xb482b5a4a6d0 \Windows\SysWOW64\taskschd.dll
|
||
0xb482b5a4a860 \Windows\SystemResources\Windows.UI.ShellCommon\Windows.UI.ShellCommon.pri
|
||
0xb482b5a4a9f0 \$Directory
|
||
0xb482b5a4ad10 \AsyncSelectHlp
|
||
0xb482b5a4aea0 \Windows\explorer.exe
|
||
0xb482b5a4b4e0 \Users\job\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat
|
||
0xb482b5a4b670 \Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.ThemeVS2012.dll
|
||
0xb482b5a4b800 \$Directory
|
||
0xb482b5a4bb20 \Windows\System32
|
||
0xb482b5a4be40 \$Directory
|
||
0xb482b5a4c610 \$Directory
|
||
0xb482b5a4c930 \CMApi
|
||
0xb482b5a4cac0 \Windows\appcompat\Programs\Amcache.hve.LOG2
|
||
0xb482b5a4cc50 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG2
|
||
0xb482b5a4cde0 \$Directory
|
||
0xb482b5a4d100 \Windows\System32\diagnosticdataquery.dll
|
||
0xb482b5a4d420 \CMApi
|
||
0xb482b5a4d740 \ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db-shm
|
||
0xb482b5a4d8d0 \Windows\SysWOW64\winsta.dll
|
||
0xb482b5a4dbf0 \Windows\rescache\_merged\3000386080\1589638933.pri
|
||
0xb482b5a4dd80 \Users\job\AppData\Local\Comms\UnistoreDB\store.vol
|
||
0xb482b5a4e0a0 \$Directory
|
||
0xb482b5a4e3c0 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG1
|
||
0xb482b5a4e550 \Windows\System32\Windows.Management.Workplace.dll
|
||
0xb482b5a4e6e0 \Program Files (x86)\Microsoft\EdgeUpdate\1.3.221.3\msedgeupdate.dll
|
||
0xb482b5a4e870 \AsyncConnectHlp
|
||
0xb482b5a4ea00 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe\ActivationStore.dat
|
||
0xb482b5a4eb90 \Windows\System32\localspl.dll
|
||
0xb482b5a4ed20 \Windows\System32
|
||
0xb482b5a4eeb0 \ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db-shm
|
||
0xb482b5a4f1d0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Shared Dictionary\cache\index
|
||
0xb482b5a4f4f0 \Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Operational.evtx
|
||
0xb482b5a4f680 \Windows\rescache\_merged\1725437425\338483453.pri
|
||
0xb482b5a4f6b0 떤뒂떤뒂
|
||
0xb482b5a4f810 \$Directory
|
||
0xb482b5a4fb30 \$Directory
|
||
0xb482b5a4fcc0 \$Directory
|
||
0xb482b5a4fe50 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Trust Tokens
|
||
0xb482b5a50170 \Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
|
||
0xb482b5a50490 \Windows\System32\dmcmnutils.dll
|
||
0xb482b5a50620 \Windows\System32\MsSpellCheckingFacility.dll
|
||
0xb482b5a507b0 \Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe
|
||
0xb482b5a50940 \$Directory
|
||
0xb482b5a50ad0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Shared Dictionary\db
|
||
0xb482b5a50c60 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\machine.pckgdep
|
||
0xb482b5a50df0 \Dev\Query
|
||
0xb482b5a51430 \Windows\System32\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll
|
||
0xb482b5a515c0 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\msvcp140_app.dll
|
||
0xb482b5a518e0 \Windows\System32\en-US\crypt32.dll.mui
|
||
0xb482b5a52240 \Dev\Query
|
||
0xb482b5a52560 \$Directory
|
||
0xb482b5a52880 \Windows\System32\MediaFoundationAggregator.dll
|
||
0xb482b5a52a10 \$Directory
|
||
0xb482b5a52ba0 \Windows\System32\sppwinob.dll
|
||
0xb482b5a52d30 \Dev\Query
|
||
0xb482b5a531e0 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b5a53370 \Dev\Query
|
||
0xb482b5a53500 \Dev\Query
|
||
0xb482b5a53690 \$Directory
|
||
0xb482b5a53820 \Windows\System32\StartTileData.dll
|
||
0xb482b5a53e60 \Dev\Query
|
||
0xb482b5a54180 \$Directory
|
||
0xb482b5a54310 \ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d.dat
|
||
0xb482b5a54950 \Windows\UUS\Packages\Preview
|
||
0xb482b5a54ae0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\resources.pak
|
||
0xb482b5a54e00 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat
|
||
0xb482b5a55120 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_200_percent.pak
|
||
0xb482b5a552b0 \Users\job\AppData\Roaming\mRemoteNG\Themes\vs2015light.vstheme
|
||
0xb482b5a555d0 \$CachedWriteThrough
|
||
0xb482b5a55760 \Windows\System32\C_1257.NLS
|
||
0xb482b5a558f0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Shared Dictionary\db
|
||
0xb482b5a55a80 \Windows\System32\C_1255.NLS
|
||
0xb482b5a56250 \Windows\System32\Windows.Energy.dll
|
||
0xb482b5a563e0 \$Directory
|
||
0xb482b5a56700 \$MapAttributeValue
|
||
0xb482b5a56bb0 \$Directory
|
||
0xb482b5a56d40 \Users\job\AppData\Local\Microsoft\Windows\Caches\cversions.3.db
|
||
0xb482b5a56ed0 \Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Operational.evtx
|
||
0xb482b5a57380 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70
|
||
0xb482b5a57510 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat
|
||
0xb482b5a576a0 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_1_app.dll
|
||
0xb482b5a579c0 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-wal
|
||
0xb482b5a57ce0 \Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-S-1-5-21-3914889805-4071901059-918772286-1001.dat
|
||
0xb482b5a57e70 \ProgramData\Microsoft\Windows\UUS\State\_active.uusver
|
||
0xb482b5a58190 \Windows\SysWOW64\netapi32.dll
|
||
0xb482b5a584b0 \$Directory
|
||
0xb482b5a58640 \Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.ThemeVS2015.dll
|
||
0xb482b5a58670 蛈떥뒂蛈떥뒂
|
||
0xb482b5a587d0 \Windows\System32\Clipc.dll
|
||
0xb482b5a58af0 \Windows\SysWOW64\version.dll
|
||
0xb482b5a58c80 \Windows\System32\en-US\NetworkIcon.dll.mui
|
||
0xb482b5a58e10 \$Directory
|
||
0xb482b5a59450 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db-shm
|
||
0xb482b5a595e0 \Windows\System32\wpnapps.dll
|
||
0xb482b5a59770 \$Directory
|
||
0xb482b5a59a90 \Windows\System32\CodeIntegrityAggregator.dll
|
||
0xb482b5a59c20 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exe
|
||
0xb482b5a59db0 \Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\FontCache-FontSet-S-1-5-21-3914889805-4071901059-918772286-1001.dat
|
||
0xb482b5a5a0d0 \Windows\System32
|
||
0xb482b5a5a260 \$Directory
|
||
0xb482b5a5a3f0 \$Directory
|
||
0xb482b5a5a580 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_0
|
||
0xb482b5a5a710 \Windows\System32\MissionControlAggregator.dll
|
||
0xb482b5a5a8a0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db-wal
|
||
0xb482b5a5aa30 \Windows\System32\Windows.StateRepositoryBroker.dll
|
||
0xb482b5a5b520 \$Directory
|
||
0xb482b5a5b6b0 \Windows\System32\ControlCenter.dll
|
||
0xb482b5a5bb60 \Windows\System32\appinfoext.dll
|
||
0xb482b5a5c1a0 \ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d_COM15.dat.LOG1
|
||
0xb482b5a5c4c0 \Windows\SysWOW64\sspicli.dll
|
||
0xb482b5a5c970 \ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d.dat
|
||
0xb482b5a5cc90 \Windows\System32\wpnclient.dll
|
||
0xb482b5a5ce20 \Endpoint
|
||
0xb482b5a5d2d0 \$Directory
|
||
0xb482b5a5d460 \wkssvc
|
||
0xb482b5a5d5f0 \Users\job\AppData\Local\ConnectedDevicesPlatform\L.job\ActivitiesCache.db
|
||
0xb482b5a5d910 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_2
|
||
0xb482b5a5daa0 \ProgramData\Microsoft\Windows Defender\Scans\mpcache-DADA29A4EF6E5A2D592C68A16E563385C71EF9D9.bin.9C
|
||
0xb482b5a5e270 \Windows\SysWOW64\wkscli.dll
|
||
0xb482b5a5e400 \$Directory
|
||
0xb482b5a5e720 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_1
|
||
0xb482b5a5e8b0 \Program Files (x86)\mRemoteNG\en-US\mRemoteNG.resources.dll
|
||
0xb482b5a5ea40 \Windows\System32\C_932.NLS
|
||
0xb482b5a5ebd0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_2
|
||
0xb482b5a5eef0 \CMNotify
|
||
0xb482b5a5f080 \Windows\System32\en-US\iertutil.dll.mui
|
||
0xb482b5a5f210 \$Directory
|
||
0xb482b5a5f6c0 \Windows\SysWOW64\netutils.dll
|
||
0xb482b5a5f850 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_1
|
||
0xb482b5a5f9e0 \ProgramData\Microsoft\Windows\UUS\State\_active.uusver
|
||
0xb482b5a5fd00 \Windows\SysWOW64\wtsapi32.dll
|
||
0xb482b5a5fe90 \Windows\System32\wpnprv.dll
|
||
0xb482b5a60340 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_app.dll
|
||
0xb482b5a604d0 \Windows\SystemResources\ShellComponents\ShellComponents.pri
|
||
0xb482b5a60660 \CMNotify
|
||
0xb482b5a607f0 \$Directory
|
||
0xb482b5a60b10 \Windows\Registration\R000000000006.clb
|
||
0xb482b5a60ca0 \$MapAttributeValue
|
||
0xb482b5a61150 \Windows\System32
|
||
0xb482b5a61470 \Windows\System32\LicenseManagerApi.dll
|
||
0xb482b5a61600 \$Directory
|
||
0xb482b5a61790 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_3
|
||
0xb482b5a61920 \ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d_COM15.dat.LOG2
|
||
0xb482b5a61ab0 \Windows\System32\aepic.dll
|
||
0xb482b5a620f0 \Endpoint
|
||
0xb482b5a62280 \Endpoint
|
||
0xb482b5a62410 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b5a62730 \$Directory
|
||
0xb482b5a62a50 \Windows\System32\wshbth.dll
|
||
0xb482b5a62be0 \Windows\System32\FlightSettings.dll
|
||
0xb482b5a62d70 \Windows\System32\C_949.NLS
|
||
0xb482b5a63090 \ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db-wal
|
||
0xb482b5a633b0 \Windows\System32\spoolss.dll
|
||
0xb482b5a63860 \$Directory
|
||
0xb482b5a639f0 \Windows\System32\AppExtension.dll
|
||
0xb482b5a63b80 \Users\job\AppData\Local\ConnectedDevicesPlatform\L.job\ActivitiesCache.db-wal
|
||
0xb482b5a63ea0 \Windows\System32\LicenseManager.dll
|
||
0xb482b5a641c0 \Windows\System32\winevt\Logs\Microsoft-Windows-Store%4Operational.evtx
|
||
0xb482b5a64350 \ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db
|
||
0xb482b5a64990 \Users\job\AppData\Local\ConnectedDevicesPlatform\L.job\ActivitiesCache.db-shm
|
||
0xb482b5a64b20 \Windows\System32\ContentDeliveryManager.Utilities.dll
|
||
0xb482b5a64cb0 \$Directory
|
||
0xb482b5a64e40 \$Directory
|
||
0xb482b5a65160 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_3
|
||
0xb482b5a652f0 \$Directory
|
||
0xb482b5a65480 \Sessions\1\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651
|
||
0xb482b5a65610 \Windows\rescache\_merged\647903440\3815181176.pri
|
||
0xb482b5a657a0 \Windows\System32\ActivationClient.dll
|
||
0xb482b5a65930 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\LOCK
|
||
0xb482b5a65de0 \ProgramData\Microsoft\Windows Defender\Scans\mpcache-DADA29A4EF6E5A2D592C68A16E563385C71EF9D9.bin.83
|
||
0xb482b5a66290 \Users\job\AppData\Local\Comms\UnistoreDB\USS.jtx
|
||
0xb482b5a668d0 \Windows\System32\en-US\ctfmon.exe.mui
|
||
0xb482b5a66a60 \$Directory
|
||
0xb482b5a66d80 \$Directory
|
||
0xb482b5a676e0 \Windows\System32\vaultcli.dll
|
||
0xb482b5a67870 \$Directory
|
||
0xb482b5a67b90 \Windows\System32\C_874.NLS
|
||
0xb482b5a67d20 \Windows\System32\CapabilityAccessManagerClient.dll
|
||
0xb482b5a67eb0 \$Directory
|
||
0xb482b5a684f0 \Windows\Registration\R000000000006.clb
|
||
0xb482b5a68680 \$Directory
|
||
0xb482b5a68b30 \$Directory
|
||
0xb482b5a68e50 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\SCT Auditing Pending Reports644051db.tmp
|
||
0xb482b5a69490 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\en-US.pak
|
||
0xb482b5a697b0 \$Directory
|
||
0xb482b5a69ad0 \Windows\en-US\explorer.exe.mui
|
||
0xb482b5a6a2a0 \Windows\System32\WinMetadata\Windows.UI.winmd
|
||
0xb482b5a6a5c0 \Windows\Registration\R000000000006.clb
|
||
0xb482b5a6ad90 \Windows\System32\wusys.dll
|
||
0xb482b5a6b0b0 \Windows\System32\Windows.Devices.WiFiDirect.dll
|
||
0xb482b5a6b6f0 \ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db-shm
|
||
0xb482b5a6b880 \Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx
|
||
0xb482b5a6bd30 \Windows\System32\en-US\propsys.dll.mui
|
||
0xb482b5a6bec0 \Windows\System32\winspool.drv
|
||
0xb482b5a6c1e0 \$Directory
|
||
0xb482b5a6c370 \Windows\System32\AppReadiness.dll
|
||
0xb482b5a6c500 \$Directory
|
||
0xb482b5a6c690 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db
|
||
0xb482b5a6c820 \Windows\System32\prm0009.dll
|
||
0xb482b5a6c9b0 \ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db-shm
|
||
0xb482b5a6cb40 \Endpoint
|
||
0xb482b5a6ccd0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\000024.log
|
||
0xb482b5a6d310 \ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpRtp.dll
|
||
0xb482b5a6d4a0 \Windows\System32\userinit.exe
|
||
0xb482b5a6d630 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
|
||
0xb482b5a6d7c0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat
|
||
0xb482b5a6d950 \Windows\Registration\R000000000006.clb
|
||
0xb482b5a6de00 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b5a6e120 \Windows\System32\sbservicetrigger.dll
|
||
0xb482b5a6e2b0 \Windows\SysWOW64\apphelp.dll
|
||
0xb482b5a6e440 \Windows\System32\UserDataAccessRes.dll
|
||
0xb482b5a6e760 \Users\job\AppData\Local\Comms\UnistoreDB\store.jfm
|
||
0xb482b5a6e8f0 \Windows\System32\C_1258.NLS
|
||
0xb482b5a6ea80 \Windows\System32\ShellHost.exe
|
||
0xb482b5a6ec10 \Windows\System32\en-US\propsys.dll.mui
|
||
0xb482b5a6eda0 \$Directory
|
||
0xb482b5a6f250 \Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4WHC.evtx
|
||
0xb482b5a6f3e0 \$Directory
|
||
0xb482b5a6f570 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Trust Tokens
|
||
0xb482b5a6f890 \Windows\System32\cemapi.dll
|
||
0xb482b5a6fa20 \$Directory
|
||
0xb482b5a70380 \$Directory
|
||
0xb482b5a70510 \CMNotify
|
||
0xb482b5a70830 \Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Admin.evtx
|
||
0xb482b5a70ce0 \$Directory
|
||
0xb482b5a70e70 \$Directory
|
||
0xb482b5a71190 \Windows\System32\svchost.exe
|
||
0xb482b5a714b0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat
|
||
0xb482b5a71640 \Windows\Registration\R000000000006.clb
|
||
0xb482b5a717d0 \$Directory
|
||
0xb482b5a71af0 \$Directory
|
||
0xb482b5a71c80 \$Directory
|
||
0xb482b5a71e10 \Windows\SysWOW64\userenv.dll
|
||
0xb482b5a72130 \$Directory
|
||
0xb482b5a722c0 \Windows\System32\en-US\windows.storage.dll.mui
|
||
0xb482b5a72450 \$Directory
|
||
0xb482b5a725e0 \Windows\System32\winevt\Logs\Microsoft-Windows-VPN%4Operational.evtx
|
||
0xb482b5a72770 \$Directory
|
||
0xb482b5a72db0 \$Directory
|
||
0xb482b5a730d0 \$Directory
|
||
0xb482b5a73260 \CMApi
|
||
0xb482b5a733f0 \$Directory
|
||
0xb482b5a73580 \Windows\System32\C_1256.NLS
|
||
0xb482b5a73710 \Windows\System32\Windows.Security.Authentication.OnlineId.dll
|
||
0xb482b5a73bc0 \Windows\SysWOW64\dsreg.dll
|
||
0xb482b5a73d50 \$Directory
|
||
0xb482b5a73ee0 \Windows\System32\winevt\Logs\Microsoft-Windows-WFP%4Operational.evtx
|
||
0xb482b5a74200 \Windows\System32\winevt\Logs\Microsoft-Windows-IKE%4Operational.evtx
|
||
0xb482b5a74520 \Windows\System32\C_936.NLS
|
||
0xb482b5a746e0 䜸떧뒂䜸떧뒂
|
||
0xb482b5a74840 \$MapAttributeValue
|
||
0xb482b5a749d0 \Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\CascadiaMonoItalic.ttf
|
||
0xb482b5a74b60 \Windows\System32\AggregatorHost.exe
|
||
0xb482b5a74cf0 \Users\job\AppData\Local\ConnectedDevicesPlatform\L.job\ActivitiesCache.db-shm
|
||
0xb482b5a751a0 \Windows\SysWOW64\profapi.dll
|
||
0xb482b5a754c0 \Windows\System32\C_1251.NLS
|
||
0xb482b5a75970 \$Directory
|
||
0xb482b5a75b00 \$MapAttributeValue
|
||
0xb482b5a75c90 \Windows\System32\Windows.CloudStore.Schema.Shell.dll
|
||
0xb482b5a75e20 \$Directory
|
||
0xb482b5a76140 \ProgramData\Microsoft\Diagnosis\EventStore.db
|
||
0xb482b5a762d0 \$Directory
|
||
0xb482b5a765f0 \Windows\System32\Windows.Networking.Sockets.PushEnabledApplication.dll
|
||
0xb482b5a76780 \$Directory
|
||
0xb482b5a76910 \Windows\UUS\Packages\Preview\amd64\UusBrain.dll
|
||
0xb482b5a76aa0 \Windows\System32\DataExchange.dll
|
||
0xb482b5a770e0 \$Directory
|
||
0xb482b5a77270 \Windows\System32\sppobjs.dll
|
||
0xb482b5a77400 \Windows\appcompat\Programs\Amcache.hve.LOG1
|
||
0xb482b5a77590 \$Directory
|
||
0xb482b5a77720 \$Directory
|
||
0xb482b5a778b0 \Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\CascadiaCode.ttf
|
||
0xb482b5a77bd0 \Windows\System32\appinfo.dll
|
||
0xb482b5a77d60 \Windows\System32\C_950.NLS
|
||
0xb482b5a78080 \Windows\System32
|
||
0xb482b5a78210 \Windows\Registration\R000000000006.clb
|
||
0xb482b5a783a0 \$Directory
|
||
0xb482b5a78530 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
|
||
0xb482b5a786c0 \$MapAttributeValue
|
||
0xb482b5a78850 \$Directory
|
||
0xb482b5a789e0 \$Directory
|
||
0xb482b5a78b70 \Windows\System32\en-US\localspl.dll.mui
|
||
0xb482b5a78d00 \Windows\Fonts\segoeui.ttf
|
||
0xb482b5a78e90 \Windows\System32\UserDataTypeHelperUtil.dll
|
||
0xb482b5a79340 \Windows\System32\MSWB7.dll
|
||
0xb482b5a794d0 \$Directory
|
||
0xb482b5a79660 \$Directory
|
||
0xb482b5a797f0 \Windows\System32\en-US\Windows.Web.dll.mui
|
||
0xb482b5a79980 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\icudtl.dat
|
||
0xb482b5a79b10 \ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log
|
||
0xb482b5a79ca0 \Windows\SysWOW64\atlthunk.dll
|
||
0xb482b5a7a150 \Windows\appcompat\Programs\Amcache.hve
|
||
0xb482b5a7a2e0 \$Directory
|
||
0xb482b5a7add0 \Windows\System32\PrintIsolationProxy.dll
|
||
0xb482b5a7b410 \Windows\UUS\Packages\Preview
|
||
0xb482b5a7b5a0 \$Directory
|
||
0xb482b5a7b730 \Windows\System32\NotificationControllerPS.dll
|
||
0xb482b5a7b8c0 \$Directory
|
||
0xb482b5a7bbe0 \CMApi
|
||
0xb482b5a7bd70 \Windows\System32\userinitext.dll
|
||
0xb482b5a7c090 \Windows\System32\C_1254.NLS
|
||
0xb482b5a7c220 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat
|
||
0xb482b5a7c3b0 \Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\resources.pri
|
||
0xb482b5a7c6d0 \Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\CascadiaCodeItalic.ttf
|
||
0xb482b5a7c860 \$Directory
|
||
0xb482b5a7c9f0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\v8_context_snapshot.bin
|
||
0xb482b5a7cb80 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462\comctl32.dll
|
||
0xb482b5a7d350 \Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx
|
||
0xb482b5a7d990 \Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\CascadiaMono.ttf
|
||
0xb482b5a7db20 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_200_percent.pak
|
||
0xb482b5a7dcb0 \ProgramData\Microsoft\Diagnosis\EventStore.db-shm
|
||
0xb482b5a7de40 \CMApi
|
||
0xb482b5a7e160 \ProgramData\Microsoft\Diagnosis\EventStore.db-wal
|
||
0xb482b5a7e2f0 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462
|
||
0xb482b5a7e480 \Windows\System32\winevt\Logs\Microsoft-Windows-CloudStore%4Operational.evtx
|
||
0xb482b5a7e610 \$Directory
|
||
0xb482b5a7e7a0 \$Directory
|
||
0xb482b5a7e930 \Windows\System32\ninput.dll
|
||
0xb482b5a7ec50 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\MANIFEST-000023
|
||
0xb482b5a7ede0 \ProgramData\Microsoft\Diagnosis\EventStore.db-shm
|
||
0xb482b5a7f100 \Windows\Registration\R000000000006.clb
|
||
0xb482b5a7f420 \Windows\Fonts\segoeuib.ttf
|
||
0xb482b5a7f5b0 \$Directory
|
||
0xb482b5a7f740 \ProgramData\Microsoft\Windows\UUS\State\_active.uusver
|
||
0xb482b5a7f8d0 \Windows\System32\twinapi.dll
|
||
0xb482b5a7fbf0 \Windows\System32\msvcp110_win.dll
|
||
0xb482b5a800a0 \Windows\System32\CloudExperienceHostCommon.dll
|
||
0xb482b5a80230 \Program Files
|
||
0xb482b5a803c0 \Windows\System32\omadmapi.dll
|
||
0xb482b5a806e0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\en-US.pak
|
||
0xb482b5a80b90 \$Directory
|
||
0xb482b5a80eb0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat
|
||
0xb482b5a814f0 \Windows\System32\winevt\Logs\Microsoft-Windows-CloudStore%4Initialization.evtx
|
||
0xb482b5a81810 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_100_percent.pak
|
||
0xb482b5a819a0 \Users\job\AppData\Local\Comms\UnistoreDB\USStmp.jtx
|
||
0xb482b5a81b30 \$Directory
|
||
0xb482b5a81cc0 \Program Files (x86)\Microsoft\EdgeUpdate\1.3.221.3
|
||
0xb482b5a82170 \Windows\System32\en-US\userinit.exe.mui
|
||
0xb482b5a82300 \Windows\System32\AppMon.dll
|
||
0xb482b5a82490 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\resources.pak
|
||
0xb482b5a827b0 \ProgramData\Microsoft\Windows\UUS\State\_active.uusver
|
||
0xb482b5a82940 \Windows\apppatch\DirectXApps.sdb
|
||
0xb482b5a82ad0 \$Directory
|
||
0xb482b5a82c60 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b5a82df0 \Windows\System32\en-US\ESENT.dll.mui
|
||
0xb482b5a841a0 \Windows\CSC\v2.0.6\temp
|
||
0xb482b5a844c0 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResumeView.dll
|
||
0xb482b5a84650 \Windows\CSC
