GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2015-02-12 00:23:19 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 ST320LT012-9WS14C rev.0001SDM1 298,09GB Running: rlq6327p.exe; Driver: C:\Users\1\AppData\Local\Temp\axloquog.sys ---- Kernel code sections - GMER 2.1 ---- INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 448 fffff80002df4000 52 bytes [FF, FF, FF, FF, FF, FF, FF, ...] INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 502 fffff80002df4036 27 bytes [FF, FF, FF, FF, FF, FF, FF, ...] ---- User code sections - GMER 2.1 ---- .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePort 0000000077c01360 5 bytes JMP 0000000100070460 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtQueryObject 0000000077c013b0 5 bytes JMP 0000000100070450 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtOpenProcess 0000000077c01510 5 bytes JMP 0000000100070370 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePortEx 0000000077c01560 5 bytes JMP 0000000100070470 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateProcess 0000000077c01570 5 bytes JMP 00000001000703e0 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSection 0000000077c01620 5 bytes JMP 0000000100070320 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory 0000000077c01650 5 bytes JMP 00000001000703b0 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtDuplicateObject 0000000077c01670 5 bytes JMP 0000000100070390 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEvent 0000000077c016b0 5 bytes JMP 00000001000702e0 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEvent 0000000077c01730 5 bytes JMP 00000001000702d0 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSection 0000000077c01750 5 bytes JMP 0000000100070310 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThread 0000000077c01790 5 bytes JMP 00000001000703c0 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateThread 0000000077c017e0 5 bytes JMP 00000001000703f0 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtAddBootEntry 0000000077c01940 5 bytes JMP 0000000100070230 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtAlpcSendWaitReceivePort 0000000077c01b00 5 bytes JMP 0000000100070480 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtAssignProcessToJobObject 0000000077c01b30 5 bytes JMP 00000001000703a0 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEventPair 0000000077c01c10 5 bytes JMP 00000001000702f0 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtCreateIoCompletion 0000000077c01c20 5 bytes JMP 0000000100070350 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtCreateMutant 0000000077c01c80 5 bytes JMP 0000000100070290 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSemaphore 0000000077c01d10 5 bytes JMP 00000001000702b0 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx 0000000077c01d30 5 bytes JMP 00000001000703d0 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtCreateTimer 0000000077c01d40 5 bytes JMP 0000000100070330 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtDebugActiveProcess 0000000077c01db0 5 bytes JMP 0000000100070410 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtDeleteBootEntry 0000000077c01de0 5 bytes JMP 0000000100070240 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtLoadDriver 0000000077c020a0 5 bytes JMP 00000001000701e0 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtModifyBootEntry 0000000077c02160 5 bytes JMP 0000000100070250 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeKey 0000000077c02190 5 bytes JMP 0000000100070490 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeMultipleKeys 0000000077c021a0 5 bytes JMP 00000001000704a0 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEventPair 0000000077c021d0 5 bytes JMP 0000000100070300 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtOpenIoCompletion 0000000077c021e0 5 bytes JMP 0000000100070360 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtOpenMutant 0000000077c02240 5 bytes JMP 00000001000702a0 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSemaphore 0000000077c02290 5 bytes JMP 00000001000702c0 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtOpenThread 0000000077c022c0 5 bytes JMP 0000000100070380 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtOpenTimer 0000000077c022d0 5 bytes JMP 0000000100070340 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThreadEx 0000000077c025c0 5 bytes JMP 0000000100070440 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootEntryOrder 0000000077c027c0 5 bytes JMP 0000000100070260 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootOptions 0000000077c027d0 5 bytes JMP 0000000100070270 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread 0000000077c027e0 5 bytes JMP 0000000100070400 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemInformation 0000000077c029a0 5 bytes JMP 00000001000701f0 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemPowerState 0000000077c029b0 5 bytes JMP 0000000100070210 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtShutdownSystem 0000000077c02a20 5 bytes JMP 0000000100070200 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendProcess 0000000077c02a80 5 bytes JMP 0000000100070420 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendThread 0000000077c02a90 5 bytes JMP 0000000100070430 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtSystemDebugControl 0000000077c02aa0 5 bytes JMP 0000000100070220 .text C:\Windows\system32\services.exe[536] C:\Windows\SYSTEM32\ntdll.dll!NtVdmControl 0000000077c02b80 5 bytes JMP 0000000100070280 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePort 0000000077c01360 5 bytes JMP 0000000100070460 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtQueryObject 0000000077c013b0 5 bytes JMP 0000000100070450 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtOpenProcess 0000000077c01510 5 bytes JMP 0000000100070370 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePortEx 0000000077c01560 5 bytes JMP 0000000100070470 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateProcess 0000000077c01570 5 bytes JMP 00000001000703e0 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSection 0000000077c01620 5 bytes JMP 0000000100070320 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory 0000000077c01650 5 bytes JMP 00000001000703b0 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtDuplicateObject 0000000077c01670 5 bytes JMP 0000000100070390 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEvent 0000000077c016b0 5 bytes JMP 00000001000702e0 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEvent 0000000077c01730 5 bytes JMP 00000001000702d0 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSection 0000000077c01750 5 bytes JMP 0000000100070310 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThread 0000000077c01790 5 bytes JMP 00000001000703c0 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateThread 0000000077c017e0 5 bytes JMP 00000001000703f0 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtAddBootEntry 0000000077c01940 5 bytes JMP 0000000100070230 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtAlpcSendWaitReceivePort 0000000077c01b00 5 bytes JMP 0000000100070480 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtAssignProcessToJobObject 0000000077c01b30 5 bytes JMP 00000001000703a0 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEventPair 0000000077c01c10 5 bytes JMP 00000001000702f0 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtCreateIoCompletion 0000000077c01c20 5 bytes JMP 0000000100070350 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtCreateMutant 0000000077c01c80 5 bytes JMP 0000000100070290 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSemaphore 0000000077c01d10 5 bytes JMP 00000001000702b0 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx 0000000077c01d30 5 bytes JMP 00000001000703d0 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtCreateTimer 0000000077c01d40 5 bytes JMP 0000000100070330 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtDebugActiveProcess 0000000077c01db0 5 bytes JMP 0000000100070410 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtDeleteBootEntry 0000000077c01de0 5 bytes JMP 0000000100070240 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtLoadDriver 0000000077c020a0 5 bytes JMP 00000001000701e0 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtModifyBootEntry 0000000077c02160 5 bytes JMP 0000000100070250 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeKey 0000000077c02190 5 bytes JMP 0000000100070490 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeMultipleKeys 0000000077c021a0 5 bytes JMP 00000001000704a0 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEventPair 0000000077c021d0 5 bytes JMP 0000000100070300 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtOpenIoCompletion 0000000077c021e0 5 bytes JMP 0000000100070360 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtOpenMutant 0000000077c02240 5 bytes JMP 00000001000702a0 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSemaphore 0000000077c02290 5 bytes JMP 00000001000702c0 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtOpenThread 0000000077c022c0 5 bytes JMP 0000000100070380 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtOpenTimer 0000000077c022d0 5 bytes JMP 0000000100070340 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThreadEx 0000000077c025c0 5 bytes JMP 0000000100070440 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootEntryOrder 0000000077c027c0 5 bytes JMP 0000000100070260 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootOptions 0000000077c027d0 5 bytes JMP 0000000100070270 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread 0000000077c027e0 5 bytes JMP 0000000100070400 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemInformation 0000000077c029a0 5 bytes JMP 00000001000701f0 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemPowerState 0000000077c029b0 5 bytes JMP 0000000100070210 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtShutdownSystem 0000000077c02a20 5 bytes JMP 0000000100070200 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendProcess 0000000077c02a80 5 bytes JMP 0000000100070420 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendThread 0000000077c02a90 5 bytes JMP 0000000100070430 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtSystemDebugControl 0000000077c02aa0 5 bytes JMP 0000000100070220 .text C:\Windows\system32\lsass.exe[560] C:\Windows\SYSTEM32\ntdll.dll!NtVdmControl 0000000077c02b80 5 bytes JMP 0000000100070280 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePort 0000000077c01360 5 bytes JMP 0000000077d60460 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtQueryObject 0000000077c013b0 5 bytes JMP 0000000077d60450 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtOpenProcess 0000000077c01510 5 bytes JMP 0000000077d60370 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePortEx 0000000077c01560 5 bytes JMP 0000000077d60470 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateProcess 0000000077c01570 5 bytes JMP 0000000077d603e0 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSection 0000000077c01620 5 bytes JMP 0000000077d60320 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory 0000000077c01650 5 bytes JMP 0000000077d603b0 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtDuplicateObject 0000000077c01670 5 bytes JMP 0000000077d60390 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEvent 0000000077c016b0 5 bytes JMP 0000000077d602e0 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEvent 0000000077c01730 5 bytes JMP 0000000077d602d0 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSection 0000000077c01750 5 bytes JMP 0000000077d60310 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThread 0000000077c01790 5 bytes JMP 0000000077d603c0 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateThread 0000000077c017e0 5 bytes JMP 0000000077d603f0 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtAddBootEntry 0000000077c01940 5 bytes JMP 0000000077d60230 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtAlpcSendWaitReceivePort 0000000077c01b00 5 bytes JMP 0000000077d60480 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtAssignProcessToJobObject 0000000077c01b30 5 bytes JMP 0000000077d603a0 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEventPair 0000000077c01c10 5 bytes JMP 0000000077d602f0 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtCreateIoCompletion 0000000077c01c20 5 bytes JMP 0000000077d60350 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtCreateMutant 0000000077c01c80 5 bytes JMP 0000000077d60290 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSemaphore 0000000077c01d10 5 bytes JMP 0000000077d602b0 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx 0000000077c01d30 5 bytes JMP 0000000077d603d0 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtCreateTimer 0000000077c01d40 5 bytes JMP 0000000077d60330 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtDebugActiveProcess 0000000077c01db0 5 bytes JMP 0000000077d60410 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtDeleteBootEntry 0000000077c01de0 5 bytes JMP 0000000077d60240 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtLoadDriver 0000000077c020a0 5 bytes JMP 0000000077d601e0 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtModifyBootEntry 0000000077c02160 5 bytes JMP 0000000077d60250 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeKey 0000000077c02190 5 bytes JMP 0000000077d60490 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeMultipleKeys 0000000077c021a0 5 bytes JMP 0000000077d604a0 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEventPair 0000000077c021d0 5 bytes JMP 0000000077d60300 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtOpenIoCompletion 0000000077c021e0 5 bytes JMP 0000000077d60360 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtOpenMutant 0000000077c02240 5 bytes JMP 0000000077d602a0 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSemaphore 0000000077c02290 5 bytes JMP 0000000077d602c0 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtOpenThread 0000000077c022c0 5 bytes JMP 0000000077d60380 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtOpenTimer 0000000077c022d0 5 bytes JMP 0000000077d60340 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThreadEx 0000000077c025c0 5 bytes JMP 0000000077d60440 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootEntryOrder 0000000077c027c0 5 bytes JMP 0000000077d60260 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootOptions 0000000077c027d0 5 bytes JMP 0000000077d60270 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread 0000000077c027e0 5 bytes JMP 0000000077d60400 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemInformation 0000000077c029a0 5 bytes JMP 0000000077d601f0 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemPowerState 0000000077c029b0 5 bytes JMP 0000000077d60210 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtShutdownSystem 0000000077c02a20 5 bytes JMP 0000000077d60200 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendProcess 0000000077c02a80 5 bytes JMP 0000000077d60420 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendThread 0000000077c02a90 5 bytes JMP 0000000077d60430 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtSystemDebugControl 0000000077c02aa0 5 bytes JMP 0000000077d60220 .text C:\Windows\system32\svchost.exe[716] C:\Windows\SYSTEM32\ntdll.dll!NtVdmControl 0000000077c02b80 5 bytes JMP 0000000077d60280 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePort 0000000077c01360 5 bytes JMP 0000000077d60460 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtQueryObject 0000000077c013b0 5 bytes JMP 0000000077d60450 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtOpenProcess 0000000077c01510 5 bytes JMP 0000000077d60370 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePortEx 0000000077c01560 5 bytes JMP 0000000077d60470 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateProcess 0000000077c01570 5 bytes JMP 0000000077d603e0 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSection 0000000077c01620 5 bytes JMP 0000000077d60320 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory 0000000077c01650 5 bytes JMP 0000000077d603b0 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtDuplicateObject 0000000077c01670 5 bytes JMP 0000000077d60390 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEvent 0000000077c016b0 5 bytes JMP 0000000077d602e0 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEvent 0000000077c01730 5 bytes JMP 0000000077d602d0 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSection 0000000077c01750 5 bytes JMP 0000000077d60310 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThread 0000000077c01790 5 bytes JMP 0000000077d603c0 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateThread 0000000077c017e0 5 bytes JMP 0000000077d603f0 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtAddBootEntry 0000000077c01940 5 bytes JMP 0000000077d60230 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtAlpcSendWaitReceivePort 0000000077c01b00 5 bytes JMP 0000000077d60480 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtAssignProcessToJobObject 0000000077c01b30 5 bytes JMP 0000000077d603a0 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEventPair 0000000077c01c10 5 bytes JMP 0000000077d602f0 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtCreateIoCompletion 0000000077c01c20 5 bytes JMP 0000000077d60350 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtCreateMutant 0000000077c01c80 5 bytes JMP 0000000077d60290 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSemaphore 0000000077c01d10 5 bytes JMP 0000000077d602b0 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx 0000000077c01d30 5 bytes JMP 0000000077d603d0 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtCreateTimer 0000000077c01d40 5 bytes JMP 0000000077d60330 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtDebugActiveProcess 0000000077c01db0 5 bytes JMP 0000000077d60410 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtDeleteBootEntry 0000000077c01de0 5 bytes JMP 0000000077d60240 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtLoadDriver 0000000077c020a0 5 bytes JMP 0000000077d601e0 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtModifyBootEntry 0000000077c02160 5 bytes JMP 0000000077d60250 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeKey 0000000077c02190 5 bytes JMP 0000000077d60490 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeMultipleKeys 0000000077c021a0 5 bytes JMP 0000000077d604a0 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEventPair 0000000077c021d0 5 bytes JMP 