PC Hunter Standard --- Computer Examination Report
Examination Date: 2014-02-14 00:04
OS Information: Microsoft Windows 8.1  (build 9600), 64-bit
Internet Explorer: 9.11.9600.16518

Examination Items:
      Process
      Process Modules
      Process Threads
      Kernel Module
      Notify Routine
      Filter
      DPC Timer
      Worker Thread
      HalDispatchTable
      HalPrivateDispatchTable
      HalAcpiDispatchTable
      HalSubComponents
      Wdf01000 Dispatch Fun
      WdfFunction
      Filter
      File System
      Sfilter FileSystem Filter Callback
      ClassInitData Callback
      Npfs Dispatch Fun
      Msfs Dispatch Fun
      Usbport Dispatch Fun
      System Debug
      Object Hijack
      Direct IO
      GDT
      SSDT
      Shadow SSDT
      FSD
      Keyboard
      I8042prt
      Mouclass
      Partmgr
      Classpnp
      Atapi
      Acpi
      Scsi
      Kernel Hook
      PTE HOOK
      Kernel Hook
      IDT
      Message Hook
      Process Hook
      KernelCallbackTable
      Port
      Tcpip
      Nsiproxy
      Tdx
      Ndis Handler
      IE Plugin
      IE Shell
      Spi
      Hosts File
      Startup
      Service
      Schedule Task
      File Association
      IFEO
      IME/CTF
      Firewall Rule
      System User Name
      Scan MBR Rootkit

==========================================================================================

Process

       System - System - 
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       UNS.exe *32 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe - Intel Corporation
       SearchProtocolHost.exe - C:\Windows\System32\SearchProtocolHost.exe - Microsoft Corporation
       new_chrome.exe *32 - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
       new_chrome.exe *32 - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
       SearchIndexer.exe - C:\Windows\System32\SearchIndexer.exe - Microsoft Corporation
       winlogon.exe - C:\Windows\System32\winlogon.exe - Microsoft Corporation
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       AsusTPCenter.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe - AsusTek
       dwm.exe - C:\Windows\System32\dwm.exe - Microsoft Corporation
       csrss.exe - C:\Windows\System32\csrss.exe - Microsoft Corporation
       smss.exe - C:\Windows\System32\smss.exe - Microsoft Corporation
       TabTip32.exe *32 - C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe - Microsoft Corporation
       csrss.exe - C:\Windows\System32\csrss.exe - Microsoft Corporation
       Dropbox.exe *32 - C:\Users\J R\AppData\Roaming\Dropbox\bin\Dropbox.exe - Dropbox, Inc.
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       VivoBook.exe - C:\Program Files\ASUS\ASUS VivoBook\VivoBook.exe - ASUSTeK Computer Inc.
       QuickGesture64.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe - ASUSTeK Computer Inc.
       BtvStack.exe - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe - Qualcomm Atheros Commnucations
       wininit.exe - C:\Windows\System32\wininit.exe - Microsoft Corporation
       explorer.exe - C:\Windows\explorer.exe - Microsoft Corporation
       services.exe - C:\Windows\System32\services.exe - Microsoft Corporation
       BtTray.exe - C:\Program Files (x86)\Bluetooth Suite\BtTray.exe - Qualcomm Atheros
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       lsass.exe - C:\Windows\System32\lsass.exe - Microsoft Corporation
       SearchFilterHost.exe - C:\Windows\System32\SearchFilterHost.exe - Microsoft Corporation
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       AvastUI.exe *32 - C:\Program Files\AVAST Software\Avast\AvastUI.exe - AVAST Software
       PCHunter64.exe - C:\Users\J R\Desktop\PCHunter_free\PCHunter64.exe - ????(??)????????
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       SetPoint.exe - C:\Program Files\Logitech\SetPointP\SetPoint.exe - Logitech, Inc.
       new_chrome.exe *32 - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
       AsusTPLoader.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe - AsusTek
       ASUSWakeupService.exe - C:\Program Files\ASUS\ASUS VivoBook\ASUSWakeupService.exe - ASUSTek Computer Inc.
       AvastSvc.exe *32 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe - AVAST Software
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       LiveUpdate.exe *32 - C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe - ASUSTeK Computer Inc.
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       TabTip.exe - C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe - Microsoft Corporation
       AsLdrSrv.exe *32 - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe - ASUSTek Computer Inc.
       new_chrome.exe *32 - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
       GFNEXSrv.exe *32 - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe - ASUS
       spoolsv.exe - C:\Windows\System32\spoolsv.exe - Microsoft Corporation
       ATKOSD2.exe *32 - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe - ASUSTek Computer Inc.
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       new_chrome.exe *32 - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
       602updsvc.exe *32 - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe - Software602 a.s.
       armsvc.exe *32 - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe - Adobe Systems Incorporated
       InsOnSrv.exe *32 - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe - ASUS
       AdminService.exe - C:\Program Files (x86)\Bluetooth Suite\AdminService.exe - Qualcomm Atheros Commnucations
       QuickGesture.exe *32 - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe - ASUSTeK Computer Inc.
       wmpnetwk.exe - C:\Program Files\Windows Media Player\wmpnetwk.exe - Microsoft Corporation
       Ath_CoexAgent.exe *32 - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe - Atheros
       DptfParticipantProcessorService.exe - C:\Windows\System32\DptfParticipantProcessorService.exe - Intel Corporation
       dasHost.exe - C:\Windows\System32\dasHost.exe - Microsoft Corporation
       DptfPolicyConfigTDPService.exe - C:\Windows\System32\DptfPolicyConfigTDPService.exe - Intel Corporation
       AsusTPHelper.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe - AsusTek
       new_chrome.exe *32 - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
       HeciServer.exe - C:\Program Files\Intel\iCLS Client\HeciServer.exe - Intel(R) Corporation
       Jhi_service.exe *32 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe - Intel Corporation
       HelperService.exe *32 - C:\Program Files (x86)\PDF Architect\HelperService.exe - pdfforge GmbH
       ConversionService.exe *32 - C:\Program Files (x86)\PDF Architect\ConversionService.exe - pdfforge GmbH
       new_chrome.exe *32 - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
       LMS.exe *32 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe - Intel Corporation
       KBFiltr.exe *32 - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe - ASUSTek Computer Inc.
       WmiPrvSE.exe - C:\Windows\System32\wbem\WmiPrvSE.exe - Microsoft Corporation
       sppsvc.exe - C:\Windows\System32\sppsvc.exe - Microsoft Corporation
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       new_chrome.exe *32 - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
       IntelMeFWService.exe *32 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe - Intel Corporation
       DMedia.exe *32 - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe - ASUSTek Computer Inc.
       WmiPrvSE.exe - C:\Windows\System32\wbem\WmiPrvSE.exe - Microsoft Corporation
       dllhost.exe - C:\Windows\System32\dllhost.exe - Microsoft Corporation
       HControl.exe *32 - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe - ASUSTek Computer Inc.
       InsOnWMI.exe *32 - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe - ASUS
       taskhostex.exe - C:\Windows\System32\taskhostex.exe - Microsoft Corporation
       taskeng.exe - C:\Windows\System32\taskeng.exe - Microsoft Corporation
       AsPatchTouchPanel64.exe - C:\ProgramData\AsTouchPanel\AsPatchTouchPanel64.exe - ASUSTek Computer INC.
       USBChargerPlus.exe *32 - C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe - ASUSTek Computer Inc.
       igfxtray.exe - C:\Windows\System32\igfxtray.exe - Intel Corporation
       igfxpers.exe - C:\Windows\System32\igfxpers.exe - Intel Corporation
       igfxsrvc.exe - C:\Windows\System32\igfxsrvc.exe - Intel Corporation
       RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor
       RAVBg64.exe - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe - Realtek Semiconductor
       jusched.exe *32 - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe - Oracle Corporation
       ActivateDesktop.exe - C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe - 
       KHALMNPR.exe - C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe - Logitech, Inc.