|
||
0xb482b5a847e0 \Windows\Registration\R000000000006.clb
|
||
0xb482b5a84970 \$Directory
|
||
0xb482b5a84b00 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\resources.pri
|
||
0xb482b5a84e20 \$Directory
|
||
0xb482b5a85140 \Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop.dll
|
||
0xb482b5a855f0 \ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.3.Crwl
|
||
0xb482b5a85aa0 \Windows\CSC\v2.0.6\pq
|
||
0xb482b5a85dc0 \ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\PropMap.db
|
||
0xb482b5a86270 \Windows\System32\mssprxy.dll
|
||
0xb482b5a86400 \Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\resources.pri
|
||
0xb482b5a86590 \Windows\assembly\NativeImages_v4.0.30319_32\System\b6e2a986346601fc8ac3c6853a10e199\System.ni.dll.aux
|
||
0xb482b5a86720 \Windows\System32\SecurityHealthCore.dll
|
||
0xb482b5a868b0 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b5a86a40 ↕
|
||
0xb482b5a86bd0 \Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb.jfm
|
||
0xb482b5a86d60 \Program Files\Common Files\VMware\Drivers\vss\VCBSnapshotProvider.dll
|
||
0xb482b5a87080 \$Directory
|
||
0xb482b5a87210 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db
|
||
0xb482b5a873a0 \Windows\System32\SecurityHealthSSO.dll
|
||
0xb482b5a87530 \Windows\assembly\NativeImages_v4.0.30319_32\System\dea0393078281e3e807a8f0684433db5\System.ni.dll
|
||
0xb482b5a876c0 \Windows\System32\catsrvut.dll
|
||
0xb482b5a87b70 \CMNotify
|
||
0xb482b5a87d00 \$Directory
|
||
0xb482b5a87e90 \Windows\CSC\v2.0.6
|
||
0xb482b5a881b0 \ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\SecStore.db-wal
|
||
0xb482b5a88340 \Windows\System32\en-US\winnlsres.dll.mui
|
||
0xb482b5a884d0 \Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\WindowsAppRuntime.DeploymentExtensions.OneCore.dll
|
||
0xb482b5a887f0 \Windows\System32\activeds.dll
|
||
0xb482b5a88980 \Windows\System32\en-US\imapi2.dll.mui
|
||
0xb482b5a88b10 \Windows\System32
|
||
0xb482b5a88ca0 \$Directory
|
||
0xb482b5a89150 \Program Files\Windows Defender\MpClient.dll
|
||
0xb482b5a892e0 \$MapAttributeValue
|
||
0xb482b5a89790 \Windows\assembly\NativeImages_v4.0.30319_32\System\dea0393078281e3e807a8f0684433db5\System.ni.dll.aux
|
||
0xb482b5a89920 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
|
||
0xb482b5a89c40 \Windows\CSC\v2.0.6\namespace
|
||
0xb482b5a89dd0 \CMApi
|
||
0xb482b5a8a0f0 \Windows\System32\SecurityHealthProxyStub.dll
|
||
0xb482b5a8a280 \Windows\System32\svchost.exe
|
||
0xb482b5a8a5a0 \CMNotify
|
||
0xb482b5a8a730 \Windows\SystemApps\Microsoft.WindowsAppRuntime.vNext.CBS_8wekyb3d8bbwe\WindowsAppRuntime.DeploymentExtensions.OneCore.dll
|
||
0xb482b5a8a8c0 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG2
|
||
0xb482b5a8aa50 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG1
|
||
0xb482b5a8abe0 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat
|
||
0xb482b5a8b220 \$Directory
|
||
0xb482b5a8b6d0 \CMNotify
|
||
0xb482b5a8b860 \Dev\Query
|
||
0xb482b5a8bb80 \Windows\System32\SecurityHealthService.exe
|
||
0xb482b5a8bea0 \Windows\System32\en-US\SearchIndexer.exe.mui
|
||
0xb482b5a8c1c0 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-gather.db
|
||
0xb482b5a8c350 \Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb.jfm
|
||
0xb482b5a8c4e0 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG1
|
||
0xb482b5a8c670 \Dev\Query
|
||
0xb482b5a8c800 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db
|
||
0xb482b5a8c990 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b5a8cb20 \Program Files\VMware\VMware Tools\iconv.dll
|
||
0xb482b5a8ccb0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vk_swiftshader.dll
|
||
0xb482b5a8ce40 \Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.CBS.dll
|
||
0xb482b5a8d610 \Windows\System32\SecurityHealthAgent.dll
|
||
0xb482b5a8dac0 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db-wal
|
||
0xb482b5a8dde0 \Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
|
||
0xb482b5a8e740 \Windows\System32\tcpmon.dll
|
||
0xb482b5a8ea60 \Windows\System32\vss_ps.dll
|
||
0xb482b5a8ebf0 \Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe\WindowsAppRuntime.DeploymentExtensions.OneCore.dll
|
||
0xb482b5a8ed80 \Windows\System32\PimIndexMaintenanceClient.dll
|
||
0xb482b5a8f0a0 \Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\c07dbfc3c6b4ad434eee98ecd8287f5b\System.Configuration.ni.dll.aux
|
||
0xb482b5a8f230 \$Directory
|
||
0xb482b5a8f550 \Dev\Query
|
||
0xb482b5a8f6e0 \Windows\System32\en-US\ESENT.dll.mui
|
||
0xb482b5a8f870 \Windows\System32\Microsoft.Internal.FrameworkUdk.System.dll
|
||
0xb482b5a8fa00 \Windows\System32\MessagingDataModel2.dll
|
||
0xb482b5a8fb90 \Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb
|
||
0xb482b5a8fd20 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-gather.db-wal
|
||
0xb482b5a901d0 \Windows\System32\en-US\AppXDeploymentServer.dll.mui
|
||
0xb482b5a904f0 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat
|
||
0xb482b5a90680 \ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\SecStore.db-shm
|
||
0xb482b5a909a0 \Windows\System32\AppXDeploymentExtensions.onecore.dll
|
||
0xb482b5a90cc0 \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthCore.dll
|
||
0xb482b5a90e50 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG1
|
||
0xb482b5a91300 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy\ActivationStore.dat
|
||
0xb482b5a91490 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG2
|
||
0xb482b5a91620 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat
|
||
0xb482b5a917b0 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat
|
||
0xb482b5a91940 \Windows\System32\svchost.exe
|
||
0xb482b5a91ad0 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG2
|
||
0xb482b5a91c60 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat
|
||
0xb482b5a92110 \SwDevice
|
||
0xb482b5a922a0 \Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.Phone.dll
|
||
0xb482b5a92430 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG2
|
||
0xb482b5a928e0 \Windows\System32
|
||
0xb482b5a92c00 \ProgramData\Microsoft\Windows Defender\Definition Updates\{95CAF3AE-F52C-4666-990C-954375DF34A8}\mpavbase.vdm
|
||
0xb482b5a92d90 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ExtensionActivityEdge
|
||
0xb482b5a93240 \Windows\System32\snmpapi.dll
|
||
0xb482b5a933d0 \Windows\System32\en-US\APMon.dll.mui
|
||
0xb482b5a936f0 \Windows\System32\en-US\SecurityHealthAgent.dll.mui
|
||
0xb482b5a93880 \Windows\System32\en-US\windows.storage.dll.mui
|
||
0xb482b5a93a10 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-usn.db
|
||
0xb482b5a93d30 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG1
|
||
0xb482b5a941e0 \ProgramData\Microsoft\Windows Defender\Scans\mpcache-DADA29A4EF6E5A2D592C68A16E563385C71EF9D9.bin.DB
|
||
0xb482b5a94370 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG1
|
||
0xb482b5a94500 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vk_swiftshader_icd.json
|
||
0xb482b5a94820 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG1
|
||
0xb482b5a949b0 \CMNotify
|
||
0xb482b5a94b40 \Windows\System32\en-US\mswsock.dll.mui
|
||
0xb482b5a957c0 \Windows\System32\en-US\vsstrace.dll.mui
|
||
0xb482b5a95950 \Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.Controls.dll
|
||
0xb482b5a95c70 \Program Files\VMware\VMware Tools\gthread-2.0-0.dll
|
||
0xb482b5a96120 \ProgramData\Microsoft\Windows Defender\Scans\mpcache-DADA29A4EF6E5A2D592C68A16E563385C71EF9D9.bin.67
|
||
0xb482b5a962b0 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG2
|
||
0xb482b5a96440 \Windows\System32\smartscreen.dll
|
||
0xb482b5a965d0 \ProgramData\Microsoft\Windows Defender\Definition Updates\{95CAF3AE-F52C-4666-990C-954375DF34A8}\mpavdlta.vdm
|
||
0xb482b5a96760 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG2
|
||
0xb482b5a968f0 \Dev\Query
|
||
0xb482b5a96c10 \ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCommu.dll
|
||
0xb482b5a96da0 \Windows\assembly\NativeImages_v4.0.30319_32\System.Core\11f67a51b42b5a7259cc452d68c29f98\System.Core.ni.dll
|
||
0xb482b5a97250 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Edge.dat
|
||
0xb482b5a97700 \Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop.dll
|
||
0xb482b5a97890 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\elevated_tracing_service.exe
|
||
0xb482b5a97a20 \$Directory
|
||
0xb482b5a97bb0 \$Directory
|
||
0xb482b5a97d40 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG2
|
||
0xb482b5a97ed0 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy\ActivationStore.dat
|
||
0xb482b5a98380 \Windows\System32\en-US\smartscreen.exe.mui
|
||
0xb482b5a98510 \CMNotify
|
||
0xb482b5a986a0 \ProgramData\Microsoft\Windows Defender\Scans\MpDiag.bin
|
||
0xb482b5a98830 \ProgramData\Microsoft\Windows Defender\Definition Updates\{95CAF3AE-F52C-4666-990C-954375DF34A8}\mpasbase.vdm
|
||
0xb482b5a98b50 \CMNotify
|
||
0xb482b5a98ce0 \$Directory
|
||
0xb482b5a99190 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG2
|
||
0xb482b5a99320 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd
|
||
0xb482b5a997d0 \$Directory
|
||
0xb482b5a99960 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG1
|
||
0xb482b5a99af0 \Windows\System32\adsldpc.dll
|
||
0xb482b5a99c80 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b5a99e10 \Windows\Registration\R000000000006.clb
|
||
0xb482b5a9a130 \$Directory
|
||
0xb482b5a9a450 \Windows\System32\VirtualMon.dll
|
||
0xb482b5a9a5e0 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG2
|
||
0xb482b5a9a770 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy\ActivationStore.dat
|
||
0xb482b5a9aa90 \ProgramData\Microsoft\Windows Defender\Definition Updates\{95CAF3AE-F52C-4666-990C-954375DF34A8}\mpasdlta.vdm
|
||
0xb482b5a9ac20 \Windows\Registration\R000000000006.clb
|
||
0xb482b5a9adb0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\elevation_service.exe
|
||
0xb482b5a9b0d0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\oneauth.dll
|
||
0xb482b5a9b580 \CMNotify
|
||
0xb482b5a9bd50 \ProgramData\Microsoft\Windows Security Health\Logs\SHS-02242026-090644-7-1ff-26100.1.amd64fre.ge_release.240331-1435.etl
|
||
0xb482b5a9bee0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\eventlog_provider.dll
|
||
0xb482b5a9c200 \Windows\System32\wsnmp32.dll
|
||
0xb482b5a9c390 \ProgramData\Microsoft\Windows\ClipSVC\tokens.dat
|
||
0xb482b5a9c6b0 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy\ActivationStore.dat
|
||
0xb482b5a9c840 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\BHO\ie_to_edge_stub.exe
|
||
0xb482b5a9c9d0 \Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb
|
||
0xb482b5a9cb60 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG1
|
||
0xb482b5a9ccf0 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG1
|
||
0xb482b5a9ce80 \ProgramData\Microsoft\Diagnosis\Sideload
|
||
0xb482b5a9d1a0 \Windows\SysWOW64\urlmon.dll
|
||
0xb482b5a9d330 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db-wal
|
||
0xb482b5a9d4c0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\learning_tools.dll
|
||
0xb482b5a9d650 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db-shm
|
||
0xb482b5a9d970 \Windows\Registration\R000000000006.clb
|
||
0xb482b5a9db00 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\AdSelectionAttestationsPreloaded\manifest.json
|
||
0xb482b5a9dc90 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivationStore.dat
|
||
0xb482b5a9de20 \Windows\System32\usbmon.dll
|
||
0xb482b5a9e460 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\oneds.dll
|
||
0xb482b5a9e780 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe\ActivationStore.dat
|
||
0xb482b5a9e910 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\libEGL.dll
|
||
0xb482b5a9ec30 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\ffmpeg.dll
|
||
0xb482b5a9edc0 \$Directory
|
||
0xb482b5a9f0e0 \Windows\System32\WofUtil.dll
|
||
0xb482b5a9f270 \Windows\System32\Pimstore.dll
|
||
0xb482b5a9f400 \Windows\System32\APMon.dll
|
||
0xb482b5a9f590 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd
|
||
0xb482b5a9f720 \$Directory
|
||
0xb482b5a9fa40 \Windows\System32\SearchIndexer.exe
|
||
0xb482b5a9fbd0 \Windows\Temp\vmware-vmvss-SYSTEM.log
|
||
0xb482b5aa0080 \Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\c07dbfc3c6b4ad434eee98ecd8287f5b\System.Configuration.ni.dll
|
||
0xb482b5aa0210 \Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\en-US\Microsoft.ui.xaml.dll.mui
|
||
0xb482b5aa03a0 \Windows\System32\UserDataService.dll
|
||
0xb482b5aa06c0 \Windows\System32\en-US\propsys.dll.mui
|
||
0xb482b5aa0850 \Windows\assembly\NativeImages_v4.0.30319_32\System.Core\11f67a51b42b5a7259cc452d68c29f98\System.Core.ni.dll.aux
|
||
0xb482b5aa0b70 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b5aa0d00 \ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\PropMap.db
|
||
0xb482b5aa0e90 \ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\SecStore.db
|
||
0xb482b5aa11b0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msvcp140_codecvt_ids.dll
|
||
0xb482b5aa14d0 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG2
|
||
0xb482b5aa1660 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG1
|
||
0xb482b5aa1980 \$CachedWriteThrough
|
||
0xb482b5aa1ca0 \Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\StartMenu
|
||
0xb482b5aa1e30 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG1
|
||
0xb482b5aa2150 \Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.ui.xaml.dll
|
||
0xb482b5aa22e0 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-wal
|
||
0xb482b5aa2470 \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-wal
|
||
0xb482b5aa2790 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db
|
||
0xb482b5aa2ab0 \ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\PropMap.db-wal
|
||
0xb482b5aa2c40 \Windows\System32\cellulardatacapabilityhandler.dll
|
||
0xb482b5aa2dd0 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG2
|
||
0xb482b5aa3410 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b5aa35a0 \Windows\System32\en-US\VSSVC.exe.mui
|
||
0xb482b5aa38c0 \$Directory
|
||
0xb482b5aa4090 \Dev\Query
|
||
0xb482b5aa4540 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\webview2_integration.dll
|
||
0xb482b5aa46d0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Top Sites
|
||
0xb482b5aa4860 \Windows\System32\EAMProgressHandler.dll
|
||
0xb482b5aa4b80 \Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.ui.xaml.resources.19h1.dll
|
||
0xb482b5aa4d10 \Windows\System32
|
||
0xb482b5aa4ea0 \Windows\Registration\R000000000006.clb
|
||
0xb482b5aa5350 \ProgramData\Microsoft\Windows Defender\Scans\mpcache-DADA29A4EF6E5A2D592C68A16E563385C71EF9D9.bin.E6
|
||
0xb482b5aa5670 \Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx
|
||
0xb482b5aa5e40 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\onramp.dll
|
||
0xb482b5aa6160 \Windows\System32\VSSVC.exe
|
||
0xb482b5aa6480 \Windows\System32
|
||
0xb482b5aa6610 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\mip_protection_sdk.dll
|
||
0xb482b5aa67a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\mip_core.dll
|
||
0xb482b5aa6930 \Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_cf9c45068ea8c077\comctl32.dll
|
||
0xb482b5aa6de0 \Windows\Registration\R000000000006.clb
|
||
0xb482b5aa7100 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\wdag.dll
|
||
0xb482b5aa7290 \Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\CoreMessagingXP.dll
|
||
0xb482b5aa7420 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-usn.db-shm
|
||
0xb482b5aa75b0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\mip_core_gn.dll
|
||
0xb482b5aa7a60 \Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
|
||
0xb482b5aa7bf0 \CMNotify
|
||
0xb482b5aa7d80 \Windows\Registration\R000000000006.clb
|
||
0xb482b5aa8230 \Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.dll
|
||
0xb482b5aa83c0 \Windows\System32\InstallService.dll
|
||
0xb482b5aa8550 \CMNotify
|
||
0xb482b5aa86e0 \Users\job\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
|
||
0xb482b5aa8870 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\145.0.3800.70.manifest
|
||
0xb482b5aa8a00 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\microsoft_shell_integration.dll
|
||
0xb482b5aa8d20 \$Directory
|
||
0xb482b5aa9360 \ProgramData\Microsoft\Windows Defender\Scans\mpcache-DADA29A4EF6E5A2D592C68A16E563385C71EF9D9.bin.7E
|
||
0xb482b5aa94f0 \Windows\System32\AppXDeploymentExtensions.desktop.dll
|
||
0xb482b5aa9680 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db
|
||
0xb482b5aa99a0 \Windows\System32\UserDataPlatformHelperUtil.dll
|
||
0xb482b5aa9e50 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\concrt140.dll
|
||
0xb482b5aaa170 \Windows\System32\en-US\shell32.dll.mui
|
||
0xb482b5aaa620 \$Directory
|
||
0xb482b5aaa940 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\onnxruntime.dll
|
||
0xb482b5aab8e0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\telclient.dll
|
||
0xb482b5aabc00 \CMNotify
|
||
0xb482b5aabd90 \Windows\System32\bindfltapi.dll
|
||
0xb482b5aac0b0 \<5C>
|
||
0xb482b5aacd30 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge.dll
|
||
0xb482b5aacec0 \ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\PropMap.db-shm
|
||
0xb482b5aad370 \$Directory
|
||
0xb482b5aadb40 \$Directory
|
||
0xb482b5aadcd0 \Windows\System32\Windows.Networking.Vpn.dll
|
||
0xb482b5aae4a0 \Windows\System32\en-US\win32spl.dll.mui
|
||
0xb482b5aaee00 \CMApi
|
||
0xb482b5aaf2b0 \lsass
|
||
0xb482b5aaf8f0 \Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x64__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop.dll
|
||
0xb482b5aafc10 \Windows\System32\en-US\crypt32.dll.mui
|
||
0xb482b5aafda0 \$Directory
|
||
0xb482b5ab0250 \Windows\System32\ClipSVC.dll
|
||
0xb482b5ab03e0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vccorlib140.dll
|
||
0xb482b5ab0890 \Windows\System32\en-US\VSSVC.exe.mui
|
||
0xb482b5ab0a20 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ExtensionActivityComp
|
||
0xb482b5ab0ed0 \CMApi
|
||
0xb482b5ab1380 \Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x64__8wekyb3d8bbwe\WindowsAppRuntime.DeploymentExtensions.OneCore.dll
|
||
0xb482b5ab16a0 \Windows\System32\Unistore.dll
|
||
0xb482b5ab1b50 \Windows\System32\en-US\windows.storage.dll.mui
|
||
0xb482b5ab1ce0 \Windows\System32\en-US\crypt32.dll.mui
|
||
0xb482b5ab2320 \Windows\Registration\R000000000006.clb
|
||
0xb482b5ab2af0 \Windows\System32\fltLib.dll
|
||
0xb482b5ab2c80 \Windows\System32\OpcServices.dll
|
||
0xb482b5ab32c0 \Windows\System32\spool\prtprocs\x64\winprint.dll
|
||
0xb482b5ab35e0 \Windows\System32\en-US\netmsg.dll.mui
|
||
0xb482b5ab3770 \Windows\System32\en-US\propsys.dll.mui
|
||
0xb482b5ab3a90 \Dev\Query
|
||
0xb482b5ab3db0 \Windows\System32\winevt\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx
|
||
0xb482b5ab40d0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\copilot_overlay_images_200_percent.pak
|
||
0xb482b5ab4580 \Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Windowing.Core.dll
|
||
0xb482b5ab48a0 \Windows\System32
|
||
0xb482b5ab4bc0 \Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_b6a09a6f5242f736
|
||
0xb482b5ab4ee0 \Windows\System32\inetpp.dll
|
||
0xb482b5ab5200 \CMApi
|
||
0xb482b5ab5390 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\prefs_enclave_x64.dll
|
||
0xb482b5ab5520 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db-wal
|
||
0xb482b5ab56b0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Extensions\external_extensions.json
|
||
0xb482b5ab5840 \$Directory
|
||
0xb482b5ab59d0 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b5ab5cf0 \Windows\System32\en-US\crypt32.dll.mui
|
||
0xb482b5ab5e80 \Windows\Registration\R000000000006.clb
|
||
0xb482b5ab61a0 \Windows\System32\WinMetadata\Windows.ApplicationModel.winmd
|
||
0xb482b5ab6330 \Windows\Prefetch\SECURITYHEALTHSERVICE.EXE-91B5FB98.pf
|
||
0xb482b5ab64c0 \Windows\System32\sfc.dll
|
||
0xb482b5ab6650 \$Directory
|
||
0xb482b5ab6c90 \CMApi