0000000077d60300 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtOpenIoCompletion 0000000077c021e0 5 bytes JMP 0000000077d60360 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtOpenMutant 0000000077c02240 5 bytes JMP 0000000077d602a0 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSemaphore 0000000077c02290 5 bytes JMP 0000000077d602c0 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtOpenThread 0000000077c022c0 5 bytes JMP 0000000077d60380 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtOpenTimer 0000000077c022d0 5 bytes JMP 0000000077d60340 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThreadEx 0000000077c025c0 5 bytes JMP 0000000077d60440 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootEntryOrder 0000000077c027c0 5 bytes JMP 0000000077d60260 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootOptions 0000000077c027d0 5 bytes JMP 0000000077d60270 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread 0000000077c027e0 5 bytes JMP 0000000077d60400 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemInformation 0000000077c029a0 5 bytes JMP 0000000077d601f0 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemPowerState 0000000077c029b0 5 bytes JMP 0000000077d60210 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtShutdownSystem 0000000077c02a20 5 bytes JMP 0000000077d60200 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendProcess 0000000077c02a80 5 bytes JMP 0000000077d60420 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendThread 0000000077c02a90 5 bytes JMP 0000000077d60430 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtSystemDebugControl 0000000077c02aa0 5 bytes JMP 0000000077d60220 .text C:\Windows\system32\svchost.exe[836] C:\Windows\SYSTEM32\ntdll.dll!NtVdmControl 0000000077c02b80 5 bytes JMP 0000000077d60280 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePort 0000000077c01360 5 bytes JMP 0000000077d60460 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtQueryObject 0000000077c013b0 5 bytes JMP 0000000077d60450 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtOpenProcess 0000000077c01510 5 bytes JMP 0000000077d60370 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePortEx 0000000077c01560 5 bytes JMP 0000000077d60470 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateProcess 0000000077c01570 5 bytes JMP 0000000077d603e0 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSection 0000000077c01620 5 bytes JMP 0000000077d60320 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory 0000000077c01650 5 bytes JMP 0000000077d603b0 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtDuplicateObject 0000000077c01670 5 bytes JMP 0000000077d60390 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEvent 0000000077c016b0 5 bytes JMP 0000000077d602e0 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEvent 0000000077c01730 5 bytes JMP 0000000077d602d0 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSection 0000000077c01750 5 bytes JMP 0000000077d60310 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThread 0000000077c01790 5 bytes JMP 0000000077d603c0 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateThread 0000000077c017e0 5 bytes JMP 0000000077d603f0 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtAddBootEntry 0000000077c01940 5 bytes JMP 0000000077d60230 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtAlpcSendWaitReceivePort 0000000077c01b00 5 bytes JMP 0000000077d60480 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtAssignProcessToJobObject 0000000077c01b30 5 bytes JMP 0000000077d603a0 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEventPair 0000000077c01c10 5 bytes JMP 0000000077d602f0 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtCreateIoCompletion 0000000077c01c20 5 bytes JMP 0000000077d60350 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtCreateMutant 0000000077c01c80 5 bytes JMP 0000000077d60290 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSemaphore 0000000077c01d10 5 bytes JMP 0000000077d602b0 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx 0000000077c01d30 5 bytes JMP 0000000077d603d0 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtCreateTimer 0000000077c01d40 5 bytes JMP 0000000077d60330 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtDebugActiveProcess 0000000077c01db0 5 bytes JMP 0000000077d60410 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtDeleteBootEntry 0000000077c01de0 5 bytes JMP 0000000077d60240 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtLoadDriver 0000000077c020a0 5 bytes JMP 0000000077d601e0 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtModifyBootEntry 0000000077c02160 5 bytes JMP 0000000077d60250 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeKey 0000000077c02190 5 bytes JMP 0000000077d60490 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeMultipleKeys 0000000077c021a0 5 bytes JMP 0000000077d604a0 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEventPair 0000000077c021d0 5 bytes JMP 0000000077d60300 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtOpenIoCompletion 0000000077c021e0 5 bytes JMP 0000000077d60360 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtOpenMutant 0000000077c02240 5 bytes JMP 0000000077d602a0 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSemaphore 0000000077c02290 5 bytes JMP 0000000077d602c0 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtOpenThread 0000000077c022c0 5 bytes JMP 0000000077d60380 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtOpenTimer 0000000077c022d0 5 bytes JMP 0000000077d60340 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThreadEx 0000000077c025c0 5 bytes JMP 0000000077d60440 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootEntryOrder 0000000077c027c0 5 bytes JMP 0000000077d60260 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootOptions 0000000077c027d0 5 bytes JMP 0000000077d60270 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread 0000000077c027e0 5 bytes JMP 0000000077d60400 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemInformation 0000000077c029a0 5 bytes JMP 0000000077d601f0 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemPowerState 0000000077c029b0 5 bytes JMP 0000000077d60210 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtShutdownSystem 0000000077c02a20 5 bytes JMP 0000000077d60200 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendProcess 0000000077c02a80 5 bytes JMP 0000000077d60420 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendThread 0000000077c02a90 5 bytes JMP 0000000077d60430 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtSystemDebugControl 0000000077c02aa0 5 bytes JMP 0000000077d60220 .text C:\Windows\System32\svchost.exe[940] C:\Windows\SYSTEM32\ntdll.dll!NtVdmControl 0000000077c02b80 5 bytes JMP 0000000077d60280 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePort 0000000077c01360 5 bytes JMP 0000000077d60460 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtQueryObject 0000000077c013b0 5 bytes JMP 0000000077d60450 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtOpenProcess 0000000077c01510 5 bytes JMP 0000000077d60370 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePortEx 0000000077c01560 5 bytes JMP 0000000077d60470 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateProcess 0000000077c01570 5 bytes JMP 0000000077d603e0 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSection 0000000077c01620 5 bytes JMP 0000000077d60320 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory 0000000077c01650 5 bytes JMP 0000000077d603b0 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtDuplicateObject 0000000077c01670 5 bytes JMP 0000000077d60390 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEvent 0000000077c016b0 5 bytes JMP 0000000077d602e0 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEvent 0000000077c01730 5 bytes JMP 0000000077d602d0 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSection 0000000077c01750 5 bytes JMP 0000000077d60310 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThread 0000000077c01790 5 bytes JMP 0000000077d603c0 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateThread 0000000077c017e0 5 bytes JMP 0000000077d603f0 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtAddBootEntry 0000000077c01940 5 bytes JMP 0000000077d60230 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtAlpcSendWaitReceivePort 0000000077c01b00 5 bytes JMP 0000000077d60480 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtAssignProcessToJobObject 0000000077c01b30 5 bytes JMP 0000000077d603a0 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEventPair 0000000077c01c10 5 bytes JMP 0000000077d602f0 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtCreateIoCompletion 0000000077c01c20 5 bytes JMP 0000000077d60350 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtCreateMutant 0000000077c01c80 5 bytes JMP 0000000077d60290 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSemaphore 0000000077c01d10 5 bytes JMP 0000000077d602b0 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx 0000000077c01d30 5 bytes JMP 0000000077d603d0 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtCreateTimer 0000000077c01d40 5 bytes JMP 0000000077d60330 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtDebugActiveProcess 0000000077c01db0 5 bytes JMP 0000000077d60410 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtDeleteBootEntry 0000000077c01de0 5 bytes JMP 0000000077d60240 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtLoadDriver 0000000077c020a0 5 bytes JMP 0000000077d601e0 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtModifyBootEntry 0000000077c02160 5 bytes JMP 0000000077d60250 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeKey 0000000077c02190 5 bytes JMP 0000000077d60490 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeMultipleKeys 0000000077c021a0 5 bytes JMP 0000000077d604a0 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEventPair 0000000077c021d0 5 bytes JMP 0000000077d60300 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtOpenIoCompletion 0000000077c021e0 5 bytes JMP 0000000077d60360 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtOpenMutant 0000000077c02240 5 bytes JMP 0000000077d602a0 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSemaphore 0000000077c02290 5 bytes JMP 0000000077d602c0 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtOpenThread 0000000077c022c0 5 bytes JMP 0000000077d60380 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtOpenTimer 0000000077c022d0 5 bytes JMP 0000000077d60340 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThreadEx 0000000077c025c0 5 bytes JMP 0000000077d60440 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootEntryOrder 0000000077c027c0 5 bytes JMP 0000000077d60260 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootOptions 0000000077c027d0 5 bytes JMP 0000000077d60270 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread 0000000077c027e0 5 bytes JMP 0000000077d60400 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemInformation 0000000077c029a0 5 bytes JMP 0000000077d601f0 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemPowerState 0000000077c029b0 5 bytes JMP 0000000077d60210 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtShutdownSystem 0000000077c02a20 5 bytes JMP 0000000077d60200 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendProcess 0000000077c02a80 5 bytes JMP 0000000077d60420 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendThread 0000000077c02a90 5 bytes JMP 0000000077d60430 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtSystemDebugControl 0000000077c02aa0 5 bytes JMP 0000000077d60220 .text C:\Windows\System32\svchost.exe[972] C:\Windows\SYSTEM32\ntdll.dll!NtVdmControl 0000000077c02b80 5 bytes JMP 0000000077d60280 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePort 0000000077c01360 5 bytes JMP 0000000077d60460 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtQueryObject 0000000077c013b0 5 bytes JMP 0000000077d60450 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtOpenProcess 0000000077c01510 5 bytes JMP 0000000077d60370 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePortEx 0000000077c01560 5 bytes JMP 0000000077d60470 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateProcess 0000000077c01570 5 bytes JMP 0000000077d603e0 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSection 0000000077c01620 5 bytes JMP 0000000077d60320 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory 0000000077c01650 5 bytes JMP 0000000077d603b0 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtDuplicateObject 0000000077c01670 5 bytes JMP 0000000077d60390 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEvent 0000000077c016b0 5 bytes JMP 0000000077d602e0 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEvent 0000000077c01730 5 bytes JMP 0000000077d602d0 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSection 0000000077c01750 5 bytes JMP 0000000077d60310 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThread 0000000077c01790 5 bytes JMP 0000000077d603c0 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateThread 0000000077c017e0 5 bytes JMP 0000000077d603f0 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtAddBootEntry 0000000077c01940 5 bytes JMP 0000000077d60230 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtAlpcSendWaitReceivePort 0000000077c01b00 5 bytes JMP 0000000077d60480 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtAssignProcessToJobObject 0000000077c01b30 5 bytes JMP 0000000077d603a0 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEventPair 0000000077c01c10 5 bytes JMP 0000000077d602f0 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtCreateIoCompletion 0000000077c01c20 5 bytes JMP 0000000077d60350 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtCreateMutant 0000000077c01c80 5 bytes JMP 0000000077d60290 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSemaphore 0000000077c01d10 5 bytes JMP 0000000077d602b0 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx 0000000077c01d30 5 bytes JMP 0000000077d603d0 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtCreateTimer 0000000077c01d40 5 bytes JMP 0000000077d60330 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtDebugActiveProcess 0000000077c01db0 5 bytes JMP 0000000077d60410 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtDeleteBootEntry 0000000077c01de0 5 bytes JMP 0000000077d60240 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtLoadDriver 0000000077c020a0 5 bytes JMP 0000000077d601e0 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtModifyBootEntry 0000000077c02160 5 bytes JMP 0000000077d60250 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeKey 0000000077c02190 5 bytes JMP 0000000077d60490 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeMultipleKeys 0000000077c021a0 5 bytes JMP 0000000077d604a0 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEventPair 0000000077c021d0 5 bytes JMP 0000000077d60300 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtOpenIoCompletion 0000000077c021e0 5 bytes JMP 0000000077d60360 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtOpenMutant 0000000077c02240 5 bytes JMP 0000000077d602a0 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSemaphore 0000000077c02290 5 bytes JMP 0000000077d602c0 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtOpenThread 0000000077c022c0 5 bytes JMP 0000000077d60380 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtOpenTimer 0000000077c022d0 5 bytes JMP 0000000077d60340 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThreadEx 0000000077c025c0 5 bytes JMP 0000000077d60440 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootEntryOrder 0000000077c027c0 5 bytes JMP 0000000077d60260 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootOptions 0000000077c027d0 5 bytes JMP 0000000077d60270 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread 0000000077c027e0 5 bytes JMP 0000000077d60400 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemInformation 0000000077c029a0 5 bytes JMP 0000000077d601f0 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemPowerState 0000000077c029b0 5 bytes JMP 0000000077d60210 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtShutdownSystem 0000000077c02a20 5 bytes JMP 0000000077d60200 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendProcess 0000000077c02a80 5 bytes JMP 0000000077d60420 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendThread 0000000077c02a90 5 bytes JMP 0000000077d60430 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtSystemDebugControl 0000000077c02aa0 5 bytes JMP 0000000077d60220 .text C:\Windows\system32\svchost.exe[1000] C:\Windows\SYSTEM32\ntdll.dll!NtVdmControl 0000000077c02b80 5 bytes JMP 0000000077d60280 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePort 0000000077c01360 5 bytes JMP 0000000077d60460 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtQueryObject 0000000077c013b0 5 bytes JMP 0000000077d60450 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtOpenProcess 0000000077c01510 5 bytes JMP 0000000077d60370 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePortEx 0000000077c01560 5 bytes JMP 0000000077d60470 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateProcess 0000000077c01570 5 bytes JMP 0000000077d603e0 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSection 0000000077c01620 5 bytes JMP 0000000077d60320 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory 0000000077c01650 5 bytes JMP 0000000077d603b0 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtDuplicateObject 0000000077c01670 5 bytes JMP 0000000077d60390 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEvent 0000000077c016b0 5 bytes JMP 0000000077d602e0 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEvent 0000000077c01730 5 bytes JMP 0000000077d602d0 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSection 0000000077c01750 5 bytes JMP 0000000077d60310 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThread 0000000077c01790 5 bytes JMP 0000000077d603c0 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateThread 0000000077c017e0 5 bytes JMP 0000000077d603f0 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtAddBootEntry 0000000077c01940 5 bytes JMP 0000000077d60230 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtAlpcSendWaitReceivePort 0000000077c01b00 5 bytes JMP 0000000077d60480 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtAssignProcessToJobObject 0000000077c01b30 5 bytes JMP 0000000077d603a0 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEventPair 0000000077c01c10 5 bytes JMP 0000000077d602f0 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtCreateIoCompletion 0000000077c01c20 5 bytes JMP 0000000077d60350 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtCreateMutant 0000000077c01c80 5 bytes JMP 0000000077d60290 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSemaphore 0000000077c01d10 5 bytes JMP 0000000077d602b0 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx 0000000077c01d30 5 bytes JMP 0000000077d603d0 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtCreateTimer 0000000077c01d40 5 bytes JMP 0000000077d60330 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtDebugActiveProcess 0000000077c01db0 5 bytes JMP 0000000077d60410 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtDeleteBootEntry 0000000077c01de0 5 bytes JMP 0000000077d60240 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtLoadDriver 0000000077c020a0 5 bytes JMP 0000000077d601e0 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtModifyBootEntry 0000000077c02160 5 bytes JMP 0000000077d60250 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeKey 0000000077c02190 5 bytes JMP 0000000077d60490 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeMultipleKeys 0000000077c021a0 5 bytes JMP 0000000077d604a0 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEventPair 0000000077c021d0 5 bytes JMP 0000000077d60300 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtOpenIoCompletion 0000000077c021e0 5 bytes JMP 0000000077d60360 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtOpenMutant 0000000077c02240 5 bytes JMP 0000000077d602a0 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSemaphore 0000000077c02290 5 bytes JMP 0000000077d602c0 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtOpenThread 0000000077c022c0 5 bytes JMP 0000000077d60380 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtOpenTimer 0000000077c022d0 5 bytes JMP 0000000077d60340 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThreadEx 0000000077c025c0 5 bytes JMP 0000000077d60440 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootEntryOrder 0000000077c027c0 5 bytes JMP 0000000077d60260 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootOptions 0000000077c027d0 5 bytes JMP 0000000077d60270 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread 0000000077c027e0 5 bytes JMP 0000000077d60400 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemInformation 0000000077c029a0 5 bytes JMP 0000000077d601f0 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemPowerState 0000000077c029b0 5 bytes JMP 0000000077d60210 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtShutdownSystem 0000000077c02a20 5 bytes JMP 0000000077d60200 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendProcess 0000000077c02a80 5 bytes JMP 0000000077d60420 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendThread 0000000077c02a90 5 bytes JMP 0000000077d60430 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtSystemDebugControl 0000000077c02aa0 5 bytes JMP 0000000077d60220 .text C:\Windows\system32\svchost.exe[112] C:\Windows\SYSTEM32\ntdll.dll!NtVdmControl 0000000077c02b80 5 bytes JMP 0000000077d60280 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePort 0000000077c01360 5 bytes JMP 0000000077d60460 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtQueryObject 0000000077c013b0 5 bytes JMP 0000000077d60450 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtOpenProcess 0000000077c01510 5 bytes JMP 0000000077d60370 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePortEx 0000000077c01560 5 bytes JMP 0000000077d60470 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateProcess 0000000077c01570 5 bytes JMP 0000000077d603e0 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSection 0000000077c01620 5 bytes JMP 0000000077d60320 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory 0000000077c01650 5 bytes JMP 0000000077d603b0 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtDuplicateObject 0000000077c01670 5 bytes JMP 0000000077d60390 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEvent 0000000077c016b0 5 bytes JMP 0000000077d602e0 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEvent 0000000077c01730 5 bytes JMP 0000000077d602d0 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSection 0000000077c01750 5 bytes JMP 0000000077d60310 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThread 0000000077c01790 5 bytes JMP 0000000077d603c0 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateThread 0000000077c017e0 5 bytes JMP 0000000077d603f0 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtAddBootEntry 0000000077c01940 5 bytes JMP 0000000077d60230 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtAlpcSendWaitReceivePort 0000000077c01b00 5 bytes JMP 0000000077d60480 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtAssignProcessToJobObject 0000000077c01b30 5 bytes JMP 0000000077d603a0 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEventPair 0000000077c01c10 5 bytes JMP 0000000077d602f0 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtCreateIoCompletion 0000000077c01c20 5 bytes JMP 0000000077d60350 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtCreateMutant 0000000077c01c80 5 bytes JMP 0000000077d60290 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSemaphore 0000000077c01d10 5 bytes JMP 0000000077d602b0 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx 0000000077c01d30 5 bytes JMP 0000000077d603d0 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtCreateTimer 0000000077c01d40 5 bytes JMP 0000000077d60330 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtDebugActiveProcess 0000000077c01db0 5 bytes JMP 0000000077d60410 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtDeleteBootEntry 0000000077c01de0 5 bytes JMP 0000000077d60240 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtLoadDriver 0000000077c020a0 5 bytes JMP 0000000077d601e0 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtModifyBootEntry 0000000077c02160 5 bytes JMP 0000000077d60250 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeKey 0000000077c02190 5 bytes JMP 0000000077d60490 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeMultipleKeys 0000000077c021a0 5 bytes JMP 0000000077d604a0 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEventPair 0000000077c021d0 5 bytes JMP 0000000077d60300 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtOpenIoCompletion 0000000077c021e0 5 bytes JMP 0000000077d60360 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtOpenMutant 0000000077c02240 5 bytes JMP 0000000077d602a0 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSemaphore 0000000077c02290 5 bytes JMP 0000000077d602c0 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtOpenThread 0000000077c022c0 5 bytes JMP 0000000077d60380 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtOpenTimer 0000000077c022d0 5 bytes JMP 0000000077d60340 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThreadEx 0000000077c025c0 5 bytes JMP 0000000077d60440 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootEntryOrder 0000000077c027c0 5 bytes JMP 0000000077d60260 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootOptions 0000000077c027d0 5 bytes JMP 0000000077d60270 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread 0000000077c027e0 5 bytes JMP 0000000077d60400 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemInformation 0000000077c029a0 5 bytes JMP 0000000077d601f0 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemPowerState 0000000077c029b0 5 bytes JMP 0000000077d60210 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtShutdownSystem 0000000077c02a20 5 bytes JMP 0000000077d60200 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendProcess 0000000077c02a80 5 bytes JMP 0000000077d60420 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendThread 0000000077c02a90 5 bytes JMP 0000000077d60430 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtSystemDebugControl 0000000077c02aa0 5 bytes JMP 0000000077d60220 .text C:\Windows\system32\svchost.exe[436] C:\Windows\SYSTEM32\ntdll.dll!NtVdmControl 0000000077c02b80 5 bytes JMP 0000000077d60280 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePort 0000000077c01360 5 bytes JMP 0000000077d60460 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtQueryObject 0000000077c013b0 5 bytes JMP 0000000077d60450 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtOpenProcess 0000000077c01510 5 bytes JMP 0000000077d60370 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePortEx 0000000077c01560 5 bytes JMP 0000000077d60470 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateProcess 0000000077c01570 5 bytes JMP 0000000077d603e0 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSection 0000000077c01620 5 bytes JMP 0000000077d60320 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory 0000000077c01650 5 bytes JMP 0000000077d603b0 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtDuplicateObject 0000000077c01670 5 bytes JMP 0000000077d60390 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEvent 0000000077c016b0 5 bytes JMP 0000000077d602e0 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEvent 0000000077c01730 5 bytes JMP 0000000077d602d0 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSection 0000000077c01750 5 bytes JMP 0000000077d60310 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThread 0000000077c01790 5 bytes JMP 0000000077d603c0 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateThread 0000000077c017e0 5 bytes JMP 0000000077d603f0 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtAddBootEntry 0000000077c01940 5 bytes JMP 0000000077d60230 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtAlpcSendWaitReceivePort 0000000077c01b00 5 bytes JMP 0000000077d60480 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtAssignProcessToJobObject 0000000077c01b30 5 bytes JMP 0000000077d603a0 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEventPair 0000000077c01c10 5 bytes JMP 0000000077d602f0 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtCreateIoCompletion 0000000077c01c20 5 bytes JMP 0000000077d60350 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtCreateMutant 0000000077c01c80 5 bytes JMP 0000000077d60290 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSemaphore 0000000077c01d10 5 bytes JMP 0000000077d602b0 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx 0000000077c01d30 5 bytes JMP 0000000077d603d0 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtCreateTimer 0000000077c01d40 5 bytes JMP 0000000077d60330 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtDebugActiveProcess 0000000077c01db0 5 bytes JMP 0000000077d60410 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtDeleteBootEntry 0000000077c01de0 5 bytes JMP 0000000077d60240 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtLoadDriver 0000000077c020a0 5 bytes JMP 0000000077d601e0 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtModifyBootEntry 0000000077c02160 5 bytes JMP 0000000077d60250 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeKey 0000000077c02190 5 bytes JMP 0000000077d60490 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeMultipleKeys 0000000077c021a0 5 bytes JMP 0000000077d604a0 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEventPair 0000000077c021d0 5 bytes JMP 0000000077d60300 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtOpenIoCompletion 0000000077c021e0 5 bytes JMP 0000000077d60360 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtOpenMutant 0000000077c02240 5 bytes JMP 0000000077d602a0 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSemaphore 0000000077c02290 5 bytes JMP 0000000077d602c0 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtOpenThread 0000000077c022c0 5 bytes JMP 0000000077d60380 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtOpenTimer 0000000077c022d0 5 bytes JMP 0000000077d60340 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThreadEx 0000000077c025c0 5 bytes JMP 0000000077d60440 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootEntryOrder 0000000077c027c0 5 bytes JMP 0000000077d60260 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootOptions 0000000077c027d0 5 bytes JMP 0000000077d60270 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread 0000000077c027e0 5 bytes JMP 0000000077d60400 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemInformation 0000000077c029a0 5 bytes JMP 0000000077d601f0 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemPowerState 0000000077c029b0 5 bytes JMP 0000000077d60210 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtShutdownSystem 0000000077c02a20 5 bytes JMP 0000000077d60200 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendProcess 0000000077c02a80 5 bytes JMP 0000000077d60420 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendThread 0000000077c02a90 5 bytes JMP 0000000077d60430 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtSystemDebugControl 0000000077c02aa0 5 bytes JMP 0000000077d60220 .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1152] C:\Windows\SYSTEM32\ntdll.dll!NtVdmControl 0000000077c02b80 5 bytes JMP 0000000077d60280 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePort 0000000077c01360 5 bytes JMP 0000000077d60460 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtQueryObject 0000000077c013b0 5 bytes JMP 0000000077d60450 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtOpenProcess 0000000077c01510 5 bytes JMP 0000000077d60370 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePortEx 0000000077c01560 5 bytes JMP 0000000077d60470 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateProcess 0000000077c01570 5 bytes JMP 0000000077d603e0 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSection 0000000077c01620 5 bytes JMP 0000000077d60320 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory 0000000077c01650 5 bytes JMP 0000000077d603b0 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtDuplicateObject 0000000077c01670 5 bytes JMP 0000000077d60390 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEvent 0000000077c016b0 5 bytes JMP 0000000077d602e0 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEvent 0000000077c01730 5 bytes JMP 0000000077d602d0 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSection 0000000077c01750 5 bytes JMP 0000000077d60310 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThread 0000000077c01790 5 bytes JMP 0000000077d603c0 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateThread 0000000077c017e0 5 bytes JMP 0000000077d603f0 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtAddBootEntry 0000000077c01940 5 bytes JMP 0000000077d60230 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtAlpcSendWaitReceivePort 0000000077c01b00 5 bytes JMP 0000000077d60480 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtAssignProcessToJobObject 0000000077c01b30 5 bytes JMP 0000000077d603a0 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEventPair 0000000077c01c10 5 bytes JMP 0000000077d602f0 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtCreateIoCompletion 0000000077c01c20 5 bytes JMP 0000000077d60350 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtCreateMutant 0000000077c01c80 5 bytes JMP 0000000077d60290 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSemaphore 0000000077c01d10 5 bytes JMP 0000000077d602b0 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx 0000000077c01d30 5 bytes JMP 0000000077d603d0 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtCreateTimer 0000000077c01d40 5 bytes JMP 0000000077d60330 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtDebugActiveProcess 0000000077c01db0 5 bytes JMP 0000000077d60410 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtDeleteBootEntry 0000000077c01de0 5 bytes JMP 0000000077d60240 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtLoadDriver 0000000077c020a0 5 bytes JMP 0000000077d601e0 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtModifyBootEntry 0000000077c02160 5 bytes JMP 0000000077d60250 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeKey 0000000077c02190 5 bytes JMP 0000000077d60490 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeMultipleKeys 0000000077c021a0 5 bytes JMP 0000000077d604a0 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEventPair 0000000077c021d0 5 bytes JMP 0000000077d60300 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtOpenIoCompletion 0000000077c021e0 5 bytes JMP 0000000077d60360 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtOpenMutant 0000000077c02240 5 bytes JMP 0000000077d602a0 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSemaphore 0000000077c02290 5 bytes JMP 0000000077d602c0 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtOpenThread 0000000077c022c0 5 bytes JMP 0000000077d60380 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtOpenTimer 0000000077c022d0 5 bytes JMP 0000000077d60340 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThreadEx 0000000077c025c0 5 bytes JMP 0000000077d60440 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootEntryOrder 0000000077c027c0 5 bytes JMP 0000000077d60260 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootOptions 0000000077c027d0 5 bytes JMP 0000000077d60270 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread 0000000077c027e0 5 bytes JMP 0000000077d60400 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemInformation 0000000077c029a0 5 bytes JMP 0000000077d601f0 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemPowerState 0000000077c029b0 5 bytes JMP 0000000077d60210 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtShutdownSystem 0000000077c02a20 5 bytes JMP 0000000077d60200 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendProcess 0000000077c02a80 5 bytes JMP 0000000077d60420 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendThread 0000000077c02a90 5 bytes JMP 0000000077d60430 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtSystemDebugControl 0000000077c02aa0 5 bytes JMP 0000000077d60220 .text C:\Windows\Explorer.EXE[1348] C:\Windows\SYSTEM32\ntdll.dll!NtVdmControl 0000000077c02b80 5 bytes JMP 0000000077d60280 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePort 0000000077c01360 5 bytes JMP 0000000100070460 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtQueryObject 0000000077c013b0 5 bytes JMP 0000000100070450 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtOpenProcess 0000000077c01510 5 bytes JMP 0000000100070370 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePortEx 0000000077c01560 5 bytes JMP 0000000100070470 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateProcess 0000000077c01570 5 bytes JMP 00000001000703e0 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSection 0000000077c01620 5 bytes JMP 0000000100070320 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory 0000000077c01650 5 bytes JMP 00000001000703b0 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtDuplicateObject 0000000077c01670 5 bytes JMP 0000000100070390 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEvent 0000000077c016b0 5 bytes JMP 00000001000702e0 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEvent 0000000077c01730 5 bytes JMP 00000001000702d0 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSection 0000000077c01750 5 bytes JMP 0000000100070310 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThread 0000000077c01790 5 bytes JMP 00000001000703c0 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateThread 0000000077c017e0 5 bytes JMP 00000001000703f0 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtAddBootEntry 0000000077c01940 5 bytes JMP 0000000100070230 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtAlpcSendWaitReceivePort 0000000077c01b00 5 bytes JMP 0000000100070480 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtAssignProcessToJobObject 0000000077c01b30 5 bytes JMP 00000001000703a0 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEventPair 0000000077c01c10 5 bytes JMP 00000001000702f0 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtCreateIoCompletion 0000000077c01c20 5 bytes JMP 0000000100070350 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtCreateMutant 0000000077c01c80 5 bytes JMP 0000000100070290 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSemaphore 0000000077c01d10 5 bytes JMP 00000001000702b0 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx 0000000077c01d30 5 bytes JMP 00000001000703d0 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtCreateTimer 0000000077c01d40 5 bytes JMP 0000000100070330 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtDebugActiveProcess 0000000077c01db0 5 bytes JMP 0000000100070410 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtDeleteBootEntry 0000000077c01de0 5 bytes JMP 0000000100070240 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtLoadDriver 0000000077c020a0 5 bytes JMP 00000001000701e0 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtModifyBootEntry 0000000077c02160 5 bytes JMP 0000000100070250 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeKey 0000000077c02190 5 bytes JMP 0000000100070490 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeMultipleKeys 0000000077c021a0 5 bytes JMP 00000001000704a0 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEventPair 0000000077c021d0 5 bytes JMP 0000000100070300 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtOpenIoCompletion 0000000077c021e0 5 bytes JMP 0000000100070360 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtOpenMutant 0000000077c02240 5 bytes JMP 00000001000702a0 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSemaphore 0000000077c02290 5 bytes JMP 00000001000702c0 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtOpenThread 0000000077c022c0 5 bytes JMP 0000000100070380 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtOpenTimer 0000000077c022d0 5 bytes JMP 0000000100070340 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThreadEx 0000000077c025c0 5 bytes JMP 0000000100070440 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootEntryOrder 0000000077c027c0 5 bytes JMP 0000000100070260 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootOptions 0000000077c027d0 5 bytes JMP 0000000100070270 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread 0000000077c027e0 5 bytes JMP 0000000100070400 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemInformation 0000000077c029a0 5 bytes JMP 00000001000701f0 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemPowerState 0000000077c029b0 5 bytes JMP 0000000100070210 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtShutdownSystem 0000000077c02a20 5 bytes JMP 0000000100070200 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendProcess 0000000077c02a80 5 bytes JMP 0000000100070420 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendThread 0000000077c02a90 5 bytes JMP 0000000100070430 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtSystemDebugControl 0000000077c02aa0 5 bytes JMP 0000000100070220 .text C:\Windows\system32\svchost.exe[1596] C:\Windows\SYSTEM32\ntdll.dll!NtVdmControl 0000000077c02b80 5 bytes JMP 0000000100070280 .text C:\Program Files (x86)\OpenOffice.org 2.4\program\soffice.BIN[2616] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075901465 2 bytes [90, 75] .text C:\Program Files (x86)\OpenOffice.org 2.4\program\soffice.BIN[2616] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000759014bb 2 bytes [90, 75] .text ... * 2 .text C:\Program Files\AVAST Software\Avast\avastui.exe[2652] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter 0000000075d38791 8 bytes [31, C0, C2, 04, 00, 90, 90, ...] .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePort 0000000077c01360 5 bytes JMP 0000000077d60460 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtQueryObject 0000000077c013b0 5 bytes JMP 0000000077d60450 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtOpenProcess 0000000077c01510 5 bytes JMP 0000000077d60370 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePortEx 0000000077c01560 5 bytes JMP 0000000077d60470 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateProcess 0000000077c01570 5 bytes JMP 0000000077d603e0 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSection 0000000077c01620 5 bytes JMP 0000000077d60320 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory 0000000077c01650 5 bytes JMP 0000000077d603b0 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtDuplicateObject 0000000077c01670 5 bytes JMP 0000000077d60390 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEvent 0000000077c016b0 5 bytes JMP 0000000077d602e0 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEvent 0000000077c01730 5 bytes JMP 0000000077d602d0 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSection 0000000077c01750 5 bytes JMP 0000000077d60310 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThread 0000000077c01790 5 bytes JMP 0000000077d603c0 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateThread 0000000077c017e0 5 bytes JMP 0000000077d603f0 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtAddBootEntry 0000000077c01940 5 bytes JMP 0000000077d60230 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtAlpcSendWaitReceivePort 0000000077c01b00 5 bytes JMP 0000000077d60480 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtAssignProcessToJobObject 0000000077c01b30 5 bytes JMP 0000000077d603a0 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEventPair 0000000077c01c10 5 bytes JMP 0000000077d602f0 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtCreateIoCompletion 0000000077c01c20 5 bytes JMP 0000000077d60350 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtCreateMutant 0000000077c01c80 5 bytes JMP 0000000077d60290 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSemaphore 0000000077c01d10 5 bytes JMP 0000000077d602b0 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx 0000000077c01d30 5 bytes JMP 0000000077d603d0 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtCreateTimer 0000000077c01d40 5 bytes JMP 0000000077d60330 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtDebugActiveProcess 0000000077c01db0 5 bytes JMP 0000000077d60410 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtDeleteBootEntry 0000000077c01de0 5 bytes JMP 0000000077d60240 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtLoadDriver 0000000077c020a0 5 bytes JMP 0000000077d601e0 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtModifyBootEntry 0000000077c02160 5 bytes JMP 0000000077d60250 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeKey 0000000077c02190 5 bytes JMP 0000000077d60490 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeMultipleKeys 0000000077c021a0 5 bytes JMP 0000000077d604a0 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEventPair 0000000077c021d0 5 bytes JMP 0000000077d60300 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtOpenIoCompletion 0000000077c021e0 5 bytes JMP 0000000077d60360 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtOpenMutant 0000000077c02240 5 bytes JMP 0000000077d602a0 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSemaphore 0000000077c02290 5 bytes JMP 0000000077d602c0 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtOpenThread 0000000077c022c0 5 bytes JMP 0000000077d60380 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtOpenTimer 0000000077c022d0 5 bytes JMP 0000000077d60340 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThreadEx 0000000077c025c0 5 bytes JMP 0000000077d60440 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootEntryOrder 0000000077c027c0 5 bytes JMP 0000000077d60260 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootOptions 0000000077c027d0 5 bytes JMP 0000000077d60270 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread 0000000077c027e0 5 bytes JMP 0000000077d60400 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemInformation 0000000077c029a0 5 bytes JMP 0000000077d601f0 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemPowerState 0000000077c029b0 5 bytes JMP 0000000077d60210 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtShutdownSystem 0000000077c02a20 5 bytes JMP 0000000077d60200 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendProcess 0000000077c02a80 5 bytes JMP 0000000077d60420 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendThread 0000000077c02a90 5 bytes JMP 0000000077d60430 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtSystemDebugControl 0000000077c02aa0 5 bytes JMP 0000000077d60220 .text C:\Windows\system32\SearchIndexer.exe[2356] C:\Windows\SYSTEM32\ntdll.dll!NtVdmControl 0000000077c02b80 5 bytes JMP 0000000077d60280 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePort 0000000077c01360 5 bytes JMP 0000000077d60460 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtQueryObject 0000000077c013b0 5 bytes JMP 0000000077d60450 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenProcess 0000000077c01510 5 bytes JMP 0000000077d60370 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePortEx 0000000077c01560 5 bytes JMP 0000000077d60470 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateProcess 0000000077c01570 5 bytes JMP 0000000077d603e0 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSection 0000000077c01620 5 bytes JMP 0000000077d60320 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory 0000000077c01650 5 bytes JMP 0000000077d603b0 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtDuplicateObject 0000000077c01670 5 bytes JMP 0000000077d60390 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEvent 0000000077c016b0 5 bytes JMP 0000000077d602e0 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEvent 0000000077c01730 5 bytes JMP 0000000077d602d0 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSection 0000000077c01750 5 bytes JMP 0000000077d60310 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThread 0000000077c01790 5 bytes JMP 0000000077d603c0 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateThread 0000000077c017e0 5 bytes JMP 0000000077d603f0 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtAddBootEntry 0000000077c01940 5 bytes JMP 0000000077d60230 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtAlpcSendWaitReceivePort 0000000077c01b00 5 bytes JMP 0000000077d60480 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtAssignProcessToJobObject 0000000077c01b30 5 bytes JMP 0000000077d603a0 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEventPair 0000000077c01c10 5 bytes JMP 0000000077d602f0 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateIoCompletion 0000000077c01c20 5 bytes JMP 0000000077d60350 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateMutant 0000000077c01c80 5 bytes JMP 0000000077d60290 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSemaphore 0000000077c01d10 5 bytes JMP 0000000077d602b0 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx 0000000077c01d30 5 bytes JMP 0000000077d603d0 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateTimer 0000000077c01d40 5 bytes JMP 0000000077d60330 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtDebugActiveProcess 0000000077c01db0 5 bytes JMP 0000000077d60410 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtDeleteBootEntry 0000000077c01de0 5 bytes JMP 0000000077d60240 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtLoadDriver 0000000077c020a0 5 bytes JMP 0000000077d601e0 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtModifyBootEntry 0000000077c02160 5 bytes JMP 0000000077d60250 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeKey 0000000077c02190 5 bytes JMP 0000000077d60490 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeMultipleKeys 0000000077c021a0 5 bytes JMP 0000000077d604a0 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEventPair 0000000077c021d0 5 bytes JMP 0000000077d60300 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenIoCompletion 0000000077c021e0 5 bytes JMP 0000000077d60360 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenMutant 0000000077c02240 5 bytes JMP 0000000077d602a0 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSemaphore 0000000077c02290 5 bytes JMP 0000000077d602c0 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenThread 0000000077c022c0 5 bytes JMP 0000000077d60380 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenTimer 0000000077c022d0 5 bytes JMP 0000000077d60340 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThreadEx 0000000077c025c0 5 bytes JMP 0000000077d60440 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootEntryOrder 0000000077c027c0 5 bytes JMP 0000000077d60260 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootOptions 0000000077c027d0 5 bytes JMP 0000000077d60270 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread 0000000077c027e0 5 bytes JMP 0000000077d60400 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemInformation 0000000077c029a0 5 bytes JMP 0000000077d601f0 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemPowerState 0000000077c029b0 5 bytes JMP 0000000077d60210 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtShutdownSystem 0000000077c02a20 5 bytes JMP 0000000077d60200 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendProcess 0000000077c02a80 5 bytes JMP 0000000077d60420 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendThread 0000000077c02a90 5 bytes JMP 0000000077d60430 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtSystemDebugControl 0000000077c02aa0 5 bytes JMP 0000000077d60220 .text C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[3876] C:\Windows\SYSTEM32\ntdll.dll!NtVdmControl 0000000077c02b80 5 bytes JMP 0000000077d60280 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePort 0000000077c01360 5 bytes JMP 0000000077d60460 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtQueryObject 0000000077c013b0 5 bytes JMP 0000000077d60450 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtOpenProcess 0000000077c01510 5 bytes JMP 0000000077d60370 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePortEx 0000000077c01560 5 bytes JMP 0000000077d60470 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateProcess 0000000077c01570 5 bytes JMP 0000000077d603e0 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSection 0000000077c01620 5 bytes JMP 0000000077d60320 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory 0000000077c01650 5 bytes JMP 0000000077d603b0 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtDuplicateObject 0000000077c01670 5 bytes JMP 0000000077d60390 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEvent 0000000077c016b0 5 bytes JMP 0000000077d602e0 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEvent 0000000077c01730 5 bytes JMP 0000000077d602d0 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSection 0000000077c01750 5 bytes JMP 0000000077d60310 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThread 0000000077c01790 5 bytes JMP 0000000077d603c0 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateThread 0000000077c017e0 5 bytes JMP 0000000077d603f0 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtAddBootEntry 0000000077c01940 5 bytes JMP 0000000077d60230 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtAlpcSendWaitReceivePort 0000000077c01b00 5 bytes JMP 0000000077d60480 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtAssignProcessToJobObject 0000000077c01b30 5 bytes JMP 0000000077d603a0 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEventPair 0000000077c01c10 5 bytes JMP 0000000077d602f0 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtCreateIoCompletion 0000000077c01c20 5 bytes JMP 0000000077d60350 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtCreateMutant 0000000077c01c80 5 bytes JMP 0000000077d60290 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSemaphore 0000000077c01d10 5 bytes JMP 0000000077d602b0 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx 0000000077c01d30 5 bytes JMP 0000000077d603d0 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtCreateTimer 0000000077c01d40 5 bytes JMP 0000000077d60330 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtDebugActiveProcess 0000000077c01db0 5 bytes JMP 0000000077d60410 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtDeleteBootEntry 0000000077c01de0 5 bytes JMP 0000000077d60240 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtLoadDriver 0000000077c020a0 5 bytes JMP 0000000077d601e0 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtModifyBootEntry 0000000077c02160 5 bytes JMP 0000000077d60250 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeKey 0000000077c02190 5 bytes JMP 0000000077d60490 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeMultipleKeys 0000000077c021a0 5 bytes JMP 0000000077d604a0 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEventPair 0000000077c021d0 5 bytes JMP 0000000077d60300 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtOpenIoCompletion 0000000077c021e0 5 bytes JMP 0000000077d60360 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtOpenMutant 0000000077c02240 5 bytes JMP 0000000077d602a0 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSemaphore 0000000077c02290 5 bytes JMP 0000000077d602c0 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtOpenThread 0000000077c022c0 5 bytes JMP 0000000077d60380 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtOpenTimer 0000000077c022d0 5 bytes JMP 0000000077d60340 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThreadEx 0000000077c025c0 5 bytes JMP 0000000077d60440 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootEntryOrder 0000000077c027c0 5 bytes JMP 0000000077d60260 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootOptions 0000000077c027d0 5 bytes JMP 0000000077d60270 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread 0000000077c027e0 5 bytes JMP 0000000077d60400 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemInformation 0000000077c029a0 5 bytes JMP 0000000077d601f0 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemPowerState 0000000077c029b0 5 bytes JMP 0000000077d60210 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtShutdownSystem 0000000077c02a20 5 bytes JMP 0000000077d60200 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendProcess 0000000077c02a80 5 bytes JMP 0000000077d60420 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendThread 0000000077c02a90 5 bytes JMP 0000000077d60430 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtSystemDebugControl 0000000077c02aa0 5 bytes JMP 0000000077d60220 .text C:\Windows\system32\svchost.exe[4072] C:\Windows\SYSTEM32\ntdll.dll!NtVdmControl 0000000077c02b80 5 bytes JMP 0000000077d60280 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePort 0000000077c01360 5 bytes JMP 0000000077d60460 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtQueryObject 0000000077c013b0 5 bytes JMP 0000000077d60450 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenProcess 0000000077c01510 5 bytes JMP 0000000077d60370 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtReplyWaitReceivePortEx 0000000077c01560 5 bytes JMP 0000000077d60470 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateProcess 0000000077c01570 5 bytes JMP 0000000077d603e0 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSection 0000000077c01620 5 bytes JMP 0000000077d60320 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory 0000000077c01650 5 bytes JMP 0000000077d603b0 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtDuplicateObject 0000000077c01670 5 bytes JMP 0000000077d60390 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEvent 0000000077c016b0 5 bytes JMP 0000000077d602e0 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEvent 0000000077c01730 5 bytes JMP 0000000077d602d0 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSection 0000000077c01750 5 bytes JMP 0000000077d60310 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThread 0000000077c01790 5 bytes JMP 0000000077d603c0 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtTerminateThread 0000000077c017e0 5 bytes JMP 0000000077d603f0 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtAddBootEntry 0000000077c01940 5 bytes JMP 0000000077d60230 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtAlpcSendWaitReceivePort 0000000077c01b00 5 bytes JMP 0000000077d60480 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtAssignProcessToJobObject 0000000077c01b30 5 bytes JMP 0000000077d603a0 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateEventPair 0000000077c01c10 5 bytes JMP 0000000077d602f0 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateIoCompletion 0000000077c01c20 5 bytes JMP 0000000077d60350 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateMutant 0000000077c01c80 5 bytes JMP 0000000077d60290 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateSemaphore 0000000077c01d10 5 bytes JMP 0000000077d602b0 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx 0000000077c01d30 5 bytes JMP 0000000077d603d0 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtCreateTimer 0000000077c01d40 5 bytes JMP 0000000077d60330 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtDebugActiveProcess 0000000077c01db0 5 bytes JMP 0000000077d60410 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtDeleteBootEntry 0000000077c01de0 5 bytes JMP 0000000077d60240 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtLoadDriver 0000000077c020a0 5 bytes JMP 0000000077d601e0 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtModifyBootEntry 0000000077c02160 5 bytes JMP 0000000077d60250 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeKey 0000000077c02190 5 bytes JMP 0000000077d60490 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtNotifyChangeMultipleKeys 0000000077c021a0 5 bytes JMP 0000000077d604a0 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenEventPair 0000000077c021d0 5 bytes JMP 0000000077d60300 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenIoCompletion 0000000077c021e0 5 bytes JMP 0000000077d60360 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenMutant 0000000077c02240 5 bytes JMP 0000000077d602a0 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenSemaphore 0000000077c02290 5 bytes JMP 0000000077d602c0 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenThread 0000000077c022c0 5 bytes JMP 0000000077d60380 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtOpenTimer 0000000077c022d0 5 bytes JMP 0000000077d60340 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThreadEx 0000000077c025c0 5 bytes JMP 0000000077d60440 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootEntryOrder 0000000077c027c0 5 bytes JMP 0000000077d60260 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtSetBootOptions 0000000077c027d0 5 bytes JMP 0000000077d60270 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread 0000000077c027e0 5 bytes JMP 0000000077d60400 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemInformation 0000000077c029a0 5 bytes JMP 0000000077d601f0 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtSetSystemPowerState 0000000077c029b0 5 bytes JMP 0000000077d60210 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtShutdownSystem 0000000077c02a20 5 bytes JMP 0000000077d60200 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendProcess 0000000077c02a80 5 bytes JMP 0000000077d60420 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtSuspendThread 0000000077c02a90 5 bytes JMP 0000000077d60430 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtSystemDebugControl 0000000077c02aa0 5 bytes JMP 0000000077d60220 .text C:\Windows\System32\svchost.exe[4876] C:\Windows\SYSTEM32\ntdll.dll!NtVdmControl 0000000077c02b80 5 bytes JMP 0000000077d60280 .text C:\Program Files (x86)\Dynamo Combo\bin\utilDynamoCombo.exe[1444] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69 0000000075901465 2 bytes [90, 75] .text C:\Program Files (x86)\Dynamo Combo\bin\utilDynamoCombo.exe[1444] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155 00000000759014bb 2 bytes [90, 75] .text ... * 2 .text C:\Program Files (x86)\Dynamo Combo\bin\DynamoCombo.BrowserAdapter.exe[3676] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075901465 2 bytes [90, 75] .text C:\Program Files (x86)\Dynamo Combo\bin\DynamoCombo.BrowserAdapter.exe[3676] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000759014bb 2 bytes [90, 75] .text ... * 2 ---- Processes - GMER 2.1 ---- Process C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (*** suspicious ***) @ C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [1500] (WindowsProtectManger Service/Fuyu LIMITED)(2015-01-10 06:36:34) 00000000003b0000 Library C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{9F71A6CB-0D37-46E7-9148-5E322691D2C3}\offreg.dll (*** suspicious ***) @ C:\Windows\System32\svchost.exe [4876](2015-02-11 03:27:00) 000007fefb0c0000 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\b803058e7c6c Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\b803058e7c6c@980d2ed637ae 0x07 0xD2 0xB9 0x9D ... Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\b803058e7c6c@f084c9c75b82 0x4D 0x23 0x80 0x6F ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\b803058e7c6c (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\b803058e7c6c@980d2ed637ae 0x07 0xD2 0xB9 0x9D ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\b803058e7c6c@f084c9c75b82 0x4D 0x23 0x80 0x6F ... ---- Files - GMER 2.1 ---- File C:\avast! sandbox 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\ProgramData 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\ProgramData\NVIDIA Corporation 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\ProgramData\NVIDIA Corporation\Drs 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\ProgramData\NVIDIA Corporation\Drs\nvdrssel.bin 1 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Safe Browsing Bloom Prefix Set 1374658 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Certificate Revocation Lists 206966 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\History Provider Cache 10213 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Network Action Predictor 55296 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Application Cache 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Application Cache\Cache 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Application Cache\Cache\data_0 45056 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Application Cache\Cache\data_1 270336 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Application Cache\Cache\data_2 1056768 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Application Cache\Cache\data_3 4202496 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Application Cache\Cache\f_000003 42803 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Application Cache\Cache\f_000006 140451 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Application Cache\Cache\f_000007 31914 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Application Cache\Cache\index 524656 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Application Cache\Index 23552 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Application Cache\Index-journal 10832 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00017a 26134 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\data_0 155648 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\data_1 2891776 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\data_2 12591104 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\data_3 8396800 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000001 56387 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000002 129521 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000003 56024 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000004 63959 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000005 48976 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000006 31216 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000007 36474 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000008 40521 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000014 54760 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000015 17921 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000016 23041 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000020 37948 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000021 71223 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000022 16447 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000023 32043 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000024 17780 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000025 22253 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000026 42803 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000027 55882 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000028 19707 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000029 26748 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00002a 19930 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00002d 142163 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00002e 145963 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000031 35520 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000032 25794 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000034 16631 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000039 50075 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00003c 53091 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00003d 55903 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00003e 37858 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000040 49945 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000042 31129 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000043 19087 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000044 33673 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000046 40335 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000047 21441 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000048 50039 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000049 26609 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00004b 51842 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00004c 90464 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00004d 53189 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00004e 67958 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000050 57000 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000051 30595 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000052 17288 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000054 18612 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000055 27114 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000056 19745 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000058 27127 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00005a 26264 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00005b 18240 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00005c 24895 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00005d 16457 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00005e 39562 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00005f 21400 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000061 19697 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000062 36424 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000063 25615 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000064 31322 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000065 79980 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000066 24094 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000067 28686 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000068 20464 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000069 141627 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00006a 81774 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00006b 322846 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00006c 35884 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00006d 65536 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00006f 31124 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000070 94712 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000071 106411 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000072 65536 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000073 100000 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000074 89004 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000075 65536 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000077 16550 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000078 53875 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000079 25169 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00007a 65536 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00007b 32768 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00007c 71653 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00007d 55827 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00007e 53051 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00007f 29256 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000080 74700 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000081 20782 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000082 18453 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00000d 3233589 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00002f 42101 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000045 43880 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000059 47633 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00006e 94712 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000083 44093 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000098 39898 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000ae 36923 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000c2 105615 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000d7 31600 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000eb 29912 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000100 42194 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000114 31250 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000128 37338 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00013c 38655 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000150 77298 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000165 59477 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000084 71753 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000085 97731 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000086 23046 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000087 16613 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000088 48272 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000089 33123 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00008a 55539 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00008b 35242 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00008c 30952 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00008d 77298 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00008e 158402 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00008f 67875 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000091 18588 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000092 77114 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000093 19868 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000094 53374 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000095 51961 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000096 51513 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000097 29684 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000099 77012 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00009a 27496 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00009b 152666 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00009d 109301 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000a0 108335 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000a1 40387 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000a2 97146 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000a3 72540 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000a4 96855 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000a5 24677 