GMER 2.1.19163 - http://www.gmer.net Rootkit scan 2014-01-11 14:13:46 Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 Hitachi_HTS545016B9A300 rev.PBBOC60F 149,05GB Running: 22wkbef7.exe; Driver: C:\Users\ASPIRO~1\AppData\Local\Temp\kxtcauod.sys ---- System - GMER 2.1 ---- SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwAddBootEntry [0x88F50AD0] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwAssignProcessToJobObject [0x88F515AE] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwCreateEvent [0x88F5D5E0] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwCreateEventPair [0x88F5D62C] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwCreateIoCompletion [0x88F5D7C6] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwCreateMutant [0x88F5D54E] SSDT \??\C:\Windows\system32\drivers\aswSP.sys ZwCreateSection [0x88B3F386] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwCreateSemaphore [0x88F5D596] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwCreateThread [0x88F51AE4] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwCreateThreadEx [0x88F51D00] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwCreateTimer [0x88F5D780] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwDebugActiveProcess [0x88F5239C] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwDeleteBootEntry [0x88F50B36] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwDuplicateObject [0x88F55B32] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwLoadDriver [0x88F5071E] SSDT \??\C:\Windows\system32\drivers\aswSP.sys ZwMapViewOfSection [0x88B3F466] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwModifyBootEntry [0x88F50B9C] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwNotifyChangeKey [0x88F55F28] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwNotifyChangeMultipleKeys [0x88F52E2C] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwOpenEvent [0x88F5D60A] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwOpenEventPair [0x88F5D64E] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwOpenIoCompletion [0x88F5D7EA] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwOpenMutant [0x88F5D574] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwOpenProcess [0x88F5542C] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwOpenSection [0x88F5D6FE] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwOpenSemaphore [0x88F5D5BE] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwOpenThread [0x88F55814] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwOpenTimer [0x88F5D7A4] SSDT \??\C:\Windows\system32\drivers\aswSP.sys ZwProtectVirtualMemory [0x88B3F20A] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwQueryObject [0x88F52CF8] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwQueueApcThreadEx [0x88F52A06] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwSetBootEntryOrder [0x88F50C02] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwSetBootOptions [0x88F50C68] SSDT \??\C:\Windows\system32\drivers\aswSP.sys ZwSetContextThread [0x88B3F562] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwSetSystemInformation [0x88F507B8] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwSetSystemPowerState [0x88F5098E] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwShutdownSystem [0x88F5091C] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwSuspendProcess [0x88F52566] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwSuspendThread [0x88F526C8] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwSystemDebugControl [0x88F50A16] SSDT \??\C:\Windows\system32\drivers\aswSP.sys ZwTerminateProcess [0x88B3F2D8] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwTerminateThread [0x88F521F6] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwVdmControl [0x88F50CCE] SSDT \??\C:\Windows\system32\drivers\aswSnx.sys ZwWriteVirtualMemory [0x88F5160A] ---- Kernel code sections - GMER 2.1 ---- .text ntoskrnl.exe!ZwRollbackEnlistment + 140D 818839A9 1 Byte [06] .text ntoskrnl.exe!KiDispatchInterrupt + 5A2 818A34F2 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3} .text ntoskrnl.exe!KeRemoveQueueEx + 1393 818AA768 4 Bytes [D0, 0A, F5, 88] .text ntoskrnl.exe!KeRemoveQueueEx + 141B 818AA7F0 4 Bytes [AE, 15, F5, 88] .text ntoskrnl.exe!KeRemoveQueueEx + 146F 818AA844 8 Bytes [E0, D5, F5, 88, 2C, D6, F5, ...] .text ntoskrnl.exe!KeRemoveQueueEx + 147B 818AA850 4 Bytes [C6, D7, F5, 88] .text ntoskrnl.exe!KeRemoveQueueEx + 1497 818AA86C 4 Bytes [4E, D5, F5, 88] .text ... ---- User code sections - GMER 2.1 ---- .text C:\Windows\system32\svchost.exe[368] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\system32\csrss.exe[388] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\system32\wininit.exe[428] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\system32\csrss.exe[440] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\system32\services.exe[488] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text ... .text C:\Program Files\Google\Chrome\Application\chrome.exe[836] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 000E03FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[836] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 000E01F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[836] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\System32\svchost.exe[896] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\system32\svchost.exe[940] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\system32\svchost.exe[1064] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\system32\svchost.exe[1168] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text ... .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtCreateFile + 6 775D55CE 4 Bytes [28, DC, E5, 00] {SUB AH, BL; IN EAX, 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtCreateFile + B 775D55D3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtMapViewOfSection + 6 775D5C2E 4 Bytes [28, DF, E5, 00] {SUB BH, BL; IN EAX, 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtMapViewOfSection + B 775D5C33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtOpenFile + 6 775D5CDE 4 Bytes [68, DC, E5, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtOpenFile + B 775D5CE3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtOpenProcess + 6 775D5D8E 4 Bytes [A8, DD, E5, 00] {TEST AL, 0xdd; IN EAX, 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtOpenProcess + B 775D5D93 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtOpenProcessToken + B 775D5DA3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtOpenProcessTokenEx + 6 775D5DAE 4 Bytes [A8, DE, E5, 00] {TEST AL, 0xde; IN EAX, 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtOpenProcessTokenEx + B 775D5DB3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtOpenThread + 6 775D5E0E 4 Bytes [68, DD, E5, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtOpenThread + B 775D5E13 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtOpenThreadToken + 6 775D5E1E 4 Bytes [68, DE, E5, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtOpenThreadToken + B 775D5E23 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtOpenThreadTokenEx + B 775D5E33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtQueryAttributesFile + 6 775D5F3E 4 Bytes [A8, DC, E5, 00] {TEST AL, 0xdc; IN EAX, 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtQueryAttributesFile + B 775D5F43 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtQueryFullAttributesFile + B 775D5FF3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtSetInformationFile + 6 775D663E 4 Bytes [28, DD, E5, 00] {SUB CH, BL; IN EAX, 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtSetInformationFile + B 775D6643 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtSetInformationThread + 6 775D669E 4 Bytes [28, DE, E5, 00] {SUB DH, BL; IN EAX, 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtSetInformationThread + B 775D66A3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtUnmapViewOfSection + 6 775D69BE 4 Bytes [68, DF, E5, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!NtUnmapViewOfSection + B 775D69C3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 00EA03FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 00EA01F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[1772] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\System32\spoolsv.exe[1972] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\system32\taskhost.exe[1980] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\system32\SearchIndexer.exe[2116] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\System32\svchost.exe[2320] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtCreateFile + 6 775D55CE 4 Bytes [28, AC, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtCreateFile + B 775D55D3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtMapViewOfSection + 6 775D5C2E 4 Bytes [28, AF, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtMapViewOfSection + B 775D5C33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtOpenFile + 6 775D5CDE 4 Bytes [68, AC, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtOpenFile + B 775D5CE3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtOpenProcess + 6 775D5D8E 4 Bytes [A8, AD, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtOpenProcess + B 775D5D93 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtOpenProcessToken + B 775D5DA3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtOpenProcessTokenEx + 6 775D5DAE 4 Bytes [A8, AE, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtOpenProcessTokenEx + B 775D5DB3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtOpenThread + 6 775D5E0E 4 Bytes [68, AD, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtOpenThread + B 775D5E13 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtOpenThreadToken + 6 775D5E1E 4 Bytes [68, AE, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtOpenThreadToken + B 775D5E23 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtOpenThreadTokenEx + B 775D5E33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtQueryAttributesFile + 6 775D5F3E 4 Bytes [A8, AC, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtQueryAttributesFile + B 775D5F43 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtQueryFullAttributesFile + B 775D5FF3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtSetInformationFile + 6 775D663E 4 Bytes [28, AD, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtSetInformationFile + B 775D6643 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtSetInformationThread + 6 775D669E 4 Bytes [28, AE, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtSetInformationThread + B 775D66A3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtUnmapViewOfSection + 6 775D69BE 4 Bytes [68, AF, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!NtUnmapViewOfSection + B 775D69C3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 006D03FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 006D01F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[2392] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtCreateFile + 6 775D55CE 4 Bytes [28, 20, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtCreateFile + B 775D55D3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtMapViewOfSection + 6 775D5C2E 4 Bytes [28, 23, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtMapViewOfSection + B 775D5C33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtOpenFile + 6 775D5CDE 4 Bytes [68, 20, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtOpenFile + B 775D5CE3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtOpenProcess + 6 775D5D8E 4 Bytes [A8, 21, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtOpenProcess + B 775D5D93 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtOpenProcessToken + B 775D5DA3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtOpenProcessTokenEx + 6 775D5DAE 4 Bytes [A8, 22, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtOpenProcessTokenEx + B 775D5DB3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtOpenThread + 6 775D5E0E 4 Bytes [68, 21, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtOpenThread + B 775D5E13 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtOpenThreadToken + 6 775D5E1E 4 Bytes [68, 22, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtOpenThreadToken + B 775D5E23 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtOpenThreadTokenEx + B 775D5E33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtQueryAttributesFile + 6 775D5F3E 4 Bytes [A8, 20, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtQueryAttributesFile + B 775D5F43 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtQueryFullAttributesFile + B 775D5FF3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtSetInformationFile + 6 775D663E 4 Bytes [28, 21, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtSetInformationFile + B 775D6643 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtSetInformationThread + 6 775D669E 4 Bytes [28, 22, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtSetInformationThread + B 775D66A3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtUnmapViewOfSection + 6 775D69BE 4 Bytes [68, 23, 60, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!NtUnmapViewOfSection + B 775D69C3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 008103FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 008101F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[2488] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtCreateFile + 6 775D55CE 4 Bytes [28, B8, 6F, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtCreateFile + B 775D55D3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtMapViewOfSection + 6 775D5C2E 4 Bytes [28, BB, 6F, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtMapViewOfSection + B 775D5C33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtOpenFile + 6 775D5CDE 4 Bytes [68, B8, 6F, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtOpenFile + B 775D5CE3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtOpenProcess + 6 775D5D8E 4 Bytes [A8, B9, 6F, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtOpenProcess + B 775D5D93 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtOpenProcessToken + B 775D5DA3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtOpenProcessTokenEx + 6 775D5DAE 4 Bytes [A8, BA, 6F, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtOpenProcessTokenEx + B 775D5DB3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtOpenThread + 6 775D5E0E 4 Bytes [68, B9, 6F, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtOpenThread + B 775D5E13 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtOpenThreadToken + 6 775D5E1E 4 Bytes [68, BA, 6F, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtOpenThreadToken + B 775D5E23 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtOpenThreadTokenEx + B 775D5E33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtQueryAttributesFile + 6 775D5F3E 4 Bytes [A8, B8, 6F, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtQueryAttributesFile + B 775D5F43 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtQueryFullAttributesFile + B 775D5FF3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtSetInformationFile + 6 775D663E 4 Bytes [28, B9, 6F, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtSetInformationFile + B 775D6643 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtSetInformationThread + 6 775D669E 4 Bytes [28, BA, 6F, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtSetInformationThread + B 775D66A3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtUnmapViewOfSection + 6 775D69BE 4 Bytes [68, BB, 6F, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!NtUnmapViewOfSection + B 775D69C3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 008C03FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 008C01F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[2516] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtCreateFile + 6 775D55CE 4 Bytes [28, A4, AA, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtCreateFile + B 775D55D3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtMapViewOfSection + 6 775D5C2E 4 Bytes [28, A7, AA, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtMapViewOfSection + B 775D5C33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtOpenFile + 6 775D5CDE 4 Bytes [68, A4, AA, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtOpenFile + B 775D5CE3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtOpenProcess + 6 775D5D8E 4 Bytes [A8, A5, AA, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtOpenProcess + B 775D5D93 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtOpenProcessToken + B 775D5DA3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtOpenProcessTokenEx + 6 775D5DAE 4 Bytes [A8, A6, AA, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtOpenProcessTokenEx + B 775D5DB3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtOpenThread + 6 775D5E0E 4 Bytes [68, A5, AA, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtOpenThread + B 775D5E13 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtOpenThreadToken + 6 775D5E1E 4 Bytes [68, A6, AA, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtOpenThreadToken + B 775D5E23 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtOpenThreadTokenEx + B 775D5E33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtQueryAttributesFile + 6 775D5F3E 4 Bytes [A8, A4, AA, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtQueryAttributesFile + B 775D5F43 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtQueryFullAttributesFile + B 775D5FF3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtSetInformationFile + 6 775D663E 4 Bytes [28, A5, AA, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtSetInformationFile + B 775D6643 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtSetInformationThread + 6 775D669E 4 Bytes [28, A6, AA, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtSetInformationThread + B 775D66A3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtUnmapViewOfSection + 6 775D69BE 4 Bytes [68, A7, AA, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!NtUnmapViewOfSection + B 775D69C3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 00B703FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 00B701F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[2528] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtCreateFile + 6 775D55CE 4 Bytes [28, 68, D4, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtCreateFile + B 775D55D3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtMapViewOfSection + 6 775D5C2E 4 Bytes [28, 6B, D4, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtMapViewOfSection + B 775D5C33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtOpenFile + 6 775D5CDE 4 Bytes [68, 68, D4, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtOpenFile + B 775D5CE3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtOpenProcess + 6 775D5D8E 4 Bytes [A8, 69, D4, 00] {TEST AL, 0x69; AAM 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtOpenProcess + B 775D5D93 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtOpenProcessToken + B 775D5DA3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtOpenProcessTokenEx + 6 775D5DAE 4 Bytes [A8, 6A, D4, 00] {TEST AL, 0x6a; AAM 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtOpenProcessTokenEx + B 775D5DB3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtOpenThread + 6 775D5E0E 4 Bytes [68, 69, D4, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtOpenThread + B 775D5E13 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtOpenThreadToken + 6 775D5E1E 4 Bytes [68, 6A, D4, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtOpenThreadToken + B 775D5E23 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtOpenThreadTokenEx + B 775D5E33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtQueryAttributesFile + 6 775D5F3E 4 Bytes [A8, 68, D4, 00] {TEST AL, 0x68; AAM 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtQueryAttributesFile + B 775D5F43 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtQueryFullAttributesFile + B 775D5FF3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtSetInformationFile + 6 775D663E 4 Bytes [28, 69, D4, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtSetInformationFile + B 775D6643 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtSetInformationThread + 6 775D669E 4 Bytes [28, 6A, D4, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtSetInformationThread + B 775D66A3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtUnmapViewOfSection + 6 775D69BE 4 Bytes [68, 6B, D4, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!NtUnmapViewOfSection + B 775D69C3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 00E103FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 00E101F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[2548] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtCreateFile + 6 775D55CE 4 Bytes [28, 40, 24, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtCreateFile + B 775D55D3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtMapViewOfSection + 6 775D5C2E 4 Bytes [28, 43, 24, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtMapViewOfSection + B 775D5C33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtOpenFile + 6 775D5CDE 4 Bytes [68, 40, 24, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtOpenFile + B 775D5CE3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtOpenProcess + 6 775D5D8E 4 Bytes [A8, 41, 24, 00] {TEST AL, 0x41; AND AL, 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtOpenProcess + B 775D5D93 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtOpenProcessToken + B 775D5DA3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtOpenProcessTokenEx + 6 775D5DAE 4 Bytes [A8, 42, 24, 00] {TEST AL, 0x42; AND AL, 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtOpenProcessTokenEx + B 775D5DB3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtOpenThread + 6 775D5E0E 4 Bytes [68, 41, 24, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtOpenThread + B 775D5E13 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtOpenThreadToken + 6 775D5E1E 4 Bytes [68, 42, 24, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtOpenThreadToken + B 775D5E23 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtOpenThreadTokenEx + B 775D5E33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtQueryAttributesFile + 6 775D5F3E 4 Bytes [A8, 40, 24, 00] {TEST AL, 0x40; AND AL, 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtQueryAttributesFile + B 775D5F43 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtQueryFullAttributesFile + B 775D5FF3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtSetInformationFile + 6 775D663E 4 Bytes [28, 41, 24, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtSetInformationFile + B 775D6643 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtSetInformationThread + 6 775D669E 4 Bytes [28, 42, 24, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtSetInformationThread + B 775D66A3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtUnmapViewOfSection + 6 775D69BE 4 Bytes [68, 43, 24, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!NtUnmapViewOfSection + B 775D69C3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 002A03FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 002A01F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[2568] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtCreateFile + 6 775D55CE 4 Bytes [28, 5C, 0E, 00] {SUB [ESI+ECX+0x0], BL} .