       new_chrome.exe *32 - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
       new_chrome.exe *32 - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
       new_chrome.exe *32 - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
       new_chrome.exe *32 - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
       Idle - Idle - 

==========================================================================================

Process Modules

      Image File Name[System]Modules
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             umpnpmgr.dll - c:\windows\system32\umpnpmgr.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             umpo.dll - c:\windows\system32\umpo.dll - Microsoft Corporation
             umpoext.dll - C:\WINDOWS\SYSTEM32\umpoext.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSTEM32\cfgmgr32.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             pcwum.dll - c:\windows\system32\pcwum.dll - Microsoft Corporation
             HID.DLL - c:\windows\system32\HID.DLL - Microsoft Corporation
             gpapi.dll - C:\WINDOWS\SYSTEM32\gpapi.dll - Microsoft Corporation
             rpcss.dll - c:\windows\system32\rpcss.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             SspiCli.dll - c:\windows\system32\SspiCli.dll - Microsoft Corporation
             bisrv.dll - c:\windows\system32\bisrv.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             psmsrv.dll - c:\windows\system32\psmsrv.dll - Microsoft Corporation
             lsm.dll - c:\windows\system32\lsm.dll - Microsoft Corporation
             SYSNTFY.dll - c:\windows\system32\SYSNTFY.dll - Microsoft Corporation
             WMsgAPI.dll - c:\windows\system32\WMsgAPI.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             Userenv.dll - C:\WINDOWS\System32\Userenv.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\system32\profapi.dll - Microsoft Corporation
             DEVOBJ.dll - c:\windows\system32\DEVOBJ.dll - Microsoft Corporation
             systemeventsbrokerserver.dll - c:\windows\system32\systemeventsbrokerserver.dll - Microsoft Corporation
             bi.dll - C:\WINDOWS\SYSTEM32\bi.dll - Microsoft Corporation
             DAB.dll - c:\windows\system32\DAB.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             wtsapi32.dll - C:\WINDOWS\SYSTEM32\wtsapi32.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSTEM32\WINSTA.dll - Microsoft Corporation
             user32.dll - C:\WINDOWS\SYSTEM32\user32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSTEM32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\system32\bcrypt.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             twinapi.dll - C:\Windows\System32\twinapi.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSTEM32\shcore.dll - Microsoft Corporation
             apphelp.dll - C:\WINDOWS\system32\apphelp.dll - Microsoft Corporation
             svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             twinapi.dll - C:\Windows\System32\twinapi.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\System32\apphelp.dll - Microsoft Corporation
             dab.dll - C:\Windows\System32\dab.dll - Microsoft Corporation
             bi.dll - C:\Windows\System32\bi.dll - Microsoft Corporation
             SystemEventsBrokerServer.dll - C:\Windows\System32\SystemEventsBrokerServer.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             wmsgapi.dll - C:\Windows\System32\wmsgapi.dll - Microsoft Corporation
             sysntfy.dll - C:\Windows\System32\sysntfy.dll - Microsoft Corporation
             psmsrv.dll - C:\Windows\System32\psmsrv.dll - Microsoft Corporation
             lsm.dll - C:\Windows\System32\lsm.dll - Microsoft Corporation
             bisrv.dll - C:\Windows\System32\bisrv.dll - Microsoft Corporation
             rpcss.dll - C:\Windows\System32\rpcss.dll - Microsoft Corporation
             gpapi.dll - C:\Windows\System32\gpapi.dll - Microsoft Corporation
             hid.dll - C:\Windows\System32\hid.dll - Microsoft Corporation
             pcwum.dll - C:\Windows\System32\pcwum.dll - Microsoft Corporation
             umpoext.dll - C:\Windows\System32\umpoext.dll - Microsoft Corporation
             umpo.dll - C:\Windows\System32\umpo.dll - Microsoft Corporation
             umpnpmgr.dll - C:\Windows\System32\umpnpmgr.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             userenv.dll - C:\Windows\System32\userenv.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[UNS.exe]Modules
             UNS.exe - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe - Intel Corporation
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             WSOCK32.dll - C:\WINDOWS\SYSwow64\WSOCK32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             ACE.dll - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll - 
             WsmanClient.dll - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\WsmanClient.dll - Intel Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             Common.dll - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\Common.dll - Intel Corporation
             GmsCommon.dll - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\GmsCommon.dll - Intel Corporation
             SETUPAPI.dll - C:\WINDOWS\SYSwow64\SETUPAPI.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\SYSwow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             MSVCP100.dll - C:\WINDOWS\SYSwow64\MSVCP100.dll - Microsoft Corporation
             MSVCR100.dll - C:\WINDOWS\SYSwow64\MSVCR100.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             MSWSOCK.dll - C:\WINDOWS\SYSwow64\MSWSOCK.dll - Microsoft Corporation
             NETAPI32.dll - C:\WINDOWS\SYSwow64\NETAPI32.dll - Microsoft Corporation
             WINHTTP.dll - C:\WINDOWS\SYSwow64\WINHTTP.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\SYSwow64\CFGMGR32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             netutils.dll - C:\WINDOWS\SYSwow64\netutils.dll - Microsoft Corporation
             srvcli.dll - C:\WINDOWS\SYSwow64\srvcli.dll - Microsoft Corporation
             wkscli.dll - C:\WINDOWS\SYSwow64\wkscli.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSwow64\kernel.appcore.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSwow64\clbcatq.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSwow64\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\syswow64\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSwow64\bcrypt.dll - Microsoft Corporation
             imagehlp.dll - C:\WINDOWS\SYSwow64\imagehlp.dll - Microsoft Corporation
             ncrypt.dll - C:\WINDOWS\SYSwow64\ncrypt.dll - Microsoft Corporation
             NTASN1.dll - C:\WINDOWS\SYSwow64\NTASN1.dll - Microsoft Corporation
             gpapi.dll - C:\WINDOWS\SYSwow64\gpapi.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             cryptnet.dll - C:\WINDOWS\SYSwow64\cryptnet.dll - Microsoft Corporation
             WLDAP32.dll - C:\WINDOWS\SYSwow64\WLDAP32.dll - Microsoft Corporation
             CONFIGURATOR.dll - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\CONFIGURATOR.dll - Intel Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             EVENTMANAGER.dll - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\EVENTMANAGER.dll - Intel Corporation
             STATUSEVENTHANDLER.dll - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\STATUSEVENTHANDLER.dll - Intel Corporation
             DPAPI.dll - C:\WINDOWS\SYSwow64\DPAPI.dll - Microsoft Corporation
             webio.dll - C:\WINDOWS\SYSwow64\webio.dll - Microsoft Corporation
             DNSAPI.dll - C:\WINDOWS\SYSwow64\DNSAPI.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\Syswow64\rasadhlp.dll - Microsoft Corporation
             fwpuclnt.dll - C:\WINDOWS\Syswow64\fwpuclnt.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[SearchProtocolHost.exe]Modules
             SearchProtocolHost.exe - C:\WINDOWS\system32\SearchProtocolHost.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             TQUERY.DLL - C:\WINDOWS\system32\TQUERY.DLL - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\system32\SHCORE.dll - Microsoft Corporation
             MSSHooks.dll - C:\WINDOWS\system32\MSSHooks.dll - Microsoft Corporation
             IMM32.dll - C:\WINDOWS\system32\IMM32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             Msidle.dll - C:\WINDOWS\system32\Msidle.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\system32\bcrypt.dll - Microsoft Corporation
             mssprxy.dll - C:\WINDOWS\system32\mssprxy.dll - Microsoft Corporation
             mssph.dll - C:\WINDOWS\system32\mssph.dll - Microsoft Corporation
             MAPI32.dll - C:\WINDOWS\system32\MAPI32.dll - Microsoft Corporation
             AUTHZ.dll - C:\WINDOWS\system32\AUTHZ.dll - Microsoft Corporation
             ntmarta.dll - C:\WINDOWS\SYSTEM32\ntmarta.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             propsys.dll - C:\WINDOWS\system32\propsys.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\system32\CFGMGR32.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\system32\profapi.dll - Microsoft Corporation
             LINKINFO.dll - C:\WINDOWS\system32\LINKINFO.dll - Microsoft Corporation
             apphelp.dll - C:\WINDOWS\system32\apphelp.dll - Microsoft Corporation
             ntshrui.dll - C:\WINDOWS\system32\ntshrui.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\system32\SspiCli.dll - Microsoft Corporation
             srvcli.dll - C:\WINDOWS\system32\srvcli.dll - Microsoft Corporation
             cscapi.dll - C:\WINDOWS\system32\cscapi.dll - Microsoft Corporation
             SearchProtocolHost.exe - C:\Windows\System32\SearchProtocolHost.exe - Microsoft Corporation
             mapi32.dll - C:\Windows\System32\mapi32.dll - Microsoft Corporation
             mssph.dll - C:\Windows\System32\mssph.dll - Microsoft Corporation
             tquery.dll - C:\Windows\System32\tquery.dll - Microsoft Corporation
             ntshrui.dll - C:\Windows\System32\ntshrui.dll - Microsoft Corporation
             mssprxy.dll - C:\Windows\System32\mssprxy.dll - Microsoft Corporation
             cscapi.dll - C:\Windows\System32\cscapi.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\System32\ntmarta.dll - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             msshooks.dll - C:\Windows\System32\msshooks.dll - Microsoft Corporation
             msidle.dll - C:\Windows\System32\msidle.dll - Microsoft Corporation
             linkinfo.dll - C:\Windows\System32\linkinfo.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\System32\apphelp.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             authz.dll - C:\Windows\System32\authz.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\System32\srvcli.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Modules
             new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSwow64\WINMM.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSwow64\WINMMBASE.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSwow64\cfgmgr32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSwow64\shcore.dll - Microsoft Corporation
             chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             USP10.dll - C:\WINDOWS\SYSwow64\USP10.dll - Microsoft Corporation
             PSAPI.DLL - C:\WINDOWS\SYSwow64\PSAPI.DLL - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSwow64\WINSPOOL.DRV - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSwow64\Secur32.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             dbghelp.dll - C:\WINDOWS\SYSwow64\dbghelp.dll - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09\comctl32.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\icudt.dll - The ICU Project
             pdf.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll - 
             ppGoogleNaClPluginChrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll - 
             libpeerconnection.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libpeerconnection.dll - Google Inc.