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000a6 22026 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000a7 54072 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000a8 54879 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000a9 51835 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000aa 18834 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000ab 27349 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000ac 18555 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000ad 22219 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000af 16475 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000b0 20196 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000b1 34505 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000b2 20630 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000b3 17756 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000b4 47630 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000b5 18240 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000b6 47395 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000b7 36041 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000b8 30055 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000b9 37189 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000ba 19373 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000bb 51513 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000bc 24513 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000bd 43826 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000be 16777 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000bf 40287 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000c0 22894 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000c1 38879 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000c3 17128 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000c4 25699 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000c5 37859 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000c6 107490 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000c7 80729 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000c8 71742 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000c9 20023 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000ca 35405 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000cb 29256 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000cc 54614 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000cd 80528 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000ce 32891 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000cf 16471 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000d0 22864 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000d1 67845 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000d2 43204 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000d3 61645 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000d4 274752 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000d6 21843 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000d8 62178 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000d9 35187 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000da 61480 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000db 65663 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000dc 42711 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000dd 60464 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000de 38923 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000df 36182 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000e0 102902 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000e1 60274 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000e2 49762 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000e3 21022 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000e4 60272 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000e5 28244 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000e6 190955 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000e7 17704 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000e8 114846 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000e9 94111 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000ea 27127 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000ec 49169 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000ee 53114 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000ef 65749 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000f0 38283 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000f1 41288 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000f2 79328 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000f3 39416 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000f4 34846 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000f5 63536 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000f6 65625 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000f7 36553 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000f8 24047 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000f9 31944 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000fa 26215 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000fb 56796 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000fc 53290 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000fd 95823 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000fe 19063 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0000ff 62602 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000101 75790 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000102 45594 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000103 50172 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000104 21030 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000105 29137 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000106 39672 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000107 69787 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000108 34413 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000109 111629 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00010a 33344 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00010c 31878 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00010d 22999 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00010e 74338 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00010f 118858 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000110 51512 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000111 48053 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000112 40816 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000113 31678 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000115 42409 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000116 29439 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000117 16717 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000118 22806 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000119 43130 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00011a 52527 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00011b 19768 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00011c 30872 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00011d 54272 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00011e 31804 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00011f 21633 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000120 17508 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000121 33477 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000122 47708 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000123 19712 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000124 18060 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000125 34091 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000126 18628 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000127 53392 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000129 17196 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00012a 20786 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00012b 51793 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00012c 18566 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00012d 38778 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00012e 41627 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00012f 17051 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000130 33673 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000131 41242 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000132 46169 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000133 51483 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000134 25010 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000135 33893 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000136 43591 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000137 44115 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000138 97731 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000139 28853 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00013a 21752 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00013b 21859 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00013d 38458 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00013e 48493 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00013f 20783 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000140 51446 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000141 62569 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000142 66438 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000143 27029 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000144 29298 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000145 51933 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000146 71753 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000147 31339 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000148 118119 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000149 19734 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00014a 23370 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00014b 44093 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00014c 51510 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00014d 37781 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00014e 70824 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00014f 77012 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000152 38706 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000153 27592 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000154 202289 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000155 32343 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000156 51512 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000157 44722 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000158 62604 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000159 310145 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00015a 241525 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00015b 243087 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00015c 98513 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00015d 20049 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00015e 19639 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00015f 51510 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000160 28182 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000161 32007 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000162 39134 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000163 71447 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000164 57202 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000166 52687 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000167 73495 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000168 134377 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00016a 51372 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00016b 160433 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00016c 35387 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00016d 119741 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00016e 60651 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00016f 57811 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000170 49396 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000171 133941 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000172 42651 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000173 26720 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000174 42421 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000175 40447 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000176 218577 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000177 51512 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000178 62047 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000179 214031 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00017b 38983 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00017c 159502 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00017d 32005 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00017e 55970 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00017f 47597 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000180 83220 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000181 83220 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000182 66951 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000183 31049 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000184 59584 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000185 135867 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000186 89111 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000187 252904 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000188 452755 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000189 377802 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00018a 224820 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00018b 51512 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00018c 93048 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00018d 31667 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00018f 24259 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000190 17462 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000191 57492 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000192 67922 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000193 31435 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000194 33546 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000195 41137 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000196 19875 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000197 57181 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000198 20497 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000199 24865 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00019a 20726 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00019b 25836 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00019c 82578 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00019d 17183 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00019e 23979 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00019f 45605 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001a0 32173 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001a1 54654 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001a3 35660 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001a4 37859 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001a5 27967 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001a6 21390 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001a7 30672 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001a8 17780 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001a9 18511 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001aa 20134 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001ab 24783 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001ac 25104 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001ad 69938 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001ae 30389 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001af 37859 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001b0 29840 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001b1 71527 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001b3 60246 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001b4 28523 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001b5 17841 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001b6 22314 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001b8 20150 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001b9 82974 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001ba 30453 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001bb 399611 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001bc 42809 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001bd 27981 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001be 29579 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001c0 35349 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001c1 49491 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001c3 83461 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001c4 38766 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001c5 139183 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001c6 51500 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001c7 63818 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001c8 91116 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001c9 66920 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001ca 72221 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001cb 81720 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001cd 86407 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001ce 90546 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001cf 109564 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001d0 141458 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001d1 31591 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001d2 18329 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001d3 84564 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001d4 53751 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001d5 22002 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001d6 19562 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001d7 27100 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001d8 18968 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001d9 26679 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001da 29460 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001db 36305 