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtCreateFile + B 775D55D3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtMapViewOfSection + 6 775D5C2E 4 Bytes [28, 5F, 0E, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtMapViewOfSection + B 775D5C33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtOpenFile + 6 775D5CDE 4 Bytes [68, 5C, 0E, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtOpenFile + B 775D5CE3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtOpenProcess + 6 775D5D8E 4 Bytes [A8, 5D, 0E, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtOpenProcess + B 775D5D93 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtOpenProcessToken + B 775D5DA3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtOpenProcessTokenEx + 6 775D5DAE 4 Bytes [A8, 5E, 0E, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtOpenProcessTokenEx + B 775D5DB3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtOpenThread + 6 775D5E0E 4 Bytes [68, 5D, 0E, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtOpenThread + B 775D5E13 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtOpenThreadToken + 6 775D5E1E 4 Bytes [68, 5E, 0E, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtOpenThreadToken + B 775D5E23 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtOpenThreadTokenEx + B 775D5E33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtQueryAttributesFile + 6 775D5F3E 4 Bytes [A8, 5C, 0E, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtQueryAttributesFile + B 775D5F43 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtQueryFullAttributesFile + B 775D5FF3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtSetInformationFile + 6 775D663E 4 Bytes [28, 5D, 0E, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtSetInformationFile + B 775D6643 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtSetInformationThread + 6 775D669E 4 Bytes [28, 5E, 0E, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtSetInformationThread + B 775D66A3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtUnmapViewOfSection + 6 775D69BE 4 Bytes [68, 5F, 0E, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!NtUnmapViewOfSection + B 775D69C3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 001403FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 001401F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[2584] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtCreateFile + 6 775D55CE 4 Bytes [28, B4, B0, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtCreateFile + B 775D55D3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtMapViewOfSection + 6 775D5C2E 4 Bytes [28, B7, B0, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtMapViewOfSection + B 775D5C33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtOpenFile + 6 775D5CDE 4 Bytes [68, B4, B0, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtOpenFile + B 775D5CE3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtOpenProcess + 6 775D5D8E 4 Bytes [A8, B5, B0, 00] {TEST AL, 0xb5; MOV AL, 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtOpenProcess + B 775D5D93 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtOpenProcessToken + B 775D5DA3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtOpenProcessTokenEx + 6 775D5DAE 4 Bytes [A8, B6, B0, 00] {TEST AL, 0xb6; MOV AL, 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtOpenProcessTokenEx + B 775D5DB3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtOpenThread + 6 775D5E0E 4 Bytes [68, B5, B0, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtOpenThread + B 775D5E13 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtOpenThreadToken + 6 775D5E1E 4 Bytes [68, B6, B0, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtOpenThreadToken + B 775D5E23 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtOpenThreadTokenEx + B 775D5E33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtQueryAttributesFile + 6 775D5F3E 4 Bytes [A8, B4, B0, 00] {TEST AL, 0xb4; MOV AL, 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtQueryAttributesFile + B 775D5F43 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtQueryFullAttributesFile + B 775D5FF3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtSetInformationFile + 6 775D663E 4 Bytes [28, B5, B0, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtSetInformationFile + B 775D6643 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtSetInformationThread + 6 775D669E 4 Bytes [28, B6, B0, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtSetInformationThread + B 775D66A3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtUnmapViewOfSection + 6 775D69BE 4 Bytes [68, B7, B0, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!NtUnmapViewOfSection + B 775D69C3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 00BD03FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 00BD01F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[2600] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtCreateFile + 6 775D55CE 4 Bytes [28, 74, C2, 00] {SUB [EDX+EAX*8+0x0], DH} .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtCreateFile + B 775D55D3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtMapViewOfSection + 6 775D5C2E 4 Bytes [28, 77, C2, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtMapViewOfSection + B 775D5C33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtOpenFile + 6 775D5CDE 4 Bytes [68, 74, C2, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtOpenFile + B 775D5CE3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtOpenProcess + 6 775D5D8E 4 Bytes [A8, 75, C2, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtOpenProcess + B 775D5D93 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtOpenProcessToken + B 775D5DA3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtOpenProcessTokenEx + 6 775D5DAE 4 Bytes [A8, 76, C2, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtOpenProcessTokenEx + B 775D5DB3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtOpenThread + 6 775D5E0E 4 Bytes [68, 75, C2, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtOpenThread + B 775D5E13 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtOpenThreadToken + 6 775D5E1E 4 Bytes [68, 76, C2, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtOpenThreadToken + B 775D5E23 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtOpenThreadTokenEx + B 775D5E33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtQueryAttributesFile + 6 775D5F3E 4 Bytes [A8, 74, C2, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtQueryAttributesFile + B 775D5F43 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtQueryFullAttributesFile + B 775D5FF3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtSetInformationFile + 6 775D663E 4 Bytes [28, 75, C2, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtSetInformationFile + B 775D6643 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtSetInformationThread + 6 775D669E 4 Bytes [28, 76, C2, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtSetInformationThread + B 775D66A3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtUnmapViewOfSection + 6 775D69BE 4 Bytes [68, 77, C2, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!NtUnmapViewOfSection + B 775D69C3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 00DF03FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 00DF01F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[2616] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtCreateFile + 6 775D55CE 4 Bytes [28, 4C, FC, 00] {SUB [ESP+EDI*8+0x0], CL} .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtCreateFile + B 775D55D3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtMapViewOfSection + 6 775D5C2E 4 Bytes [28, 4F, FC, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtMapViewOfSection + B 775D5C33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtOpenFile + 6 775D5CDE 4 Bytes [68, 4C, FC, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtOpenFile + B 775D5CE3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtOpenProcess + 6 775D5D8E 4 Bytes [A8, 4D, FC, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtOpenProcess + B 775D5D93 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtOpenProcessToken + B 775D5DA3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtOpenProcessTokenEx + 6 775D5DAE 4 Bytes [A8, 4E, FC, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtOpenProcessTokenEx + B 775D5DB3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtOpenThread + 6 775D5E0E 4 Bytes [68, 4D, FC, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtOpenThread + B 775D5E13 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtOpenThreadToken + 6 775D5E1E 4 Bytes [68, 4E, FC, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtOpenThreadToken + B 775D5E23 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtOpenThreadTokenEx + B 775D5E33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtQueryAttributesFile + 6 775D5F3E 4 Bytes [A8, 4C, FC, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtQueryAttributesFile + B 775D5F43 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtQueryFullAttributesFile + B 775D5FF3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtSetInformationFile + 6 775D663E 4 Bytes [28, 4D, FC, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtSetInformationFile + B 775D6643 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtSetInformationThread + 6 775D669E 4 Bytes [28, 4E, FC, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtSetInformationThread + B 775D66A3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtUnmapViewOfSection + 6 775D69BE 4 Bytes [68, 4F, FC, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!NtUnmapViewOfSection + B 775D69C3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 010E03FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 010E01F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[2692] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtCreateFile + 6 775D55CE 4 Bytes [28, 40, 23, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtCreateFile + B 775D55D3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtMapViewOfSection + 6 775D5C2E 4 Bytes [28, 43, 23, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtMapViewOfSection + B 775D5C33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtOpenFile + 6 775D5CDE 4 Bytes [68, 40, 23, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtOpenFile + B 775D5CE3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtOpenProcess + 6 775D5D8E 4 Bytes [A8, 41, 23, 00] {TEST AL, 0x41; AND EAX, [EAX]} .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtOpenProcess + B 775D5D93 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtOpenProcessToken + B 775D5DA3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtOpenProcessTokenEx + 6 775D5DAE 4 Bytes [A8, 42, 23, 00] {TEST AL, 0x42; AND EAX, [EAX]} .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtOpenProcessTokenEx + B 775D5DB3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtOpenThread + 6 775D5E0E 4 Bytes [68, 41, 23, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtOpenThread + B 775D5E13 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtOpenThreadToken + 6 775D5E1E 4 Bytes [68, 42, 23, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtOpenThreadToken + B 775D5E23 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtOpenThreadTokenEx + B 775D5E33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtQueryAttributesFile + 6 775D5F3E 4 Bytes [A8, 40, 23, 00] {TEST AL, 0x40; AND EAX, [EAX]} .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtQueryAttributesFile + B 775D5F43 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtQueryFullAttributesFile + B 775D5FF3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtSetInformationFile + 6 775D663E 4 Bytes [28, 41, 23, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtSetInformationFile + B 775D6643 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtSetInformationThread + 6 775D669E 4 Bytes [28, 42, 23, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtSetInformationThread + B 775D66A3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtUnmapViewOfSection + 6 775D69BE 4 Bytes [68, 43, 23, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!NtUnmapViewOfSection + B 775D69C3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 003003FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 003001F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[2764] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\System32\WUDFHost.exe[2972] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtCreateFile + 6 775D55CE 4 Bytes [28, 84, 10, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtCreateFile + B 775D55D3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtMapViewOfSection + 6 775D5C2E 4 Bytes [28, 87, 10, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtMapViewOfSection + B 775D5C33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtOpenFile + 6 775D5CDE 4 Bytes [68, 84, 10, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtOpenFile + B 775D5CE3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtOpenProcess + 6 775D5D8E 4 Bytes [A8, 85, 10, 00] {TEST AL, 0x85; ADC [EAX], AL} .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtOpenProcess + B 775D5D93 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtOpenProcessToken + B 775D5DA3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtOpenProcessTokenEx + 6 775D5DAE 4 Bytes [A8, 86, 10, 00] {TEST AL, 0x86; ADC [EAX], AL} .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtOpenProcessTokenEx + B 775D5DB3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtOpenThread + 6 775D5E0E 4 Bytes [68, 85, 10, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtOpenThread + B 775D5E13 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtOpenThreadToken + 6 775D5E1E 4 Bytes [68, 86, 10, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtOpenThreadToken + B 775D5E23 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtOpenThreadTokenEx + B 775D5E33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtQueryAttributesFile + 6 775D5F3E 4 Bytes [A8, 84, 10, 00] {TEST AL, 0x84; ADC [EAX], AL} .