             ffmpegsumo.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll - 
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Modules
             new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSwow64\WINMM.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSwow64\WINMMBASE.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSwow64\cfgmgr32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSwow64\shcore.dll - Microsoft Corporation
             chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             WINTRUST.dll - C:\WINDOWS\SYSwow64\WINTRUST.dll - Microsoft Corporation
             USP10.dll - C:\WINDOWS\SYSwow64\USP10.dll - Microsoft Corporation
             PSAPI.DLL - C:\WINDOWS\SYSwow64\PSAPI.DLL - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             COMCTL32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09\COMCTL32.dll - Microsoft Corporation
             OLEACC.dll - C:\WINDOWS\SYSwow64\OLEACC.dll - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSwow64\Secur32.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             dbghelp.dll - C:\WINDOWS\SYSwow64\dbghelp.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\icudt.dll - The ICU Project
             ntmarta.dll - C:\WINDOWS\SYSwow64\ntmarta.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSwow64\kernel.appcore.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\syswow64\dwmapi.dll - Microsoft Corporation
             NLAapi.dll - C:\WINDOWS\syswow64\NLAapi.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             dhcpcsvc6.DLL - C:\WINDOWS\SYSwow64\dhcpcsvc6.DLL - Microsoft Corporation
             audioses.dll - C:\WINDOWS\syswow64\audioses.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSwow64\powrprof.dll - Microsoft Corporation
             MMDevAPI.DLL - C:\WINDOWS\syswow64\MMDevAPI.DLL - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSwow64\clbcatq.dll - Microsoft Corporation
             dhcpcsvc.DLL - C:\WINDOWS\SYSwow64\dhcpcsvc.DLL - Microsoft Corporation
             gpapi.dll - C:\WINDOWS\SYSwow64\gpapi.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\SYSwow64\SETUPAPI.dll - Microsoft Corporation
             propsys.dll - C:\WINDOWS\syswow64\propsys.dll - Microsoft Corporation
             Wpc.dll - C:\WINDOWS\Syswow64\Wpc.dll - Microsoft Corporation
             wevtapi.dll - C:\WINDOWS\Syswow64\wevtapi.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\syswow64\mswsock.dll - Microsoft Corporation
             DNSAPI.dll - C:\WINDOWS\SYSwow64\DNSAPI.dll - Microsoft Corporation
             fwpuclnt.dll - C:\WINDOWS\Syswow64\fwpuclnt.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\Syswow64\rasadhlp.dll - Microsoft Corporation
             DPAPI.dll - C:\WINDOWS\SYSwow64\DPAPI.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSwow64\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\syswow64\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSwow64\bcrypt.dll - Microsoft Corporation
             psmachine.dll - C:\Program Files (x86)\Google\Update\1.3.22.5\psmachine.dll - Google Inc.
             sxs.dll - C:\WINDOWS\SYSwow64\sxs.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSwow64\WINSTA.dll - Microsoft Corporation
             WINHTTP.dll - C:\WINDOWS\SYSwow64\WINHTTP.dll - Microsoft Corporation
             mscms.dll - C:\WINDOWS\SYSwow64\mscms.dll - Microsoft Corporation
             ncrypt.dll - C:\WINDOWS\SYSwow64\ncrypt.dll - Microsoft Corporation
             NTASN1.dll - C:\WINDOWS\SYSwow64\NTASN1.dll - Microsoft Corporation
             cryptnet.dll - C:\Windows\SYSwow64\cryptnet.dll - Microsoft Corporation
             WLDAP32.dll - C:\WINDOWS\SYSwow64\WLDAP32.dll - Microsoft Corporation
             LINKINFO.dll - C:\WINDOWS\SYSwow64\LINKINFO.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\SYSwow64\actxprxy.dll - Microsoft Corporation
             apphelp.dll - C:\WINDOWS\SYSwow64\apphelp.dll - Microsoft Corporation
             ntshrui.dll - C:\WINDOWS\syswow64\ntshrui.dll - Microsoft Corporation
             srvcli.dll - C:\WINDOWS\syswow64\srvcli.dll - Microsoft Corporation
             cscapi.dll - C:\WINDOWS\SYSwow64\cscapi.dll - Microsoft Corporation
             netutils.dll - C:\WINDOWS\syswow64\netutils.dll - Microsoft Corporation
             imagehlp.dll - C:\WINDOWS\SYSwow64\imagehlp.dll - Microsoft Corporation
             Windows.Graphics.dll - C:\Windows\Syswow64\Windows.Graphics.dll - Microsoft Corporation
             devenum.dll - C:\Windows\SYSwow64\devenum.dll - Microsoft Corporation
             msdmo.dll - C:\WINDOWS\SYSwow64\msdmo.dll - Microsoft Corporation
             explorerframe.dll - C:\WINDOWS\syswow64\explorerframe.dll - Microsoft Corporation
             DUser.dll - C:\WINDOWS\syswow64\DUser.dll - Microsoft Corporation
             DUI70.dll - C:\WINDOWS\syswow64\DUI70.dll - Microsoft Corporation
             COMDLG32.dll - C:\WINDOWS\SYSwow64\COMDLG32.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\WINDOWS\SYSwow64\WindowsCodecs.dll - Microsoft Corporation
             MSIMG32.dll - C:\WINDOWS\SYSwow64\MSIMG32.dll - Microsoft Corporation
             Windows.Globalization.dll - C:\Windows\Syswow64\Windows.Globalization.dll - Microsoft Corporation
             Bcp47Langs.dll - C:\Windows\Syswow64\Bcp47Langs.dll - Microsoft Corporation
             globinputhost.dll - C:\WINDOWS\SYSwow64\globinputhost.dll - Microsoft Corporation
             uiautomationcore.dll - C:\Windows\SYSwow64\uiautomationcore.dll - Microsoft Corporation
             StructuredQuery.dll - C:\WINDOWS\Syswow64\StructuredQuery.dll - Microsoft Corporation
             thumbcache.dll - C:\Windows\SYSwow64\thumbcache.dll - Microsoft Corporation
             SearchFolder.dll - C:\WINDOWS\syswow64\SearchFolder.dll - Microsoft Corporation
             NetworkExplorer.dll - C:\WINDOWS\syswow64\NetworkExplorer.dll - Microsoft Corporation
             shacct.dll - C:\WINDOWS\Syswow64\shacct.dll - Microsoft Corporation
             SAMLIB.dll - C:\WINDOWS\Syswow64\SAMLIB.dll - Microsoft Corporation
             IDStore.dll - C:\WINDOWS\Syswow64\IDStore.dll - Microsoft Corporation
             provsvc.dll - C:\WINDOWS\Syswow64\provsvc.dll - Microsoft Corporation
             DropboxExt.22.dll - C:\Users\J R\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll - Dropbox, Inc.
             MSVCP90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCP90.dll - Microsoft Corporation
             MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             MPR.dll - C:\WINDOWS\SYSwow64\MPR.dll - Microsoft Corporation
             GR469A~1.DLL - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL - Microsoft Corporation
             GrooveUtil.DLL - C:\PROGRA~2\MICROS~1\Office12\GrooveUtil.DLL - Microsoft Corporation
             MSVCR80.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.8428_none_d08a11e2442dc25d\MSVCR80.dll - Microsoft Corporation
             GrooveNew.DLL - C:\PROGRA~2\MICROS~1\Office12\GrooveNew.DLL - Microsoft Corporation
             ATL80.DLL - C:\WINDOWS\WinSxS\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d1cb102c435421de\ATL80.DLL - Microsoft Corporation
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             drprov.dll - C:\WINDOWS\Syswow64\drprov.dll - Microsoft Corporation
             ieframe.dll - C:\Windows\SYSwow64\ieframe.dll - Microsoft Corporation
             ntlanman.dll - C:\WINDOWS\Syswow64\ntlanman.dll - Microsoft Corporation
             samcli.dll - C:\WINDOWS\SYSwow64\samcli.dll - Microsoft Corporation
             davclnt.dll - C:\WINDOWS\Syswow64\davclnt.dll - Microsoft Corporation
             DAVHLPR.dll - C:\WINDOWS\Syswow64\DAVHLPR.dll - Microsoft Corporation
             wkscli.dll - C:\WINDOWS\Syswow64\wkscli.dll - Microsoft Corporation
             dlnashext.dll - C:\Windows\SYSwow64\dlnashext.dll - Microsoft Corporation
             PlayToDevice.dll - C:\Windows\Syswow64\PlayToDevice.dll - Microsoft Corporation
             DevDispItemProvider.dll - C:\Windows\Syswow64\DevDispItemProvider.dll - Microsoft Corporation
             netprofm.dll - C:\WINDOWS\Syswow64\netprofm.dll - Microsoft Corporation
             npmproxy.dll - C:\WINDOWS\Syswow64\npmproxy.dll - Microsoft Corporation
             urlmon.dll - C:\WINDOWS\SYSwow64\urlmon.dll - Microsoft Corporation
             PortableDeviceApi.dll - C:\Windows\SYSwow64\PortableDeviceApi.dll - Microsoft Corporation
             mssprxy.dll - C:\WINDOWS\syswow64\mssprxy.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[SearchIndexer.exe]Modules
             SearchIndexer.exe - C:\WINDOWS\system32\SearchIndexer.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             TQUERY.DLL - C:\WINDOWS\system32\TQUERY.DLL - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             MSSRCH.DLL - C:\WINDOWS\system32\MSSRCH.DLL - Microsoft Corporation