|
||
0xb482b5ab6e20 \Windows\System32\VSSVC.exe
|
||
0xb482b5ab7780 \Windows\System32\Phoneutil.dll
|
||
0xb482b5ab7910 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ExtensionActivityEdge
|
||
0xb482b5ab8270 \Windows\System32\en-US\vsstrace.dll.mui
|
||
0xb482b5ab8400 \Windows\apppatch\DirectXApps.sdb
|
||
0xb482b5ab8590 \ProgramData\Microsoft\Windows Defender\Scans\mpcache-DADA29A4EF6E5A2D592C68A16E563385C71EF9D9.bin.87
|
||
0xb482b5ab8d60 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-usn.db-wal
|
||
0xb482b5ab9210 \Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
|
||
0xb482b5ab93a0 \$Directory
|
||
0xb482b5ab9530 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\copilot_overlay_unscaled_images.pak
|
||
0xb482b5ab96c0 \$MapAttributeValue
|
||
0xb482b5ab9850 \Windows\System32\StorSvc.dll
|
||
0xb482b5ab99e0 \Windows\SysWOW64\uxtheme.dll
|
||
0xb482b5ab9b70 \Windows\System32\mfcsubs.dll
|
||
0xb482b5ab9d00 \$ConvertToNonresident
|
||
0xb482b5aba340 \Windows\System32\Taskbar.dll
|
||
0xb482b5aba4d0 \Windows\System32\SecurityHealthSystray.exe
|
||
0xb482b5aba660 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge.dll.sig
|
||
0xb482b5aba980 \ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager\0C2BA0D7-B1F8-414D-AFA1-D96D5A8EB1DD-0.bin
|
||
0xb482b5abae30 \Windows\System32\en-US\inetpp.dll.mui
|
||
0xb482b5abb150 \Windows\System32\catsrv.dll
|
||
0xb482b5abb2e0 \Windows\System32\winbrand.dll
|
||
0xb482b5abb470 \Windows\System32\spp\store\2.0\tokens.dat
|
||
0xb482b5abb600 \Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_cf9c45068ea8c077
|
||
0xb482b5abb790 \ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-gather.db-shm
|
||
0xb482b5abb920 \Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe\WindowsAppSdk.AppxDeploymentExtensions.Desktop.dll
|
||
0xb482b5abbab0 \MsFteWds
|
||
0xb482b5abc0f0 \$Directory
|
||
0xb482b5abc730 \Windows\System32
|
||
0xb482b5abc8c0 \$Directory
|
||
0xb482b5abd090 \Windows\System32\win32spl.dll
|
||
0xb482b5abd3b0 \Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Resources.dll
|
||
0xb482b5abd540 \CMNotify
|
||
0xb482b5abd6d0 \Windows\Fonts\segoeui.ttf
|
||
0xb482b5abd9f0 \Windows\System32\en-US\crypt32.dll.mui
|
||
0xb482b5abdb80 \lsass
|
||
0xb482b5abdea0 \Windows\System32\AppxPackaging.dll
|
||
0xb482b5abe1c0 \CMNotify
|
||
0xb482b5abe350 \Windows\SysWOW64\srvcli.dll
|
||
0xb482b5abe4e0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\dual_engine_adapter_x64.dll
|
||
0xb482b5abeb20 \Windows\System32\en-US\SearchIndexer.exe.mui
|
||
0xb482b5abf480 \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthCore.dll
|
||
0xb482b5abf610 \Windows\Prefetch\SECURITYHEALTHSYSTRAY.EXE-E527A4AE.pf
|
||
0xb482b5abf7a0 \Windows\System32\wifidatacapabilityhandler.dll
|
||
0xb482b5abf930 \ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\SecStore.db
|
||
0xb482b5abfc50 \Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\MRM.dll
|
||
0xb482b5abfde0 \SwDevice
|
||
0xb482b5ac05b0 \Windows\System32\LicenseManagerSvc.dll
|
||
0xb482b5ac0740 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\show_third_party_software_licenses.bat
|
||
0xb482b5ac0a60 \$Directory
|
||
0xb482b5ac0bf0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge.exe
|
||
0xb482b5ac10a0 \$Directory
|
||
0xb482b5ac1230 \CMNotify
|
||
0xb482b5ac1550 \Windows\System32\srumapi.dll
|
||
0xb482b5ac16e0 \Windows\System32\SearchIndexer.exe
|
||
0xb482b5ac1870 \Windows\System32\deviceaccess.dll
|
||
0xb482b5ac1a00 \Windows\System32\wosc.dll
|
||
0xb482b5ac1eb0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\delegatedWebFeatures.sccd
|
||
0xb482b5ac2360 \Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe\WindowsAppRuntime.DeploymentExtensions.OneCore.dll
|
||
0xb482b5ac2680 \Windows\SysWOW64\iertutil.dll
|
||
0xb482b5ac29a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\AdSelectionAttestationsPreloaded\ad-selection-attestations.dat
|
||
0xb482b5ac2b30 \ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.3.gthr
|
||
0xb482b5ac2e50 \$Directory
|
||
0xb482b5ac3300 \$Directory
|
||
0xb482b5ac3490 \ProgramData\Microsoft\Windows Defender\Definition Updates\{95CAF3AE-F52C-4666-990C-954375DF34A8}\mpengine.dll
|
||
0xb482b5ac37b0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vcruntime140_1.dll
|
||
0xb482b5ac3940 \Windows\System32\catsrvps.dll
|
||
0xb482b5ac3c60 \$Directory
|
||
0xb482b5ac3df0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\dxil.dll
|
||
0xb482b5c8f3e0 \Windows\System32\config\TxR\{2ad83873-efea-11ee-a54d-000d3a94eaa1}.TxR.0.regtrans-ms
|
||
0xb482b5c8fc80 \Windows\System32\config\TxR\{2ad83873-efea-11ee-a54d-000d3a94eaa1}.TxR.blf
|
||
0xb482b5c900d0 \Windows\System32\config\TxR\{2ad83873-efea-11ee-a54d-000d3a94eaa1}.TxR.2.regtrans-ms
|
||
0xb482b5c90ae0 \Windows\System32\config\TxR\{2ad83873-efea-11ee-a54d-000d3a94eaa1}.TxR.1.regtrans-ms
|
||
0xb482b5c91660 \$MapAttributeValue
|
||
0xb482b5c92ed0 \$PrepareToShrinkFileSize
|
||
0xb482b61131a0 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG2
|
||
0xb482b61134c0 \Windows\System32\drivers\en-US\dmvsc.sys.mui
|
||
0xb482b6113650 \$Directory
|
||
0xb482b61137e0 \Windows\System32\winevt\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx
|
||
0xb482b6113c90 \$Directory
|
||
0xb482b6114140 \Windows\System32
|
||
0xb482b6114460 \Windows\System32\ApplicationFrame.dll
|
||
0xb482b61145f0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat
|
||
0xb482b6114780 \Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx
|
||
0xb482b6114dc0 \Windows\Fonts\calibri.ttf
|
||
0xb482b61150e0 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_87ef0e2f7a2c9771
|
||
0xb482b6115400 \$MapAttributeValue
|
||
0xb482b6115720 \$Directory
|
||
0xb482b61158b0 \Windows\System32\drivers\en-US\smbdirect.sys.mui
|
||
0xb482b6115d60 \$Directory
|
||
0xb482b6115ef0 \Windows\System32\drivers\smbdirect.sys
|
||
0xb482b6116210 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db
|
||
0xb482b61163a0 \Windows\System32\en-US\winlangdb.dll.mui
|
||
0xb482b6116530 \$Directory
|
||
0xb482b61166c0 \Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\WidgetBoardView.dll
|
||
0xb482b6116850 \Windows\System32\Windows.ApplicationModel.Background.TimeBroker.dll
|
||
0xb482b61169e0 \Windows\System32\drivers\dmvsc.sys
|
||
0xb482b6117340 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat
|
||
0xb482b61174d0 \$MapAttributeValue
|
||
0xb482b6117660 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG1
|
||
0xb482b6117ca0 \Windows\System32\en-US\mispace.dll.mui
|
||
0xb482b6118150 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b61182e0 \Windows\System32\cabinet.dll
|
||
0xb482b6118470 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_pwa_launcher.exe
|
||
0xb482b6118790 \$Directory
|
||
0xb482b6118920 \Windows\System32\windows.applicationmodel.datatransfer.dll
|
||
0xb482b6118ab0 \Windows\System32\Windows.Globalization.Fontgroups.dll
|
||
0xb482b6118dd0 \Windows\System32\Windows.Storage.Compression.dll
|
||
0xb482b61190f0 \Windows\System32\Windows.UI.Input.Inking.dll
|
||
0xb482b6119280 \$Directory
|
||
0xb482b6119410 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG2
|
||
0xb482b6119730 \$MapAttributeValue
|
||
0xb482b6119a50 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
|
||
0xb482b6119be0 \Windows\System32\Windows.Security.Integrity.dll
|
||
0xb482b611a860 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_2
|
||
0xb482b611a9f0 \Windows\Registration\R000000000006.clb
|
||
0xb482b611ab80 \$MapAttributeValue
|
||
0xb482b611aea0 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG2
|
||
0xb482b611b1c0 \Windows\System32\Windows.Internal.ShellCommon.dll
|
||
0xb482b611b4e0 \Windows\System32\Windows.UI.FileExplorer.dll
|
||
0xb482b611b6a0 뛸똑뒂뛸똑뒂
|
||
0xb482b611bcb0 \Windows\System32\ntshrui.dll
|
||
0xb482b611be40 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\ActivationStore.dat
|
||
0xb482b611c160 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b611c2f0 \Windows\System32\WinMetadata\Windows.UI.winmd
|
||
0xb482b611c480 \$Directory
|
||
0xb482b611c610 \Windows\SysWOW64\DWrite.dll
|
||
0xb482b611c7a0 \Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui
|
||
0xb482b611cac0 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b611d100 \Windows\System32\en-US\combase.dll.mui
|
||
0xb482b611d290 \Windows\SysWOW64\DWrite.dll
|
||
0xb482b611d5b0 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\ActivationStore.dat.LOG1
|
||
0xb482b611d740 \$CachedWriteThrough
|
||
0xb482b611d8d0 \Windows\Registration\R000000000006.clb
|
||
0xb482b611da60 \$Directory
|
||
0xb482b611e3c0 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
|
||
0xb482b611e6e0 \Windows\System32\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
|
||
0xb482b611e870 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\ActivationStore.dat
|
||
0xb482b611ea00 \Windows\SystemResources\Winlangdb.dll.mun
|
||
0xb482b611eb90 \Windows\System32\coreaudiopolicymanagerext.dll
|
||
0xb482b611f1d0 \Windows\System32\WinUICohabitation.dll
|
||
0xb482b611f360 \Windows\System32\WWanAPI.dll
|
||
0xb482b611f680 \Windows\System32\WinMetadata\Windows.Foundation.winmd
|
||
0xb482b611fb30 \Windows\System32\AboveLockAppHost.dll
|
||
0xb482b611fe50 \Windows\System32\drivers\en-US\refs.sys.mui
|
||
0xb482b6120170 \ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe
|
||
0xb482b6120490 \Windows\System32\drivers\refs.sys
|
||
0xb482b6120620 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462
|
||
0xb482b6120940 \$Directory
|
||
0xb482b6120c60 \Windows\System32\wscapi.dll
|
||
0xb482b61215c0 \$Directory
|
||
0xb482b6121750 \$Directory
|
||
0xb482b6121a70 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\telclient.dll
|
||
0xb482b6121d90 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe
|
||
0xb482b61220b0 \$MapAttributeValue
|
||
0xb482b6122560 \$Directory
|
||
0xb482b61226f0 \ProgramData\Microsoft\Windows Defender\Definition Updates\Updates
|
||
0xb482b6122880 \Windows\System32\oleaccrc.dll
|
||
0xb482b6122a10 \Program Files\WindowsApps\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe
|
||
0xb482b6122ba0 \$MapAttributeValue
|
||
0xb482b6122d30 \Windows\System32\oleacc.dll
|
||
0xb482b6122ec0 \$Directory
|
||
0xb482b6123690 \$Directory
|
||
0xb482b6123b40 \Windows\System32\Windows.Internal.UI.Shell.WindowTabManager.dll
|
||
0xb482b6123cd0 \Windows\System32\CloudExperienceHostRedirection.dll
|
||
0xb482b6124180 \Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\msvcp140_app.dll
|
||
0xb482b6124310 \Windows\System32\en-US\datamap.0409.dat
|
||
0xb482b61244a0 \Windows\System32\en-US\oleaccrc.dll.mui
|
||
0xb482b6124630 \Windows\System32\winevt\Logs\Microsoft-Windows-Security-SPP-UX-Notifications%4ActionCenter.evtx
|
||
0xb482b61252b0 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b6125440 \$Directory
|
||
0xb482b61255d0 \Windows\System32\svchost.exe
|
||
0xb482b6125760 \Windows\System32\CBDHSvc.dll
|
||
0xb482b6125a80 \Windows\System32\fontgroupsoverride.dll
|
||
0xb482b6125c10 \Windows\System32\msftedit.dll
|
||
0xb482b61263e0 \Windows\System32\rometadata.dll
|
||
0xb482b6126700 \$Directory
|
||
0xb482b6126a20 \Windows\System32\drivers\en-US\spaceport.sys.mui
|
||
0xb482b6126bb0 \Windows\Fonts\segmdl2.ttf
|
||
0xb482b6126d40 \Windows\System32\actxprxy.dll
|
||
0xb482b6127380 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462
|
||
0xb482b6127510 \Windows\Registration\R000000000006.clb
|
||
0xb482b61276a0 \$MapAttributeValue
|
||
0xb482b6127830 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b6127ce0 \Windows\System32\ExplorerFrame.dll
|
||
0xb482b6128190 \Windows\System32\bdesvc.dll
|
||
0xb482b6128320 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe\ActivationStore.dat
|
||
0xb482b61284b0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat
|
||
0xb482b6128640 \Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\resources.pri
|
||
0xb482b61287d0 \Windows\System32\RuntimeBroker.exe
|
||
0xb482b6128af0 \Windows\System32\drivers\spaceport.sys
|
||
0xb482b6128e10 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat
|
||
0xb482b61295e0 \$MapAttributeValue
|
||
0xb482b6129770 \Windows\Fonts\StaticCache.dat
|
||
0xb482b6129a90 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat
|
||
0xb482b6129c20 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462
|
||
0xb482b612a0d0 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\UserSetup.Eligibility.dll
|
||
0xb482b612a260 \Windows\System32\en-US\Windows.Web.dll.mui
|
||
0xb482b612a3f0 \Windows\System32\normnfkc.nls
|
||
0xb482b612aa30 \Windows\System32\en-US\windows.storage.dll.mui
|
||
0xb482b612abc0 \Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\SharedUtilities.Stub.BackgroundTasks.dll
|
||
0xb482b612ad50 \Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\msvcp140_atomic_wait_app.dll
|
||
0xb482b612aee0 \Windows\System32\en-US\wecsvc.dll.mui
|
||
0xb482b612b520 \Windows\System32\Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient.dll
|
||
0xb482b612b840 \Program Files\WindowsApps\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\SharedUtilities.Stub.BackgroundTasks.dll
|
||
0xb482b612bb60 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_proxy.exe
|
||
0xb482b612c1a0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat
|
||
0xb482b612c330 \Windows\Registration\R000000000006.clb
|
||
0xb482b612c4c0 \Windows\System32\cldapi.dll
|
||
0xb482b612ce20 \Windows\System32\thumbcache.dll
|
||
0xb482b612d140 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat
|
||
0xb482b612d2d0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\icudtl.dat
|
||
0xb482b612d780 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG2
|
||
0xb482b612daa0 \Windows\System32\en-US\winnlsres.dll.mui
|
||
0xb482b612e270 \$Directory
|
||
0xb482b612e590 \Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\WidgetBoard.exe
|
||
0xb482b612e8b0 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG1
|
||
0xb482b612ea40 \$MapAttributeValue
|
||
0xb482b612ebd0 \Windows\System32\drivers\tcpip.sys
|
||
0xb482b612f080 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat
|
||
0xb482b612f3a0 \$Directory
|
||
0xb482b612f530 \Windows\Registration\R000000000006.clb
|
||
0xb482b612f850 \Windows\System32\Windows.System.Profile.HardwareId.dll
|
||
0xb482b612fd00 \$CachedWriteThrough
|
||
0xb482b612fe90 \ProgramData\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\bdb1dbbc8d58d1af.dat
|
||
0xb482b61301b0 \Windows\System32\winevt\Logs\Microsoft-Windows-Privacy-Auditing%4Operational.evtx
|
||
0xb482b6130340 \MsFteWds
|
||
0xb482b6130660 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462
|
||
0xb482b61307f0 \Users\job\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
|
||
0xb482b6130e30 \Windows\System32\windowsudkservices.shellcommon.dll
|
||
0xb482b6131150 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_3
|
||
0xb482b61312e0 \$MapAttributeValue
|
||
0xb482b6131470 \Windows\System32\drivers\en-US\tcpip.sys.mui
|
||
0xb482b6131600 \Windows\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy\resources.pri
|
||
0xb482b6131920 \$Directory
|
||
0xb482b6131ab0 \Windows\System32\drivers\fvevol.sys
|
||
0xb482b6131c40 \Windows\System32\drivers\vmbkmcl.sys
|
||
0xb482b6131dd0 \$Directory
|
||
0xb482b6132280 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Web Data
|
||
0xb482b6132410 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Cortana.Settings.winmd
|
||
0xb482b61325a0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\User.dat
|
||
0xb482b6132730 \Windows\System32
|
||
0xb482b61328c0 \Windows\System32\en-US\windows.storage.dll.mui
|
||
0xb482b6132a50 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\User.dat.LOG1
|
||
0xb482b6133540 \Windows\System32\POSyncServices.dll
|
||
0xb482b61336d0 \Windows\System32\bthserv.dll
|
||
0xb482b61339f0 \Windows\System32\en-US\dsreg.dll.mui
|
||
0xb482b6133b80 \Windows\System32\SettingsHandlers_DesktopTaskbar.dll
|
||
0xb482b6133d10 \$Directory
|
||
0xb482b6133ea0 \$Directory
|
||
0xb482b61344e0 \$Directory
|
||
0xb482b6134670 \Windows\System32
|
||
0xb482b6134800 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\User.dat.LOG2
|
||
0xb482b6134b20 \Windows\System32\en-US\windows.storage.dll.mui
|
||
0xb482b6134e40 \Windows\System32\cryptngc.dll
|
||
0xb482b6135160 \$Directory
|
||
0xb482b6135610 \Windows\System32\PCShellCommonProxyStub.dll
|
||
0xb482b6135640 嚘똓뒂嚘똓뒂
|
||
0xb482b61357a0 \Windows\System32\wbem\WmiPerfClass.dll
|
||
0xb482b6135930 \Windows\System32\dmenrollengine.dll
|
||
0xb482b6135c50 \Windows\System32\en-US\propsys.dll.mui
|
||
0xb482b6135de0 \Windows\Registration\R000000000006.clb
|
||
0xb482b6136420 \CMNotify
|
||
0xb482b6136a60 \$Directory
|
||
0xb482b6136bf0 \Windows\System32\Windows.Management.InprocObjects.dll
|
||
0xb482b6136d80 \Windows\System32\Windows.Web.Http.dll
|
||
0xb482b61373c0 \Windows\SystemApps\SxS\MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy\resources.pri
|
||
0xb482b6137550 \$Directory
|
||
0xb482b61376e0 \$Directory
|
||
0xb482b6137870 \Windows\Fonts\segoeui.ttf
|
||
0xb482b6137a00 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat.LOG1
|
||
0xb482b6137b90 \Windows\System32\en-US\propsys.dll.mui
|
||
0xb482b6137eb0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat
|
||
0xb482b61381d0 \CMNotify
|
||
0xb482b6138360 \CMApi
|
||
0xb482b61384f0 \Windows\System32\wlidsvc.dll
|
||
0xb482b6138680 \CMNotify
|
||
0xb482b61389a0 \Windows\SysWOW64\WsmRes.dll
|
||
0xb482b6138b30 \Windows\System32\RuntimeBroker.exe
|
||
0xb482b6139620 \Windows\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\resources.pri
|
||
0xb482b61397b0 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\ActivationStore.dat
|
||
0xb482b6139940 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\oneauth.dll
|
||
0xb482b6139ad0 \Windows\SystemApps\SxS\MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy\resources.pri
|
||
0xb482b6139df0 \Users\job\AppData\Roaming\Microsoft\Windows\Network Shortcuts
|
||
0xb482b613a110 \ProgramData\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\bdb1dbbc8d58d1af.dat
|
||
0xb482b613a2a0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncShell64.dll
|
||
0xb482b613a5c0 \Windows\System32\Windows.Internal.Shell.Broker.dll
|
||
0xb482b613a750 \Windows\System32\svchost.exe
|
||
0xb482b613ac00 \$MapAttributeValue
|
||
0xb482b613ad90 \ProgramData\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\bdb1dbbc8d58d1af_COM15.dat.LOG1
|
||
0xb482b613b0b0 \Users\Public\Desktop
|
||
0xb482b613b240 \ProgramData\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\bdb1dbbc8d58d1af_COM15.dat
|
||
0xb482b613b6f0 \Windows\SystemApps\SxS\MicrosoftWindows.59336768.Speion_cw5n1h2txyewy\resources.pri
|
||
0xb482b613b880 \Windows\System32\cflapi.dll
|
||
0xb482b613ba10 \$Directory
|
||
0xb482b613bba0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat
|
||
0xb482b613bd30 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat.LOG2
|
||
0xb482b613bec0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat
|
||
0xb482b613c370 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\EBWebView\x64\EmbeddedBrowserWebView.dll
|
||
0xb482b613c500 \Users\job\AppData\Local\mRemoteNG\mRemoteNG.exe_Url_pjpxdehxpaaorqg2thmuhl11a34i3ave\1.76.20.24615\user.config
|
||
0xb482b613c690 \Windows\System32\UserDataAccessRes.dll
|
||
0xb482b613c820 \Users\job\AppData\Roaming\Microsoft\Windows\Network Shortcuts
|
||
0xb482b613cb40 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.UI.dll
|
||
0xb482b613ccd0 \Windows\System32\en-US\UserDataAccessRes.dll.mui
|
||
0xb482b613ce60 \Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.dll
|
||
0xb482b613d310 \ProgramData\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\bdb1dbbc8d58d1af_COM15.dat.LOG2
|
||
0xb482b613d630 \Users\job\Desktop
|
||
0xb482b613d7c0 \Users\Public\Desktop
|
||
0xb482b613d950 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat
|
||
0xb482b613dc70 \Windows\System32
|
||