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtQueryAttributesFile + B 775D5F43 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtQueryFullAttributesFile + B 775D5FF3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtSetInformationFile + 6 775D663E 4 Bytes [28, 85, 10, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtSetInformationFile + B 775D6643 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtSetInformationThread + 6 775D669E 4 Bytes [28, 86, 10, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtSetInformationThread + B 775D66A3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtUnmapViewOfSection + 6 775D69BE 4 Bytes [68, 87, 10, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!NtUnmapViewOfSection + B 775D69C3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 003C03FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 003C01F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[3204] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Program Files\Windows Media Player\wmpnetwk.exe[3304] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\notepad.exe[3508] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Users\Aspiro One\Desktop\22wkbef7.exe[3516] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtCreateFile + 6 775D55CE 4 Bytes [28, 20, A5, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtCreateFile + B 775D55D3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtMapViewOfSection + 6 775D5C2E 4 Bytes [28, 23, A5, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtMapViewOfSection + B 775D5C33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtOpenFile + 6 775D5CDE 4 Bytes [68, 20, A5, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtOpenFile + B 775D5CE3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtOpenProcess + 6 775D5D8E 4 Bytes [A8, 21, A5, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtOpenProcess + B 775D5D93 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtOpenProcessToken + B 775D5DA3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtOpenProcessTokenEx + 6 775D5DAE 4 Bytes [A8, 22, A5, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtOpenProcessTokenEx + B 775D5DB3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtOpenThread + 6 775D5E0E 4 Bytes [68, 21, A5, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtOpenThread + B 775D5E13 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtOpenThreadToken + 6 775D5E1E 4 Bytes [68, 22, A5, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtOpenThreadToken + B 775D5E23 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtOpenThreadTokenEx + B 775D5E33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtQueryAttributesFile + 6 775D5F3E 4 Bytes [A8, 20, A5, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtQueryAttributesFile + B 775D5F43 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtQueryFullAttributesFile + B 775D5FF3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtSetInformationFile + 6 775D663E 4 Bytes [28, 21, A5, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtSetInformationFile + B 775D6643 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtSetInformationThread + 6 775D669E 4 Bytes [28, 22, A5, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtSetInformationThread + B 775D66A3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtUnmapViewOfSection + 6 775D69BE 4 Bytes [68, 23, A5, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!NtUnmapViewOfSection + B 775D69C3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 00B103FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 00B101F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[3628] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\System32\svchost.exe[3880] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe[4168] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\system32\sppsvc.exe[4272] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\System32\svchost.exe[4332] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtCreateFile + 6 775D55CE 4 Bytes [28, 24, CF, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtCreateFile + B 775D55D3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtMapViewOfSection + 6 775D5C2E 4 Bytes [28, 27, CF, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtMapViewOfSection + B 775D5C33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtOpenFile + 6 775D5CDE 4 Bytes [68, 24, CF, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtOpenFile + B 775D5CE3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtOpenProcess + 6 775D5D8E 4 Bytes [A8, 25, CF, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtOpenProcess + B 775D5D93 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtOpenProcessToken + B 775D5DA3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtOpenProcessTokenEx + 6 775D5DAE 4 Bytes [A8, 26, CF, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtOpenProcessTokenEx + B 775D5DB3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtOpenThread + 6 775D5E0E 4 Bytes [68, 25, CF, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtOpenThread + B 775D5E13 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtOpenThreadToken + 6 775D5E1E 4 Bytes [68, 26, CF, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtOpenThreadToken + B 775D5E23 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtOpenThreadTokenEx + B 775D5E33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtQueryAttributesFile + 6 775D5F3E 4 Bytes [A8, 24, CF, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtQueryAttributesFile + B 775D5F43 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtQueryFullAttributesFile + B 775D5FF3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtSetInformationFile + 6 775D663E 4 Bytes [28, 25, CF, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtSetInformationFile + B 775D6643 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtSetInformationThread + 6 775D669E 4 Bytes [28, 26, CF, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtSetInformationThread + B 775D66A3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtUnmapViewOfSection + 6 775D69BE 4 Bytes [68, 27, CF, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!NtUnmapViewOfSection + B 775D69C3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 00DC03FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 00DC01F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[4744] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Windows\system32\wuauclt.exe[4996] kernel32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtCreateFile + 6 775D55CE 4 Bytes [28, D0, 3D, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtCreateFile + B 775D55D3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtMapViewOfSection + 6 775D5C2E 4 Bytes [28, D3, 3D, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtMapViewOfSection + B 775D5C33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtOpenFile + 6 775D5CDE 4 Bytes [68, D0, 3D, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtOpenFile + B 775D5CE3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtOpenProcess + 6 775D5D8E 4 Bytes [A8, D1, 3D, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtOpenProcess + B 775D5D93 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtOpenProcessToken + B 775D5DA3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtOpenProcessTokenEx + 6 775D5DAE 4 Bytes [A8, D2, 3D, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtOpenProcessTokenEx + B 775D5DB3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtOpenThread + 6 775D5E0E 4 Bytes [68, D1, 3D, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtOpenThread + B 775D5E13 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtOpenThreadToken + 6 775D5E1E 4 Bytes [68, D2, 3D, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtOpenThreadToken + B 775D5E23 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtOpenThreadTokenEx + B 775D5E33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtQueryAttributesFile + 6 775D5F3E 4 Bytes [A8, D0, 3D, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtQueryAttributesFile + B 775D5F43 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtQueryFullAttributesFile + B 775D5FF3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtSetInformationFile + 6 775D663E 4 Bytes [28, D1, 3D, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtSetInformationFile + B 775D6643 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtSetInformationThread + 6 775D669E 4 Bytes [28, D2, 3D, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtSetInformationThread + B 775D66A3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtUnmapViewOfSection + 6 775D69BE 4 Bytes [68, D3, 3D, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!NtUnmapViewOfSection + B 775D69C3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 004303FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 004301F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[5568] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtCreateFile + 6 775D55CE 4 Bytes [28, 48, A8, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtCreateFile + B 775D55D3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtMapViewOfSection + 6 775D5C2E 4 Bytes [28, 4B, A8, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtMapViewOfSection + B 775D5C33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtOpenFile + 6 775D5CDE 4 Bytes [68, 48, A8, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtOpenFile + B 775D5CE3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtOpenProcess + 6 775D5D8E 4 Bytes [A8, 49, A8, 00] {TEST AL, 0x49; TEST AL, 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtOpenProcess + B 775D5D93 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtOpenProcessToken + B 775D5DA3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtOpenProcessTokenEx + 6 775D5DAE 4 Bytes [A8, 4A, A8, 00] {TEST AL, 0x4a; TEST AL, 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtOpenProcessTokenEx + B 775D5DB3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtOpenThread + 6 775D5E0E 4 Bytes [68, 49, A8, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtOpenThread + B 775D5E13 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtOpenThreadToken + 6 775D5E1E 4 Bytes [68, 4A, A8, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtOpenThreadToken + B 775D5E23 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtOpenThreadTokenEx + B 775D5E33 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtQueryAttributesFile + 6 775D5F3E 4 Bytes [A8, 48, A8, 00] {TEST AL, 0x48; TEST AL, 0x0} .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtQueryAttributesFile + B 775D5F43 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtQueryFullAttributesFile + B 775D5FF3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtSetInformationFile + 6 775D663E 4 Bytes [28, 49, A8, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtSetInformationFile + B 775D6643 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtSetInformationThread + 6 775D669E 4 Bytes [28, 4A, A8, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtSetInformationThread + B 775D66A3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtUnmapViewOfSection + 6 775D69BE 4 Bytes [68, 4B, A8, 00] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!NtUnmapViewOfSection + B 775D69C3 1 Byte [E2] .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!LdrUnloadDll 775EC86E 5 Bytes JMP 00B203FC .