             IMM32.dll - C:\WINDOWS\system32\IMM32.dll - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\system32\SHCORE.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             ESENT.dll - C:\WINDOWS\system32\ESENT.dll - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\system32\profapi.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             sspicli.dll - C:\WINDOWS\system32\sspicli.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             Msidle.dll - C:\WINDOWS\system32\Msidle.dll - Microsoft Corporation
             POWRPROF.dll - C:\WINDOWS\system32\POWRPROF.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\system32\bcrypt.dll - Microsoft Corporation
             mssprxy.dll - C:\WINDOWS\system32\mssprxy.dll - Microsoft Corporation
             sxs.dll - C:\WINDOWS\SYSTEM32\sxs.dll - Microsoft Corporation
             IpsPlugin.dll - C:\Program Files\Common Files\Microsoft Shared\Ink\IpsPlugin.dll - Microsoft Corporation
             propsys.dll - C:\WINDOWS\system32\propsys.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSTEM32\USERENV.dll - Microsoft Corporation
             ntmarta.dll - C:\WINDOWS\SYSTEM32\ntmarta.dll - Microsoft Corporation
             VSSAPI.DLL - C:\WINDOWS\system32\VSSAPI.DLL - Microsoft Corporation
             VssTrace.DLL - C:\WINDOWS\system32\VssTrace.DLL - Microsoft Corporation
             DSROLE.dll - C:\WINDOWS\system32\DSROLE.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             bcd.dll - C:\WINDOWS\system32\bcd.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             samcli.dll - C:\WINDOWS\system32\samcli.dll - Microsoft Corporation
             netutils.dll - C:\WINDOWS\system32\netutils.dll - Microsoft Corporation
             SAMLIB.dll - C:\WINDOWS\system32\SAMLIB.dll - Microsoft Corporation
             es.dll - C:\WINDOWS\system32\es.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\system32\cfgmgr32.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\system32\DEVOBJ.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\system32\WTSAPI32.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\system32\WINSTA.dll - Microsoft Corporation
             MSWB7.dll - C:\WINDOWS\System32\MSWB7.dll - Microsoft Corporation
             elscore.dll - C:\WINDOWS\system32\elscore.dll - Microsoft Corporation
             ElsLad.dll - C:\WINDOWS\system32\ElsLad.dll - Microsoft Corporation
             Bcp47Langs.dll - C:\WINDOWS\system32\Bcp47Langs.dll - Microsoft Corporation
             NaturalLanguage6.dll - C:\WINDOWS\System32\NaturalLanguage6.dll - Microsoft Corporation
             NLSData001b.dll - C:\WINDOWS\System32\NLSData001b.dll - Microsoft Corporation
             NLSLexicons001b.dll - C:\WINDOWS\System32\NLSLexicons001b.dll - Microsoft Corporation
             MSWB70011.dll - C:\WINDOWS\System32\MSWB70011.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             NL7Data0011.dll - C:\WINDOWS\system32\NL7Data0011.dll - Microsoft Corporation
             korwbrkr.dll - C:\WINDOWS\system32\korwbrkr.dll - Microsoft Corporation
             elstrans.dll - C:\WINDOWS\system32\elstrans.dll - Microsoft Corporation
             MSWB70404.dll - C:\WINDOWS\System32\MSWB70404.dll - Microsoft Corporation
             query.dll - C:\WINDOWS\system32\query.dll - Microsoft Corporation
             NL7Data0404.dll - C:\WINDOWS\system32\NL7Data0404.dll - Microsoft Corporation
             MSWB70804.dll - C:\WINDOWS\System32\MSWB70804.dll - Microsoft Corporation
             NL7Data0804.dll - C:\WINDOWS\system32\NL7Data0804.dll - Microsoft Corporation
             SearchIndexer.exe - C:\Windows\System32\SearchIndexer.exe - Microsoft Corporation
             NL7Data0804.dll - C:\Windows\System32\NL7Data0804.dll - Microsoft Corporation
             NL7Data0011.dll - C:\Windows\System32\NL7Data0011.dll - Microsoft Corporation
             NlsLexicons001b.dll - C:\Windows\System32\NlsLexicons001b.dll - Microsoft Corporation
             MSWB70804.dll - C:\Windows\System32\MSWB70804.dll - Microsoft Corporation
             NL7Data0404.dll - C:\Windows\System32\NL7Data0404.dll - Microsoft Corporation
             MSWB70404.dll - C:\Windows\System32\MSWB70404.dll - Microsoft Corporation
             korwbrkr.dll - C:\Windows\System32\korwbrkr.dll - Microsoft Corporation
             MSWB70011.dll - C:\Windows\System32\MSWB70011.dll - Microsoft Corporation
             mssrch.dll - C:\Windows\System32\mssrch.dll - Microsoft Corporation
             tquery.dll - C:\Windows\System32\tquery.dll - Microsoft Corporation
             NlsData001b.dll - C:\Windows\System32\NlsData001b.dll - Microsoft Corporation
             NaturalLanguage6.dll - C:\Windows\System32\NaturalLanguage6.dll - Microsoft Corporation
             esent.dll - C:\Windows\System32\esent.dll - Microsoft Corporation
             Query.dll - C:\Windows\System32\Query.dll - Microsoft Corporation
             IpsPlugin.dll - C:\Program Files\Common Files\microsoft shared\ink\IpsPlugin.dll - Microsoft Corporation
             mssprxy.dll - C:\Windows\System32\mssprxy.dll - Microsoft Corporation
             elsTrans.dll - C:\Windows\System32\elsTrans.dll - Microsoft Corporation
             samcli.dll - C:\Windows\System32\samcli.dll - Microsoft Corporation
             vssapi.dll - C:\Windows\System32\vssapi.dll - Microsoft Corporation
             vsstrace.dll - C:\Windows\System32\vsstrace.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\System32\ntmarta.dll - Microsoft Corporation
             bcd.dll - C:\Windows\System32\bcd.dll - Microsoft Corporation
             samlib.dll - C:\Windows\System32\samlib.dll - Microsoft Corporation
             es.dll - C:\Windows\System32\es.dll - Microsoft Corporation
             dsrole.dll - C:\Windows\System32\dsrole.dll - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             elslad.dll - C:\Windows\System32\elslad.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             msidle.dll - C:\Windows\System32\msidle.dll - Microsoft Corporation
             BCP47Langs.dll - C:\Windows\System32\BCP47Langs.dll - Microsoft Corporation
             ELSCore.dll - C:\Windows\System32\ELSCore.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             MSWB7.dll - C:\Windows\System32\MSWB7.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             netutils.dll - C:\Windows\System32\netutils.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             userenv.dll - C:\Windows\System32\userenv.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             sxs.dll - C:\Windows\System32\sxs.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             wintrust.dll - C:\Windows\System32\wintrust.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[winlogon.exe]Modules
             winlogon.exe - C:\WINDOWS\system32\winlogon.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             advapi32.dll - C:\WINDOWS\SYSTEM32\advapi32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             winlogonext.dll - C:\WINDOWS\SYSTEM32\winlogonext.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\system32\profapi.dll - Microsoft Corporation
             winsta.dll - C:\WINDOWS\SYSTEM32\winsta.dll - Microsoft Corporation
             uxinit.dll - C:\WINDOWS\SYSTEM32\uxinit.dll - Microsoft Corporation
             UxTheme.dll - C:\WINDOWS\system32\UxTheme.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             DPAPI.dll - C:\WINDOWS\system32\DPAPI.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\system32\SspiCli.dll - Microsoft Corporation
             apphelp.dll - C:\WINDOWS\system32\apphelp.dll - Microsoft Corporation
             ntmarta.dll - C:\WINDOWS\SYSTEM32\ntmarta.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             MPR.dll - C:\WINDOWS\system32\MPR.dll - Microsoft Corporation
             winlogon.exe - C:\Windows\System32\winlogon.exe - Microsoft Corporation
             mpr.dll - C:\Windows\System32\mpr.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\System32\ntmarta.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\System32\apphelp.dll - Microsoft Corporation
             dpapi.dll - C:\Windows\System32\dpapi.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             UXInit.dll - C:\Windows\System32\UXInit.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             winlogonext.dll - C:\Windows\System32\winlogonext.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             user32.dll - C:\WINDOWS\SYSTEM32\user32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             profsvc.dll - c:\windows\system32\profsvc.dll - Microsoft Corporation
             USERENV.dll - c:\windows\system32\USERENV.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             SYSNTFY.dll - c:\windows\system32\SYSNTFY.dll - Microsoft Corporation
             profapi.dll - c:\windows\system32\profapi.dll - Microsoft Corporation
             gpsvc.dll - c:\windows\system32\gpsvc.dll - Microsoft Corporation
             srvcli.dll - c:\windows\system32\srvcli.dll - Microsoft Corporation
             WLDAP32.dll - C:\WINDOWS\system32\WLDAP32.dll - Microsoft Corporation
             GPAPI.dll - c:\windows\system32\GPAPI.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             wevtapi.dll - c:\windows\system32\wevtapi.dll - Microsoft Corporation