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001dc 27315 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001dd 24059 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001de 32571 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001df 39969 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001e1 27163 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001e2 25641 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001e3 37337 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001e4 147855 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001e5 23642 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001e6 24053 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001e7 113508 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001e8 142776 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001e9 76024 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001ea 72319 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001eb 68658 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001ec 84658 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001ed 115162 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001ee 67890 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001ef 66926 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001f0 28108 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001f1 83715 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001f2 16867 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001f3 18907 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001f5 72470 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001f6 18388 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001f7 74520 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001f8 23607 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001f9 18177 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001fa 115716 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001fb 81378 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001fc 23486 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001fd 23677 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001fe 19727 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001ff 61131 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000200 31504 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000201 26976 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000202 16671 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000203 20613 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000204 24850 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000205 41986 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000206 50060 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000207 16385 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000209 39735 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00020a 48275 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00020b 45751 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00020c 31409 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00020d 37123 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00020e 75840 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00020f 67328 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000210 40922 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000211 33756 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000212 75385 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000213 18751 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000214 19907 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000215 76938 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000216 25407 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000217 17529 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000218 35107 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000219 42832 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00021a 42949 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00021b 29535 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00021d 25412 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00021e 26076 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00021f 36585 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000220 41350 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000221 30719 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000222 46533 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000223 58299 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000224 52587 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000225 53254 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000226 116978 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000227 46979 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000228 39368 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000229 31657 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00022a 54920 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00022b 44990 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00022c 41178 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00022d 26391 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00022e 33029 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00022f 29266 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000231 60100 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000232 53769 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000233 42142 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000234 33380 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000235 33049 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000236 41442 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000237 41712 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000238 48956 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000239 123654 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00023a 126250 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00023b 26470 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00023c 21440 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00023d 171094 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00023e 39472 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00023f 88045 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000240 38223 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000241 21618 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000242 120116 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000243 114488 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000245 35963 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000246 131433 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000247 23627 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000248 42527 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000249 130751 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00024a 28398 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00024b 118793 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00024c 110453 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00024d 27204 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00024e 35710 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00024f 27492 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000250 28547 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000251 28541 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000252 28753 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000253 24212 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000254 26399 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000255 106964 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000256 48476 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000257 45625 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000259 89068 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00025a 120116 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00025b 189325 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00025c 20158 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00025d 195169 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00025e 112785 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00025f 110453 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000260 68242 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000261 19841 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000262 84141 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000263 115423 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000264 34578 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000265 74621 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000266 24180 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000267 86801 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000268 104316 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000269 27089 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00026a 92386 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00026b 18324 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00026d 28402 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00026e 22420 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00026f 16708 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000270 25913 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000271 23367 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000272 104130 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000273 38752 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000274 74621 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000275 105268 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000276 28258 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000277 21476 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000278 23564 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000279 23956 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00027a 19446 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00027b 24174 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00027c 37837 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00027d 21337 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00027e 30038 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00027f 18236 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000281 23921 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000282 24355 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000283 22024 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000284 26285 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000285 28765 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000286 28997 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000287 33021 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000288 29993 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000289 24721 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00028a 71247 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00028b 116747 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00028c 84530 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00028d 92146 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00028e 87828 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00028f 91561 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000290 94576 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000291 110101 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000292 33936 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000293 25450 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000295 33013 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000296 24021 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000297 27502 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000298 25848 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000299 28212 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00029a 22509 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00029b 24238 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00029c 41404 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00029d 82570 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00029e 50267 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00029f 48524 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002a0 32218 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002a1 54399 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002a3 50044 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002a4 60793 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002a5 24254 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002a6 100262 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002a7 16761 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002a9 47981 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002aa 32219 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002ac 30981 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002ad 100173 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002ae 16761 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002af 116173 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002b0 47981 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002b1 17967 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002b2 145223 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002b3 127471 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002b4 82876 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002b6 44810 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002b7 32219 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002b8 21539 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002b9 17967 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002ba 145223 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002bb 18343 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002bc 43392 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002be 128634 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002c0 50416 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002c1 33626 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002c2 167023 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002c3 159431 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002c4 175256 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002c5 229792 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002c6 17774 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002c7 203891 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002c8 175352 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002c9 154726 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002ca 79535 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002cb 57499 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002cc 47475 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002cd 87668 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002ce 62401 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002cf 20189 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002d0 17020 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002d1 17124 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002d3 19326 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002d4 17477 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002d5 68637 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002d6 25705 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002d7 34389 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002d8 22350 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002d9 17287 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002da 54661 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002db 17677 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002dc 29132 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002dd 50717 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002de 122834 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002df 71322 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002e0 23696 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002e1 32840 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002e2 38673 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002e3 62661 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002e4 22952 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002e5 55767 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002e7 56079 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002e8 31162 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002e9 50075 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002ea 31279 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002eb 55998 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002ec 60392 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002ed 129521 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002ee 56102 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002ef 65659 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002f1 37499 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002f2 40060 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002f3 94650 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002f4 92698 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002f5 76792 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002f6 132401 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002f7 22239 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002f8 73593 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002f9 148857 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002fa 122951 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00018e 49252 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001a2 57357 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001b7 39213 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001cc 98581 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001e0 21597 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0001f4 26473 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000208 30548 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00021c 58008 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000230 50358 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000244 29285 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000258 26453 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00026c 144075 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000280 24680 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000294 38713 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002a8 411078 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002bd 54137 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002d2 83427 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002e6 56497 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002fb 