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] ntdll.dll!LdrLoadDll 775F223E 5 Bytes JMP 00B201F8 .text C:\Program Files\Google\Chrome\Application\chrome.exe[6008] KERNEL32.dll!GetBinaryTypeW + 70 774C69F4 1 Byte [62] ---- Devices - GMER 2.1 ---- AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys ---- Files - GMER 2.1 ---- File C:\Windows\servicing\Packages\Package_40_for_KB2798162~31bf3856ad364e35~x86~~6.1.1.5.cat 165346 bytes File C:\Windows\servicing\Packages\Package_40_for_KB2798162~31bf3856ad364e35~x86~~6.1.1.5.mum 13015 bytes File C:\Windows\servicing\Packages\Package_80_for_KB2798162~31bf3856ad364e35~x86~~6.1.1.5.cat 7722 bytes File C:\Windows\servicing\Packages\Package_80_for_KB2798162~31bf3856ad364e35~x86~~6.1.1.5.mum 8898 bytes File C:\Windows\servicing\Packages\Package_81_for_KB2798162~31bf3856ad364e35~x86~~6.1.1.5.cat 7722 bytes File C:\Windows\servicing\Packages\Package_81_for_KB2798162~31bf3856ad364e35~x86~~6.1.1.5.mum 8898 bytes File C:\Windows\servicing\Packages\Package_78_for_KB2798162~31bf3856ad364e35~x86~~6.1.1.5.cat 11970 bytes File C:\Windows\servicing\Packages\Package_78_for_KB2798162~31bf3856ad364e35~x86~~6.1.1.5.mum 10825 bytes File C:\Windows\servicing\Packages\Package_79_for_KB2798162~31bf3856ad364e35~x86~~6.1.1.5.cat 10058 bytes File C:\Windows\servicing\Packages\Package_79_for_KB2798162~31bf3856ad364e35~x86~~6.1.1.5.mum 11789 bytes File C:\Windows\servicing\Packages\Package_62_for_KB2798162~31bf3856ad364e35~x86~~6.1.1.5.cat 11234 bytes File C:\Windows\servicing\Packages\Package_62_for_KB2798162~31bf3856ad364e35~x86~~6.1.1.5.mum 21512 bytes File C:\Windows\SoftwareDistribution\Download\883e93dba8223010bb6831032b4ceae5 0 bytes File C:\Windows\SoftwareDistribution\Download\883e93dba8223010bb6831032b4ceae5\BIT3F7C.tmp 130600 bytes executable File C:\Windows\SoftwareDistribution\Download\8bbab812f19a970301176c5121e4bd4c\BIT4364.tmp 43809 bytes File C:\Windows\winsxs\Manifests\x86_8c3eb9ca2caa78fb873d66d3c41a68c5_b03f5f7f11d50a3a_6.1.7601.18205_none_0b7e134a7b14dd62.manifest 628 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-s..ty-spp-ux.resources_31bf3856ad364e35_6.1.7601.18120_pl-pl_fa26b795c7facd87.manifest 4655 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-s..ty-spp-ux.resources_31bf3856ad364e35_6.1.7601.22290_pl-pl_fa64a4ece15130e8.manifest 4655 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-scripting_31bf3856ad364e35_6.1.7601.18283_none_4a22f0c95ed5d6f2.manifest 107052 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-scripting_31bf3856ad364e35_6.1.7601.22480_none_4aa98e9c77f627de.manifest 107052 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18270_none_23d8b7cfb3b95442.manifest 12919 bytes File C:\Windows\winsxs\Manifests\x86_38053612b8a8c7682f4662734be08766_31bf3856ad364e35_6.1.7601.21890_none_c7854bb1cf4ec54d.manifest 645 bytes File C:\Windows\winsxs\Manifests\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.1.7601.18205_none_99441e0948ed8ae7.manifest 2030 bytes File C:\Windows\winsxs\Manifests\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.1.7601.22380_none_827eeb81628d3580.manifest 2030 bytes File C:\Windows\winsxs\Manifests\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.1.7601.17755_none_ff81bd3bc383baef.manifest 2730 bytes File C:\Windows\winsxs\Manifests\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.1.7601.21890_none_e8b8898bdd27002c.manifest 2730 bytes File C:\Windows\winsxs\Manifests\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.1.7601.17755_none_93bcefcfedcf4722.manifest 2134 bytes File C:\Windows\winsxs\Manifests\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.1.7601.21890_none_7cf3bc2007728c5f.manifest 2134 bytes File C:\Windows\winsxs\Manifests\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.1.7601.17755_none_06bd9a54eb82af1c.manifest 6923 bytes File C:\Windows\winsxs\Manifests\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.1.7601.21890_none_eff466a50525f459.manifest 6923 bytes File C:\Windows\winsxs\Manifests\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.1.7601.17755_none_e85004fcb7789704.manifest 2006 bytes File C:\Windows\winsxs\Manifests\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.1.7601.21890_none_d186d14cd11bdc41.manifest 2006 bytes File C:\Windows\winsxs\Manifests\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.1.7601.18205_none_0afa8883f490116d.manifest 2032 bytes File C:\Windows\winsxs\Manifests\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.1.7601.22380_none_f43555fc0e2fbc06.manifest 2032 bytes File C:\Windows\winsxs\Manifests\x86_netfx35linq-system.addin_31bf3856ad364e35_6.1.7601.17755_none_3adfb777763586b0.manifest 2143 bytes File C:\Windows\winsxs\Manifests\x86_netfx35linq-system.addin_31bf3856ad364e35_6.1.7601.21890_none_3b3913208f78178b.manifest 2143 bytes File C:\Windows\winsxs\Manifests\x86_oxpsconverter_31bf3856ad364e35_6.1.7601.17933_none_abe646740d68dabb.manifest 3705 bytes File C:\Windows\winsxs\Manifests\x86_oxpsconverter_31bf3856ad364e35_6.1.7601.22091_none_ac2cd95f26b92598.manifest 3705 bytes File C:\Windows\winsxs\Manifests\x86_presentationcore_31bf3856ad364e35_6.1.7601.17755_none_ae0e4090ee55e5f0.manifest 4269 bytes File C:\Windows\winsxs\Manifests\x86_presentationcore_31bf3856ad364e35_6.1.7601.18140_none_ae13ecdeee527603.manifest 4445 bytes File C:\Windows\winsxs\Manifests\x86_presentationcore_31bf3856ad364e35_6.1.7601.21890_none_ae679c3a079876cb.manifest 4445 bytes File C:\Windows\winsxs\Manifests\x86_presentationcore_31bf3856ad364e35_6.1.7601.22309_none_aed1cdda0747873f.manifest 4445 bytes File C:\Windows\winsxs\Manifests\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.1.7601.17966_none_a7b167c8aa0736e7.manifest 7241 bytes File C:\Windows\winsxs\Manifests\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.1.7601.22126_none_a8661c65c3049a2f.manifest 7241 bytes File C:\Windows\winsxs\Manifests\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.1.7601.17966_none_fa098f88fd1d4793.manifest 2228 bytes File C:\Windows\winsxs\Manifests\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.1.7601.22126_none_e337eacb16c83c8b.manifest 2228 bytes File C:\Windows\winsxs\Manifests\x86_bc6f2b017b022612d115fd57198e6060_31bf3856ad364e35_6.1.7601.21890_none_8d6b37d0cc0ee188.manifest 646 bytes File C:\Windows\winsxs\Manifests\x86_08588aa642c516a174ea17b881c5f876_31bf3856ad364e35_6.1.7601.18270_none_09f6468ae3a1855d.manifest 1033 bytes File C:\Windows\winsxs\Manifests\x86_5c8005d3c1ce18fa940cabb9af9de704_31bf3856ad364e35_6.1.7601.18140_none_d5869e0523a219fa.manifest 648 bytes File C:\Windows\winsxs\Manifests\x86_7ca760f5578465ed5e0d3087d3fad7c9_b77a5c561934e089_6.1.7601.17966_none_dab18ff8b874c4cd.manifest 637 bytes File C:\Windows\winsxs\Manifests\x86_484c204c2e98dd53d5be79cf3f2511c5_31bf3856ad364e35_6.1.7601.22091_none_09290f04ea088095.manifest 692 bytes File C:\Windows\winsxs\Manifests\x86_a1cb2c25b8968bd728fb6b8dfb37a659_b77a5c561934e089_6.1.7601.21890_none_54bc059e7d65d19a.manifest 623 bytes File C:\Windows\winsxs\Manifests\x86_a1e48831971687e0ff1d997800cb601c_b77a5c561934e089_6.1.7601.22126_none_836104d754c9ab08.manifest 645 bytes File C:\Windows\winsxs\Manifests\x86_a1f3298a059cd996afd881bc05c68e9b_b77a5c561934e089_6.1.7601.17966_none_6ad7fa2a6a23e38c.manifest 639 bytes File C:\Windows\winsxs\Manifests\x86_a2185fc1882ca77c18327af1bcc8d0cd_b03f5f7f11d50a3a_6.1.7601.22191_none_befc6dde73cd47cb.manifest 622 bytes File C:\Windows\winsxs\Manifests\x86_cc67bb268549bca4bfcdfd201c4ca92b_b77a5c561934e089_6.1.7601.17966_none_8af9f23a8ebbf672.manifest 622 bytes File C:\Windows\winsxs\Manifests\x86_dab9590999164c84ae99b9294d617a10_31bf3856ad364e35_6.1.7601.22309_none_26341d2e97c1b83d.manifest 645 bytes File C:\Windows\winsxs\Manifests\x86_dad42efe9f5c6691790619fb0e8bd2bc_31bf3856ad364e35_6.1.7601.18205_none_103aa13dd6df404e.manifest 707 bytes File C:\Windows\winsxs\Manifests\x86_ac2796e968119b7dfbeed5faa6cc4774_31bf3856ad364e35_6.1.7601.22097_none_ae90e6150b1ef74d.manifest 692 bytes File C:\Windows\winsxs\Manifests\x86_3c340d081f67e72e7cf2bf756635cc63_31bf3856ad364e35_6.1.7601.18276_none_77f15851b053c465.manifest 717 bytes File C:\Windows\winsxs\Manifests\x86_49b28029b99684603d3b3aec82ecb34e_b77a5c561934e089_6.1.7601.21890_none_5f74c89f2abbd1ce.manifest 625 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-directwrite_31bf3856ad364e35_6.1.7601.18245_none_d4854d195dc8b815.manifest 2106 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-directwrite_31bf3856ad364e35_6.1.7601.22434_none_d518bb6c76df1fbe.manifest 2106 bytes File C:\Windows\winsxs\Manifests\x86_b9b638b3db7627f18507dfafb2c78403_31bf3856ad364e35_6.1.7601.18140_none_3f6a5ce5b06c408e.manifest 642 bytes File C:\Windows\winsxs\Manifests\x86_b9d52d0ef072b321001270ecc8f89b1f_b77a5c561934e089_6.1.7601.17966_none_39fca12b00551a06.manifest 645 bytes File C:\Windows\winsxs\Manifests\x86_ba9e648c0068bed503bf0a9fd3d75a19_31bf3856ad364e35_6.1.7601.18288_none_28925863f828bc0e.manifest 694 bytes File C:\Windows\winsxs\Manifests\x86_1d78c03d4485d1b353a7f3d706a781a9_31bf3856ad364e35_6.1.7601.22472_none_cfb1e2833e729f77.manifest 730 bytes File C:\Windows\winsxs\Manifests\x86_f307844f87c6d388494649d49e6947fd_b03f5f7f11d50a3a_6.1.7601.22191_none_5f125347fe2908cc.manifest 630 bytes File C:\Windows\winsxs\Manifests\x86_0638e538810d1440762f37f4a04c33a0_31bf3856ad364e35_6.1.7601.22480_none_13f975eafb062402.manifest 697 bytes File C:\Windows\winsxs\Manifests\x86_068d86b5f84bba91a2e6f476b244cc28_31bf3856ad364e35_6.1.7601.17755_none_4fc10870c143895e.manifest 654 bytes File C:\Windows\winsxs\Manifests\x86_069315972ac38c6a25b1ef3d6cf066b7_b77a5c561934e089_6.1.7601.18027_none_68f611972c8e6723.manifest 629 bytes File C:\Windows\winsxs\Manifests\x86_119d2a1cf82292079aacac2e30f2c14c_b03f5f7f11d50a3a_6.1.7601.18205_none_0fc53cbcfa63fb57.manifest 618 bytes File C:\Windows\winsxs\Manifests\x86_11f0356043476e92254a078836335661_31bf3856ad364e35_6.1.7601.17755_none_f3362e29ab50b857.manifest 655 bytes File C:\Windows\winsxs\Manifests\x86_b31f218faf7ba92c79f244be81286b49_b77a5c561934e089_6.1.7601.18027_none_2e0523dfdb9696db.manifest 637 bytes File C:\Windows\winsxs\Manifests\x86_b31fc8b9a1ea1549131b286aeaecbb18_b77a5c561934e089_6.1.7601.21890_none_a33757f7c05c56ea.manifest 637 bytes File C:\Windows\winsxs\Manifests\x86_7bc7edc8f426072251b63a9ed00e4eb8_b03f5f7f11d50a3a_6.1.7601.17952_none_f13b8087e611e3ce.manifest 625 bytes File C:\Windows\winsxs\Manifests\x86_9d4ee8c19b1043da160b478fa19969bb_b77a5c561934e089_6.1.7601.17952_none_3cee5832238d3f50.manifest 616 bytes File C:\Windows\winsxs\Manifests\x86_904da820e21f4067a4de7a42d1d27748_31bf3856ad364e35_6.1.7601.18140_none_33af1c8e93ed71a0.manifest 646 bytes File C:\Windows\winsxs\Manifests\x86_40fe50b841da55c175be8d7251c73d67_31bf3856ad364e35_6.1.7601.22290_none_87f6e17f102e1523.manifest 711 bytes File C:\Windows\winsxs\Manifests\x86_65d9e00f1d5266fdfe89def52b28cf94_b03f5f7f11d50a3a_6.1.7601.17966_none_0edeb9b6b5c14b24.manifest 631 bytes File C:\Windows\winsxs\Manifests\x86_591619a83239bdfa0e5b3cc10243b294_31bf3856ad364e35_6.1.7601.22309_none_941928a756487e42.manifest 652 bytes File C:\Windows\winsxs\Manifests\x86_19873939dcdabed6a504a02ce1320587_b77a5c561934e089_6.1.7601.21890_none_6f7696e17000b793.manifest 629 bytes File C:\Windows\winsxs\Manifests\x86_1b5b596d0168daf94ded04f92e7cb40b_31bf3856ad364e35_6.1.7601.22380_none_d23efefdc42d910d.manifest 1044 bytes File C:\Windows\winsxs\Manifests\x86_27fedb8463a9a40b47e04c0b0cf06d7f_b03f5f7f11d50a3a_6.1.7601.22110_none_4af2bec22232765f.manifest 625 bytes File C:\Windows\winsxs\Manifests\x86_37f79d37a8abdffd3527b7fa915802a4_31bf3856ad364e35_6.1.7601.22309_none_09021bccab757bab.manifest 642 bytes File C:\Windows\winsxs\Manifests\x86_4ebe82032460904f0eb2d99fd489ac3b_b03f5f7f11d50a3a_6.1.7601.17755_none_c75423e6545124c6.manifest 626 bytes File C:\Windows\winsxs\Manifests\x86_4f38770d2ffafc751101106aa38f745a_31bf3856ad364e35_6.1.7601.18140_none_fe8130d727159f5d.manifest 645 bytes File C:\Windows\winsxs\Manifests\x86_4f41d944af2db3f0120fc02c77158999_31bf3856ad364e35_6.1.7601.18140_none_1a5ac36c42c6bdc0.manifest 652 bytes File C:\Windows\winsxs\Manifests\x86_4f5b4d8eae2d55544703b796557c0010_31bf3856ad364e35_6.1.7601.21890_none_e4b9aa16d74d5f80.manifest 652 bytes File C:\Windows\winsxs\Manifests\x86_89ff0f8d6c73cbe9d793a332470364df_b03f5f7f11d50a3a_6.1.7601.21890_none_5ebdee172a8dabe7.manifest 626 bytes File C:\Windows\winsxs\Manifests\x86_aa7b8420f0588ed7327348961a178e7e_31bf3856ad364e35_6.1.7601.22309_none_fadb4a260bddf8c3.manifest 640 bytes File C:\Windows\winsxs\Manifests\x86_ef058412c3bb4cabc1da127c7ac70a78_31bf3856ad364e35_6.1.7601.22434_none_074a6ea3dd43bac2.manifest 699 bytes File C:\Windows\winsxs\Manifests\x86_efa7465f95a4af969f1a2ee9f20f9cb1_b77a5c561934e089_6.1.7601.22126_none_60ac17f92a12cca7.manifest 636 bytes File C:\Windows\winsxs\Manifests\x86_0d0ad5b5a4477f901481f35015c853ab_31bf3856ad364e35_6.1.7601.21890_none_b4d1f06915d82d13.manifest 654 bytes File C:\Windows\winsxs\Manifests\x86_wpf-presentationframework_31bf3856ad364e35_6.1.7601.17755_none_70638a57b458041d.manifest 2189 bytes File C:\Windows\winsxs\Manifests\x86_wpf-presentationframework_31bf3856ad364e35_6.1.7601.18140_none_706936a5b4549430.manifest 2189 bytes File C:\Windows\winsxs\Manifests\x86_wpf-presentationframework_31bf3856ad364e35_6.1.7601.21890_none_70bce600cd9a94f8.manifest 2189 bytes File C:\Windows\winsxs\Manifests\x86_wpf-presentationframework_31bf3856ad364e35_6.1.7601.22309_none_712717a0cd49a56c.manifest 2189 bytes File C:\Windows\winsxs\Manifests\x86_56622917b1c0963efc1b5774615791f1_31bf3856ad364e35_6.1.7601.18205_none_60f37535169ca772.manifest 699 bytes File C:\Windows\winsxs\Manifests\x86_c63206847073290e441dba673ffbe267_31bf3856ad364e35_6.1.7601.22091_none_eff14d510bbe1815.manifest 683 bytes File C:\Windows\winsxs\Manifests\x86_6902e241755237f72aad764f84ddd5c0_31bf3856ad364e35_6.1.7601.21890_none_21ba0a8d450d81c2.manifest 653 bytes File C:\Windows\winsxs\Manifests\x86_6951941dcfe7692c0d5722449c86450f_b03f5f7f11d50a3a_6.1.7601.17755_none_95b7bbef29f9d602.manifest 