             nlaapi.dll - c:\windows\system32\nlaapi.dll - Microsoft Corporation
             themeservice.dll - c:\windows\system32\themeservice.dll - Microsoft Corporation
             DSROLE.dll - c:\windows\system32\DSROLE.dll - Microsoft Corporation
             WINSTA.dll - c:\windows\system32\WINSTA.dll - Microsoft Corporation
             profsvcext.dll - C:\WINDOWS\SYSTEM32\profsvcext.dll - Microsoft Corporation
             NTDSAPI.dll - c:\windows\system32\NTDSAPI.dll - Microsoft Corporation
             NETAPI32.dll - c:\windows\system32\NETAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             ATL.DLL - c:\windows\system32\ATL.DLL - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             netutils.dll - c:\windows\system32\netutils.dll - Microsoft Corporation
             wkscli.dll - c:\windows\system32\wkscli.dll - Microsoft Corporation
             LOGONCLI.DLL - c:\windows\system32\LOGONCLI.DLL - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\system32\bcrypt.dll - Microsoft Corporation
             sens.dll - c:\windows\system32\sens.dll - Microsoft Corporation
             mmcss.dll - c:\windows\system32\mmcss.dll - Microsoft Corporation
             AVRT.dll - c:\windows\system32\AVRT.dll - Microsoft Corporation
             SAMLIB.dll - c:\windows\system32\SAMLIB.dll - Microsoft Corporation
             SspiCli.dll - c:\windows\system32\SspiCli.dll - Microsoft Corporation
             shsvcs.dll - c:\windows\system32\shsvcs.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSTEM32\cfgmgr32.dll - Microsoft Corporation
             HID.DLL - c:\windows\system32\HID.DLL - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             DEVOBJ.dll - c:\windows\system32\DEVOBJ.dll - Microsoft Corporation
             FVEAPI.dll - c:\windows\system32\FVEAPI.dll - Microsoft Corporation
             bcd.dll - c:\windows\system32\bcd.dll - Microsoft Corporation
             FVECERTS.dll - c:\windows\system32\FVECERTS.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             schedsvc.dll - c:\windows\system32\schedsvc.dll - Microsoft Corporation
             UBPM.dll - c:\windows\system32\UBPM.dll - Microsoft Corporation
             AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             pcwum.dll - c:\windows\system32\pcwum.dll - Microsoft Corporation
             ktmw32.dll - c:\windows\system32\ktmw32.dll - Microsoft Corporation
             XmlLite.dll - c:\windows\system32\XmlLite.dll - Microsoft Corporation
             DABAPI.dll - c:\windows\system32\DABAPI.dll - Microsoft Corporation
             CSystemEventsBrokerClient.dll - c:\windows\system32\CSystemEventsBrokerClient.dll - Microsoft Corporation
             EventAggregation.dll - c:\windows\system32\EventAggregation.dll - Microsoft Corporation
             POWRPROF.dll - c:\windows\system32\POWRPROF.dll - Microsoft Corporation
             WMICLNT.dll - c:\windows\system32\WMICLNT.dll - Microsoft Corporation
             taskcomp.dll - C:\WINDOWS\system32\taskcomp.dll - Microsoft Corporation
             ProximityService.dll - C:\Windows\System32\ProximityService.dll - Microsoft Corporation
             ProximityServicePAL.dll - C:\WINDOWS\system32\ProximityServicePAL.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\system32\IPHLPAPI.DLL - Microsoft Corporation
             ProximityCommon.dll - C:\WINDOWS\system32\ProximityCommon.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\system32\WINNSI.DLL - Microsoft Corporation
             ProximityCommonPal.dll - C:\WINDOWS\system32\ProximityCommonPal.dll - Microsoft Corporation
             MSWSOCK.dll - C:\WINDOWS\system32\MSWSOCK.dll - Microsoft Corporation
             firewallapi.dll - C:\WINDOWS\SYSTEM32\firewallapi.dll - Microsoft Corporation
             wtsapi32.dll - C:\WINDOWS\SYSTEM32\wtsapi32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             ntmarta.dll - C:\WINDOWS\SYSTEM32\ntmarta.dll - Microsoft Corporation
             netjoin.dll - C:\WINDOWS\SYSTEM32\netjoin.dll - Microsoft Corporation
             certprop.dll - c:\windows\system32\certprop.dll - Microsoft Corporation
             WinSCard.dll - c:\windows\system32\WinSCard.dll - Microsoft Corporation
             Secur32.dll - c:\windows\system32\Secur32.dll - Microsoft Corporation
             WMsgAPI.dll - c:\windows\system32\WMsgAPI.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             wmisvc.dll - c:\windows\system32\wbem\wmisvc.dll - Microsoft Corporation
             wbemcomn.dll - C:\WINDOWS\SYSTEM32\wbemcomn.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSTEM32\shcore.dll - Microsoft Corporation
             PROPSYS.dll - C:\WINDOWS\system32\PROPSYS.dll - Microsoft Corporation
             iphlpsvc.dll - c:\windows\system32\iphlpsvc.dll - Microsoft Corporation
             fwpuclnt.dll - c:\windows\system32\fwpuclnt.dll - Microsoft Corporation
             rtutils.dll - c:\windows\system32\rtutils.dll - Microsoft Corporation
             srvsvc.dll - c:\windows\system32\srvsvc.dll - Microsoft Corporation
             httpprxm.dll - C:\WINDOWS\system32\httpprxm.dll - Microsoft Corporation
             adhsvc.dll - C:\WINDOWS\system32\adhsvc.dll - Microsoft Corporation
             SSCORE.DLL - C:\WINDOWS\system32\SSCORE.DLL - Microsoft Corporation
             sscoreext.dll - C:\WINDOWS\SYSTEM32\sscoreext.dll - Microsoft Corporation
             mi.dll - C:\WINDOWS\system32\mi.dll - Microsoft Corporation
             miutils.dll - C:\WINDOWS\system32\miutils.dll - Microsoft Corporation
             sqmapi.dll - c:\windows\system32\sqmapi.dll - Microsoft Corporation
             wmidcom.dll - C:\WINDOWS\system32\wmidcom.dll - Microsoft Corporation
             DPAPI.DLL - C:\WINDOWS\system32\DPAPI.DLL - Microsoft Corporation
             netprofm.dll - C:\WINDOWS\System32\netprofm.dll - Microsoft Corporation
             WINHTTP.dll - C:\WINDOWS\system32\WINHTTP.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\system32\WINTRUST.dll - Microsoft Corporation
             RESUTILS.DLL - C:\WINDOWS\system32\RESUTILS.DLL - Microsoft Corporation
             CLUSAPI.dll - C:\WINDOWS\system32\CLUSAPI.dll - Microsoft Corporation
             cryptdll.dll - C:\WINDOWS\system32\cryptdll.dll - Microsoft Corporation
             NCI.dll - c:\windows\system32\NCI.dll - Microsoft Corporation
             DNSAPI.dll - C:\WINDOWS\system32\DNSAPI.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\System32\rasadhlp.dll - Microsoft Corporation
             wshbth.dll - C:\WINDOWS\system32\wshbth.dll - Microsoft Corporation
             winrnr.dll - C:\WINDOWS\System32\winrnr.dll - Microsoft Corporation
             pnrpnsp.dll - C:\WINDOWS\system32\pnrpnsp.dll - Microsoft Corporation
             WDSCORE.dll - c:\windows\system32\WDSCORE.dll - Microsoft Corporation
             napinsp.dll - C:\WINDOWS\system32\napinsp.dll - Microsoft Corporation
             ACTIVEDS.dll - C:\WINDOWS\system32\ACTIVEDS.dll - Microsoft Corporation
             adsldpc.dll - C:\WINDOWS\system32\adsldpc.dll - Microsoft Corporation
             sxs.dll - C:\WINDOWS\SYSTEM32\sxs.dll - Microsoft Corporation
             cscapi.dll - C:\WINDOWS\system32\cscapi.dll - Microsoft Corporation
             dhcpcsvc6.DLL - C:\WINDOWS\system32\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - C:\WINDOWS\system32\dhcpcsvc.DLL - Microsoft Corporation
             browser.dll - c:\windows\system32\browser.dll - Microsoft Corporation
             aelupsvc.dll - c:\windows\system32\aelupsvc.dll - Microsoft Corporation
             apphelp.dll - c:\windows\system32\apphelp.dll - Microsoft Corporation
             VSSAPI.DLL - C:\WINDOWS\SYSTEM32\VSSAPI.DLL - Microsoft Corporation
             VssTrace.DLL - C:\WINDOWS\SYSTEM32\VssTrace.DLL - Microsoft Corporation
             samcli.dll - C:\WINDOWS\SYSTEM32\samcli.dll - Microsoft Corporation
             wbemcore.dll - C:\WINDOWS\system32\wbem\wbemcore.dll - Microsoft Corporation
             esscli.dll - C:\WINDOWS\system32\wbem\esscli.dll - Microsoft Corporation
             FastProx.dll - C:\WINDOWS\system32\wbem\FastProx.dll - Microsoft Corporation
             wbemsvc.dll - C:\WINDOWS\system32\wbem\wbemsvc.dll - Microsoft Corporation
             wmiutils.dll - C:\WINDOWS\system32\wbem\wmiutils.dll - Microsoft Corporation
             repdrvfs.dll - C:\WINDOWS\system32\wbem\repdrvfs.dll - Microsoft Corporation
             npmproxy.dll - C:\WINDOWS\System32\npmproxy.dll - Microsoft Corporation
             hnetcfg.dll - C:\WINDOWS\system32\hnetcfg.dll - Microsoft Corporation
             SPINF.dll - C:\WINDOWS\system32\SPINF.dll - Microsoft Corporation
             wmiprvsd.dll - C:\WINDOWS\system32\wbem\wmiprvsd.dll - Microsoft Corporation
             NCObjAPI.DLL - C:\WINDOWS\SYSTEM32\NCObjAPI.DLL - Microsoft Corporation
             wbemess.dll - C:\WINDOWS\system32\wbem\wbemess.dll - Microsoft Corporation
             upnp.dll - C:\WINDOWS\system32\upnp.dll - Microsoft Corporation
             SSDPAPI.dll - C:\WINDOWS\system32\SSDPAPI.dll - Microsoft Corporation