0xb482b613e2b0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_1
|
||
0xb482b613e5d0 \Sessions\1\AppContainerNamedObjects\S-1-15-2-1312876954-3728250218-3694470604-4188764552-3197360367-780678243-3229644300
|
||
0xb482b613e760 \$MapAttributeValue
|
||
0xb482b613e8f0 \Users\job\Desktop
|
||
0xb482b613ec10 \$MapAttributeValue
|
||
0xb482b613eda0 \Windows\System32\cscui.dll
|
||
0xb482b613f570 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\en-US.pak
|
||
0xb482b613f700 \$MapAttributeValue
|
||
0xb482b613f890 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_200_percent.pak
|
||
0xb482b613fbb0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\0ce334799d7d3fce_1
|
||
0xb482b613fed0 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462
|
||
0xb482b61401f0 \CMApi
|
||
0xb482b6140510 \Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
|
||
0xb482b6140ce0 \Windows\System32\wbem\WmiPrvSE.exe
|
||
0xb482b6140e70 \Users\job\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db
|
||
0xb482b6141190 \Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\resources.pri
|
||
0xb482b6141320 \Windows\System32\en-US\twinui.pcshell.dll.mui
|
||
0xb482b61414b0 \Windows\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy\resources.pri
|
||
0xb482b6141e10 \Windows\System32\en-US\svchost.exe.mui
|
||
0xb482b6142130 \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\resources.pri
|
||
0xb482b61422c0 \Windows\System32\en-US\ole32.dll.mui
|
||
0xb482b61425e0 \$Directory
|
||
0xb482b6142770 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_100_percent.pak
|
||
0xb482b6142900 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\resources.pak
|
||
0xb482b6142a90 \$MapAttributeValue
|
||
0xb482b6142db0 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vccorlib140_app.dll
|
||
0xb482b61430d0 \$Directory
|
||
0xb482b6143260 \$Directory
|
||
0xb482b6143580 \Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\WinStore.App.dll
|
||
0xb482b6143710 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat
|
||
0xb482b6143a30 \Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\StartMenu\AdaptiveCards.Rendering.Uwp.dll
|
||
0xb482b6143d50 \$MapAttributeValue
|
||
0xb482b6144840 \Windows\System32\EhStorShell.dll
|
||
0xb482b61449d0 \$Directory
|
||
0xb482b6144cf0 \Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\resources.pri
|
||
0xb482b61451a0 \Users\job\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db
|
||
0xb482b61454c0 \Windows\System32\en-US\user32.dll.mui
|
||
0xb482b6145650 \Windows\System32\SwitcherDataModel.dll
|
||
0xb482b6145970 \$Directory
|
||
0xb482b6145b00 \Windows\System32
|
||
0xb482b6145c90 \$MapAttributeValue
|
||
0xb482b6146460 \$Directory
|
||
0xb482b61465f0 \Windows\System32\PimIndexMaintenance.dll
|
||
0xb482b6146910 \Windows\System32\wecsvc.dll
|
||
0xb482b6146aa0 \$Directory
|
||
0xb482b6147400 \$MapAttributeValue
|
||
0xb482b6147590 \Windows\System32\mlang.dll
|
||
0xb482b6147720 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_0
|
||
0xb482b6147a40 \Windows\System32\Windows.UI.Accessibility.dll
|
||
0xb482b6148080 \$MapAttributeValue
|
||
0xb482b6148210 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b6148850 \Windows\System32\Windows.Shell.BlueLightReduction.dll
|
||
0xb482b61489e0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat
|
||
0xb482b6148b70 \Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartDocked.dll
|
||
0xb482b61491b0 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_87ef0e2f7a2c9771\comctl32.dll
|
||
0xb482b61494d0 \Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
|
||
0xb482b6149660 \Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\vcruntime140_app.dll
|
||
0xb482b6149980 \$Directory
|
||
0xb482b6149ca0 \Windows\System32\linkinfo.dll
|
||
0xb482b6149e30 \Windows\System32\Windows.Storage.ApplicationData.dll
|
||
0xb482b614a150 \Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\vcruntime140_1_app.dll
|
||
0xb482b614a2e0 \Users\job\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db
|
||
0xb482b614a600 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.Core.dll
|
||
0xb482b614a790 \Windows\System32\pcadm.dll
|
||
0xb482b614a920 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.Model.dll
|
||
0xb482b614aab0 \Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\resources.pri
|
||
0xb482b614ac40 \CMApi
|
||
0xb482b614b0f0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge.dll
|
||
0xb482b614b410 \$Directory
|
||
0xb482b614b5a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\oneds.dll
|
||
0xb482b614ba50 \$MapAttributeValue
|
||
0xb482b614bd70 \Windows\System32\biwinrt.dll
|
||
0xb482b614c090 \Users\job\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db
|
||
0xb482b614c3b0 \$Directory
|
||
0xb482b614c540 \Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Safety\network\local\sinkholeCache
|
||
0xb482b614c6d0 \Windows\System32\pcacli.dll
|
||
0xb482b614c860 \$Directory
|
||
0xb482b614cb80 \Windows\System32\drivers\en-US\fvevol.sys.mui
|
||
0xb482b614cea0 \$Directory
|
||
0xb482b614d350 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat
|
||
0xb482b614d4e0 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Microsoft.Web.WebView2.Core.dll
|
||
0xb482b614d670 \Windows\System32\Windows.FileExplorer.Common.dll
|
||
0xb482b614d800 \$Directory
|
||
0xb482b614d990 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_elf.dll
|
||
0xb482b614dcb0 \$Directory
|
||
0xb482b614e480 \Windows\System32
|
||
0xb482b614e7a0 \Windows\apppatch\DirectXApps.sdb
|
||
0xb482b614e930 \Windows\apppatch\DirectXApps.sdb
|
||
0xb482b614eac0 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b614ede0 \Windows\SystemResources\Windows.UI.ShellCommon\pris\Windows.UI.ShellCommon.en-US.pri
|
||
0xb482b614f100 \Program Files\WindowsApps\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\resources.pri
|
||
0xb482b614f5b0 \$Directory
|
||
0xb482b614f740 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.InternalWebApi.dll
|
||
0xb482b614f8d0 \$Directory
|
||
0xb482b614fa60 \$MapAttributeValue
|
||
0xb482b614fbf0 \Windows\System32\en-US\combase.dll.mui
|
||
0xb482b614fd80 \Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\StartMenu.dll
|
||
0xb482b6150230 \Windows\System32\winevt\Logs\Microsoft-Windows-Known Folders API Service.evtx
|
||
0xb482b61503c0 \CMApi
|
||
0xb482b61506e0 \Windows\System32\mispace.dll
|
||
0xb482b6150a00 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\468720f7dc3cf397_1
|
||
0xb482b6150b90 \Windows\System32\en-US\windows.applicationmodel.datatransfer.dll.mui
|
||
0xb482b6150eb0 \Windows\System32\windows.immersiveshell.serviceprovider.dll
|
||
0xb482b6151360 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_wer.dll
|
||
0xb482b6151810 \$Directory
|
||
0xb482b6151b30 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db-shm
|
||
0xb482b6152300 \$Directory
|
||
0xb482b61527b0 \Windows\System32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
|
||
0xb482b6152940 \Windows\SystemApps\Shared\WebView2SDK\webview2standalone.dll
|
||
0xb482b6152c60 \Windows\System32\en-US\Taskbar.dll.mui
|
||
0xb482b6152df0 \Windows\System32\twinui.dll
|
||
0xb482b68ac330 \Windows\System32\backgroundTaskHost.exe
|
||
0xb482b68ac650 \ProgramData\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\81d060ca2aba6fa4_COM15.dat
|
||
0xb482b68ac7e0 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\ActivationStore.dat
|
||
0xb482b68acb00 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Vpn Tokens
|
||
0xb482b68acc90 \ProgramData\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\81d060ca2aba6fa4_COM15.dat.LOG1
|
||
0xb482b68ace20 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_100_percent.pak
|
||
0xb482b68ad2d0 \ProgramData\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\81d060ca2aba6fa4_COM15.dat.LOG2
|
||
0xb482b68ad5f0 \Windows\Fonts\calibri.ttf
|
||
0xb482b68ad780 \Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4Operational.evtx
|
||
0xb482b68adaa0 \$MapAttributeValue
|
||
0xb482b68adc30 \Windows\SystemResources\wininet.dll.mun
|
||
0xb482b68addc0 \Windows\System32\en-US\stobject.dll.mui
|
||
0xb482b68ae0e0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\libGLESv2.dll
|
||
0xb482b68ae270 \Windows\System32\cscobj.dll
|
||
0xb482b68ae590 \$Directory
|
||
0xb482b68ae8b0 \Windows\SystemResources\stobject.dll.mun
|
||
0xb482b68aea40 \Windows\System32\WPDShServiceObj.dll
|
||
0xb482b68aed60 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_87ef0e2f7a2c9771
|
||
0xb482b68aeef0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\LOG
|
||
0xb482b68af080 \Windows\System32\shdocvw.dll
|
||
0xb482b68af210 \Sessions\1\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\crashpad_8068_ANSCZZIXNRYFMDCA
|
||
0xb482b68af3a0 \LOCAL\mojo.8068.4672.16164125671315730186
|
||
0xb482b68af530 \$Directory
|
||
0xb482b68af6c0 \Windows\System32\WinMetadata\Windows.UI.winmd
|
||
0xb482b68af850 \CMApi
|
||
0xb482b68afb70 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Web Data
|
||
0xb482b68afd00 \Windows\System32\bitsperf.dll
|
||
0xb482b68afe90 \Windows\System32\en-US\propsys.dll.mui
|
||
0xb482b68b04d0 \Windows\System32\en-US\bthprops.cpl.mui
|
||
0xb482b68b0660 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
|
||
0xb482b68b07f0 \Windows\System32\srchadmin.dll
|
||
0xb482b68b0980 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata\000029.ldb
|
||
0xb482b68b0e30 \Windows\System32\Windows.Internal.System.UserProfile.dll
|
||
0xb482b68b1150 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_200_percent.pak
|
||
0xb482b68b12e0 \Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_b6a09a6f5242f736\GdiPlus.dll
|
||
0xb482b68b1600 \$Directory
|
||
0xb482b68b1790 \LOCAL\mojo.8068.4672.16164125671315730186
|
||
0xb482b68b1920 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\wv2winrt.dll
|
||
0xb482b68b1ab0 \Users\job\AppData\Local\Microsoft\GameDVR
|
||
0xb482b68b1dd0 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462
|
||
0xb482b68b2280 \CMNotify
|
||
0xb482b68b2410 \$Directory
|
||
0xb482b68b25a0 \Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Inventory.evtx
|
||
0xb482b68b2730 \Windows\System32\OnDemandBrokerClient.dll
|
||
0xb482b68b2be0 \LOCAL\mojo.7880.8048.2576669683719983878
|
||
0xb482b68b2d70 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe
|
||
0xb482b68b3090 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\index
|
||
0xb482b68b3220 \Windows\System32\PortableDeviceTypes.dll
|
||
0xb482b68b3540 \CMNotify
|
||
0xb482b68b3860 \Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.325.7221.0_x64__8wekyb3d8bbwe
|
||
0xb482b68b39f0 \$Directory
|
||
0xb482b68b3b80 \Windows\System32\drivers\etc
|
||
0xb482b68b3d10 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_0
|
||
0xb482b68b3ea0 \CMNotify
|
||
0xb482b68b41c0 \Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.325.7221.0_x64__8wekyb3d8bbwe
|
||
0xb482b68b4350 \Windows\System32\en-US\windows.storage.dll.mui
|
||
0xb482b68b44e0 \CMNotify
|
||
0xb482b68b46a0 䛸뚋뒂䛸뚋뒂
|
||
0xb482b68b4800 \$MapAttributeValue
|
||
0xb482b68b4990 \$Directory
|
||
0xb482b68b4b20 \Windows\bcastdvr
|
||
0xb482b68b4cb0 \$Directory
|
||
0xb482b68b4e40 \Users\job\AppData\Local\Microsoft\Windows\WebCacheLock.dat
|
||
0xb482b68b5160 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\index
|
||
0xb482b68b52f0 \Windows\SysWOW64\bcrypt.dll
|
||
0xb482b68b5480 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\index
|
||
0xb482b68b57a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\resources.pak
|
||
0xb482b68b5930 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_1
|
||
0xb482b68b5ac0 \CMNotify
|
||
0xb482b68b6290 \$MapAttributeValue
|
||
0xb482b68b6420 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_0
|
||
0xb482b68b6740 \CMNotify
|
||
0xb482b68b68d0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_elf.dll
|
||
0xb482b68b6bf0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\MEIPreload\manifest.json
|
||
0xb482b68b70a0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\LOCK
|
||
0xb482b68b7230 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\en-US.pak
|
||
0xb482b68b73c0 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
|
||
0xb482b68b7550 \Windows\System32
|
||
0xb482b68b76e0 \Windows\System32\en-US\kernel32.dll.mui
|
||
0xb482b68b7870 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_0
|
||
0xb482b68b7a00 \Windows\System32\DXP.dll
|
||
0xb482b68b7b90 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\ActivationStore.dat
|
||
0xb482b68b7d20 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\ActivationStore.dat
|
||
0xb482b68b7eb0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\index
|
||
0xb482b68b8360 \$Directory
|
||
0xb482b68b8680 \$Directory
|
||
0xb482b68b8b30 \CMNotify
|
||
0xb482b68b9170 \Windows\Fonts\SegUIVar.ttf
|
||
0xb482b68b9300 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\data_1
|
||
0xb482b68b9490 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70
|
||
0xb482b68b9620 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
|
||
0xb482b68b97b0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu\Cryptomining
|
||
0xb482b68b9ad0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Login Data For Account
|
||
0xb482b68b9df0 \$Directory
|
||
0xb482b68ba110 \$Directory
|
||
0xb482b68ba2a0 \Windows\apppatch\DirectXApps.sdb
|
||
0xb482b68ba430 \Windows\System32\certca.dll
|
||
0xb482b68ba5c0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\data_0
|
||
0xb482b68ba750 \Windows\System32\wbem\WinMgmtR.dll
|
||
0xb482b68bac00 \Windows\System32\en-US\windows.storage.dll.mui
|
||
0xb482b68bb0b0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_3
|
||
0xb482b68bb3d0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_1
|
||
0xb482b68bb560 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG2
|
||
0xb482b68bb880 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b68bbba0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_2
|
||
0xb482b68bbd30 \Windows\System32\en-US\ESENT.dll.mui
|
||
0xb482b68bbec0 \$Directory
|
||
0xb482b68bc1e0 \Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\Taskbar.View.dll
|
||
0xb482b68bc370 \Users\job\AppData\Local\Microsoft\GameDVR\KnownGameList.bin
|
||
0xb482b68bc500 \Windows\System32\WindowsPowerShell\v1.0\PSEvents.dll
|
||
0xb482b68bc690 \$Directory
|
||
0xb482b68bc9b0 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462
|
||
0xb482b68bcb40 \Windows\System32\winevt\Logs\Microsoft-Windows-CloudRestoreLauncher%4Operational.evtx
|
||
0xb482b68bccd0 \Windows\System32\en-US\winnlsres.dll.mui
|
||
0xb482b68bd180 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_2
|
||
0xb482b68bd4a0 \$Directory
|
||
0xb482b68bd630 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\webview2_integration.dll
|
||
0xb482b68bd7c0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_3
|
||
0xb482b68bd950 \Windows\System32\MicrosoftAccountWAMExtension.dll
|
||
0xb482b68bdae0 \Windows\System32\dusmapi.dll
|
||
0xb482b68bdc70 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres
|
||
0xb482b68bde00 \Windows\System32\en-US\mswsock.dll.mui
|
||
0xb482b68be120 \Windows\System32\SyncCenter.dll
|
||
0xb482b68be2b0 \CMNotify
|
||
0xb482b68be440 \Windows\ShellComponents\WindowsInternal.ComposableShell.DesktopHosting.dll
|
||
0xb482b68be5d0 \Windows\System32\en-US\user32.dll.mui
|
||
0xb482b68be760 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG1
|
||
0xb482b68be8f0 \$Directory
|
||
0xb482b68bea80 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\000027.log
|
||
0xb482b68bec10 \$MapAttributeValue
|
||
0xb482b68beda0 \Windows\System32
|
||
0xb482b68bf250 \Windows\System32\CryptoWinRT.dll
|
||
0xb482b68bf570 \Windows\ShellComponents\WindowsInternal.ComposableShell.Experiences.Switcher.dll
|
||
0xb482b68bf700 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\Database\LOCK
|
||
0xb482b68bfd40 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat
|
||
0xb482b68bfed0 \Windows\System32\bitsigd.dll
|
||
0xb482b68c01f0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\MANIFEST-000025
|
||
0xb482b68c0510 \Windows\System32\batmeter.dll
|
||
0xb482b68c06a0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\data_3
|
||
0xb482b68c0830 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_0
|
||
0xb482b68c0b50 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database\000005.ldb
|
||
0xb482b68c0ce0 \$MapAttributeValue
|
||
0xb482b68c0e70 \CMNotify
|
||
0xb482b68c1190 \Windows\SystemResources\SndVolSSO.dll.mun
|
||
0xb482b68c1320 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\Database\LOG
|
||
0xb482b68c14b0 \$Directory
|
||
0xb482b68c1640 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\data_2
|
||
0xb482b68c17d0 \Users\job\AppData\Local\Microsoft\Windows\WebCache\V01.log
|
||
0xb482b68c1e10 \$Directory
|
||
0xb482b68c2130 \CMNotify
|
||
0xb482b68c22c0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\d3dcompiler_47.dll
|
||
0xb482b68c2450 \$MapAttributeValue
|
||
0xb482b68c2770 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Extension State\MANIFEST-000019
|
||
0xb482b68c2900 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_1
|
||
0xb482b68c2a90 \Dev\Query
|
||
0xb482b68c2c20 \Windows\System32\qmgr.dll
|
||
0xb482b68c2db0 \Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui
|
||
0xb482b68c3260 \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WsxPackManager.dll
|
||
0xb482b68c33f0 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy
|
||
0xb482b68c3580 \CMNotify
|
||
0xb482b68c3710 \Windows\System32\stobject.dll
|
||
0xb482b68c38a0 \CMNotify
|
||
0xb482b68c3a30 \$Directory
|
||
0xb482b68c3bc0 \Windows\System32\CloudRestoreLauncher.dll
|
||
0xb482b68c4200 \Windows\System32\mscoree.dll
|
||
0xb482b68c4390 \CMNotify
|
||
0xb482b68c46e0 䜸뚌뒂䜸뚌뒂
|
||
0xb482b68c4840 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe
|
||
0xb482b68c49d0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_0
|
||
0xb482b68c4cf0 \Windows\System32\netfxperf.dll
|
||
0xb482b68c4e80 \CMNotify
|
||
0xb482b68c51a0 \Users\job\AppData\Local\Microsoft\Windows\WebCache\V01.log
|
||
0xb482b68c5330 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462
|
||
0xb482b68c54c0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vcruntime140.dll
|
||
0xb482b68c5650 \$ConvertToNonresident
|
||
0xb482b68c5b00 \Windows\Fonts\seguisb.ttf
|
||
0xb482b68c5c90 \Windows\System32\Syncreg.dll
|
||
0xb482b68c5e20 \Windows\System32\en-US\sndvolsso.dll.mui
|
||
0xb482b68c6140 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\manifest.json
|
||
0xb482b68c62d0 \$Directory
|
||
0xb482b68c6460 \Windows\System32\backgroundTaskHost.exe
|
||
0xb482b68c65f0 \$Directory
|
||
0xb482b68c6aa0 \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\9cc3554b232e42aa87d1817f20f96874\System.Xml.ni.dll.aux
|
||
0xb482b68c6c30 \$MapAttributeValue
|
||
0xb482b68c6dc0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\History
|
||
0xb482b68c70e0 \LOCAL\mojo.8068.4672.4095964350954610167
|
||
0xb482b68c7270 \Windows\Fonts\segoeui.ttf
|
||
0xb482b68c7400 \LOCAL\mojo.8068.4672.4095964350954610167
|
||
0xb482b68c7590 \Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
|
||
0xb482b68c78b0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70
|
||
0xb482b68c7a40 \Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.325.7221.0_x64__8wekyb3d8bbwe
|
||
0xb482b68c7bd0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu\Fingerprinting
|
||
0xb482b68c7d60 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\data_0
|
||
0xb482b68c7ef0 \$Directory
|
||
0xb482b68c8080 \$Directory
|
||
0xb482b68c8210 \Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4CertInUse.evtx
|
||
0xb482b68c83a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe
|
||
0xb482b68c8530 \$Directory
|
||
0xb482b68c8850 \Users\job\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.jfm
|
||
0xb482b68c89e0 \Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\Dashboard\Microsoft.Windows.Widgets.dll