626 bytes File C:\Windows\winsxs\Manifests\x86_8361c55ede8d00e7f5316f66229e071d_b03f5f7f11d50a3a_6.1.7601.22126_none_74ece38049f8b723.manifest 618 bytes File C:\Windows\winsxs\Manifests\msil_system.windows.forms.resources_b77a5c561934e089_6.1.7601.17755_pl-pl_ab33d01af8c1f7ca.manifest 1526 bytes File C:\Windows\winsxs\Manifests\msil_system.windows.forms.resources_b77a5c561934e089_6.1.7601.18027_pl-pl_ab30a48ef8c4d9f7.manifest 1526 bytes File C:\Windows\winsxs\Manifests\msil_system.windows.forms.resources_b77a5c561934e089_6.1.7601.21890_pl-pl_946a9c6b12653d07.manifest 1526 bytes File C:\Windows\winsxs\Manifests\msil_system.windows.forms.resources_b77a5c561934e089_6.1.7601.22191_pl-pl_946a888512655198.manifest 1526 bytes File C:\Windows\winsxs\Manifests\msil_system.design_b03f5f7f11d50a3a_6.1.7601.18027_none_89a71b7bbfc222d5.manifest 2622 bytes File C:\Windows\winsxs\Manifests\msil_system.design_b03f5f7f11d50a3a_6.1.7601.22191_none_72e0ff71d9629a76.manifest 2622 bytes File C:\Windows\winsxs\Manifests\x86_44b7d3d34d82f21d80a35a3a69f6682d_b03f5f7f11d50a3a_6.1.7601.18027_none_f1697174a3596edd.manifest 630 bytes File C:\Windows\winsxs\Manifests\x86_460745ca7a11fe155cb6841056c0d5cf_31bf3856ad364e35_6.1.7601.22484_none_f4527642a03f73d0.manifest 694 bytes File C:\Windows\winsxs\Manifests\x86_92339fae52c150ac5521c74370201f89_b03f5f7f11d50a3a_6.1.7601.22126_none_41b879d806af819e.manifest 626 bytes File C:\Windows\winsxs\Manifests\x86_01eaf9bdec5f74acc25dc981c32dfe5b_31bf3856ad364e35_6.1.7601.18113_none_9bb6f7dfab6396d7.manifest 1371 bytes File C:\Windows\winsxs\Manifests\x86_3a2710b3b3cad92001b58ea56989b2b8_b77a5c561934e089_6.1.7601.17966_none_11c3032f5256e227.manifest 632 bytes File C:\Windows\winsxs\Manifests\x86_3a55623c607627ac6f5392492c3efcbe_b77a5c561934e089_6.1.7601.17966_none_46afc15d5f05d8d0.manifest 630 bytes File C:\Windows\winsxs\Manifests\x86_7322c1266d3964555bdaa68af2182bc8_31bf3856ad364e35_6.1.7601.18245_none_eaf4b026966b1142.manifest 709 bytes File C:\Windows\winsxs\Manifests\x86_97cdae537a5a1a97074c4030264cbcfa_31bf3856ad364e35_6.1.7601.18205_none_99360cee71383f97.manifest 693 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-lddmcore_31bf3856ad364e35_6.1.7601.18228_none_adc9174c41d38200.manifest 13305 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-lddmcore_31bf3856ad364e35_6.1.7601.22410_none_ae5583995af03848.manifest 13305 bytes File C:\Windows\winsxs\Manifests\x86_6df206ea0844e666b6688dec3148ccca_31bf3856ad364e35_6.1.7601.17939_none_7bb0e7546dd7d508.manifest 692 bytes File C:\Windows\winsxs\Manifests\x86_28aa01750b674b91db9c70f91d3fcaba_31bf3856ad364e35_6.1.7601.18276_none_f3d0dc8102ee233d.manifest 709 bytes File C:\Windows\winsxs\Manifests\x86_3385b4326e8071cff635a604d3e2b39a_b77a5c561934e089_6.1.7601.22191_none_acdec31a9c6d4671.manifest 629 bytes File C:\Windows\winsxs\Manifests\x86_3476d1668de9f25cdf902bebc162c893_b77a5c561934e089_6.1.7601.17755_none_b8e1f37d7f6debd9.manifest 623 bytes File C:\Windows\winsxs\Manifests\x86_d90f8bbdc4be8da736a4bbb8254db513_31bf3856ad364e35_6.1.7601.22472_none_ab94ea618c0523c4.manifest 709 bytes File C:\Windows\winsxs\Manifests\x86_d9811b133c9ba49437c6cb960fdca246_31bf3856ad364e35_6.1.7601.18264_none_83e6fdc52094d15c.manifest 700 bytes File C:\Windows\winsxs\Manifests\x86_cbb695b4db92eb130fa85974af73df76_b77a5c561934e089_6.1.7601.21890_none_6e2c227e7d09b11b.manifest 643 bytes File C:\Windows\winsxs\Manifests\x86_2ee725dd3eb04667547f904d9316f6fe_b03f5f7f11d50a3a_6.1.7601.17952_none_0cda6918979879de.manifest 634 bytes File C:\Windows\winsxs\Manifests\x86_a409966c6ff9cc3de0bb6b315582170e_b77a5c561934e089_6.1.7601.17966_none_7fd07ca182dc99b3.manifest 637 bytes File C:\Windows\winsxs\Manifests\x86_7ea13af38984e5c2ddaef156d6322362_b77a5c561934e089_6.1.7601.22110_none_f3a64f48c1c97747.manifest 623 bytes File C:\Windows\winsxs\Manifests\x86_7f202ae8aea3ae6d968cca2b6b7c258e_b77a5c561934e089_6.1.7601.22110_none_aedeaf7771018093.manifest 625 bytes File C:\Windows\winsxs\Manifests\x86_7fb9922fd12cc6e0c8674cd3bc508e00_31bf3856ad364e35_6.1.7601.17966_none_d3c2bedddeea7fa5.manifest 651 bytes File C:\Windows\winsxs\Manifests\x86_a11f03a67c06aa9f507d3f39b3a34c3b_31bf3856ad364e35_6.1.7601.17755_none_662613e568ce0419.manifest 645 bytes File C:\Windows\winsxs\Manifests\x86_a158907973905819d7e720195a7bbb57_b77a5c561934e089_6.1.7601.17755_none_a1cf4c3d96217293.manifest 615 bytes File C:\Windows\winsxs\Manifests\x86_a160686d83a12c5829916ef803941595_b77a5c561934e089_6.1.7601.22126_none_a8d30e4c6764b2da.manifest 628 bytes File C:\Windows\winsxs\Manifests\x86_e93cf254b1278a6e49f36d5c11cb157a_31bf3856ad364e35_6.1.7601.22380_none_aa4e95cb5294d6db.manifest 699 bytes File C:\Windows\winsxs\Manifests\x86_2418faa8270fa81724942f83109a91b3_31bf3856ad364e35_6.1.7601.22044_none_f1184e192c3613f9.manifest 702 bytes File C:\Windows\winsxs\Manifests\x86_24342d9ec895b5b5274f4e8ec583d2c1_31bf3856ad364e35_6.1.7601.21890_none_e8ff943106f1ad50.manifest 655 bytes File C:\Windows\winsxs\Manifests\x86_4b2d7c0fa275d7a0b4d7f7a9538316af_31bf3856ad364e35_6.1.7601.18205_none_216bc3cefc6d1482.manifest 700 bytes File C:\Windows\winsxs\Manifests\x86_c5565f82f45b9920e402920a0a6fd0a0_31bf3856ad364e35_6.1.7601.17887_none_c0c55d44ff072125.manifest 702 bytes File C:\Windows\winsxs\Manifests\x86_5012f3595edcaa2e9b5fca66b531fc49_31bf3856ad364e35_6.1.7601.22309_none_474e981d4d3d1d44.manifest 645 bytes File C:\Windows\winsxs\Manifests\x86_50452bfb5814f108e08d1c12bc3bdc9d_b77a5c561934e089_6.1.7601.17755_none_df7c71ccbd3e4cb4.manifest 616 bytes File C:\Windows\winsxs\Manifests\x86_5081496ef8dff9757f3cf3066d2f3c84_31bf3856ad364e35_6.1.7601.22457_none_926dc42a1724e7bf.manifest 700 bytes File C:\Windows\winsxs\Manifests\x86_50d75c12160b54d56a983fb157c7f678_b77a5c561934e089_6.1.7601.22126_none_e960093559afd61c.manifest 622 bytes File C:\Windows\winsxs\Manifests\x86_0aa3bfb8bf2df46f5544b6ee434c83d4_b77a5c561934e089_6.1.7601.22126_none_652221043dfcd177.manifest 637 bytes File C:\Windows\winsxs\Manifests\x86_8bc63dac42e4eabaca3593ddd2f5d84d_b03f5f7f11d50a3a_6.1.7601.22110_none_3e4935d327505fbb.manifest 626 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18270_none_a80cf783bb41b5b7.manifest 101124 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22465_none_a8a66792d452b56a.manifest 101801 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22465_none_247227deccca53f5.manifest 12919 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-crypt32-dll.resources_31bf3856ad364e35_6.1.7601.18205_pl-pl_cf82471686aa16f7.manifest 2363 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-crypt32-dll.resources_31bf3856ad364e35_6.1.7601.22380_pl-pl_cfb0630fa00d1796.manifest 2363 bytes File C:\Windows\winsxs\Manifests\x86_42322d98ee4a545bde2602cbc6f8b1f6_b03f5f7f11d50a3a_6.1.7601.21890_none_828830e9d1c7737f.manifest 621 bytes File C:\Windows\winsxs\Manifests\x86_43fccdaa52de9bc584eb643c0722dd05_b03f5f7f11d50a3a_6.1.7601.17952_none_de90e6761edb70f9.manifest 621 bytes File C:\Windows\winsxs\Manifests\x86_364bbbb91d09c707e3a04296fca06347_31bf3856ad364e35_6.1.7601.18140_none_c38e2ebc3d3ddd11.manifest 645 bytes File C:\Windows\winsxs\Manifests\x86_6aa9da8985e90b61e8dcc854b58c3812_31bf3856ad364e35_6.1.7601.22380_none_ed52d4c67c9914b0.manifest 700 bytes File C:\Windows\winsxs\Manifests\x86_7c04dcd0cd695376002d2f4325b367db_b03f5f7f11d50a3a_6.1.7601.22380_none_477dab402fcefc1b.manifest 627 bytes File C:\Windows\winsxs\Manifests\x86_7c1df755664e685fc992f30f84fd86e6_31bf3856ad364e35_6.1.7601.22309_none_47fa7a5f67211073.manifest 655 bytes File C:\Windows\winsxs\Manifests\x86_7c8381a858e26f024dae5353dd69b0ba_31bf3856ad364e35_6.1.7601.18205_none_0ded8e1794eaf94d.manifest 697 bytes File C:\Windows\winsxs\Manifests\x86_7c9b5c1e4d21feb41f2fc8cf8574346b_b77a5c561934e089_6.1.7601.22126_none_7208bfabb32df318.manifest 630 bytes File C:\Windows\winsxs\Manifests\x86_046cdb18b6d68c0f47987b5ebf1d8455_31bf3856ad364e35_6.1.7601.21890_none_2ad4ea8518d5ea57.manifest 642 bytes File C:\Windows\winsxs\Manifests\x86_049c0fd73ee1337d613f0466398cdca9_b03f5f7f11d50a3a_6.1.7601.22380_none_84a16bc464b8cdb1.manifest 628 bytes File C:\Windows\winsxs\Manifests\x86_71d3a35926a0393913d6b827385c47dd_31bf3856ad364e35_6.1.7601.17755_none_f65671d1812a2104.manifest 642 bytes File C:\Windows\winsxs\Manifests\x86_e5b94b55aad243af38d4930b1f107d2c_31bf3856ad364e35_6.1.7601.18140_none_7cdb5d21865d8508.manifest 655 bytes File C:\Windows\winsxs\Manifests\x86_66c9dbbab0674b9a4959d58490d50a9c_31bf3856ad364e35_6.1.7601.18120_none_ab2880cf55d0fcbd.manifest 711 bytes File C:\Windows\winsxs\Manifests\msil_reachframework_31bf3856ad364e35_6.1.7601.18140_none_439232435fdee4da.manifest 1894 bytes File C:\Windows\winsxs\Manifests\msil_reachframework_31bf3856ad364e35_6.1.7601.22309_none_4450133e78d3f616.manifest 1894 bytes File C:\Windows\winsxs\Manifests\x86_9b5467cb1b809c18c8b4191dd7110175_31bf3856ad364e35_6.1.7601.17939_none_ff6654c1c119301f.manifest 1054 bytes File C:\Windows\winsxs\Manifests\x86_9b835a5688e546d3fd73c42d4f364a96_31bf3856ad364e35_6.1.7601.22472_none_f123742f64067003.manifest 717 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.22379_none_6e856dc72baf13c2.manifest 16151 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22379_none_ae8fb42390bda114.manifest 26386 bytes File C:\Windows\winsxs\Manifests\x86_0fdebca879905ff50cd0c3354dc7552b_31bf3856ad364e35_6.1.7601.22309_none_cfe5c4819a91ea95.manifest 646 bytes File C:\Windows\winsxs\Manifests\x86_102092d9721208450d3fe007deed3c2a_31bf3856ad364e35_6.1.7601.22496_none_5d90d215d36270b1.manifest 695 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-wintrust-dll_31bf3856ad364e35_6.1.7601.18205_none_f1c1576cf84a1da0.manifest 2426 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-wintrust-dll_31bf3856ad364e35_6.1.7601.22380_none_f1ef736611ad1e3f.manifest 2426 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-ntdll_31bf3856ad364e35_6.1.7601.18205_none_5ae9fbe95a66e4b3.manifest 3802 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-ntdll_31bf3856ad364e35_6.1.7601.22379_none_5b2bea6873b9ad70.manifest 3802 bytes File C:\Windows\winsxs\Manifests\x86_ead7d7acaa0d4aa419b029dc57aa8423_b77a5c561934e089_6.1.7601.17755_none_fd848c8f53771056.manifest 637 bytes File C:\Windows\winsxs\Manifests\x86_941aba52f07615ea80c57f42deb4160d_b77a5c561934e089_6.1.7601.22126_none_26a5fb58322cc0f8.manifest 632 bytes File C:\Windows\winsxs\Manifests\x86_98aefd2e1a5a1619d0770caefa788f74_b77a5c561934e089_6.1.7601.22110_none_8cadc25b32d1ea2d.manifest 616 bytes File C:\Windows\winsxs\Manifests\x86_991ce40fb2b6ddca0516b8f7a31071ec_b77a5c561934e089_6.1.7601.17952_none_c3c898b5b32882c3.manifest 623 bytes File C:\Windows\winsxs\Manifests\x86_128f8dab8388789849aee4840fe0b8c3_b77a5c561934e089_6.1.7601.17966_none_898658132b1c7d11.manifest 629 bytes File C:\Windows\winsxs\Manifests\x86_132cf2a5c7204270fc3e7f2b40a12bff_b03f5f7f11d50a3a_6.1.7601.22380_none_646bdaa4c9690749.manifest 618 bytes File C:\Windows\winsxs\Manifests\x86_13360194623ade36baa304d008b728d6_31bf3856ad364e35_6.1.7601.18228_none_d6437e2ca7200b1a.manifest 696 bytes File C:\Windows\winsxs\Manifests\x86_6f20d92a7648d71eb43ee35ded059bb1_31bf3856ad364e35_6.1.7601.18254_none_bf590276e85337b5.manifest 719 bytes File C:\Windows\winsxs\Manifests\x86_4cf5ed4ffbca56ef33ed968e961eeb74_31bf3856ad364e35_6.1.7601.17755_none_1575c2ff221f0406.manifest 652 bytes File C:\Windows\winsxs\Manifests\x86_4de010bc1e023cf3cd19553d51bfc929_31bf3856ad364e35_6.1.7601.18245_none_30099da0ed10c5ad.manifest 699 bytes File C:\Windows\winsxs\Manifests\x86_2db9ac4860cc30993168c51cdf8b501b_31bf3856ad364e35_6.1.7601.22472_none_9844c9f700688b57.manifest 694 bytes File C:\Windows\winsxs\Manifests\x86_2dda0dc3ef1882f802222b7dcf822e05_b03f5f7f11d50a3a_6.1.7601.22110_none_4ebbf7c1ff36540d.manifest 621 bytes File C:\Windows\winsxs\Manifests\x86_54ae1ba9684b6049e8d67dcdc4f58954_31bf3856ad364e35_6.1.7601.18140_none_40d2dd40d30001f8.manifest 645 bytes File C:\Windows\winsxs\Manifests\x86_772cf3ed88bc1b0fc9931ec07075f86d_b03f5f7f11d50a3a_6.1.7601.18205_none_9b46d44018e190ff.manifest 638 bytes File C:\Windows\winsxs\Manifests\x86_777e9a2a2b76f8f29752a15cb737657b_b03f5f7f11d50a3a_6.1.7601.21890_none_bec4c2cb5134f74a.manifest 625 bytes File C:\Windows\winsxs\Manifests\x86_77c50ce026ef54d54c1dfacf39748bfc_31bf3856ad364e35_6.1.7601.22410_none_34fe626982a91256.manifest 696 bytes File C:\Windows\winsxs\Manifests\x86_77d757a29f1f430e51029aa5c8facca7_31bf3856ad364e35_6.1.7601.22379_none_141380bf7eabb1b3.manifest 1708 bytes File C:\Windows\winsxs\Manifests\x86_85cece297581bfaac723889e633c1cdb_31bf3856ad364e35_6.1.7601.18276_none_291db212008b8067.manifest 694 bytes File