             msxml6.dll - C:\Windows\System32\msxml6.dll - Microsoft Corporation
             webio.dll - C:\WINDOWS\system32\webio.dll - Microsoft Corporation
             urlmon.dll - C:\WINDOWS\system32\urlmon.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\system32\iertutil.dll - Microsoft Corporation
             WININET.dll - C:\WINDOWS\system32\WININET.dll - Microsoft Corporation
             shacct.dll - C:\WINDOWS\System32\shacct.dll - Microsoft Corporation
             SettingSyncCore.dll - C:\WINDOWS\system32\SettingSyncCore.dll - Microsoft Corporation
             IDStore.dll - C:\WINDOWS\System32\IDStore.dll - Microsoft Corporation
             CredentialMigrationHandler.dll - C:\WINDOWS\system32\CredentialMigrationHandler.dll - Microsoft Corporation
             appinfo.dll - c:\windows\system32\appinfo.dll - Microsoft Corporation
             netshell.dll - C:\WINDOWS\System32\netshell.dll - Microsoft Corporation
             tschannel.dll - C:\Windows\System32\tschannel.dll - Microsoft Corporation
             schannel.DLL - C:\WINDOWS\system32\schannel.DLL - Microsoft Corporation
             ncrypt.dll - C:\WINDOWS\system32\ncrypt.dll - Microsoft Corporation
             NTASN1.dll - C:\WINDOWS\system32\NTASN1.dll - Microsoft Corporation
             cryptnet.dll - C:\Windows\System32\cryptnet.dll - Microsoft Corporation
             ncryptsslp.dll - C:\WINDOWS\system32\ncryptsslp.dll - Microsoft Corporation
             ncprov.dll - C:\WINDOWS\system32\wbem\ncprov.dll - Microsoft Corporation
             qmgr.dll - c:\windows\system32\qmgr.dll - Microsoft Corporation
             bitsperf.dll - c:\windows\system32\bitsperf.dll - Microsoft Corporation
             bitsigd.dll - C:\WINDOWS\system32\bitsigd.dll - Microsoft Corporation
             es.dll - C:\WINDOWS\system32\es.dll - Microsoft Corporation
             svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             qmgr.dll - C:\Windows\System32\qmgr.dll - Microsoft Corporation
             appinfo.dll - C:\Windows\System32\appinfo.dll - Microsoft Corporation
             CredentialMigrationHandler.dll - C:\Windows\System32\CredentialMigrationHandler.dll - Microsoft Corporation
             SettingSyncCore.dll - C:\Windows\System32\SettingSyncCore.dll - Microsoft Corporation
             upnp.dll - C:\Windows\System32\upnp.dll - Microsoft Corporation
             cryptnet.dll - C:\Windows\System32\cryptnet.dll - Microsoft Corporation
             ncryptsslp.dll - C:\Windows\System32\ncryptsslp.dll - Microsoft Corporation
             wbemess.dll - C:\Windows\System32\wbem\wbemess.dll - Microsoft Corporation
             ncobjapi.dll - C:\Windows\System32\ncobjapi.dll - Microsoft Corporation
             WmiPrvSD.dll - C:\Windows\System32\wbem\WmiPrvSD.dll - Microsoft Corporation
             TSChannel.dll - C:\Windows\System32\TSChannel.dll - Microsoft Corporation
             bitsigd.dll - C:\Windows\System32\bitsigd.dll - Microsoft Corporation
             NCProv.dll - C:\Windows\System32\wbem\NCProv.dll - Microsoft Corporation
             repdrvfs.dll - C:\Windows\System32\wbem\repdrvfs.dll - Microsoft Corporation
             wmiutils.dll - C:\Windows\System32\wbem\wmiutils.dll - Microsoft Corporation
             wbemsvc.dll - C:\Windows\System32\wbem\wbemsvc.dll - Microsoft Corporation
             fastprox.dll - C:\Windows\System32\wbem\fastprox.dll - Microsoft Corporation
             esscli.dll - C:\Windows\System32\wbem\esscli.dll - Microsoft Corporation
             wbemcore.dll - C:\Windows\System32\wbem\wbemcore.dll - Microsoft Corporation
             hnetcfg.dll - C:\Windows\System32\hnetcfg.dll - Microsoft Corporation
             netshell.dll - C:\Windows\System32\netshell.dll - Microsoft Corporation
             adsldpc.dll - C:\Windows\System32\adsldpc.dll - Microsoft Corporation
             activeds.dll - C:\Windows\System32\activeds.dll - Microsoft Corporation
             aelupsvc.dll - C:\Windows\System32\aelupsvc.dll - Microsoft Corporation
             browser.dll - C:\Windows\System32\browser.dll - Microsoft Corporation
             NapiNSP.dll - C:\Windows\System32\NapiNSP.dll - Microsoft Corporation
             wdscore.dll - C:\Windows\System32\wdscore.dll - Microsoft Corporation
             pnrpnsp.dll - C:\Windows\System32\pnrpnsp.dll - Microsoft Corporation
             winrnr.dll - C:\Windows\System32\winrnr.dll - Microsoft Corporation
             wshbth.dll - C:\Windows\System32\wshbth.dll - Microsoft Corporation
             nci.dll - C:\Windows\System32\nci.dll - Microsoft Corporation
             clusapi.dll - C:\Windows\System32\clusapi.dll - Microsoft Corporation
             resutils.dll - C:\Windows\System32\resutils.dll - Microsoft Corporation
             sqmapi.dll - C:\Windows\System32\sqmapi.dll - Microsoft Corporation
             wmidcom.dll - C:\Windows\System32\wmidcom.dll - Microsoft Corporation
             netprofm.dll - C:\Windows\System32\netprofm.dll - Microsoft Corporation
             miutils.dll - C:\Windows\System32\miutils.dll - Microsoft Corporation
             mi.dll - C:\Windows\System32\mi.dll - Microsoft Corporation
             sscoreext.dll - C:\Windows\System32\sscoreext.dll - Microsoft Corporation
             sscore.dll - C:\Windows\System32\sscore.dll - Microsoft Corporation
             adhsvc.dll - C:\Windows\System32\adhsvc.dll - Microsoft Corporation
             httpprxm.dll - C:\Windows\System32\httpprxm.dll - Microsoft Corporation
             IDStore.dll - C:\Windows\System32\IDStore.dll - Microsoft Corporation
             shacct.dll - C:\Windows\System32\shacct.dll - Microsoft Corporation
             webio.dll - C:\Windows\System32\webio.dll - Microsoft Corporation
             srvsvc.dll - C:\Windows\System32\srvsvc.dll - Microsoft Corporation
             iphlpsvc.dll - C:\Windows\System32\iphlpsvc.dll - Microsoft Corporation
             cscapi.dll - C:\Windows\System32\cscapi.dll - Microsoft Corporation
             wbemcomn.dll - C:\Windows\System32\wbemcomn.dll - Microsoft Corporation
             WMIsvc.dll - C:\Windows\System32\wbem\WMIsvc.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\System32\rasadhlp.dll - Microsoft Corporation
             ssdpapi.dll - C:\Windows\System32\ssdpapi.dll - Microsoft Corporation
             winhttp.dll - C:\Windows\System32\winhttp.dll - Microsoft Corporation
             wininet.dll - C:\Windows\System32\wininet.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\System32\iertutil.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\System32\urlmon.dll - Microsoft Corporation
             samcli.dll - C:\Windows\System32\samcli.dll - Microsoft Corporation
             vssapi.dll - C:\Windows\System32\vssapi.dll - Microsoft Corporation
             vsstrace.dll - C:\Windows\System32\vsstrace.dll - Microsoft Corporation
             WinSCard.dll - C:\Windows\System32\WinSCard.dll - Microsoft Corporation
             certprop.dll - C:\Windows\System32\certprop.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\System32\ntmarta.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             ProximityCommonPal.dll - C:\Windows\System32\ProximityCommonPal.dll - Microsoft Corporation
             ProximityCommon.dll - C:\Windows\System32\ProximityCommon.dll - Microsoft Corporation
             ProximityServicePal.dll - C:\Windows\System32\ProximityServicePal.dll - Microsoft Corporation
             ProximityService.dll - C:\Windows\System32\ProximityService.dll - Microsoft Corporation
             taskcomp.dll - C:\Windows\System32\taskcomp.dll - Microsoft Corporation
             CSystemEventsBrokerClient.dll - C:\Windows\System32\CSystemEventsBrokerClient.dll - Microsoft Corporation
             ktmw32.dll - C:\Windows\System32\ktmw32.dll - Microsoft Corporation
             ubpm.dll - C:\Windows\System32\ubpm.dll - Microsoft Corporation
             schedsvc.dll - C:\Windows\System32\schedsvc.dll - Microsoft Corporation
             fvecerts.dll - C:\Windows\System32\fvecerts.dll - Microsoft Corporation
             bcd.dll - C:\Windows\System32\bcd.dll - Microsoft Corporation
             fveapi.dll - C:\Windows\System32\fveapi.dll - Microsoft Corporation
             shsvcs.dll - C:\Windows\System32\shsvcs.dll - Microsoft Corporation
             npmproxy.dll - C:\Windows\System32\npmproxy.dll - Microsoft Corporation
             msxml6.dll - C:\Windows\System32\msxml6.dll - Microsoft Corporation
             dhcpcsvc6.dll - C:\Windows\System32\dhcpcsvc6.dll - Microsoft Corporation
             dhcpcsvc.dll - C:\Windows\System32\dhcpcsvc.dll - Microsoft Corporation
             FWPUCLNT.DLL - C:\Windows\System32\FWPUCLNT.DLL - Microsoft Corporation
             samlib.dll - C:\Windows\System32\samlib.dll - Microsoft Corporation
             winnsi.dll - C:\Windows\System32\winnsi.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             mmcss.dll - C:\Windows\System32\mmcss.dll - Microsoft Corporation
             Sens.dll - C:\Windows\System32\Sens.dll - Microsoft Corporation
             es.dll - C:\Windows\System32\es.dll - Microsoft Corporation