|
||
0xb482b68c8d00 \Windows\System32\en-US\windows.storage.dll.mui
|
||
0xb482b68c8e90 \Sessions\1\AppContainerNamedObjects\S-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157
|
||
0xb482b68c91b0 \Windows\System32\d3d10warp.dll
|
||
0xb482b68c9340 \Windows\System32\mskeyprotect.dll
|
||
0xb482b68c9660 \Windows\Fonts\SegUIVar.ttf
|
||
0xb482b68c97f0 \$Directory
|
||
0xb482b68c9b10 \Windows\System32\virtdisk.dll
|
||
0xb482b68c9ca0 \LOCAL\mojo.7880.8048.2576669683719983878
|
||
0xb482b68c9e30 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
|
||
0xb482b68ca470 \Windows\Registration\R000000000006.clb
|
||
0xb482b68caab0 \Windows\ShellExperiences\TileControl.dll
|
||
0xb482b68cac40 \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\9cc3554b232e42aa87d1817f20f96874\System.Xml.ni.dll
|
||
0xb482b68cb410 \$Directory
|
||
0xb482b68cb5a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe
|
||
0xb482b68cb730 \Windows\System32\WindowsPowerShell\v1.0\en-US\PSEvents.dll.mui
|
||
0xb482b68cb8c0 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy
|
||
0xb482b68cba50 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462
|
||
0xb482b68cbbe0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_100_percent.pak
|
||
0xb482b68cbd70 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vcruntime140_1.dll
|
||
0xb482b68cc090 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\icudtl.dat
|
||
0xb482b68cc220 \Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
|
||
0xb482b68cc3b0 \$MapAttributeValue
|
||
0xb482b68cc540 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462
|
||
0xb482b68cc6d0 \Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4KeyMgmt.evtx
|
||
0xb482b68cc860 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Favicons
|
||
0xb482b68cc9f0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Extension State\LOG
|
||
0xb482b68ccb80 \Windows\System32\upnp.dll
|
||
0xb482b68ccd10 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat
|
||
0xb482b68cd350 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\data_1
|
||
0xb482b68cd4e0 \Windows\System32\backgroundTaskHost.exe
|
||
0xb482b68cd800 \Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat.LOG1
|
||
0xb482b68cd990 \$Directory
|
||
0xb482b68cdb20 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Advertising
|
||
0xb482b68cdcb0 \LOCAL\mojo.8068.4672.15993057490568557832
|
||
0xb482b68cde40 \Windows\System32\bthprops.cpl
|
||
0xb482b68ce160 \$Directory
|
||
0xb482b68ce2f0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu\Other
|
||
0xb482b68ce480 \Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat.LOG2
|
||
0xb482b68ce610 \Windows\System32\en-US\windows.storage.dll.mui
|
||
0xb482b68ce7a0 \Windows\Microsoft.NET\Framework64\v4.0.30319\PerfCounter.dll
|
||
0xb482b68ceac0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu\Social
|
||
0xb482b68cede0 \$Directory
|
||
0xb482b68cf100 \Windows\System32\drivers\en-US\http.sys.mui
|
||
0xb482b68cf290 \Windows\System32
|
||
0xb482b68cf420 \LOCAL\crashpad_8068_ANSCZZIXNRYFMDCA
|
||
0xb482b68cf5b0 \Sessions\1\AppContainerNamedObjects\S-1-15-2-1726375552-1729233799-74693324-3851689839-2151781990-3623637752-3611872497
|
||
0xb482b68cf8d0 \$Directory
|
||
0xb482b68cfd80 \Windows\ShellComponents\WindowsInternal.ShellUI.dll
|
||
0xb482b68d00a0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\data_2
|
||
0xb482b68d0230 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\lockfile
|
||
0xb482b68d03c0 \Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat
|
||
0xb482b68d0a00 \LOCAL\mojo.8068.4672.15993057490568557832
|
||
0xb482b68d0b90 \Program Files\WindowsApps\Microsoft.HEVCVideoExtension_2.4.39.0_x64__8wekyb3d8bbwe\x64\HEVCDECODER_STORE.dll
|
||
0xb482b68d0d20 \Windows\System32\drivers\etc
|
||
0xb482b68d0eb0 \$Directory
|
||
0xb482b68d11d0 \$Directory
|
||
0xb482b68d1360 \CMApi
|
||
0xb482b68d14f0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\data_3
|
||
0xb482b68d1680 \Windows\System32\popkeycli.dll
|
||
0xb482b68d1810 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_200_percent.pak
|
||
0xb482b68d19a0 \$Directory
|
||
0xb482b68d1b30 \Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx
|
||
0xb482b68d1e50 \$Directory
|
||
0xb482b68d2170 \$Directory
|
||
0xb482b68d2300 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat
|
||
0xb482b68d2620 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat
|
||
0xb482b68d27b0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\index
|
||
0xb482b68d2940 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database\LOG
|
||
0xb482b68d2ad0 \$Directory
|
||
0xb482b68d2c60 \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\9cc3554b232e42aa87d1817f20f96874\System.Xml.ni.dll
|
||
0xb482b68d2df0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db
|
||
0xb482b68d3110 \Users\job\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
|
||
0xb482b68d32a0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Favicons
|
||
0xb482b68d3430 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_1
|
||
0xb482b68d35c0 \Windows\apppatch\DirectXApps.sdb
|
||
0xb482b68d3a70 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\icudtl.dat
|
||
0xb482b68d3c00 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\index
|
||
0xb482b68d3d90 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnGraphiteCache\data_1
|
||
0xb482b68d40b0 \Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy
|
||
0xb482b68d43d0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat
|
||
0xb482b68d4560 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\WidevineCdm\manifest.json
|
||
0xb482b68d46f0 \Users\job\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
|
||
0xb482b68d4880 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\en-US.pak
|
||
0xb482b68d4a10 \Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx
|
||
0xb482b68d4d30 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Subresource Filter\Indexed Rules\37\10.34.0.81\Ruleset Data
|
||
0xb482b68d4ec0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\resources.pak
|
||
0xb482b68d5370 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnGraphiteCache\data_2
|
||
0xb482b68d5690 \Windows\System32\wbem\en-US\WinMgmtR.dll.mui
|
||
0xb482b68d5820 \LOCAL\mojo.8068.4672.13948081021863315006
|
||
0xb482b68d5b40 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Analytics
|
||
0xb482b68d5cd0 \Dev\Query
|
||
0xb482b68d5e60 \Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Steps-Recorder.evtx
|
||
0xb482b68d6180 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\TokenBroker\Cache\8ae9f0c30ea1668425d0f7d6255d597ead710776.tbres
|
||
0xb482b68d6310 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vk_swiftshader.dll
|
||
0xb482b68d6630 \LOCAL\mojo.8068.4672.13948081021863315006
|
||
0xb482b68d67c0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnGraphiteCache\data_0
|
||
0xb482b68d6950 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_2
|
||
0xb482b68d72b0 \Windows\System32\msauserext.dll
|
||
0xb482b68d7760 \Dev\Query
|
||
0xb482b68d78f0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe
|
||
0xb482b68d7a80 \Windows\System32\atlthunk.dll
|
||
0xb482b68d7c10 \Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe
|
||
0xb482b68d80c0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Cryptomining
|
||
0xb482b68d8250 \Users\job\AppData\Local\Microsoft\Credentials
|
||
0xb482b68d83e0 \Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui
|
||
0xb482b68d8700 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_3
|
||
0xb482b68d8890 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\Database\000010.ldb
|
||
0xb482b68d8a20 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe
|
||
0xb482b68d8d40 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnGraphiteCache\index
|
||
0xb482b68d8ed0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Social
|
||
0xb482b68d91f0 \Windows\ImmersiveControlPanel\SystemSettingsViewModel.Desktop.dll
|
||
0xb482b68d9380 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_2
|
||
0xb482b68d9510 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db-wal
|
||
0xb482b68d96a0 \CMApi
|
||
0xb482b68d99c0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\libEGL.dll
|
||
0xb482b68d9b50 \$MapAttributeValue
|
||
0xb482b68d9ce0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Extension State\LOCK
|
||
0xb482b68da190 \Windows\System32\imapi2.dll
|
||
0xb482b68da320 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70
|
||
0xb482b68da640 \Windows\System32\ngcpopkeysrv.dll
|
||
0xb482b68da7d0 \Windows\SysWOW64\propsys.dll
|
||
0xb482b68dac80 \Users\job\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat
|
||
0xb482b68dae10 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat.LOG2
|
||
0xb482b68db130 \Windows\System32\RuntimeBroker.exe
|
||
0xb482b68db2c0 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b68db450 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\History-journal
|
||
0xb482b68db5e0 \Users\job\AppData\Roaming\Microsoft\Credentials
|
||
0xb482b68db770 \Users\job\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat
|
||
0xb482b68dba90 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnGraphiteCache\data_3
|
||
0xb482b68dbc20 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Other
|
||
0xb482b68dbdb0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Content
|
||
0xb482b68dc0d0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Staging
|
||
0xb482b68dc260 \Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_b6a09a6f5242f736\GdiPlus.dll
|
||
0xb482b68dc3f0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu\Entities
|
||
0xb482b68dc580 \$ConvertToNonresident
|
||
0xb482b68dc710 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
|
||
0xb482b68dc8a0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Login Data
|
||
0xb482b68dca30 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\index
|
||
0xb482b68dcbc0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\Database\000005.ldb
|
||
0xb482b68dcd50 \$Directory
|
||
0xb482b68dcee0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Fingerprinting
|
||
0xb482b68dd200 \Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui
|
||
0xb482b68dd390 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat.LOG1
|
||
0xb482b68dd520 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata\LOG
|
||
0xb482b68dd6b0 \Windows\System32\en-US\Windows.Globalization.dll.mui
|
||
0xb482b68dd840 \MsFteWds
|
||
0xb482b68dd9d0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\index
|
||
0xb482b68ddb60 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b68ddcf0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\Database\000017.ldb
|
||
0xb482b68dde80 \Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.dll
|
||
0xb482b68de330 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Entities
|
||
0xb482b68de650 \Windows\SysWOW64\cryptsp.dll
|
||
0xb482b68de7e0 \$MapAttributeValue
|
||
0xb482b68de970 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db-shm
|
||
0xb482b68deb00 \Windows\System32\vcruntime140_1_clr0400.dll
|
||
0xb482b68dee20 \Windows\System32\en-US\mswsock.dll.mui
|
||
0xb482b68df140 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_87ef0e2f7a2c9771
|
||
0xb482b68df460 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database\MANIFEST-000019
|
||
0xb482b68df5f0 \CMNotify
|
||
0xb482b68df780 \$Directory
|
||
0xb482b68df910 \Windows\System32\mfsensorgroup.dll
|
||
0xb482b68dfaa0 \Windows\System32\en-US\shell32.dll.mui
|
||
0xb482b68e00e0 \Windows\System32\ucrtbase_clr0400.dll
|
||
0xb482b68e0270 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Cortana.Settings.winmd
|
||
0xb482b68e0590 \$Directory
|
||
0xb482b68e0720 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\History
|
||
0xb482b68e08b0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat
|
||
0xb482b68e0a40 \Users\job\AppData\Local\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\LocalCache
|
||
0xb482b68e0bd0 \Dev\Query
|
||
0xb482b68e0d60 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\TokenBroker\Cache\3f8b4bc191e895a9cf16b386e26b37eabaed73f6.tbres
|
||
0xb482b68e0ef0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB\000020.log
|
||
0xb482b68e1080 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\SharedStorage
|
||
0xb482b68e1210 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ServerCertificate
|
||
0xb482b68e13a0 \$Directory
|
||
0xb482b68e1530 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu\CompatExceptions
|
||
0xb482b68e16c0 \Windows\System32\PCPKsp.dll
|
||
0xb482b68e1850 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000026
|
||
0xb482b68e19e0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70
|
||
0xb482b68e1e90 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB\LOG
|
||
0xb482b68e21b0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata\000029.ldb
|
||
0xb482b68e24d0 \Windows\SysWOW64\virtdisk.dll
|
||
0xb482b68e2660 \Windows\Microsoft.NET\Framework64\v4.0.30319\CORPerfMonExt.dll
|
||
0xb482b68e27f0 \Windows\System32\WinMetadata\Windows.Foundation.winmd
|
||
0xb482b68e2980 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_3
|
||
0xb482b68e2b10 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu\Advertising
|
||
0xb482b68e2ca0 \$Directory
|
||
0xb482b68e2e30 \Dev\Query
|
||
0xb482b68e3790 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\000008.ldb
|
||
0xb482b68e3920 \$Directory
|
||
0xb482b68e3ab0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB\LOCK
|
||
0xb482b68e3c40 \Windows\System32\vcruntime140_clr0400.dll
|
||
0xb482b68e3dd0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\Database\MANIFEST-000019
|
||
0xb482b68e4410 \Windows\System32\mf.dll
|
||
0xb482b68e45a0 \Windows\System32\backgroundTaskHost.exe
|
||
0xb482b68e4730 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\icudtl.dat
|
||
0xb482b68e4a50 \Windows\Registration\R000000000006.clb
|
||
0xb482b68e4be0 \$Directory
|
||
0xb482b68e4d70 \Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_cf9c45068ea8c077\comctl32.dll
|
||
0xb482b68e5220 \Windows\System32\en-US\Windows.Web.dll.mui
|
||
0xb482b68e53b0 \$Directory
|
||
0xb482b68e5540 \Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG1
|
||
0xb482b68e56d0 \Windows\System32\en-US\crypt32.dll.mui
|
||
0xb482b68e59f0 \$Directory
|
||
0xb482b68e5d10 \Sessions\1\AppContainerNamedObjects\S-1-15-2-364329911-4150717405-3056445719-2033109410-984633417-3778061428-3365209672
|
||
0xb482b68e5ea0 \$Directory
|
||
0xb482b68e61c0 \$Directory
|
||
0xb482b68e6350 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu\Content
|
||
0xb482b68e6670 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\index
|
||
0xb482b68e6990 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat
|
||
0xb482b68e6b20 \Windows\System32\en-US\propsys.dll.mui
|
||
0xb482b68e7160 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\SharedStorage
|
||
0xb482b68e7480 \Windows\System32\en-US\winnlsres.dll.mui
|
||
0xb482b68e77a0 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\ActivationStore.dat
|
||
0xb482b68e7ac0 \Windows\Fonts\segoeui.ttf
|
||
0xb482b68e8100 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata\LOCK
|
||
0xb482b68e8290 \$Directory
|
||
0xb482b68e8420 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu\Analytics
|
||
0xb482b68e85b0 \Windows\System32\ActionCenter.dll
|
||
0xb482b68e88d0 \$Directory
|
||
0xb482b68e8a60 \Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat
|
||
0xb482b68e8bf0 \$Directory
|
||
0xb482b68e90a0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\index
|
||
0xb482b68e93c0 \$Directory
|
||
0xb482b68e9550 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462
|
||
0xb482b68e96e0 \$MapAttributeValue
|
||
0xb482b68e9870 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Extension State\000020.log
|
||
0xb482b68e9b90 \Dev\Query
|
||
0xb482b68e9d20 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database\000020.log
|
||
0xb482b68e9eb0 \Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG2
|
||
0xb482b68ea360 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\icudtl.dat
|
||
0xb482b68ea4f0 \$MapAttributeValue
|
||
0xb482b68ea810 \$Directory
|
||
0xb482b68ea9a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\v8_context_snapshot.bin
|
||
0xb482b68eacc0 \Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat.LOG1
|
||
0xb482b68eb300 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB\000005.ldb
|
||
0xb482b68eb490 \Windows\System32\prnfldr.dll
|
||
0xb482b68eb620 \Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
|
||
0xb482b68eb7b0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\SharedStorage-wal
|
||
0xb482b68eb940 \Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat
|
||
0xb482b68ebad0 \Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat.LOG2
|
||
0xb482b68ebc60 \$Directory
|
||
0xb482b68ebdf0 \Windows\System32\en-US\combase.dll.mui
|
||
0xb482b6c541a0 \Users\job\AppData\Roaming\Microsoft\Windows\Start Menu
|
||
0xb482b6c54650 \$Directory
|
||
0xb482b6c547e0 \Windows\System32\WsmSvc.dll
|
||
0xb482b6c555f0 \$Directory
|
||
0xb482b6c55aa0 \ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0_COM15.dat.LOG2
|
||
0xb482b6c560e0 \$MapAttributeValue
|
||
0xb482b6c56590 \ProgramData\Microsoft\Network\Downloader\qmgr.db
|
||
0xb482b6c56720 \Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx
|
||
0xb482b6c56a40 \$Directory
|
||
0xb482b6c56bd0 \Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat.LOG1
|
||
0xb482b6c56d60 \$MapAttributeValue
|
||
0xb482b6c56ef0 \$Directory
|
||
0xb482b6c57210 \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Microsoft.ReactNative.dll
|
||
0xb482b6c573a0 \$Directory
|
||
0xb482b6c57530 \Users\job\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
|
||
0xb482b6c57850 \Windows\System32\tzautoupdate.dll
|
||
0xb482b6c579e0 \Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat.LOG2
|
||
0xb482b6c58340 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462
|
||
0xb482b6c584d0 \Windows\Fonts\timesi.ttf
|
||
0xb482b6c58660 \Users\job\AppData\Roaming\Microsoft\Windows\Start Menu
|
||
0xb482b6c58980 \$Directory
|
||
0xb482b6c58b10 \Windows\Fonts\timesbd.ttf
|
||
0xb482b6c58ca0 \CMApi
|
||
0xb482b6c59150 \ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0_COM15.dat
|
||
0xb482b6c59600 \Windows\System32\WsmAuto.dll
|
||
0xb482b6c59920 \Windows\SysWOW64\FWPUCLNT.DLL
|
||
0xb482b6c59ab0 \Windows\Fonts\times.ttf
|
||
0xb482b6c59c40 \Program Files\WindowsApps\Microsoft.UI.Xaml.2.8_8.2501.31001.0_x64__8wekyb3d8bbwe\resources.pri
|
||
0xb482b6c5a0f0 \ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0_COM15.dat.LOG1
|
||
0xb482b6c5a280 \Windows\Fonts\timesbi.ttf
|
||
0xb482b6c5a5a0 \LOCAL\mojo.8068.452.7571767747785424157
|
||
0xb482b6c5a730 \Windows\Fonts\arialbd.ttf
|
||
0xb482b6c5a8c0 \LOCAL\mojo.8068.452.7571767747785424157
|
||
0xb482b6c5aa50 \Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_6ef363983dc6ce30\GdiPlus.dll
|
||
0xb482b6c5b090 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\f9a2cf96bff9d474_0
|
||
0xb482b6c5b220 \$Directory
|
||
0xb482b6c5b3b0 \$Directory
|
||
0xb482b6c5b540 \ProgramData\Microsoft\Windows\Start Menu
|
||
0xb482b6c5b9f0 \Windows\System32\wbem\ntevt.dll
|
||
0xb482b6c5bb80 \$Directory
|
||
0xb482b6c5bd10 \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WinRTComponents.dll
|
||
0xb482b6c5c1c0 \Windows\System32\lfsvc.dll
|
||
0xb482b6c5c350 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Session Storage\LOG
|
||
0xb482b6c5c800 \ProgramData\Microsoft\Windows Defender\Scans\mpenginedb.db-wal
|
||
0xb482b6c5c990 \$Directory
|
||
0xb482b6c5cb20 \Windows\System32\en-US\propsys.dll.mui
|
||
0xb482b6c5d160 \Windows\System32\winevt\Logs\Parameters.evtx
|
||
0xb482b6c5d2f0 \Windows\Fonts\arial.ttf
|
||
0xb482b6c5d7a0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\ffmpeg.dll
|
||
0xb482b6c5e100 \Windows\Fonts\arialbi.ttf
|