C:\Windows\winsxs\Manifests\x86_e7733737c1622e2e599a18769d554d46_b77a5c561934e089_6.1.7601.22191_none_1cb62203d8b65922.manifest 637 bytes File C:\Windows\winsxs\Manifests\x86_a92950f1318c1609e4af79ff489de55d_b03f5f7f11d50a3a_6.1.7601.17755_none_bd5124cff2e7e56d.manifest 621 bytes File C:\Windows\winsxs\Manifests\x86_aa0deff4bf19983e4c258fec476a03ea_31bf3856ad364e35_6.1.7601.18276_none_799537e16e35aef9.manifest 730 bytes File C:\Windows\winsxs\Manifests\x86_e1ea1eb36d699af54bad97c389841559_31bf3856ad364e35_6.1.7601.22379_none_83c1ef68d88bee28.manifest 693 bytes File C:\Windows\winsxs\Manifests\msil_system.identitymodel_b77a5c561934e089_6.1.7601.17966_none_f1bb9e0f00ad93d1.manifest 1945 bytes File C:\Windows\winsxs\Manifests\msil_system.identitymodel_b77a5c561934e089_6.1.7601.22126_none_dae9f9511a5888c9.manifest 1945 bytes File C:\Windows\winsxs\Manifests\msil_system_b77a5c561934e089_6.1.7601.17755_none_aef01212189804d4.manifest 2587 bytes File C:\Windows\winsxs\Manifests\msil_system_b77a5c561934e089_6.1.7601.17952_none_aef056221897b893.manifest 2587 bytes File C:\Windows\winsxs\Manifests\msil_system_b77a5c561934e089_6.1.7601.21890_none_9826de62323b4a11.manifest 2587 bytes File C:\Windows\winsxs\Manifests\msil_system_b77a5c561934e089_6.1.7601.22110_none_981edef432427a49.manifest 2587 bytes File C:\Windows\winsxs\Manifests\msil_smdiagnostics.resources_b77a5c561934e089_6.1.7601.17966_pl-pl_3d49acd08832daab.manifest 1520 bytes File C:\Windows\winsxs\Manifests\msil_smdiagnostics.resources_b77a5c561934e089_6.1.7601.22126_pl-pl_26780812a1ddcfa3.manifest 1520 bytes File C:\Windows\winsxs\Manifests\msil_smdiagnostics_b77a5c561934e089_6.1.7601.17966_none_72f383536ca13e1f.manifest 2655 bytes File C:\Windows\winsxs\Manifests\msil_smdiagnostics_b77a5c561934e089_6.1.7601.22126_none_5c21de95864c3317.manifest 2655 bytes File C:\Windows\winsxs\Manifests\msil_smsvchost.resources_b03f5f7f11d50a3a_6.1.7601.22126_pl-pl_a692033b2c92501f.manifest 1405 bytes File C:\Windows\winsxs\Manifests\x86_wpf-reachframework_31bf3856ad364e35_6.1.7601.18140_none_020d05cf8717aceb.manifest 2161 bytes File C:\Windows\winsxs\Manifests\x86_wpf-reachframework_31bf3856ad364e35_6.1.7601.22309_none_02cae6caa00cbe27.manifest 2161 bytes File C:\Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa.manifest 2260 bytes File C:\Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2.manifest 2260 bytes File C:\Windows\winsxs\Manifests\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.1.7601.17966_none_e959e6bda8138bac.manifest 2224 bytes File C:\Windows\winsxs\Manifests\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.1.7601.22126_none_d28841ffc1be80a4.manifest 2224 bytes File C:\Windows\winsxs\Manifests\msil_system.servicemodel.ref_b77a5c561934e089_6.1.7601.17966_none_40c70160cf530bfb.manifest 2190 bytes File C:\Windows\winsxs\Manifests\msil_system.servicemodel.ref_b77a5c561934e089_6.1.7601.22126_none_29f55ca2e8fe00f3.manifest 2190 bytes File C:\Windows\winsxs\Manifests\msil_system.servicemodel.resources_b77a5c561934e089_6.1.7601.17966_pl-pl_19fc7836ffc24fa2.manifest 1590 bytes File C:\Windows\winsxs\Manifests\msil_system.servicemodel.resources_b77a5c561934e089_6.1.7601.22126_pl-pl_032ad379196d449a.manifest 1590 bytes File C:\Windows\winsxs\Manifests\x86_e491a7798cfc245e46af287c3d5b65aa_31bf3856ad364e35_6.1.7601.17755_none_019132fdcbb17d46.manifest 653 bytes File C:\Windows\winsxs\Manifests\x86_3e1499155fee8f88b8a89cc107db85fa_31bf3856ad364e35_6.1.7601.22457_none_dcf44532d1f2290e.manifest 1054 bytes File C:\Windows\winsxs\Manifests\x86_f4fa89a9a09c84cf1e7bc864dcdd9bdc_b77a5c561934e089_6.1.7601.17966_none_0fbd133d4510541a.manifest 636 bytes File C:\Windows\winsxs\Manifests\x86_f5dc7fe828981926bba268ce37f6f525_b77a5c561934e089_6.1.7601.22126_none_c5cf46b1a10b9ca3.manifest 639 bytes File C:\Windows\winsxs\Manifests\msil_system.design.resources_b03f5f7f11d50a3a_6.1.7601.18027_pl-pl_09a1a2fe0468cef3.manifest 1498 bytes File C:\Windows\winsxs\Manifests\msil_system.design.resources_b03f5f7f11d50a3a_6.1.7601.22191_pl-pl_f2db86f41e094694.manifest 1498 bytes File C:\Windows\winsxs\Manifests\x86_d41e764cf49d1bb53c3f6f2c280471cd_31bf3856ad364e35_6.1.7601.22465_none_e421fe52d1acc653.manifest 699 bytes File C:\Windows\winsxs\Manifests\x86_d42dfbbb1be58c09651e893fc62ac87d_31bf3856ad364e35_6.1.7601.22126_none_642db1775fe24833.manifest 651 bytes File C:\Windows\winsxs\Manifests\x86_51e26d05b2c02c2c9d2b1e3c82389ed4_b03f5f7f11d50a3a_6.1.7601.17966_none_c3625db9f8f817fe.manifest 632 bytes File C:\Windows\winsxs\Manifests\x86_52ed4ae65e2cac26b5e80b80d3acd647_b77a5c561934e089_6.1.7601.17966_none_fc1f57396bf6bf0e.manifest 641 bytes File C:\Windows\winsxs\Manifests\x86_294593e39c23b373d5fa6841dbba1220_31bf3856ad364e35_6.1.7601.17932_none_e7b9d521da0b8e55.manifest 692 bytes File C:\Windows\winsxs\Manifests\msil_system.servicemodel_b77a5c561934e089_6.1.7601.17966_none_794b7f2d474484f4.manifest 1940 bytes File C:\Windows\winsxs\Manifests\msil_system.servicemodel_b77a5c561934e089_6.1.7601.22126_none_6279da6f60ef79ec.manifest 1940 bytes File C:\Windows\winsxs\Manifests\x86_d259d217f6231adca3a8186bdab87d8e_31bf3856ad364e35_6.1.7601.22465_none_40573f94fb343798.manifest 698 bytes File C:\Windows\winsxs\Manifests\x86_d2f44e54adcb4d85307c02d0d8d82db5_b03f5f7f11d50a3a_6.1.7601.22126_none_b1eafd9ef747e86a.manifest 631 bytes File C:\Windows\winsxs\Manifests\x86_cde5403b9bb069324598685650c7d954_b77a5c561934e089_6.1.7601.21890_none_a7471019da04ffe9.manifest 616 bytes File C:\Windows\winsxs\Manifests\x86_1ed726b6e4edc2c1ef062a5b0a0dfda7_b77a5c561934e089_6.1.7601.17755_none_99fc8494ad9fcf15.manifest 629 bytes File C:\Windows\winsxs\Manifests\x86_1f256bcd6e0714915f8b8a732aed7cd0_b03f5f7f11d50a3a_6.1.7601.22126_none_028884b8f47aec0f.manifest 640 bytes File C:\Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8.manifest 1985 bytes File C:\Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0.manifest 1985 bytes File C:\Windows\winsxs\Manifests\x86_6457db60a51033cf338b60d6ca4f1385_b03f5f7f11d50a3a_6.1.7601.21890_none_718b69fbc51e3d37.manifest 626 bytes File C:\Windows\winsxs\Manifests\x86_64769f94064182e5a2322fa1d528cbdf_b77a5c561934e089_6.1.7601.22126_none_04aecd3cc3800fdf.manifest 641 bytes File C:\Windows\winsxs\Manifests\msil_system.windows.forms_b77a5c561934e089_6.1.7601.22191_none_ee82d75519cdb09a.manifest 2657 bytes File C:\Windows\winsxs\Manifests\msil_system.resources_b77a5c561934e089_6.1.7601.17755_pl-pl_5b3d2d43e05112c4.manifest 1470 bytes File C:\Windows\winsxs\Manifests\msil_system.resources_b77a5c561934e089_6.1.7601.17952_pl-pl_5b3d7153e050c683.manifest 1470 bytes File C:\Windows\winsxs\Manifests\msil_system.resources_b77a5c561934e089_6.1.7601.21890_pl-pl_4473f993f9f45801.manifest 1470 bytes File C:\Windows\winsxs\Manifests\msil_system.resources_b77a5c561934e089_6.1.7601.22110_pl-pl_446bfa25f9fb8839.manifest 1470 bytes File C:\Windows\winsxs\Manifests\x86_90c827a8b7c410cafb2f990272987b69_b03f5f7f11d50a3a_6.1.7601.22126_none_e6949b3b68d7b5ee.manifest 632 bytes File C:\Windows\winsxs\Manifests\x86_2227e9196e18eb97d073084ed0123ebe_b03f5f7f11d50a3a_6.1.7601.22380_none_481999d5e52b3570.manifest 638 bytes File C:\Windows\winsxs\Manifests\x86_226d6ab604bdf2fa06358fc79f016cb7_b77a5c561934e089_6.1.7601.17966_none_aa4f82ce0d19787f.manifest 628 bytes File C:\Windows\winsxs\Manifests\x86_system.printing_31bf3856ad364e35_6.1.7601.18140_none_75233d5cd47a7a2e.manifest 2678 bytes File C:\Windows\winsxs\Manifests\x86_system.printing_31bf3856ad364e35_6.1.7601.22309_none_75e11e57ed6f8b6a.manifest 2678 bytes File C:\Windows\winsxs\Manifests\x86_system.web_b03f5f7f11d50a3a_6.1.7601.18205_none_cb82f33bd328191a.manifest 2606 bytes File C:\Windows\winsxs\Manifests\x86_system.web_b03f5f7f11d50a3a_6.1.7601.22380_none_b4bdc0b3ecc7c3b3.manifest 2606 bytes File C:\Windows\winsxs\Manifests\x86_c933ed2647499ab0c18bc4adef8ff65e_b03f5f7f11d50a3a_6.1.7601.18027_none_7bec434d630fe5fe.manifest 622 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_7840d305126b8725.manifest 2389 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.1.7601.18205_none_5d82df833c0cff77.manifest 2743 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.1.7601.22380_none_5db0fb7c55700016.manifest 2743 bytes File C:\Windows\winsxs\Manifests\x86_7097771f1cbffe479e1b4c29fdb03047_31bf3856ad364e35_6.1.7601.22309_none_7e67717266410f05.manifest 645 bytes File C:\Windows\winsxs\Manifests\x86_microsoft-windows-cryptnet-dll_31bf3856ad364e35_6.1.7601.22380_none_195a7aba7371f280.manifest 2280 bytes File C:\Windows\winsxs\msil_microsoft.jscript_b03f5f7f11d50a3a_6.1.7601.22110_none_8fbc11b859597391 0 bytes File C:\Windows\winsxs\msil_microsoft.jscript_b03f5f7f11d50a3a_6.1.7601.22110_none_8fbc11b859597391\Microsoft.JScript.dll 749568 bytes executable File C:\Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0 0 bytes File C:\Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0\System.Runtime.Serialization.dll 970752 bytes executable File C:\Windows\winsxs\x86_input.inf_31bf3856ad364e35_6.1.7601.18199_none_222567647e9c4c26 0 bytes File C:\Windows\winsxs\x86_input.inf_31bf3856ad364e35_6.1.7601.18199_none_222567647e9c4c26\hidusb.sys 24064 bytes executable File C:\Windows\winsxs\x86_input.inf_31bf3856ad364e35_6.1.7601.22374_none_22bfa47b97ae3282 0 bytes File C:\Windows\winsxs\x86_input.inf_31bf3856ad364e35_6.1.7601.22374_none_22bfa47b97ae3282\hidusb.sys 24064 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-authentication-authui_31bf3856ad364e35_6.1.7601.18276_none_0dbbeb9453d8f782 0 bytes File C:\Windows\winsxs\x86_microsoft-windows-authentication-authui_31bf3856ad364e35_6.1.7601.18276_none_0dbbeb9453d8f782\authui.ptxml 2721 bytes File C:\Windows\winsxs\x86_microsoft-windows-authentication-authui_31bf3856ad364e35_6.1.7601.22472_none_0e41891d6cfa2f17 0 bytes File C:\Windows\winsxs\x86_microsoft-windows-authentication-authui_31bf3856ad364e35_6.1.7601.22472_none_0e41891d6cfa2f17\authui.ptxml 2721 bytes File C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17939_none_a9bdfee47a5cd154 0 bytes File C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17939_none_a9bdfee47a5cd154\ndismigplugin.dll 156160 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17939_none_a9bdfee47a5cd154\ndistrace.mof 4548 bytes File C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.22097_none_aa0491cf93ad1c31 0 bytes File C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.22097_none_aa0491cf93ad1c31\ndistrace.mof 4548 bytes File C:\Windows\winsxs\x86_microsoft-windows-s..ty-spp-ux.resources_31bf3856ad364e35_6.1.7601.18120_pl-pl_fa26b795c7facd87 0 bytes File C:\Windows\winsxs\x86_microsoft-windows-s..ty-spp-ux.resources_31bf3856ad364e35_6.1.7601.18120_pl-pl_fa26b795c7facd87\slui.exe.mui 29184 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-s..ty-spp-ux.resources_31bf3856ad364e35_6.1.7601.18120_pl-pl_fa26b795c7facd87\sppcomapi.dll.mui 7168 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-s..ty-spp-ux.resources_31bf3856ad364e35_6.1.7601.18120_pl-pl_fa26b795c7facd87\sppuinotify.dll.mui 3072 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-s..ty-spp-ux.resources_31bf3856ad364e35_6.1.7601.22290_pl-pl_fa64a4ece15130e8 0 bytes File C:\Windows\winsxs\x86_microsoft-windows-s..ty-spp-ux.resources_31bf3856ad364e35_6.1.7601.22290_pl-pl_fa64a4ece15130e8\slui.exe.mui 29184 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-s..ty-spp-ux.resources_31bf3856ad364e35_6.1.7601.22290_pl-pl_fa64a4ece15130e8\sppcomapi.dll.mui 7168 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-s..ty-spp-ux.resources_31bf3856ad364e35_6.1.7601.22290_pl-pl_fa64a4ece15130e8\sppuinotify.dll.mui 3072 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_b4fa2013c4c8ebf1 0 bytes File C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_b4fa2013c4c8ebf1\FWPKCLNT.SYS 187752 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-wwansvc_31bf3856ad364e35_6.1.7601.18113_none_a374e22d7d59a6c6 0 bytes File C:\Windows\winsxs\x86_microsoft-windows-wwansvc_31bf3856ad364e35_6.1.7601.18113_none_a374e22d7d59a6c6\WWAN_profile_v1.xsd 6201 bytes File C:\Windows\winsxs\x86_microsoft-windows-wwansvc_31bf3856ad364e35_6.1.7601.22282_none_a3b1cf3a96b0f0d0 0 bytes File C:\Windows\winsxs\x86_microsoft-windows-wwansvc_31bf3856ad364e35_6.1.7601.22282_none_a3b1cf3a96b0f0d0\WWAN_profile_v1.xsd 6201 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17755_none_9c16cb677dfb4a97 0 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17755_none_9c16cb677dfb4a97\big5.nlp 66728 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17755_none_9c16cb677dfb4a97\bopomofo.nlp 82172 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17755_none_9c16cb677dfb4a97\ksc.nlp 116756 