             wkscli.dll - C:\Windows\System32\wkscli.dll - Microsoft Corporation
             atl.dll - C:\Windows\System32\atl.dll - Microsoft Corporation
             netapi32.dll - C:\Windows\System32\netapi32.dll - Microsoft Corporation
             ntdsapi.dll - C:\Windows\System32\ntdsapi.dll - Microsoft Corporation
             profsvcext.dll - C:\Windows\System32\profsvcext.dll - Microsoft Corporation
             dsrole.dll - C:\Windows\System32\dsrole.dll - Microsoft Corporation
             nlaapi.dll - C:\Windows\System32\nlaapi.dll - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             themeservice.dll - C:\Windows\System32\themeservice.dll - Microsoft Corporation
             profsvc.dll - C:\Windows\System32\profsvc.dll - Microsoft Corporation
             gpsvc.dll - C:\Windows\System32\gpsvc.dll - Microsoft Corporation
             wevtapi.dll - C:\Windows\System32\wevtapi.dll - Microsoft Corporation
             rtutils.dll - C:\Windows\System32\rtutils.dll - Microsoft Corporation
             xmllite.dll - C:\Windows\System32\xmllite.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             secur32.dll - C:\Windows\System32\secur32.dll - Microsoft Corporation
             bitsperf.dll - C:\Windows\System32\bitsperf.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             avrt.dll - C:\Windows\System32\avrt.dll - Microsoft Corporation
             wmiclnt.dll - C:\Windows\System32\wmiclnt.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\System32\apphelp.dll - Microsoft Corporation
             dpapi.dll - C:\Windows\System32\dpapi.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             wmsgapi.dll - C:\Windows\System32\wmsgapi.dll - Microsoft Corporation
             sysntfy.dll - C:\Windows\System32\sysntfy.dll - Microsoft Corporation
             FirewallAPI.dll - C:\Windows\System32\FirewallAPI.dll - Microsoft Corporation
             gpapi.dll - C:\Windows\System32\gpapi.dll - Microsoft Corporation
             hid.dll - C:\Windows\System32\hid.dll - Microsoft Corporation
             pcwum.dll - C:\Windows\System32\pcwum.dll - Microsoft Corporation
             netutils.dll - C:\Windows\System32\netutils.dll - Microsoft Corporation
             authz.dll - C:\Windows\System32\authz.dll - Microsoft Corporation
             schannel.dll - C:\Windows\System32\schannel.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             userenv.dll - C:\Windows\System32\userenv.dll - Microsoft Corporation
             logoncli.dll - C:\Windows\System32\logoncli.dll - Microsoft Corporation
             dnsapi.dll - C:\Windows\System32\dnsapi.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             cryptdll.dll - C:\Windows\System32\cryptdll.dll - Microsoft Corporation
             netjoin.dll - C:\Windows\System32\netjoin.dll - Microsoft Corporation
             ntasn1.dll - C:\Windows\System32\ntasn1.dll - Microsoft Corporation
             ncrypt.dll - C:\Windows\System32\ncrypt.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             SPInf.dll - C:\Windows\System32\SPInf.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\System32\srvcli.dll - Microsoft Corporation
             EventAggregation.dll - C:\Windows\System32\EventAggregation.dll - Microsoft Corporation
             dabapi.dll - C:\Windows\System32\dabapi.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             sxs.dll - C:\Windows\System32\sxs.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             wintrust.dll - C:\Windows\System32\wintrust.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             Wldap32.dll - C:\Windows\System32\Wldap32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[AsusTPCenter.exe]Modules
             AsusTPCenter.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe - AsusTek
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             AsusTPApi.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPApi.dll - AsusTek
             AsusTPStrike.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPStrike.dll - AsusTek
             WTSAPI32.dll - C:\WINDOWS\SYSTEM32\WTSAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             HID.DLL - C:\WINDOWS\SYSTEM32\HID.DLL - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\SYSTEM32\dwmapi.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             POWRPROF.dll - C:\WINDOWS\SYSTEM32\POWRPROF.dll - Microsoft Corporation
             MSVCR100.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\MSVCR100.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSTEM32\WINSTA.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSTEM32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             wbemprox.dll - C:\WINDOWS\system32\wbem\wbemprox.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             wbemcomn.dll - C:\WINDOWS\SYSTEM32\wbemcomn.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSTEM32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSTEM32\bcrypt.dll - Microsoft Corporation
             wbemsvc.dll - C:\WINDOWS\system32\wbem\wbemsvc.dll - Microsoft Corporation
             fastprox.dll - C:\WINDOWS\system32\wbem\fastprox.dll - Microsoft Corporation
             twinapi.dll - C:\Windows\System32\twinapi.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSTEM32\shcore.dll - Microsoft Corporation
             msxml6.dll - C:\Windows\System32\msxml6.dll - Microsoft Corporation
             urlmon.dll - C:\WINDOWS\SYSTEM32\urlmon.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSTEM32\iertutil.dll - Microsoft Corporation
             WININET.dll - C:\WINDOWS\SYSTEM32\WININET.dll - Microsoft Corporation
             MSOXMLMF.DLL - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL - Microsoft Corporation
             MSVCR80.dll - C:\WINDOWS\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.8428_none_88dcdb0b2fb19957\MSVCR80.dll - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSTEM32\Secur32.dll - Microsoft Corporation
             SSPICLI.DLL - C:\WINDOWS\SYSTEM32\SSPICLI.DLL - Microsoft Corporation
             PROPSYS.dll - C:\WINDOWS\SYSTEM32\PROPSYS.dll - Microsoft Corporation
             apphelp.dll - C:\WINDOWS\SYSTEM32\apphelp.dll - Microsoft Corporation
             dlnashext.dll - C:\Windows\System32\dlnashext.dll - Microsoft Corporation
             PlayToDevice.dll - C:\Windows\System32\PlayToDevice.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\system32\CFGMGR32.dll - Microsoft Corporation
             DevDispItemProvider.dll - C:\Windows\System32\DevDispItemProvider.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSTEM32\WINNSI.DLL - Microsoft Corporation
             dhcpcsvc6.DLL - C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             netprofm.dll - C:\WINDOWS\System32\netprofm.dll - Microsoft Corporation
             npmproxy.dll - C:\WINDOWS\System32\npmproxy.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSTEM32\profapi.dll - Microsoft Corporation
             wpdshext.dll - C:\WINDOWS\system32\wpdshext.dll - Microsoft Corporation
             gdiplus.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_9332526147499ed1\gdiplus.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             MPR.dll - C:\WINDOWS\SYSTEM32\MPR.dll - Microsoft Corporation
             pcacli.dll - C:\WINDOWS\SYSTEM32\pcacli.dll - Microsoft Corporation
             sfc_os.dll - C:\WINDOWS\System32\sfc_os.dll - Microsoft Corporation
             DEVRTL.dll - C:\WINDOWS\SYSTEM32\DEVRTL.dll - Microsoft Corporation
             AsusTPCenter.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe - AsusTek
             pcacli.dll - C:\Windows\System32\pcacli.dll - Microsoft Corporation
             wpdshext.dll - C:\Windows\System32\wpdshext.dll - Microsoft Corporation
             dlnashext.dll - C:\Windows\System32\dlnashext.dll - Microsoft Corporation
             mpr.dll - C:\Windows\System32\mpr.dll - Microsoft Corporation
             AsusTPApi.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPApi.dll - AsusTek
             DevDispItemProvider.dll - C:\Windows\System32\DevDispItemProvider.dll - Microsoft Corporation
             PlayToDevice.dll - C:\Windows\System32\PlayToDevice.dll - Microsoft Corporation
             wbemsvc.dll - C:\Windows\System32\wbem\wbemsvc.dll - Microsoft Corporation
             fastprox.dll - C:\Windows\System32\wbem\fastprox.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             twinapi.dll - C:\Windows\System32\twinapi.dll - Microsoft Corporation
             wbemprox.dll - C:\Windows\System32\wbem\wbemprox.dll - Microsoft Corporation
             AsusTPStrike.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPStrike.dll - AsusTek
             netprofm.dll - C:\Windows\System32\netprofm.dll - Microsoft Corporation
             devrtl.dll - C:\Windows\System32\devrtl.dll - Microsoft Corporation
             wbemcomn.dll - C:\Windows\System32\wbemcomn.dll - Microsoft Corporation