||
0xb482b6c5e290 \Users\job\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
|
||
0xb482b6c5e5b0 \ProgramData\Microsoft\Windows\Start Menu
|
||
0xb482b6c5ea60 \Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
|
||
0xb482b6c5f0a0 \$Directory
|
||
0xb482b6c5f550 \Windows\Fonts\ariali.ttf
|
||
0xb482b6c5fb90 \Windows\Fonts\ariblk.ttf
|
||
0xb482b6c5fd20 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\5dc289ad27da32af_0
|
||
0xb482b6c5feb0 \Windows\System32\pcwum.dll
|
||
0xb482b6c60360 \Windows\System32\msscntrs.dll
|
||
0xb482b6c604f0 \Windows\System32\en-US\windows.ui.xaml.dll.mui
|
||
0xb482b6c60810 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb\000008.ldb
|
||
0xb482b6c609a0 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b6c60b30 \$Directory
|
||
0xb482b6c60cc0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\f26bd39c964eabf6_0
|
||
0xb482b6c61300 \$Directory
|
||
0xb482b6c61620 \Users\job\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned
|
||
0xb482b6c61940 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
|
||
0xb482b6c61ad0 \$MapAttributeValue
|
||
0xb482b6c61c60 \$Directory
|
||
0xb482b6c61df0 \LOCAL\mojo.8068.452.11832513127213091949
|
||
0xb482b6c62110 \Windows\System32\winevt\Logs\Microsoft-Windows-WinRM%4Operational.evtx
|
||
0xb482b6c622a0 \$Directory
|
||
0xb482b6c625c0 \$Directory
|
||
0xb482b6c62750 \$Directory
|
||
0xb482b6c628e0 \ProgramData\Microsoft\Windows\Start Menu\Programs
|
||
0xb482b6c62a70 \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Payments.dll
|
||
0xb482b6c62c00 \$Directory
|
||
0xb482b6c62d90 \Windows\System32\usbperf.dll
|
||
0xb482b6c630b0 \Windows\System32\en-US\windows.storage.dll.mui
|
||
0xb482b6c63240 \$Directory
|
||
0xb482b6c63560 \$Directory
|
||
0xb482b6c636f0 \Windows\System32\en-US\propsys.dll.mui
|
||
0xb482b6c63880 \$Directory
|
||
0xb482b6c63ba0 \$Directory
|
||
0xb482b6c63ec0 \LOCAL\mojo.8068.452.11832513127213091949
|
||
0xb482b6c641e0 \Dev\Query
|
||
0xb482b6c64370 \Dev\Query
|
||
0xb482b6c64820 \Users\job\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned
|
||
0xb482b6c649b0 \$Directory
|
||
0xb482b6c64b40 \Windows\System32\en-US\crypt32.dll.mui
|
||
0xb482b6c64cd0 \Dev\Query
|
||
0xb482b6c64e60 \$Directory
|
||
0xb482b6c65310 \$Directory
|
||
0xb482b6c654a0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Session Storage\000005.ldb
|
||
0xb482b6c657c0 \Windows\System32\en-US\Windows.Web.dll.mui
|
||
0xb482b6c65950 \Windows\System32\icuuc.dll
|
||
0xb482b6c66120 \$Directory
|
||
0xb482b6c665d0 \$Directory
|
||
0xb482b6c66760 \ProgramData\Microsoft\Windows\Start Menu\Programs
|
||
0xb482b6c66a80 \Windows\System32\perfdisk.dll
|
||
0xb482b6c66c10 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index
|
||
0xb482b6c66da0 \Windows\System32\atl.dll
|
||
0xb482b6c670c0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_2
|
||
0xb482b6c67250 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\468720f7dc3cf397_0
|
||
0xb482b6c673e0 \$Directory
|
||
0xb482b6c67570 \Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\vcruntime140.dll
|
||
0xb482b6c67700 \$Directory
|
||
0xb482b6c67890 \$Directory
|
||
0xb482b6c67a20 \Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\msvcp140.dll
|
||
0xb482b6c681f0 \$Directory
|
||
0xb482b6c68380 \$Directory
|
||
0xb482b6c68510 \$Directory
|
||
0xb482b6c68b50 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_0
|
||
0xb482b6c68ce0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_3
|
||
0xb482b6c69190 \Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_6ef363983dc6ce30
|
||
0xb482b6c69320 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_2
|
||
0xb482b6c694b0 \ProgramData\Microsoft\Windows Defender\Scans\mpenginedb.db
|
||
0xb482b6c69640 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_3
|
||
0xb482b6c697d0 \$Directory
|
||
0xb482b6c69af0 \$Directory
|
||
0xb482b6c69c80 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_0
|
||
0xb482b6c69e10 \Windows\System32\icuin.dll
|
||
0xb482b6c6a5e0 \Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\vcruntime140_1.dll
|
||
0xb482b6c6a770 \Windows\System32\en-US\windows.storage.dll.mui
|
||
0xb482b6c6a900 \Windows\System32\en-US\propsys.dll.mui
|
||
0xb482b6c6adb0 \$Directory
|
||
0xb482b6c6b260 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\index
|
||
0xb482b6c6b3f0 \Windows\System32
|
||
0xb482b6c6b580 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\index
|
||
0xb482b6c6b710 \$Directory
|
||
0xb482b6c6b8a0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_1
|
||
0xb482b6c6ba30 \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ux-phui.dll
|
||
0xb482b6c6bbc0 \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ReactNativeXaml.dll
|
||
0xb482b6c6bee0 \$Directory
|
||
0xb482b6c6c520 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_1
|
||
0xb482b6c6c6b0 \Windows\System32\LocationFramework.dll
|
||
0xb482b6c6c840 \Windows\System32\LocationWinPalMisc.dll
|
||
0xb482b6c6c9d0 \Dev\Query
|
||
0xb482b6c6ccf0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Session Storage\LOCK
|
||
0xb482b6c6ce80 \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Clipboard.dll
|
||
0xb482b6c6d1a0 \$Directory
|
||
0xb482b6c6d650 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\758c16d90a2fe752_0
|
||
0xb482b6c6d7e0 \Windows\System32\BitsProxy.dll
|
||
0xb482b6c6d970 \LOCAL\mojo.5636.6256.12814768146971914502
|
||
0xb482b6c6de20 \CMApi
|
||
0xb482b6c6e140 \LOCAL\mojo.5636.6256.12814768146971914502
|
||
0xb482b6c6e460 \$Directory
|
||
0xb482b6c6e5f0 \$Directory
|
||
0xb482b6c6eaa0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\No_Vary_Search\journal.baj
|
||
0xb482b6c6edc0 \Windows\System32\Geolocation.dll
|
||
0xb482b6c6f0e0 \$Directory
|
||
0xb482b6c6f270 \Windows\System32\en-US\MidiSrv.exe.mui
|
||
0xb482b6c6f720 \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WinRTTurboModule.dll
|
||
0xb482b6c6fa40 \Windows\System32\IconCodecService.dll
|
||
0xb482b6c6fbd0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\4166733a19a30635_0
|
||
0xb482b6c6fd60 \$Directory
|
||
0xb482b6c70080 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Session Storage\000008.ldb
|
||
0xb482b6c70210 \Windows\SysWOW64\en-US\fwpuclnt.dll.mui
|
||
0xb482b6c70850 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\ecedae92dc2a36db_0
|
||
0xb482b6c709e0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\0ce334799d7d3fce_0
|
||
0xb482b6c70b70 \Windows\System32\WinSync.dll
|
||
0xb482b6c70d00 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat
|
||
0xb482b6c70e90 \Windows\System32\en-US\windows.storage.dll.mui
|
||
0xb482b6c71340 \$Directory
|
||
0xb482b6c714d0 \$MapAttributeValue
|
||
0xb482b6c71660 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\History-journal
|
||
0xb482b6c717f0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\758c16d90a2fe752_1
|
||
0xb482b6c71980 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\No_Vary_Search\snapshot.baf
|
||
0xb482b6c71b10 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b6c71ca0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Session Storage\000011.ldb
|
||
0xb482b6c71e30 \$Directory
|
||
0xb482b6c72150 \BackingAppCommandPipe
|
||
0xb482b6c72470 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat
|
||
0xb482b6c72920 \$Directory
|
||
0xb482b6c72ab0 \$Directory
|
||
0xb482b6c72c40 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\ecedae92dc2a36db_1
|
||
0xb482b6c72dd0 \$Directory
|
||
0xb482b6c730f0 \Windows\System32\LocationFrameworkPS.dll
|
||
0xb482b6c738c0 \Windows\System32\WinMetadata\Windows.Security.winmd
|
||
0xb482b6c73a50 \Windows\Fonts
|
||
0xb482b6c73be0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Session Storage\000011.ldb
|
||
0xb482b6c73d70 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Session Storage\000012.log
|
||
0xb482b6c74220 \$Directory
|
||
0xb482b6c746d0 \Windows\System32\Midi2.KSAggregateTransport.dll
|
||
0xb482b6c74d10 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\9ed76774ced27e71_1
|
||
0xb482b6c74ea0 \Windows\System32\en-US\WsmRes.dll.mui
|
||
0xb482b6c75350 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG2
|
||
0xb482b6c75670 \$Directory
|
||
0xb482b6c75800 \Windows\System32
|
||
0xb482b6c75b20 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\9ed76774ced27e71_0
|
||
0xb482b6c762f0 \$Directory
|
||
0xb482b6c76480 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat
|
||
0xb482b6c76610 \Windows\Microsoft.NET\Framework64\v4.0.30319\WorkflowServiceHostPerformanceCounters.dll
|
||
0xb482b6c76640 暘뛇뒂暘뛇뒂
|
||
0xb482b6c767a0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Reporting and NEL
|
||
0xb482b6c76930 \$Directory
|
||
0xb482b6c76ac0 \Windows\System32\winevt\Logs\State.evtx
|
||
0xb482b6c76c50 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG1
|
||
0xb482b6c775b0 \Windows\System32\esentprf.dll
|
||
0xb482b6c77740 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\ecb2040d2ece38bf_0
|
||
0xb482b6c77a60 \Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\resources.pri
|
||
0xb482b6c77bf0 \Windows\System32\rasctrs.dll
|
||
0xb482b6c77d80 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\d5a24fccd1204973_0
|
||
0xb482b6c780a0 \$Directory
|
||
0xb482b6c78230 \Windows\Registration\R000000000006.clb
|
||
0xb482b6c783c0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Reporting and NEL
|
||
0xb482b6c78550 \Windows\System32\CapabilityAccessHandlers.dll
|
||
0xb482b6c78870 \Windows\System32\drivers\en-US\pacer.sys.mui
|
||
0xb482b6c78a00 \Windows\System32\DDORes.dll
|
||
0xb482b6c78b90 \$MapAttributeValue
|
||
0xb482b6c791d0 \Windows\System32\wbem\WmiApRpl.dll
|
||
0xb482b6c794f0 \Windows\System32\msdtcuiu.dll
|
||
0xb482b6c79680 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\ActivationStore.dat
|
||
0xb482b6c79810 \$Directory
|
||
0xb482b6c799a0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Session Storage\MANIFEST-000010
|
||
0xb482b6c79cc0 \Windows\Fonts\calibrii.ttf
|
||
0xb482b6c79e50 \CMNotify
|
||
0xb482b6c7a170 \ProgramData\Microsoft\Windows Defender\Scans\mpenginedb.db
|
||
0xb482b6c7a300 \Users\job\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db
|
||
0xb482b6c7a490 \Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.dll
|
||
0xb482b6c7a7b0 \AsyncConnectHlp
|
||
0xb482b6c7a940 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\ActivationStore.dat
|
||
0xb482b6c7aad0 \CMApi
|
||
0xb482b6c7adf0 \$Directory
|
||
0xb482b6c7b2a0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\ecb2040d2ece38bf_1
|
||
0xb482b6c7b430 \Windows\System32\WinMetadata\Windows.Foundation.winmd
|
||
0xb482b6c7b5c0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db-shm
|
||
0xb482b6c7b8e0 \Windows\Fonts\calibril.ttf
|
||
0xb482b6c7ba70 \$Directory
|
||
0xb482b6c7c0b0 \Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.winmd
|
||
0xb482b6c7c240 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\1bba5efe2b2b0ced_1
|
||
0xb482b6c7c3d0 \Windows\Registration\R000000000006.clb
|
||
0xb482b6c7c6f0 \Windows\Microsoft.NET\Framework64\v4.0.30319\en-US\WorkflowServiceHostPerformanceCounters.dll.mui
|
||
0xb482b6c7c880 \$MapAttributeValue
|
||
0xb482b6c7ca10 \Windows\WinSxS\Manifests\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.26100.1591_en-us_9bc82bd5245023f6.manifest
|
||
0xb482b6c7cba0 \Users\job\AppData\Roaming\Microsoft\Protect\S-1-5-21-3914889805-4071901059-918772286-1001\Preferred
|
||
0xb482b6c7d1e0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\27af5bf692004ca0_0
|
||
0xb482b6c7d370 \Windows\Fonts\bahnschrift.ttf
|
||
0xb482b6c7d500 \Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.Internal.winmd
|
||
0xb482b6c7d9b0 \Windows\System32\DefaultDeviceManager.dll
|
||
0xb482b6c7db40 \Windows\System32\ksuser.dll
|
||
0xb482b6c7e180 \Windows\System32
|
||
0xb482b6c7e310 \CMNotify
|
||
0xb482b6c7e4a0 \CMNotify
|
||
0xb482b6c7e7c0 \Windows\System32\WinMetadata\Windows.Foundation.winmd
|
||
0xb482b6c7ec70 \CMApi
|
||
0xb482b6c7ee00 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\283df284fc76dcd1_0
|
||
0xb482b6c7f120 \Users\job\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000000d.db
|
||
0xb482b6c7f2b0 \Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\Microsoft.Windows.Widgets.winmd
|
||
0xb482b6c7f440 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db
|
||
0xb482b6c7f8f0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\27af5bf692004ca0_1
|
||
0xb482b6c7fa80 \CMApi
|
||
0xb482b6c7fc10 \Windows\System32\en-US\combase.dll.mui
|
||
0xb482b6c800c0 \$MapAttributeValue
|
||
0xb482b6c803e0 \LOCAL\mojo.8068.452.13736834955703550303
|
||
0xb482b6c80570 \ProgramData\Microsoft\Windows\LfSvc\Geofence\GeofenceApplicationID.dat
|
||
0xb482b6c80a20 \Sessions\1\AppContainerNamedObjects\S-1-15-2-1433382107-525783102-3264187439-2233956802-150629141-2653644966-3104780440
|
||
0xb482b6c80d40 \LOCAL\mojo.8068.452.13736834955703550303
|
||
0xb482b6c80ed0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Session Storage\CURRENTdbtmp
|
||
0xb482b6c81380 \Windows\System32\Midi2.DiagnosticsTransport.dll
|
||
0xb482b6c81510 \SwDevice
|
||
0xb482b6c81b50 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\283df284fc76dcd1_1
|
||
0xb482b6c81ce0 \$Directory
|
||
0xb482b6c82190 \Windows\System32\perfnet.dll
|
||
0xb482b6c82320 \Windows\System32\perfts.dll
|
||
0xb482b6c824b0 \$Directory
|
||
0xb482b6c82640 \Windows\System32\en-US\combase.dll.mui
|
||
0xb482b6c82960 \Windows\System32\en-US\combase.dll.mui
|
||
0xb482b6c82e10 \Windows\System32\en-US\Geolocation.dll.mui
|
||
0xb482b6c83130 \Windows\System32\WinMetadata\Windows.Foundation.winmd
|
||
0xb482b6c832c0 \CMApi
|
||
0xb482b6c83450 \Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.winmd
|
||
0xb482b6c835e0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\0e90db3095f3e6ec_0
|
||
0xb482b6c83770 \Windows\System32\ctfmon.exe
|
||
0xb482b6c83900 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb\LOCK
|
||
0xb482b6c83a90 \Windows\System32\rasman.dll
|
||
0xb482b6c83c20 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b6c84260 \$Directory
|
||
0xb482b6c843f0 \$Directory
|
||
0xb482b6c84580 \SwDevice
|
||
0xb482b6c84bc0 \$Directory
|
||
0xb482b6c85200 \$Directory
|
||
0xb482b6c85390 \Windows\System32\WinMetadata\Windows.Storage.winmd
|
||
0xb482b6c85520 \$Directory
|
||
0xb482b6c856b0 \LOCAL\mojo.8068.452.7601759437113018714
|
||
0xb482b6c861a0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\WebStorage\QuotaManager-journal
|
||
0xb482b6c86330 \Windows\System32\en-US\audiodg.exe.mui
|
||
0xb482b6c864c0 \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\hermes.dll
|
||
0xb482b6c86650 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp\47e48d23-f01b-435a-9a85-836f3625905a.tmp
|
||
0xb482b6c86680 曘뛈뒂曘뛈뒂
|
||
0xb482b6c86b00 \$Directory
|
||
0xb482b6c872d0 \SwDevice
|
||
0xb482b6c87460 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\703a9a4961122e80_1
|
||
0xb482b6c875f0 \$Directory
|
||
0xb482b6c87780 \$Directory
|
||
0xb482b6c87aa0 \$Directory
|
||
0xb482b6c87c30 \Windows\System32\WinMetadata\Windows.Storage.winmd
|
||
0xb482b6c87dc0 \Windows\System32\Windows.ApplicationModel.Store.dll
|
||
0xb482b6c880e0 \$Directory
|
||
0xb482b6c88270 \ProgramData\Microsoft\Windows Defender\Scans\mpenginedb.db-shm
|
||
0xb482b6c88720 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\35bed211f716c812_1
|
||
0xb482b6c888b0 \Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\resources.pri
|
||
0xb482b6c88a40 \Windows\System32\en-US\MidiSrv.exe.mui
|
||
0xb482b6c88bd0 \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks\StartMenu\index.windows.bundle
|
||
0xb482b6c88d60 \SwDevice
|
||
0xb482b6c89210 \LOCAL\mojo.8068.452.7601759437113018714
|
||
0xb482b6c89530 \Windows\System32\utildll.dll
|
||
0xb482b6c896c0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\WebStorage\QuotaManager
|
||
0xb482b6c89850 \$Directory
|
||
0xb482b6c8a340 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\WebStorage\QuotaManager
|
||
0xb482b6c8a4d0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\WebStorage\QuotaManager-journal
|
||
0xb482b6c8a660 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb\000012.log
|
||
0xb482b6c8a980 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb\000011.ldb
|
||
0xb482b6c8aca0 \Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\TileCache_100_4_PNGEncoded_Header.bin
|
||
0xb482b6c8ae30 \$Directory
|
||
0xb482b6c8b150 \$Directory
|
||
0xb482b6c8b2e0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\35bed211f716c812_0
|
||
0xb482b6c8b470 \Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\TileCache_100_4_PNGEncoded_Data.bin
|
||
0xb482b6c8b600 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\83b038b0a7cfd3ba_0
|
||
0xb482b6c8bc40 \$Directory
|
||
0xb482b6c8c280 \$Directory
|
||
0xb482b6c8c5a0 \LOCAL\mojo.8068.452.360010973693125350
|
||
0xb482b6c8c730 \$Directory
|
||
0xb482b6c8d3b0 \Windows\System32\RTMediaFrame.dll
|
||
0xb482b6c8d540 \Windows\System32\wbem\WmiApSrv.exe
|
||
0xb482b6c8d6d0 \CMApi
|
||
0xb482b6c8d860 \$Directory
|
||
0xb482b6c8db80 \$Directory
|
||
0xb482b6c8dd10 \$Directory
|
||
0xb482b6c8e1c0 \LOCAL\mojo.8068.452.360010973693125350
|
||
0xb482b6c8e4e0 \$Directory
|
||
0xb482b6c8e670 \srvsvc
|
||
0xb482b6c8e800 \$Directory
|
||
0xb482b6c8e990 \ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0.dat
|
||
0xb482b6c8eb20 \$Directory
|
||
0xb482b6c8ecb0 \Windows\System32\en-US\ESENT.dll.mui
|
||
0xb482b6c8ee40 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat
|
||
0xb482b6c8f2f0 \$Directory
|
||
0xb482b6c8f480 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index
|
||
0xb482b6c8f7a0 \Windows\System32\provthrd.dll
|
||
0xb482b6c8f930 \$Directory
|
||
0xb482b6c8fac0 \Windows\System32\tapiperf.dll
|
||
0xb482b6c90290 \$Directory
|
||
0xb482b6c90420 \ProgramData\Microsoft\Network\Downloader\edb.log
|
||
0xb482b6c905b0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb\MANIFEST-000010
|
||
0xb482b6c90740 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\ScriptCache\index
|
||
0xb482b6c908d0 \$Directory
|
||
0xb482b6c90bf0 \$Directory
|
||
0xb482b6c910a0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\ScriptCache\4cb013792b196a35_1
|
||
0xb482b6c913c0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe.sig
|
||
0xb482b6c916e0 \ProgramData\Microsoft\Network\Downloader\edb.log
|
||
0xb482b6c91870 \$Directory
|
||
0xb482b6c91a00 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\ScriptCache\4cb013792b196a35_0
|
||
0xb482b6c91eb0 \Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG1
|
||
0xb482b6c921d0 \Windows\System32\browcli.dll
|
||
0xb482b6c92360 \$Directory
|
||
0xb482b6c924f0 \$Directory
|
||
0xb482b6c92680 \$Directory
|
||
0xb482b6c92810 \Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\SystemAppData\Helium\User.dat
|
||
0xb482b6c929a0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\1b253b58c9a87e4b_1
|
||
0xb482b6c92b30 \ProgramData\Microsoft\Network\Downloader\qmgr.db
|
||
0xb482b6c92e50 \ProgramData\Microsoft\Network\Downloader\qmgr.jfm
|
||
0xb482b6c93300 \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ExperienceExtensions.dll
|
||
0xb482b6c93490 \LOCAL\mojo.8068.452.12051251778714029886
|
||
0xb482b6c93620 \$Directory
|
||
0xb482b6c93940 \LOCAL\mojo.8068.452.12051251778714029886
|
||
0xb482b6c93ad0 \Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG2
|
||
0xb482b6c93c60 \Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\resources.pri
|
||
0xb482b6c93df0 \Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat
|
||
0xb482b7402330 \Windows\WinSxS\Manifests\x86_microsoft.windows.i..utomation.proxystub_6595b64144ccf1df_1.0.26100.5074_none_e0bda70384ff7581.manifest
|
||
0xb482b74024c0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\Logo.png
|
||
0xb482b7402650 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\LogoCanary.png
|
||
0xb482b7402b00 \Windows\SysWOW64\ucrtbase_clr0400.dll
|
||