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17755_none_9c16cb677dfb4a97\normidna.nlp 59342 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17755_none_9c16cb677dfb4a97\normnfc.nlp 45794 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17755_none_9c16cb677dfb4a97\normnfd.nlp 39284 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17755_none_9c16cb677dfb4a97\normnfkc.nlp 66384 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17755_none_9c16cb677dfb4a97\normnfkd.nlp 60294 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17755_none_9c16cb677dfb4a97\prc.nlp 83748 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17755_none_9c16cb677dfb4a97\prcp.nlp 83748 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17755_none_9c16cb677dfb4a97\sortkey.nlp 262148 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17755_none_9c16cb677dfb4a97\sorttbls.nlp 20320 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17755_none_9c16cb677dfb4a97\xjis.nlp 28288 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17952_none_9c170f777dfafe56 0 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17952_none_9c170f777dfafe56\big5.nlp 66728 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17952_none_9c170f777dfafe56\bopomofo.nlp 82172 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17952_none_9c170f777dfafe56\ksc.nlp 116756 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17952_none_9c170f777dfafe56\normidna.nlp 59342 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17952_none_9c170f777dfafe56\normnfc.nlp 45794 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17952_none_9c170f777dfafe56\normnfd.nlp 39284 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17952_none_9c170f777dfafe56\normnfkc.nlp 66384 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17952_none_9c170f777dfafe56\normnfkd.nlp 60294 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17952_none_9c170f777dfafe56\prc.nlp 83748 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17952_none_9c170f777dfafe56\prcp.nlp 83748 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17952_none_9c170f777dfafe56\sortkey.nlp 262148 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17952_none_9c170f777dfafe56\sorttbls.nlp 20320 bytes File C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.1.7601.17952_none_9c170f777dfafe56\xjis.nlp 28288 bytes File C:\Windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.1.7601.22110_none_e8b08a1ddd2e3064 0 bytes File C:\Windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.1.7601.22110_none_e8b08a1ddd2e3064\mscordacwks.dll 990304 bytes executable File C:\Windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.1.7601.21890_none_7cf3bc2007728c5f 0 bytes File C:\Windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.1.7601.21890_none_7cf3bc2007728c5f\mscorjit.dll 364816 bytes File C:\Windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.1.7601.22110_none_efec6737052d2491 0 bytes File C:\Windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.1.7601.22110_none_efec6737052d2491\mscorwks.dll 5927520 bytes executable File C:\Windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.1.7601.22110_none_d17ed1ded1230c79 0 bytes File C:\Windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.1.7601.22110_none_d17ed1ded1230c79\SOS.dll 389712 bytes executable File C:\Windows\winsxs\x86_netrndis.inf_31bf3856ad364e35_6.1.7601.17887_none_c9815031a444c324 0 bytes File C:\Windows\winsxs\x86_netrndis.inf_31bf3856ad364e35_6.1.7601.17887_none_c9815031a444c324\rndismp6.sys 30208 bytes executable File C:\Windows\winsxs\x86_netrndis.inf_31bf3856ad364e35_6.1.7601.17887_none_c9815031a444c324\rndismpx.sys 33280 bytes executable File C:\Windows\winsxs\x86_netrndis.inf_31bf3856ad364e35_6.1.7601.17887_none_c9815031a444c324\usb80236.sys 15872 bytes executable File C:\Windows\winsxs\x86_netrndis.inf_31bf3856ad364e35_6.1.7601.17887_none_c9815031a444c324\usb8023x.sys 15872 bytes executable File C:\Windows\winsxs\x86_netrndis.inf_31bf3856ad364e35_6.1.7601.22044_none_ca3303f0bd44da67 0 bytes File C:\Windows\winsxs\x86_netrndis.inf_31bf3856ad364e35_6.1.7601.22044_none_ca3303f0bd44da67\usb80236.sys 15872 bytes executable File C:\Windows\winsxs\x86_netrndis.inf_31bf3856ad364e35_6.1.7601.22044_none_ca3303f0bd44da67\usb8023x.sys 15872 bytes executable File C:\Windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.1.7601.18199_none_5b949f063f453d1e 0 bytes File C:\Windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.1.7601.18199_none_5b949f063f453d1e\scsiscan.sys 14848 bytes executable File C:\Windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.1.7601.18199_none_5b949f063f453d1e\serscan.sys 9216 bytes executable File C:\Windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.1.7601.18199_none_5b949f063f453d1e\wiafbdrv.dll 89600 bytes executable File C:\Windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.1.7601.18199_none_5b949f063f453d1e\WSDScan.sys 20480 bytes executable File C:\Windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.1.7601.22374_none_5c2edc1d5857237a 0 bytes File C:\Windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.1.7601.22374_none_5c2edc1d5857237a\scsiscan.sys 14848 bytes executable File C:\Windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.1.7601.22374_none_5c2edc1d5857237a\serscan.sys 9216 bytes executable File C:\Windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.1.7601.22374_none_5c2edc1d5857237a\wiafbdrv.dll 89600 bytes executable File C:\Windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.1.7601.22374_none_5c2edc1d5857237a\WSDScan.sys 20480 bytes executable File C:\Windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.1.7601.22126_none_a8661c65c3049a2f 0 bytes File C:\Windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.1.7601.22126_none_a8661c65c3049a2f\ServiceMonikerSupport.dll 18040 bytes executable File C:\Windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.1.7601.22126_none_e337eacb16c83c8b 0 bytes File C:\Windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.1.7601.22126_none_e337eacb16c83c8b\System.IdentityModel.dll 446464 bytes executable File C:\Windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.1.7601.22126_none_6279da6f60ef79ec 0 bytes File C:\Windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.1.7601.22126_none_6279da6f60ef79ec\System.ServiceModel.dll 5992448 bytes executable File C:\Windows\winsxs\msil_system.identitymodel_b77a5c561934e089_6.1.7601.22126_none_dae9f9511a5888c9 0 bytes File C:\Windows\winsxs\msil_system.identitymodel_b77a5c561934e089_6.1.7601.22126_none_dae9f9511a5888c9\System.IdentityModel.dll 446464 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18270_none_a80cf783bb41b5b7 0 bytes File C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18270_none_a80cf783bb41b5b7\lsasrv.mof 13780 bytes File C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22465_none_a8a66792d452b56a 0 bytes File C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22465_none_a8a66792d452b56a\lsasrv.mof 13780 bytes File C:\Windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.1.7601.22191_none_ee82d75519cdb09a 0 bytes File C:\Windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.1.7601.22191_none_ee82d75519cdb09a\System.Windows.Forms.dll 5025792 bytes executable File C:\Windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.1.7601.22126_none_29f55ca2e8fe00f3 0 bytes File C:\Windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.1.7601.22126_none_29f55ca2e8fe00f3\System.ServiceModel.dll 5992448 bytes executable File C:\Windows\winsxs\msil_smdiagnostics.resources_b77a5c561934e089_6.1.7601.17966_pl-pl_3d49acd08832daab 0 bytes File C:\Windows\winsxs\msil_smdiagnostics.resources_b77a5c561934e089_6.1.7601.17966_pl-pl_3d49acd08832daab\SMDiagnostics.resources.dll 5120 bytes executable File C:\Windows\winsxs\msil_smdiagnostics.resources_b77a5c561934e089_6.1.7601.22126_pl-pl_26780812a1ddcfa3 0 bytes File C:\Windows\winsxs\msil_smdiagnostics.resources_b77a5c561934e089_6.1.7601.22126_pl-pl_26780812a1ddcfa3\SMDiagnostics.resources.dll 5120 bytes executable File C:\Windows\winsxs\msil_smdiagnostics_b77a5c561934e089_6.1.7601.22126_none_5c21de95864c3317 0 bytes File C:\Windows\winsxs\msil_smdiagnostics_b77a5c561934e089_6.1.7601.22126_none_5c21de95864c3317\SMdiagnostics.dll 110592 bytes executable File C:\Windows\winsxs\msil_smsvchost.resources_b03f5f7f11d50a3a_6.1.7601.22126_pl-pl_a692033b2c92501f 0 bytes File C:\Windows\winsxs\msil_smsvchost.resources_b03f5f7f11d50a3a_6.1.7601.22126_pl-pl_a692033b2c92501f\SMSvcHost.resources.dll 16744 bytes executable File C:\Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d 0 bytes File C:\Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d\System.Runtime.Serialization.dll 970752 bytes executable File C:\Windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.1.7601.22191_none_72e0ff71d9629a76 0 bytes File C:\Windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.1.7601.22191_none_72e0ff71d9629a76\System.Design.dll 5062656 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.1.7601.18283_none_4a22f0c95ed5d6f2 0 bytes File C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.1.7601.18283_none_4a22f0c95ed5d6f2\dispex.dll 15360 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.1.7601.18283_none_4a22f0c95ed5d6f2\scrobj.dll 173568 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.1.7601.18283_none_4a22f0c95ed5d6f2\wshcon.dll 25600 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.1.7601.22480_none_4aa98e9c77f627de 0 bytes File C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.1.7601.22480_none_4aa98e9c77f627de\dispex.dll 15360 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.1.7601.22480_none_4aa98e9c77f627de\scrobj.dll 173568 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.1.7601.22480_none_4aa98e9c77f627de\wshcon.dll 25600 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.1.7601.18288_none_2711e56c9cc8ab61 0 bytes File C:\Windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.1.7601.18288_none_2711e56c9cc8ab61\fs_rec.sys 19824 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.1.7601.18288_none_2711e56c9cc8ab61\system.ini 219 bytes File C:\Windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.1.7601.18288_none_2711e56c9cc8ab61\win.ini 92 bytes File C:\Windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.1.7601.18288_none_2711e56c9cc8ab61\wmi.dll 5120 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.1.7601.22484_none_279782f5b5e9e2f6 0 bytes File C:\Windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.1.7601.22484_none_279782f5b5e9e2f6\fs_rec.sys 19536 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.1.7601.22484_none_279782f5b5e9e2f6\system.ini 219 bytes File C:\Windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.1.7601.22484_none_279782f5b5e9e2f6\win.ini 92 bytes File C:\Windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.1.7601.22484_none_279782f5b5e9e2f6\wmi.dll 5120 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-lddmcore_31bf3856ad364e35_6.1.7601.18228_none_adc9174c41d38200 0 bytes File C:\Windows\winsxs\x86_microsoft-windows-lddmcore_31bf3856ad364e35_6.1.7601.18228_none_adc9174c41d38200\cdd.dll 107520 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-lddmcore_31bf3856ad364e35_6.1.7601.18228_none_adc9174c41d38200\LDDMCore.ptxml 1151 bytes File C:\Windows\winsxs\x86_microsoft-windows-lddmcore_31bf3856ad364e35_6.1.7601.22410_none_ae5583995af03848 0 bytes File C:\Windows\winsxs\x86_microsoft-windows-lddmcore_31bf3856ad364e35_6.1.7601.22410_none_ae5583995af03848\cdd.dll 107520 bytes executable File C:\Windows\winsxs\x86_microsoft-windows-lddmcore_31bf3856ad364e35_6.1.7601.22410_none_ae5583995af03848\LDDMCore.ptxml 1151 bytes File C:\Windows\winsxs\msil_system_b77a5c561934e089_6.1.7601.21890_none_9826de62323b4a11 0 bytes File C:\Windows\winsxs\msil_system_b77a5c561934e089_6.1.7601.21890_none_9826de62323b4a11\System.dll 3190784 bytes executable File C:\Windows\winsxs\msil_system_b77a5c561934e089_6.1.7601.22110_none_981edef432427a49 0 bytes File C:\Windows\winsxs\msil_system_b77a5c561934e089_6.1.7601.22110_none_981edef432427a49\System.dll 3198976 bytes executable File C:\Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2 0 bytes File C:\Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2\System.Runtime.Serialization.dll 970752 bytes executable File C:\Windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.1.7601.22126_none_d28841ffc1be80a4 0 bytes File C:\Windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.1.7601.22126_none_d28841ffc1be80a4\System.ServiceModel.dll 5992448 bytes executable ---- EOF - GMER 2.1 ----