143678 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00030f 31459 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002fc 21177 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002fd 19465 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002fe 28621 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_0002ff 34222 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000300 21823 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000301 59132 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000302 18302 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000303 74257 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000304 102902 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000305 17806 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000306 76792 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000307 94650 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000308 22239 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000309 59132 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00030a 31190 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00030b 17898 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00030c 20528 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00030d 30778 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00030e 24992 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000310 31013 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000311 31600 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000312 48597 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000313 33471 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000314 43036 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000315 22499 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000316 22830 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000317 32834 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000318 30831 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000319 198415 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00031a 18302 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00031b 310537 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00031c 18698 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00031d 28887 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00031e 18057 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00031f 44467 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000320 337038 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000321 54497 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000322 67924 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000323 30741 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000324 18872 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000325 26925 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000326 21455 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000327 40369 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000328 26696 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000329 25510 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00032a 26547 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00032b 26637 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00032c 50088 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00032d 192635 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00032e 16783 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_00032f 16430 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000330 16400 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000331 22632 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\f_000332 31548 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cache\index 524656 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cookies 205824 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Cookies-journal 16384 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Current Session 176562 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Current Tabs 29960 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\databases 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\databases\Databases.db 7168 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\databases\Databases.db-journal 5672 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\databases\http_www.tekstowo.pl_0 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\databases\http_www.tekstowo.pl_0\1 7168 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Extension State 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Extension State\000015.log 171 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Extension State\000016.ldb 262 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Extension State\CURRENT 16 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Extension State\LOCK 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Extension State\LOG 716 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Extension State\LOG.old 261 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Extension State\MANIFEST-000013 632 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Favicons 45056 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Favicons-journal 16384 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\History 135168 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Network Action Predictor-journal 16384 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Preferences 22574 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\QuotaManager 13312 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\QuotaManager-journal 8768 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\README 186 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Secure Preferences 18854 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Session Storage 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Session Storage\000015.log 10505 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Session Storage\000016.ldb 160264 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Session Storage\CURRENT 16 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Session Storage\LOCK 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Session Storage\LOG 724 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Session Storage\LOG.old 264 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Session Storage\MANIFEST-000013 383 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Shortcuts 20480 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Shortcuts-journal 12824 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Top Sites 65536 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Top Sites-journal 16384 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\TransportSecurity 1594 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Visited Links 131072 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Web Data 71680 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Web Data-journal 8736 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\History-journal 16384 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\IndexedDB 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\IndexedDB\https_www.google.pl_0.indexeddb.leveldb 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\IndexedDB\https_www.google.pl_0.indexeddb.leveldb\000005.bak 389 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\IndexedDB\https_www.google.pl_0.indexeddb.leveldb\000005.ldb 389 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\IndexedDB\https_www.google.pl_0.indexeddb.leveldb\000034.log 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\IndexedDB\https_www.google.pl_0.indexeddb.leveldb\CURRENT 16 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\IndexedDB\https_www.google.pl_0.indexeddb.leveldb\LOCK 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\IndexedDB\https_www.google.pl_0.indexeddb.leveldb\LOG 145 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\IndexedDB\https_www.google.pl_0.indexeddb.leveldb\LOG.old 145 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\IndexedDB\https_www.google.pl_0.indexeddb.leveldb\MANIFEST-000033 76 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\JumpListIcons 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\JumpListIcons\7BD9.tmp 28134 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\JumpListIcons\7C77.tmp 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\JumpListIcons\7C78.tmp 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\JumpListIcons\7C79.tmp 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\JumpListIcons\7C7A.tmp 28134 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\JumpListIconsOld 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\JumpListIconsOld\170C.tmp 28134 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\JumpListIconsOld\173D.tmp 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\JumpListIconsOld\173E.tmp 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\JumpListIconsOld\173F.tmp 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Last Session 21291 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Last Tabs 291519 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Extension Settings 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000005.ldb 205 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000008.ldb 172 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000009.log 141 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\CURRENT 16 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\LOCK 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\LOG 259 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\LOG.old 259 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\MANIFEST-000007 165 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\https_pl-pl.facebook.com_0.localstorage 5120 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\chrome-extension_pafkbggdmjlpgkdkcbjmhmfcdpncadgh_0.localstorage 3072 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\chrome-extension_pafkbggdmjlpgkdkcbjmhmfcdpncadgh_0.localstorage-journal 3608 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\https_googleads.g.doubleclick.net_0.localstorage 3072 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\https_googleads.g.doubleclick.net_0.localstorage-journal 512 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\https_ls.hit.gemius.pl_0.localstorage 3072 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\https_ls.hit.gemius.pl_0.localstorage-journal 3608 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\https_pl-pl.facebook.com_0.localstorage-journal 4640 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\https_ssl.allegro.pl_0.localstorage 7168 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\https_ssl.allegro.pl_0.localstorage-journal 3608 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\https_www.facebook.com_0.localstorage 7168 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\https_www.facebook.com_0.localstorage-journal 7736 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\https_www.google.pl_0.localstorage 3072 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\https_www.google.pl_0.localstorage-journal 3608 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\https_www.vinted.pl_0.localstorage 3072 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\https_www.vinted.pl_0.localstorage-journal 3608 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\https_www.youtube.com_0.localstorage 3072 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\https_www.youtube.com_0.localstorage-journal 3608 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\http_allegro.pl_0.localstorage 9216 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\http_allegro.pl_0.localstorage-journal 8768 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\http_c.betrad.com_0.localstorage 75776 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\http_c.betrad.com_0.localstorage-journal 3608 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\http_googleads.g.doubleclick.net_0.localstorage 3072 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\http_googleads.g.doubleclick.net_0.localstorage-journal 512 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\http_instagram.com_0.localstorage 3072 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\http_instagram.com_0.localstorage-journal 512 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\http_ls.hit.gemius.pl_0.localstorage 3072 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\http_ls.hit.gemius.pl_0.localstorage-journal 3608 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\http_p191.atemda.com_0.localstorage 3072 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\http_p191.atemda.com_0.localstorage-journal 512 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\http_www.tekstowo.pl_0.localstorage 3072 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\http_www.tekstowo.pl_0.localstorage-journal 3608 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\http_www.vinted.pl_0.localstorage 8192 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Local Storage\http_www.vinted.pl_0.localstorage-journal 8768 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Login Data 12288 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Login Data-journal 512 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Media Cache 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Media Cache\data_0 45056 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Media Cache\data_1 270336 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Media Cache\data_2 1056768 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Media Cache\data_3 4202496 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Default\Media Cache\index 524656 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Local State 18077 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\pl-PL-3-0.bdic 3233589 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\pnacl 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Safe Browsing Bloom 6265208 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Safe Browsing Cookies 6144 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Safe Browsing Cookies-journal 4640 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Safe Browsing Csd Whitelist 112956 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Safe Browsing Download 1888860 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Safe Browsing Download Whitelist 14408 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Safe Browsing Extension Blacklist 38320 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\sfzone_profile\Safe Browsing IP Blacklist 2296 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Local 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Local\Microsoft 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Local\Microsoft\Windows 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Local\Microsoft\Windows\Explorer 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1024.db 24 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db 1048576 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db 1048576 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db 1048576 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db 3256 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db 24 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Local\Microsoft\Windows\Temporary Internet Files 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat 128 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Local\Temp 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\LocalLow 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\LocalLow\Microsoft 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\LocalLow\Microsoft\CryptnetUrlCache 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\31972CCF1E0599A10F60E5B4E8F1B3A5_218A4578FDA98EB5A91436F918B3FC42 1525 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\855CF405355328EC482A28D56A44CFB0_D5919AA5B7123B92C41ED483708C4014 1525 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\955CAB6FF6A24D5820D50B5BA1CF79C7_CFEA3385E24D822B0027B3D9A091B242 1581 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\31972CCF1E0599A10F60E5B4E8F1B3A5_218A4578FDA98EB5A91436F918B3FC42 394 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\855CF405355328EC482A28D56A44CFB0_D5919AA5B7123B92C41ED483708C4014 412 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\955CAB6FF6A24D5820D50B5BA1CF79C7_CFEA3385E24D822B0027B3D9A091B242 426 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Roaming 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Roaming\Microsoft 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Roaming\Microsoft\Protect 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Roaming\Microsoft\Protect\CREDHIST 24 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Roaming\Microsoft\Windows 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Roaming\Microsoft\Windows\Recent 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d8b393b9387fc13c.customDestinations-ms 11369 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\f09a107e55c4cbda.customDestinations-ms 15706 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\Desktop 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Users\1\Downloads 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Windows 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Windows\Prefetch 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Windows\Prefetch\AUDIODG.EXE-BDFD3029.pf 125410 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Windows\Prefetch\CTFMON.EXE-5E5138CF.pf 102284 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Windows\Prefetch\DLLHOST.EXE-76936ED5.pf 30424 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Windows\Prefetch\SAFEZONEBROWSER.EXE-EA1E6E17.pf 42424 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Windows\Rescache 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Windows\Rescache\rc0016 0 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\C\Windows\Rescache\rc0016\rescache.hit 3832 bytes File C:\avast! sandbox\S-1-5-21-2654220689-2568901334-3418674353-1000\sfzone\snx_fs.dat 137738 bytes File C:\avast! sandbox\snx_rhive 262144 bytes File C:\avast! sandbox\snx_rhive.LOG1 46080 bytes File C:\avast! sandbox\snx_rhive.LOG2 0 bytes File C:\avast! sandbox\snx_rhive{1b8c9550-7999-11e4-a1bb-b803058e7c6c}.TM.blf 65536 bytes File C:\avast! sandbox\snx_rhive{1b8c9550-7999-11e4-a1bb-b803058e7c6c}.TMContainer00000000000000000001.regtrans-ms 524288 bytes File C:\avast! sandbox\snx_rhive{1b8c9550-7999-11e4-a1bb-b803058e7c6c}.TMContainer00000000000000000002.regtrans-ms 524288 bytes ---- EOF - GMER 2.1 ----