0xb482b7402c90 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\resources.pri
|
||
0xb482b7402e20 \Windows\System32\keepaliveprovider.dll
|
||
0xb482b7403140 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\LogoCopilotDev.png
|
||
0xb482b74032d0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\SmallLogoCopilot.png
|
||
0xb482b7403780 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\SmallLogo.png
|
||
0xb482b7403910 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Win1-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat
|
||
0xb482b7403c30 \$CachedWriteThrough
|
||
0xb482b74040e0 \Windows\System32\dxgiadaptercache.exe
|
||
0xb482b7404720 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\SmallLogoCanary.png
|
||
0xb482b74048b0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\SmallLogoBeta.png
|
||
0xb482b7404bd0 \Windows\Prefetch\MPCMDRUN.EXE-EFB0FDF1.pf
|
||
0xb482b7404ef0 \Windows\WinSxS\Manifests\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.26100.1591_en-us_e5a8b31fbb4e209d.manifest
|
||
0xb482b7405080 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\LogoDev.png
|
||
0xb482b7405210 \$CachedWriteThrough
|
||
0xb482b74053a0 \$Directory
|
||
0xb482b7405850 \$CachedWriteThrough
|
||
0xb482b7405b70 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\SmallLogoDev.png
|
||
0xb482b7405d00 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Telemetry.dll
|
||
0xb482b7405e90 \Windows\System32\taskhostw.exe
|
||
0xb482b7406340 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\RNSVG.dll
|
||
0xb482b74064d0 \$Directory
|
||
0xb482b7406660 \Windows\Prefetch\CONHOST.EXE-0C6456FB.pf
|
||
0xb482b7406980 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\LogoBeta.png
|
||
0xb482b7406b10 \ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
|
||
0xb482b7406e30 \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\SettingsDatabase.db-wal
|
||
0xb482b7407150 \Windows\SysWOW64\vcruntime140_clr0400.dll
|
||
0xb482b7407470 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\SyncEngine.dll
|
||
0xb482b7407600 \Program Files (x86)\mRemoteNG\mRemoteNG.exe.config
|
||
0xb482b7407920 \$Directory
|
||
0xb482b7407ab0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\LogoCopilot.png
|
||
0xb482b7407c40 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\SmallLogoCopilotDev.png
|
||
0xb482b7407dd0 \Windows\System32\en-US\propsys.dll.mui
|
||
0xb482b74080f0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncSqlite3.dll
|
||
0xb482b7408a50 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DIPS
|
||
0xb482b7408be0 \$Directory
|
||
0xb482b7408d70 \Windows\Prefetch\MREMOTENG.EXE-610BBBDA.pf
|
||
0xb482b7409220 \$Directory
|
||
0xb482b74093b0 \Windows\System32\SecurityHealth\10.0.29510.1001-0\Microsoft.SecHealthUI_8wekyb3d8bbwe.appx
|
||
0xb482b7409540 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network Action Predictor
|
||
0xb482b74096d0 \Windows\System32\WiFiCloudStore.dll
|
||
0xb482b7409860 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\favorites_diagnostic.log
|
||
0xb482b74099f0 \Windows\Prefetch\DLLHOST.EXE-7D5CE0CA.pf
|
||
0xb482b7409d10 \Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\b7f46ecd62a3aa399275b2302e207290\mscorlib.ni.dll.aux
|
||
0xb482b7409ea0 \Windows\Registration\R000000000006.clb
|
||
0xb482b740a4e0 \Windows\System32\Windows.Services.TargetedContent.dll
|
||
0xb482b740ab20 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DIPS-wal
|
||
0xb482b740acb0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BookmarkMergedSurfaceOrdering02ea19a.tmp
|
||
0xb482b740b480 \Windows\Prefetch\TASKHOSTW.EXE-2E5D4B75.pf
|
||
0xb482b740b7a0 \$CachedWriteThrough
|
||
0xb482b740b930 \Windows\SysWOW64\propsys.dll
|
||
0xb482b740bde0 \Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\c07dbfc3c6b4ad434eee98ecd8287f5b\System.Configuration.ni.dll
|
||
0xb482b740c290 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network Action Predictor
|
||
0xb482b740c420 \Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config
|
||
0xb482b740c740 \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\SettingsDatabase.db-shm
|
||
0xb482b740c8d0 \Windows\Prefetch\WLRMDR.EXE-A7C36FDD.pf
|
||
0xb482b740cd80 \Windows\System32\Windows.UI.Xaml.Resources.19h1.dll
|
||
0xb482b740d230 \Windows\WinSxS\Manifests\x86_microsoft.windows.isolationautomation_6595b64144ccf1df_1.0.26100.5074_none_374655d025f55b6d.manifest
|
||
0xb482b740d550 \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\global.ini
|
||
0xb482b740d6e0 \Windows\System32\credui.dll
|
||
0xb482b740d870 \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\SyncEngineDatabase.db
|
||
0xb482b740da00 \Endpoint
|
||
0xb482b740db90 \$Directory
|
||
0xb482b740deb0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\ReactNativeVideoCPP.dll
|
||
0xb482b740e360 \Windows\appcompat\pca\PcaAppLaunchDic.txt
|
||
0xb482b740e4f0 \Endpoint
|
||
0xb482b740e9a0 \Program Files\VMware\VMware Tools\plugins\vmusr\darkModeSync.dll
|
||
0xb482b740ecc0 \Program Files\VMware\VMware Tools\plugins\vmusr\desktopEvents.dll
|
||
0xb482b740f170 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Core.dll
|
||
0xb482b740f300 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b740f490 \Users\job\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2026-02-24_080648_5016-7516.log
|
||
0xb482b740f620 \Program Files\VMware\VMware Tools\plugins\vmusr\dndcp.dll
|
||
0xb482b740f650 띀뒂띀뒂
|
||
0xb482b740f7b0 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
|
||
0xb482b740f940 \Windows\System32\sqmapi.dll
|
||
0xb482b740fc60 \Windows\System32\Windows.System.UserProfile.DiagnosticsSettings.dll
|
||
0xb482b740fdf0 \Program Files\VMware\VMware Tools\plugins\vmusr\vmtray.dll
|
||
0xb482b7410110 \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\OCSI.db-shm
|
||
0xb482b74102a0 \$Directory
|
||
0xb482b7410430 \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\SyncEngineDatabase.db-shm
|
||
0xb482b74108e0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncCxPImpl.dll
|
||
0xb482b7410c00 \Users\job\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04
|
||
0xb482b74113d0 \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\SyncEngineDatabase.db-wal
|
||
0xb482b7411560 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Widgets.dll
|
||
0xb482b74116f0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Qml.dll
|
||
0xb482b7411880 \Windows\System32\mfc140u.dll
|
||
0xb482b7411a10 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSNtfs.dll
|
||
0xb482b7411ba0 \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\UXDatabase.db
|
||
0xb482b7411d30 \Program Files\VMware\VMware Tools\sigc-3.0-0.dll
|
||
0xb482b7411ec0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5WinExtras.dll
|
||
0xb482b74121e0 \Users\job\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04
|
||
0xb482b7412370 \Windows\SysWOW64\uxtheme.dll
|
||
0xb482b7412500 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Quick.dll
|
||
0xb482b7412690 \Windows\SysWOW64\cryptsp.dll
|
||
0xb482b7412b40 \$CachedWriteThrough
|
||
0xb482b7412cd0 \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\OCSI.db-wal
|
||
0xb482b7412e60 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Gui.dll
|
||
0xb482b7413180 \$CachedWriteThrough
|
||
0xb482b7413310 \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\ECSConfig.json
|
||
0xb482b74134a0 \Users\job\AppData\Local\Microsoft\OneDrive\settings\PreSignInSettingsConfig.json
|
||
0xb482b7413630 \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\OCSI.db
|
||
0xb482b74137c0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuth.exe
|
||
0xb482b7413ae0 \Windows\System32\sfc_os.dll
|
||
0xb482b7413e00 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_87ef0e2f7a2c9771
|
||
0xb482b7414120 \$Directory
|
||
0xb482b74142b0 \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\logUploaderSettings_temp.ini
|
||
0xb482b7414440 \Windows\System32\mfc140enu.dll
|
||
0xb482b74145d0 \Windows\Prefetch\MOBSYNC.EXE-B307E1CC.pf
|
||
0xb482b7414760 \$Directory
|
||
0xb482b74148f0 \Program Files (x86)\mRemoteNG\BouncyCastle.Crypto.dll
|
||
0xb482b7414a80 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Microsoft.ReactNative.dll
|
||
0xb482b7414da0 \Windows\SysWOW64\srvcli.dll
|
||
0xb482b74150c0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSDbfsWB.dll
|
||
0xb482b7415250 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
|
||
0xb482b7415700 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFALWB.dll
|
||
0xb482b7415890 \Windows\System32\LogFiles\CloudFiles\CldFlt3.etl
|
||
0xb482b7415a20 \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\logUploaderSettings.ini
|
||
0xb482b7415ed0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSNtfsWB.dll
|
||
0xb482b7416830 \$MapAttributeValue
|
||
0xb482b7416ce0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\adal.dll
|
||
0xb482b7417190 \Windows\System32\plutonapi.dll
|
||
0xb482b74174b0 \Windows\System32\input.dll
|
||
0xb482b74177d0 \$Directory
|
||
0xb482b7417960 \Windows\System32\TpmCoreProvisioning.dll
|
||
0xb482b7417c80 \$Directory
|
||
0xb482b7417e10 \Windows\System32\appraiser.dll
|
||
0xb482b7418130 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\libcrypto-3-x64.dll
|
||
0xb482b74185e0 \Windows\System32\hspapi.dll
|
||
0xb482b7418900 \Windows\Prefetch\MIDISRV.EXE-526A993B.pf
|
||
0xb482b7418a90 \Program Files (x86)\mRemoteNG\mRemoteNG.exe
|
||
0xb482b74190d0 \$MapAttributeValue
|
||
0xb482b7419260 \Windows\System32\TaskSchdPS.dll
|
||
0xb482b7419580 \$CachedWriteThrough
|
||
0xb482b7419710 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BrowsingTopicsSiteData
|
||
0xb482b74198a0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSCache.dll
|
||
0xb482b7419bc0 \Program Files\desktop.ini
|
||
0xb482b741a200 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy\machine.pckgdep
|
||
0xb482b741a390 \$Directory
|
||
0xb482b741a6b0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Network.dll
|
||
0xb482b741a840 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncRNWin32Lib.dll
|
||
0xb482b741a9d0 \Windows\System32\winevt\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx
|
||
0xb482b741ab60 \Windows\System32\TpmTasks.dll
|
||
0xb482b741acf0 \Windows\System32\en-US\input.dll.mui
|
||
0xb482b741ae80 \Windows\System32\WorkFoldersShell.dll
|
||
0xb482b741b1a0 \Windows\System32\wmitomi.dll
|
||
0xb482b741b4c0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5QmlModels.dll
|
||
0xb482b741b650 \Windows\Prefetch\AUDIODG.EXE-AB22E9A6.pf
|
||
0xb482b741b7e0 \Windows\System32\hwreqchk.dll
|
||
0xb482b741b970 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\index-dir\temp-index
|
||
0xb482b741bc90 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
|
||
0xb482b741c140 \$Directory
|
||
0xb482b741c460 \Windows\System32\spp\store\2.0\cache\cache.dat
|
||
0xb482b741c5f0 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep
|
||
0xb482b741c780 \$Directory
|
||
0xb482b741c910 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\hermes.dll
|
||
0xb482b741cdc0 \Windows\System32\dimsjob.dll
|
||
0xb482b741d0e0 \Windows\System32\Win32_DeviceGuard.dll
|
||
0xb482b741d270 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Microsoft.UI.Xaml.dll
|
||
0xb482b741d400 \Windows\Registration\R000000000006.clb
|
||
0xb482b741d720 \Users\Public\Desktop\mRemoteNG.lnk
|
||
0xb482b741d8b0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140.dll
|
||
0xb482b741da40 \Windows\Prefetch\VMTOOLSD.EXE-90328040.pf
|
||
0xb482b741e210 \Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\b7f46ecd62a3aa399275b2302e207290\mscorlib.ni.dll
|
||
0xb482b741e530 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_app.dll
|
||
0xb482b741eb70 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\extensions_crx_cache\metadata.json
|
||
0xb482b741ed00 \$Directory
|
||
0xb482b741ee90 \Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000165\775bd83bf93443bdbdb7251e70d1a8d3_1
|
||
0xb482b741f340 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\LoggingPlatform.dll
|
||
0xb482b741f4d0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1.dll
|
||
0xb482b741f7f0 \Program Files\VMware\VMware Tools\vmtoolsd.exe
|
||
0xb482b741fca0 \Windows\System32\en-US\mswsock.dll.mui
|
||
0xb482b741fe30 \$CachedWriteThrough
|
||
0xb482b7420150 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_1.dll
|
||
0xb482b74202e0 \$CachedWriteThrough
|
||
0xb482b7420600 \$CachedWriteThrough
|
||
0xb482b7420920 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140.dll
|
||
0xb482b7420ab0 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462
|
||
0xb482b7420c40 \Windows\System32\WiFiCloudStore.dll
|
||
0xb482b7420dd0 \$MapAttributeValue
|
||
0xb482b74210f0 \Windows\System32\SettingsConfigTask.dll
|
||
0xb482b7421410 \Program Files\VMware\VMware Tools\plugins\vmsvc\deployPkgPlugin.dll
|
||
0xb482b74215a0 \Users\job\AppData\Local\Microsoft\Windows\WebCache\V01.chk
|
||
0xb482b7421730 \Windows\System32\en-US\msxml6r.dll.mui
|
||
0xb482b7421be0 \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\CxP.db
|
||
0xb482b74223b0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_app.dll
|
||
0xb482b7422540 \Windows\Prefetch\FILECOAUTH.EXE-F2EB91B6.pf
|
||
0xb482b7422860 \$CachedWriteThrough
|
||
0xb482b74229f0 \$MapAttributeValue
|
||
0xb482b7422b80 \Windows\SysWOW64\mscoree.dll
|
||
0xb482b7422d10 \Windows\SysWOW64\tzres.dll
|
||
0xb482b7422ea0 \Windows\System32
|
||
0xb482b74231c0 \Users\job\AppData\Local\Microsoft\TokenBroker\Cache\1521f696d8626c8e8127c0284ab987ff1974f39a.tbres
|
||
0xb482b7423350 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1_app.dll
|
||
0xb482b74234e0 \Windows\System32\RstrtMgr.dll
|
||
0xb482b7423670 \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\CxP.db-shm
|
||
0xb482b7423800 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Bundle\index.windows.bundle
|
||
0xb482b7423b20 \$Directory
|
||
0xb482b7423cb0 \Users\job\AppData\Local\IconCache.db
|
||
0xb482b7424160 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\WnsClientApi.dll
|
||
0xb482b74247a0 \Windows\SysWOW64\winnlsres.dll
|
||
0xb482b7424930 \Windows\Registration\R000000000006.clb
|
||
0xb482b7424ac0 \Windows\System32\en-US\wshqos.dll.mui
|
||
0xb482b7425100 \CMNotify
|
||
0xb482b7425420 \$Directory
|
||
0xb482b74255b0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\en\localizable.json
|
||
0xb482b7425740 \Windows\Prefetch\NISSRV.EXE-16D8D79C.pf
|
||
0xb482b7425a60 \Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\b7f46ecd62a3aa399275b2302e207290\mscorlib.ni.dll
|
||
0xb482b7425bf0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Cookies-journal
|
||
0xb482b7425d80 \Windows\SystemResources\wininet.dll.mun
|
||
0xb482b74260a0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\en\FileSync.LocalizedResources.dll.mui
|
||
0xb482b74266e0 \Windows\Prefetch\CTFMON.EXE-795F8130.pf
|
||
0xb482b7426b90 \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\CxP.db-wal
|
||
0xb482b7426d20 \Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\TwinSxS.dll
|
||
0xb482b7426eb0 \Windows\System32\wshqos.dll
|
||
0xb482b74274f0 \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthSSO.dll
|
||
0xb482b7427680 \Users\job\AppData\Local\Microsoft\TokenBroker\Cache\78c091ac6d34daa9d603629dd088840de549030f.tbres
|
||
0xb482b74279a0 \Windows\WinSxS\Manifests\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_b6a09a6f5242f736.manifest
|
||
0xb482b7427b30 \Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\280810\d736452c68c6438aa79430024cf161c1_1
|
||
0xb482b7427cc0 \CMNotify
|
||
0xb482b7427e50 \$CachedWriteThrough
|
||
0xb482b7428170 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\libssl-3-x64.dll
|
||
0xb482b7428300 \Users\job\Links\desktop.ini
|
||
0xb482b7428620 \Users\job\Favorites\desktop.ini
|
||
0xb482b74287b0 \Windows\Prefetch\RUNTIMEBROKER.EXE-3E0B5307.pf
|
||
0xb482b7428ad0 \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\SurveyManagerState.json
|
||
0xb482b7428df0 \CMNotify
|
||
0xb482b7429110 \Users\job\Saved Games\desktop.ini
|
||
0xb482b74292a0 \Windows\System32\SecurityHealthSystray.exe
|
||
0xb482b7429430 \Windows\System32\SecurityHealth\10.0.29510.1001-0\en-US\SecurityHealthSSO.dll.mui
|
||
0xb482b74295c0 \CMNotify
|
||
0xb482b7429750 \ProgramData\Microsoft\Diagnosis\AggregatorStorage\UpdatePolicy$
|
||
0xb482b74298e0 \Users\job\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
|
||
0xb482b742a0b0 \Users\job\Searches\desktop.ini
|
||
0xb482b742a240 \Users\job\Contacts\desktop.ini
|
||
0xb482b742a3d0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\en\FileSync.LocalizedResources.dll.mui
|
||
0xb482b742a560 \Windows\System32
|
||
0xb482b742a6f0 \Users\job\AppData\Local\Microsoft\OneDrive\setup\logs\StandaloneUpdate_2026-02-24_080424_6800-3884.log
|
||
0xb482b742aec0 \Windows\SysWOW64\virtdisk.dll
|
||
0xb482b742b1e0 \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthHost.exe
|
||
0xb482b742b500 \Users\job\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData
|
||
0xb482b742b690 \Windows\System32\en-US\winnlsres.dll.mui
|
||
0xb482b742b6c0 뜘띂뒂뜘띂뒂
|
||
0xb482b742bb40 \$Directory
|
||
0xb482b742bcd0 \ProgramData\Microsoft\Diagnosis\AggregatorStorage\UpdateReboot$
|
||
0xb482b742be60 \Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
|
||
0xb482b742c310 \Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui
|
||
0xb482b742c4a0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\index.txt.tmp
|
||
0xb482b742c7c0 \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthProxyStub.dll
|
||
0xb482b742cc70 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Reporting and NEL-journal
|
||
0xb482b742ce00 \Windows\System32\en-US\windows.storage.dll.mui
|
||
0xb482b742d120 \Windows\System32\SecurityHealthSsoUdk.dll
|
||
0xb482b742d440 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSync.Resources.dll
|
||
0xb482b742d5d0 \Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\b3cf609737eb90073e35cdc30c3a3c75\mscorlib.ni.dll.aux
|
||
0xb482b742d760 \Windows\Prefetch\RUNTIMEBROKER.EXE-ACF4B348.pf
|
||
0xb482b742d8f0 \Users\job\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
||
0xb482b742da80 \ProgramData\Microsoft\Diagnosis\AggregatorStorage\UpdateHeartbeatScan$
|
||
0xb482b742dc10 \Users\job\AppData\Local\Microsoft\OneDrive\setup\logs\StandaloneUpdate_2026-02-24_080424_2216-3908.log
|
||
0xb482b742dda0 \$CachedWriteThrough
|
||
0xb482b742e250 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat
|
||
0xb482b742e3e0 \$CachedWriteThrough
|
||
0xb482b742e570 \$CachedWriteThrough
|
||
0xb482b742e700 \$CachedWriteThrough
|
||
0xb482b742e890 \$CachedWriteThrough
|
||
0xb482b742ea20 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Runlevel-Win4-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat
|
||
0xb482b742ebb0 \$CachedWriteThrough
|
||
0xb482b742ed40 \$CachedWriteThrough
|
||
0xb482b742eed0 \$CachedWriteThrough
|
||
0xb482b742f1f0 \$CachedWriteThrough
|
||
0xb482b742f380 \$Directory
|
||
0xb482b742f510 \Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\general.keystore
|
||
0xb482b742f830 \Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2026-02-24.0806.5016.2.aodl
|
||
0xb482b742f9c0 \$CachedWriteThrough
|
||
0xb482b742fb50 \$CachedWriteThrough
|
||
0xb482b742fe70 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncTelemetryExtensions.dll
|
||
0xb482b7430190 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
|
||
0xb482b74304b0 \$CachedWriteThrough
|
||
0xb482b74307d0 \Windows\WinSxS\Manifests\x86_microsoft.windows.systemcompatible_6595b64144ccf1df_6.0.26100.1_none_4b76b994e0e77783.manifest
|
||
0xb482b7430960 \$CachedWriteThrough
|
||
0xb482b7430af0 \Windows\System32\en-US\kernel32.dll.mui
|
||
0xb482b7430c80 \Users\job\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB0D848F74F70BB2EAA93746D24D9749
|
||
0xb482b7431130 \$CachedWriteThrough
|
||
0xb482b7431450 \$CachedWriteThrough
|
||
0xb482b74315e0 \$CachedWriteThrough
|
||
0xb482b7431db0 \$CachedWriteThrough
|
||
0xb482b74320d0 \$CachedWriteThrough
|
||
0xb482b7432260 \$CachedWriteThrough
|
||
0xb482b74323f0 \$CachedWriteThrough
|
||
0xb482b7432580 \$CachedWriteThrough
|
||
0xb482b7432710 \Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\telemetry-dll-ramp-value.txt
|
||
0xb482b74328a0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\CheckboxWindows.dll
|
||
0xb482b7432a30 \$CachedWriteThrough
|
||
0xb482b7432ee0 \CMNotify
|
||
0xb482b7433200 \$CachedWriteThrough
|
||
0xb482b7433390 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\OneDriveTelemetryStable.dll
|
||
0xb482b7433520 \$CachedWriteThrough
|
||
0xb482b74336b0 \$CachedWriteThrough
|
||
0xb482b7433840 \Users\job\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A
|
||
0xb482b74339d0 \Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe
|
||
0xb482b7433b60 \$CachedWriteThrough
|
||
0xb482b7433e80 \$CachedWriteThrough
|
||
0xb482b74344c0 \Users\job\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A
|
||
0xb482b7434650 \Windows\System32\sysmain.dll
|
||
0xb482b74347e0 \Windows\WinSxS\Manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_cf9c45068ea8c077.manifest
|
||
0xb482b7434970 \Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_6ef363983dc6ce30
|
||
0xb482b7434b00 \Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\general.keystore
|
||
0xb482b7434c90 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Sdch Dictionaries1-b302-4b04ae9766ed.tmp
|
||
0xb482b7435140 \Windows\System32\sppc.dll
|
||
0xb482b74352d0 \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthAgent.dll
|
||
0xb482b74355f0 \Windows\System32\sspicli.dll
|
||
0xb482b7435780 \Windows\System32\en-US\sysmain.dll.mui
|
||
0xb482b7435910 \Windows\WinSxS\Manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462.manifest
|
||
0xb482b7435aa0 \Windows\System32\en-US\taskhostw.exe.mui
|
||
0xb482b7435dc0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BrowsingTopicsStateacc8-54ac47ff6585.tmp
|
||
0xb482b74360e0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\ReactNativePicker.dll
|
||
0xb482b7436590 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuth.exe
|
||
0xb482b7436720 \Windows\Prefetch\ONEDRIVE.EXE-0E8FA8E9.pf
|
||
0xb482b7437080 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b7437210 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462
|
||
0xb482b74373a0 \Users\desktop.ini
|
||
0xb482b74376c0 \srvsvc
|
||
0xb482b7437850 \$CachedWriteThrough
|
||
0xb482b74379e0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuthLib64.dll
|
||
0xb482b7437b70 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuthLib64.dll
|
||
0xb482b7437d00 \$Directory
|
||
0xb482b7437e90 \Windows\System32\taskschd.dll
|
||
0xb482b74381b0 \$MapAttributeValue
|
||
0xb482b7438660 \Windows\assembly\NativeImages_v4.0.30319_32\System\dea0393078281e3e807a8f0684433db5\System.ni.dll
|
||
0xb482b74387f0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat
|
||
0xb482b7438980 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncClient.dll
|
||
0xb482b7438b10 \Windows\Registration\R000000000006.clb
|
||
0xb482b7438ca0 \Windows\SysWOW64\urlmon.dll
|
||
0xb482b7438e30 \Windows\WinSxS\Manifests\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.26100.1591_en-us_541af4fe0fd3faf0.manifest
|
||
0xb482b7439150 \Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx
|
||
0xb482b7439470 \Windows\WinSxS\FileMaps\_0000000000000000.cdf-ms
|
||
0xb482b7439600 \Windows\Temp\vmware-vmtoolsd-job.log
|
||
0xb482b7439790 \Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\280811\0c6402d0cdc44bce9fc62ec398a3dd43_1
|
||
0xb482b7439920 \Windows\Registration\R000000000006.clb
|
||
0xb482b7439ab0 \Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
|
||
0xb482b7439c40 \Windows\System32\en-US\sppc.dll.mui
|
||
0xb482b7439dd0 \$Directory
|
||
0xb482b743a0f0 \Windows\SysWOW64\rsaenh.dll
|
||
0xb482b743a280 \Windows\System32\icmp.dll
|
||
0xb482b743a410 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\UpdateRingSettings.dll
|
||
0xb482b743a5a0 \$CachedWriteThrough
|
||
0xb482b743a730 \$CachedWriteThrough
|
||
0xb482b743a8c0 \CMApi
|
||
0xb482b743abe0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\LogUploader.dll
|
||
0xb482b743ad70 \Users\job\AppData\Local\Microsoft\TokenBroker\Cache\4e7a3602a6530194fc2a9d803f78656054f42b7e.tbres
|
||
0xb482b743b090 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\platforms\qwindows.dll
|
||
0xb482b743b220 \$MapAttributeValue
|
||
0xb482b743b540 \$CachedWriteThrough
|
||
0xb482b743b6d0 \Windows\System32\Wpc.dll
|
||
0xb482b743b860 \Windows\System32\en-US\crypt32.dll.mui
|
||
0xb482b743b9f0 \$CachedWriteThrough
|
||
0xb482b743bb80 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFS.dll
|
||
0xb482b743bd10 \Windows\Temp\vmware-vmusr-job.log
|
||
0xb482b743bea0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\WebView2Loader.dll
|
||
0xb482b743c350 \$Directory
|
||
0xb482b743c670 \Windows\Prefetch\SECURITYHEALTHHOST.EXE-950D595E.pf
|
||
0xb482b743c990 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncEvents.dll
|
||
0xb482b743ccb0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\platforms\qwindows.dll
|
||
0xb482b743ce40 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncSessions.dll
|
||
0xb482b743d160 \$CachedWriteThrough
|
||
0xb482b743d2f0 \Windows\System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask
|
||
0xb482b743d480 \Windows\Fonts\segoeui.ttf
|
||
0xb482b743d930 \Windows\apppatch\pcamain.sdb
|
||
0xb482b743dac0 \$Directory
|
||
0xb482b743dde0 \Windows\assembly\NativeImages_v4.0.30319_32\System.Core\11f67a51b42b5a7259cc452d68c29f98\System.Core.ni.dll
|
||
0xb482b743e100 \Windows\apppatch\DirectXApps.sdb
|
||
0xb482b743e290 \Windows\System32\WinMetadata\Windows.UI.Xaml.winmd
|
||
0xb482b743e420 \$CachedWriteThrough
|
||
0xb482b743e5b0 \$Directory
|
||
0xb482b743e740 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncCxP.dll
|
||
0xb482b743e8d0 \Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000161\782a4ab843ce42e3ae55a5799d0f0cc1_1
|
||
0xb482b743ebf0 \Windows\SysWOW64\bcrypt.dll
|
||
0xb482b743ed80 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_atomic_wait.dll
|
||
0xb482b743f0a0 \$CachedWriteThrough
|
||
0xb482b743f3c0 \$Directory
|
||
0xb482b743f870 \$CachedWriteThrough
|
||
0xb482b743feb0 \$CachedWriteThrough
|
||
0xb482b74401d0 \Windows\System32\FamilySafetyExt.dll
|
||
0xb482b7440360 \Windows\WindowsShell.Manifest
|
||
0xb482b74404f0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncHost.dll
|
||
0xb482b7440810 \$Directory
|
||
0xb482b7440b30 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b7440cc0 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncViews.dll
|
||
0xb482b7440e50 \Users\job\AppData\Local\Microsoft\OneDrive\Resources.pri
|
||
0xb482b7441170 \Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
|
||
0xb482b7441490 \Windows\System32\sppsvc.exe
|
||
0xb482b7441ad0 \$CachedWriteThrough
|
||
0xb482b7441c60 \Windows\SysWOW64\iertutil.dll
|
||
0xb482b7441df0 \Windows\System32\en-US\Windows.Web.dll.mui
|
||
0xb482b7b9b7e0 \Windows\System32\appvetwclientres.dll
|
||
0xb482b7b9bc90 \Windows\System32\cmdext.dll
|
||
0xb482b7b9be20 \CMApi
|
||
0xb482b7b9c140 \Windows\System32\wecsvc.dll
|
||
0xb482b7b9c5f0 \Windows\System32\wmi.dll
|
||
0xb482b7b9c780 \$Directory
|
||
0xb482b7b9cc30 \Windows\System32\nlaapi.dll
|
||
0xb482b7b9d720 \Windows\Registration\R000000000006.clb
|
||
0xb482b7b9da40 \Windows\System32\Taskmgr.exe
|
||
0xb482b7b9e080 \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll.aux
|
||
0xb482b7b9e3a0 \Windows\System32\drivers\mrxsmb.sys
|
||
0xb482b7b9e6c0 \Windows\System32\conhost.exe
|
||
0xb482b7b9e850 \ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\X86\MpOAV.dll
|
||
0xb482b7b9f1b0 \Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy
|
||
0xb482b7b9f660 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy
|
||
0xb482b7b9f7f0 \$Directory
|
||
0xb482b7b9f980 \CMNotify
|
||
0xb482b7ba0150 \Windows\System32\IntegratedServicesRegionPolicySet.json
|
||
0xb482b7ba02e0 \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll
|
||
0xb482b7ba0470 \Windows\System32\ipconfig.exe
|
||
0xb482b7ba0dd0 \Windows\SysWOW64\en-US\user32.dll.mui
|
||
0xb482b7ba1280 \Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll
|
||
0xb482b7ba2540 \Windows\System32\hvhostsvc.dll
|
||
0xb482b7ba26d0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
|
||
0xb482b7ba29f0 \Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a
|
||
0xb482b7ba31c0 \Windows\System32
|
||
0xb482b7ba3350 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WebExperienceHost.dll
|
||
0xb482b7ba3b20 \$MapAttributeValue
|
||
0xb482b7ba4160 \Windows\Microsoft.NET\Framework64\v4.0.30319\WorkflowServiceHostPerformanceCounters.dll
|
||
0xb482b7ba4ac0 \Windows\Prefetch\CONHOST.EXE-0C6456FB.pf
|
||
0xb482b7ba4c50 \Windows\System32\WsmRes.dll
|
||
0xb482b7ba5290 \Users\job\AppData\Roaming\mRemoteNG\Themes\vs2015dark.vstheme
|
||
0xb482b7ba55b0 \Windows\System32\en-US\hvhostsvc.dll.mui
|
||
0xb482b7ba5740 \Users\job\AppData\Roaming\mRemoteNG\Themes\darcula.vstheme
|
||
0xb482b7ba5a60 \Windows\System32\backgroundTaskHost.exe
|
||
0xb482b7ba66e0 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy
|
||
0xb482b7ba6710 杨랺뒂杨랺뒂
|
||
0xb482b7ba6a00 \Users\job\AppData\Roaming\mRemoteNG\Themes\vs2015blue.vstheme
|
||
0xb482b7ba6d20 \Windows\System32\PeerDistSvc.dll
|
||
0xb482b7ba6eb0 \Windows\System32\conhost.exe
|
||
0xb482b7ba74f0 \Windows\Fonts\segoeuib.ttf
|
||
0xb482b7ba7680 \Windows\System32\en-US\PeerDistSvc.dll.mui
|
||
0xb482b7ba7810 \Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a\comctl32.dll
|
||
0xb482b7ba7cc0 \Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\LocalState\store.db
|
||
0xb482b7ba8170 \Windows\System32\vid.dll
|
||
0xb482b7ba8ad0 \Windows\System32\en-US\Conhost.exe.mui
|
||
0xb482b7ba9750 \Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelPerformanceCounters.dll
|
||
0xb482b7bab370 \Windows\System32\drivers\ntfs.sys
|
||
0xb482b7bacae0 \Windows\System32\mprddm.dll
|
||
0xb482b7bacc70 \Windows\System32\en-US\vid.dll.mui
|
||
0xb482b7bace00 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b7bad120 \Windows\Registration\R000000000006.clb
|
||
0xb482b7bad440 \Windows\System32\drivers\pacer.sys
|
||
0xb482b7badc10 \Windows\System32\en-US\logoncli.dll.mui
|
||
0xb482b7bae250 \Windows\System32\cmdext.dll
|
||
0xb482b7baebb0 \Users\Public\desktop.ini
|
||
0xb482b7baed40 \Windows\System32\en-US\d2d1.dll.mui
|
||
0xb482b7baeed0 \Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-S-1-5-18.dat
|
||
0xb482b7baf510 \$CachedWriteThrough
|
||
0xb482b7baf6a0 \Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\FontCache-FontSet-S-1-5-18.dat
|
||
0xb482b7baf6d0 랺뒂랺뒂
|
||
0xb482b7baf830 \Windows\System32\en-US\cmd.exe.mui
|
||
0xb482b7bafb50 \Windows\System32\appidapi.dll
|
||
0xb482b7bb0320 \Users\Public\Desktop\desktop.ini
|
||
0xb482b7bb0960 \Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a
|
||
0xb482b7bb0e10 \Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
|
||
0xb482b7bb12c0 \Windows\SysWOW64\wbem\stdprov.dll
|
||
0xb482b7bb1a90 \Windows\System32\netprofm.dll
|
||
0xb482b7bb1db0 \Windows\System32\drivers\winnat.sys
|
||
0xb482b7bb2580 \Windows\System32\rsaenh.dll
|
||
0xb482b7bb28a0 \Windows\System32\wbem\NCProv.dll
|
||
0xb482b7bb2a30 \Windows\System32\OneSettingsClient.dll
|
||
0xb482b7bb2d50 \Windows\System32\RuntimeBroker.exe
|
||
0xb482b7bb41a0 \$CachedWriteThrough
|
||
0xb482b7bb4330 \$CachedWriteThrough
|
||
0xb482b7bb4b00 \PIPE_EVENTROOT\CIMV2SCM EVENT PROVIDER
|
||
0xb482b7bb4e20 \Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui
|
||
0xb482b7bb52d0 \Windows\System32\en-US\azroles.dll.mui
|
||
0xb482b7bb5460 \Windows\SysWOW64\TextInputFramework.dll
|
||
0xb482b7bb5aa0 \Endpoint
|
||
0xb482b7bb5c30 \Endpoint
|
||
0xb482b7bb6400 \Windows\System32\wbem\WinMgmtR.dll
|
||
0xb482b7bb6720 \Windows\SysWOW64\wbem\WmiPrvSE.exe
|
||
0xb482b7bb6a40 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep
|
||
0xb482b7bb6ef0 \Windows\Fonts\segoeui.ttf
|
||
0xb482b7bb7080 \Windows\System32\azroles.dll
|
||
0xb482b7bb7210 \Windows\System32\bcrypt.dll
|
||
0xb482b7bb73a0 \Windows\System32\en-US\KernelBase.dll.mui
|
||
0xb482b7bb7530 \Windows\SysWOW64\wbem\esscli.dll
|
||
0xb482b7bb76c0 \Windows\System32\drivers\dxgmms2.sys
|
||
0xb482b7bb7850 \Users\job\AppData\Roaming\mRemoteNG\extApps.xml
|
||
0xb482b7bb7d00 \$Directory
|
||
0xb482b7bb8340 \Windows\System32\srpapi.dll
|
||
0xb482b7bb8660 \Windows\System32\drivers\etc\hosts
|
||
0xb482b7bb8980 \Windows\Registration\R000000000006.clb
|
||
0xb482b7bb8b10 \Windows\SysWOW64\wbem\en-US\wmiutils.dll.mui
|
||
0xb482b7bb9150 \Program Files (x86)\mRemoteNG\ObjectListView.dll
|
||
0xb482b7bb9470 \Endpoint
|
||
0xb482b7bb9790 \Windows\System32\drivers\http.sys
|
||
0xb482b7bb9ab0 \Windows\System32\WindowsPowerShell\v1.0\PSEvents.dll
|
||
0xb482b7bbb090 \Windows\System32\rdpcorets.dll
|
||
0xb482b7bbb220 \Endpoint
|
||
0xb482b7bbb3b0 \Endpoint
|
||
0xb482b7bbb540 \Users\job\AppData\Roaming\mRemoteNG\confCons.xml
|
||
0xb482b7bbb6d0 \$Directory
|
||
0xb482b7bbbd10 \Windows\System32\drivers\fvevol.sys
|
||
0xb482b7bbc4e0 \$MapAttributeValue
|
||
0xb482b7bbc670 \Program Files (x86)\Common Files\Microsoft Shared\ink\tiptsf.dll
|
||
0xb482b7bbc800 \Windows\System32\drivers\afd.sys
|
||
0xb482b7bbcb20 \Windows\SysWOW64\wbem\WmiPrvSE.exe
|
||
0xb482b7bbce40 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat
|
||
0xb482b7bbd2f0 \Windows\System32\drivers\refs.sys
|
||
0xb482b7bbd610 \Windows\SysWOW64\twinapi.appcore.dll
|
||
0xb482b7bbdac0 \Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a
|
||
0xb482b7bbdc50 \Windows\System32\wmp.dll
|
||
0xb482b7bbdde0 \Windows\System32\drivers\spaceport.sys
|
||
0xb482b7bbe100 \Windows\System32\en-US\rdpcorets.dll.mui
|
||
0xb482b7bbe8d0 \Endpoint
|
||
0xb482b7bbed80 \Program Files\VMware\VMware Tools\suspend-vm-default.bat
|
||
0xb482b7bbf3c0 \Windows\Prefetch\WMIPRVSE.EXE-39F97B2D.pf
|
||
0xb482b7bbfb90 \Windows\System32\ipconfig.exe
|
||
0xb482b7bc0360 \Windows\SysWOW64\DataExchange.dll
|
||
0xb482b7bc0810 \Users\job\AppData\Roaming\mRemoteNG\pnlLayout.xml
|
||
0xb482b7bc0cc0 \$CachedWriteThrough
|
||
0xb482b7bc1df0 \Windows\Fonts\segoeui.ttf
|
||
0xb482b7bc22a0 \Windows\System32\ReFsDedupSvc.exe
|
||
0xb482b7bc2430 \AppContracts_x11AE5CF9-6612-4B89-90D2-77AD98209EEDy
|
||
0xb482b7bc2a70 \$CachedWriteThrough
|
||
0xb482b7bc2c00 \Windows\SysWOW64\ncobjapi.dll
|
||
0xb482b7bc3240 \AppContracts_x853309C6-8F9D-4473-8658-C387D5682ECDy
|
||
0xb482b7bc33d0 \Windows\System32\en-US\netlogon.dll.mui
|
||
0xb482b7bc4500 \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep
|
||
0xb482b7bc49b0 \Windows\System32\drivers\smbdirect.sys
|
||
0xb482b7bc5180 \Windows\Prefetch\IPCONFIG.EXE-BFEC2AD0.pf
|
||
0xb482b7bc57c0 \Windows\System32\RuntimeBroker.exe
|
||
0xb482b7bc5c70 \Windows\Prefetch\IPCONFIG.EXE-BFEC2AD0.pf
|
||
0xb482b7bc6120 \Windows\System32\cscsvc.dll
|
||
0xb482b7bc6760 \Windows\System32\drivers\vmbkmcl.sys
|
||
0xb482b7bc6a80 \Windows\System32\drivers\srv2.sys
|
||
0xb482b7bc7d40 \Program Files (x86)\mRemoteNG\MagicLibrary.dll
|
||
0xb482b7bc81f0 \Windows\System32\drivers\tcpip.sys
|
||
0xb482b7bc8380 \Endpoint
|
||
0xb482b7bc8510 \Windows
|
||
0xb482b7bc9190 \Windows\System32\drivers\ndis.sys
|
||
0xb482b7bc9320 \Windows\System32\backgroundTaskHost.exe
|
||
0xb482b7bc94b0 \Windows\SysWOW64\wbem\stdprov.dll
|
||
0xb482b7bc9af0 \Sessions\1\AppContainerNamedObjects\S-1-15-2-3950126717-3641943460-3038804466-693777006-783539386-1288712031-1294249617
|
||
0xb482b7bc9c80 \Windows\SystemResources\wininet.dll.mun
|
||
0xb482b7bca130 \$MapAttributeValue
|
||
0xb482b7bca900 \Windows\System32\drivers\USBXHCI.SYS
|
||
0xb482b7bcb260 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat
|
||
0xb482b7bcb580 \Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\WebExperienceHost.dll
|
||
0xb482b7bcb710 \Windows\Prefetch\RUNTIMEBROKER.EXE-F0BE6FF5.pf
|
||
0xb482b7bcc840 \Windows\SysWOW64\wbem\esscli.dll
|
||
0xb482b7bccb60 \Windows\System32\en-US\cscsvc.dll.mui
|
||
0xb482b7bcccf0 \Windows\SysWOW64\en-US\user32.dll.mui
|
||
0xb482b7bcd1a0 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat
|
||
0xb482b7bcd330 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy\machine.pckgdep
|
||
0xb482b7bcd4c0 \$MapAttributeValue
|
||
0xb482b7bcd650 \Windows\SysWOW64
|
||
0xb482b7bcd7e0 \Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll
|
||
0xb482b7bcd970 \Windows\SysWOW64\wtdccm.dll
|
||
0xb482b7bcdb00 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package011220~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat
|
||
0xb482b7bcde20 \Windows\System32\slc.dll
|
||
0xb482b7bce140 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat
|
||
0xb482b7bce2d0 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy\machine.pckgdep
|
||
0xb482b7bce460 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat
|
||
0xb482b7bce910 \Endpoint
|
||
0xb482b7bcec30 \Windows\System32\en-US\ipconfig.exe.mui
|
||
0xb482b7bcf400 \$MapAttributeValue
|
||
0xb482b7bcf590 \Windows\System32\drivers\vhdmp.sys
|
||
0xb482b7bcf8b0 \Sessions\1\AppContainerNamedObjects\S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723
|
||
0xb482b7bcfa40 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy\machine.pckgdep
|
||
0xb482b7bcfbd0 \Windows\System32\bthserv.dll
|
||
0xb482b7bcfef0 \$MapAttributeValue
|
||
0xb482b7bd0530 \Endpoint
|
||
0xb482b7bd06c0 \Endpoint
|
||
0xb482b7bd09e0 \Windows\System32\microsoft-windows-mptf-events.dll
|
||
0xb482b7bd0b70 \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat
|
||
0xb482b7bd0d00 \$Directory
|
||
0xb482b7bd0e90 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy\machine.pckgdep
|
||
0xb482b7bd14d0 \Windows\System32\drivers\storport.sys
|
||
0xb482b7bd1660 \$MapAttributeValue
|
||
0xb482b7bd17f0 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy\machine.pckgdep
|
||
0xb482b7bd1b10 \$MapAttributeValue
|
||
0xb482b7bd1ca0 \Windows\System32\drivers\dmvsc.sys
|
||
0xb482b7bd2470 \Windows\System32\backgroundTaskHost.exe
|
||
0xb482b7bd2790 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy\machine.pckgdep
|
||
0xb482b7bd2920 \Program Files (x86)\mRemoteNG\Icons\mRemoteNG.ico
|
||
0xb482b7bd35a0 \Windows\SysWOW64\CoreMessaging.dll
|
||
0xb482b7bd3730 \$CachedWriteThrough
|
||
0xb482b7bd4220 \Windows\SysWOW64\CoreUIComponents.dll
|
||
0xb482b7bd49f0 \Windows\SysWOW64\wbem\fastprox.dll
|
||
0xb482b7bd4d10 \Windows\System32\cmd.exe
|
||
0xb482b7bd4ea0 \Windows\SysWOW64\wbem\wbemprox.dll
|
||
0xb482b7bd5990 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy\machine.pckgdep
|
||
0xb482b7bd5b20 \Windows\SysWOW64\ncobjapi.dll
|
||
0xb482b7bd5cb0 \Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log
|
||
0xb482b7bd62f0 \Users\job\AppData\Local\Comms\Unistore\data\AggregateCache.uca
|
||
0xb482b7bd6930 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\RulesEngine.dll
|
||
0xb482b7bd6c50 \$Directory
|
||
0xb482b7bd7100 \Windows\Microsoft.NET\Framework\v4.0.30319\WMINet_Utils.dll
|
||
0xb482b7bd7290 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy\machine.pckgdep
|
||
0xb482b7bd7420 \Windows\SysWOW64\wbem\wbemsvc.dll
|
||
0xb482b7bd75b0 \Windows\System32\advapi32res.dll
|
||
0xb482b7bd78d0 \$Directory
|
||
0xb482b7bd7a60 \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy\machine.pckgdep
|
||
0xb482b7bd7bf0 \Program Files\VMware\VMware Tools\suspend-vm-default.bat
|
||
0xb482b7bd80a0 \Windows\Media\Windows Background.wav
|
||
0xb482b7bd8550 \Program Files (x86)\mRemoteNG\log4net.dll
|
||
0xb482b7bd9360 \Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat
|
||
0xb482b7bd9810 \Windows\SysWOW64\wbemcomn.dll
|
||
0xb482b7bd9b30 \Windows\Prefetch\CMD.EXE-0BD30981.pf
|
||
0xb482b7bda620 \Endpoint
|
||
0xb482b7bda7b0 \Endpoint
|
||
0xb482b7bdaad0 \Windows\SysWOW64\amsi.dll
|
||
0xb482b7bdac60 \Endpoint
|