             wininet.dll - C:\Windows\System32\wininet.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\System32\iertutil.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\System32\urlmon.dll - Microsoft Corporation
             sfc_os.dll - C:\Windows\System32\sfc_os.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             npmproxy.dll - C:\Windows\System32\npmproxy.dll - Microsoft Corporation
             msxml6.dll - C:\Windows\System32\msxml6.dll - Microsoft Corporation
             dhcpcsvc6.dll - C:\Windows\System32\dhcpcsvc6.dll - Microsoft Corporation
             dhcpcsvc.dll - C:\Windows\System32\dhcpcsvc.dll - Microsoft Corporation
             winnsi.dll - C:\Windows\System32\winnsi.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             secur32.dll - C:\Windows\System32\secur32.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\System32\dwmapi.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\System32\apphelp.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             hid.dll - C:\Windows\System32\hid.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             GdiPlus.dll - C:\Windows\System32\GdiPlus.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[dwm.exe]Modules
             dwm.exe - C:\WINDOWS\system32\dwm.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             apphelp.dll - C:\WINDOWS\system32\apphelp.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             IMM32.dll - C:\WINDOWS\system32\IMM32.dll - Microsoft Corporation
             dwmredir.dll - C:\WINDOWS\system32\dwmredir.dll - Microsoft Corporation
             dwmcore.dll - C:\WINDOWS\system32\dwmcore.dll - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             dcomp.dll - C:\WINDOWS\system32\dcomp.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\WINDOWS\system32\WindowsCodecs.dll - Microsoft Corporation
             WMICLNT.dll - C:\WINDOWS\system32\WMICLNT.dll - Microsoft Corporation
             avrt.dll - C:\WINDOWS\system32\avrt.dll - Microsoft Corporation
             d3d11.dll - C:\WINDOWS\system32\d3d11.dll - Microsoft Corporation
             dxgi.dll - C:\WINDOWS\system32\dxgi.dll - Microsoft Corporation
             igd10iumd64.dll - C:\WINDOWS\system32\igd10iumd64.dll - Intel Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\system32\bcrypt.dll - Microsoft Corporation
             ncrypt.dll - C:\WINDOWS\system32\ncrypt.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             NTASN1.dll - C:\WINDOWS\system32\NTASN1.dll - Microsoft Corporation
             igdusc64.dll - C:\WINDOWS\system32\igdusc64.dll - Intel Corporation
             uDWM.dll - C:\WINDOWS\system32\uDWM.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             UIAnimation.dll - C:\WINDOWS\System32\UIAnimation.dll - Microsoft Corporation
             d2d1.dll - C:\WINDOWS\system32\d2d1.dll - Microsoft Corporation
             XmlLite.dll - C:\WINDOWS\system32\XmlLite.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             d3d10warp.dll - C:\WINDOWS\system32\d3d10warp.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\system32\dwmapi.dll - Microsoft Corporation
             dwm.exe - C:\Windows\System32\dwm.exe - Microsoft Corporation
             d3d10warp.dll - C:\Windows\System32\d3d10warp.dll - Microsoft Corporation
             xmllite.dll - C:\Windows\System32\xmllite.dll - Microsoft Corporation
             d2d1.dll - C:\Windows\System32\d2d1.dll - Microsoft Corporation
             UIAnimation.dll - C:\Windows\System32\UIAnimation.dll - Microsoft Corporation
             uDWM.dll - C:\Windows\System32\uDWM.dll - Microsoft Corporation
             igdusc64.dll - C:\Windows\System32\igdusc64.dll - Intel Corporation
             dwmapi.dll - C:\Windows\System32\dwmapi.dll - Microsoft Corporation
             igd10iumd64.dll - C:\Windows\System32\igd10iumd64.dll - Intel Corporation
             dxgi.dll - C:\Windows\System32\dxgi.dll - Microsoft Corporation
             d3d11.dll - C:\Windows\System32\d3d11.dll - Microsoft Corporation
             avrt.dll - C:\Windows\System32\avrt.dll - Microsoft Corporation
             wmiclnt.dll - C:\Windows\System32\wmiclnt.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\Windows\System32\WindowsCodecs.dll - Microsoft Corporation
             dcomp.dll - C:\Windows\System32\dcomp.dll - Microsoft Corporation
             dwmcore.dll - C:\Windows\System32\dwmcore.dll - Microsoft Corporation
             dwmredir.dll - C:\Windows\System32\dwmredir.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\System32\apphelp.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             ntasn1.dll - C:\Windows\System32\ntasn1.dll - Microsoft Corporation
             ncrypt.dll - C:\Windows\System32\ncrypt.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[csrss.exe]Modules
             csrss.exe - C:\WINDOWS\system32\csrss.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             CSRSRV.dll - C:\WINDOWS\system32\CSRSRV.dll - Microsoft Corporation
             basesrv.DLL - C:\WINDOWS\system32\basesrv.DLL - Microsoft Corporation
             winsrv.DLL - C:\WINDOWS\system32\winsrv.DLL - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             kernelbase.dll - C:\WINDOWS\SYSTEM32\kernelbase.dll - Microsoft Corporation
             kernel32.dll - C:\WINDOWS\SYSTEM32\kernel32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             sxssrv.DLL - C:\WINDOWS\system32\sxssrv.DLL - Microsoft Corporation
             sxs.dll - C:\WINDOWS\system32\sxs.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             csrss.exe - C:\Windows\System32\csrss.exe - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             sxs.dll - C:\Windows\System32\sxs.dll - Microsoft Corporation
             sxssrv.dll - C:\Windows\System32\sxssrv.dll - Microsoft Corporation
             winsrv.dll - C:\Windows\System32\winsrv.dll - Microsoft Corporation
             basesrv.dll - C:\Windows\System32\basesrv.dll - Microsoft Corporation
             csrsrv.dll - C:\Windows\System32\csrsrv.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[smss.exe]Modules
             smss.exe - C:\WINDOWS\System32\smss.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             smss.exe - C:\Windows\System32\smss.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[TabTip32.exe]Modules
             TabTip32.exe - C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[csrss.exe]Modules
             csrss.exe - C:\WINDOWS\system32\csrss.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             CSRSRV.dll - C:\WINDOWS\system32\CSRSRV.dll - Microsoft Corporation
             basesrv.DLL - C:\WINDOWS\system32\basesrv.DLL - Microsoft Corporation
             winsrv.DLL - C:\WINDOWS\system32\winsrv.DLL - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             kernelbase.dll - C:\WINDOWS\SYSTEM32\kernelbase.dll - Microsoft Corporation
             kernel32.dll - C:\WINDOWS\SYSTEM32\kernel32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             sxssrv.DLL - C:\WINDOWS\system32\sxssrv.DLL - Microsoft Corporation
             sxs.dll - C:\WINDOWS\system32\sxs.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             csrss.exe - C:\Windows\System32\csrss.exe - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             sxs.dll - C:\Windows\System32\sxs.dll - Microsoft Corporation
             sxssrv.dll - C:\Windows\System32\sxssrv.dll - Microsoft Corporation
             winsrv.dll - C:\Windows\System32\winsrv.dll - Microsoft Corporation
             basesrv.dll - C:\Windows\System32\basesrv.dll - Microsoft Corporation
             csrsrv.dll - C:\Windows\System32\csrsrv.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[Dropbox.exe]Modules
             Dropbox.exe - C:\Users\J R\AppData\Roaming\Dropbox\bin\Dropbox.exe - Dropbox, Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSwow64\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\syswow64\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSwow64\bcrypt.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             MSWSOCK.dll - C:\WINDOWS\SYSwow64\MSWSOCK.dll - Microsoft Corporation
             sfc.dll - C:\WINDOWS\SYSwow64\sfc.dll - Microsoft Corporation
             sfc_os.DLL - C:\WINDOWS\SYSwow64\sfc_os.DLL - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             secur32.dll - C:\WINDOWS\SYSwow64\secur32.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSwow64\kernel.appcore.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             urlmon.dll - C:\WINDOWS\SYSwow64\urlmon.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             NETAPI32.dll - C:\WINDOWS\SYSwow64\NETAPI32.dll - Microsoft Corporation
             netutils.dll - C:\WINDOWS\SYSwow64\netutils.dll - Microsoft Corporation
             srvcli.dll - C:\WINDOWS\SYSwow64\srvcli.dll - Microsoft Corporation
             wkscli.dll - C:\WINDOWS\SYSwow64\wkscli.dll - Microsoft Corporation
             security.dll - C:\WINDOWS\SYSwow64\security.dll - Microsoft Corporation
             ntdsapi.dll - C:\WINDOWS\SYSwow64\ntdsapi.dll - Microsoft Corporation
             LOGONCLI.DLL - C:\WINDOWS\SYSwow64\LOGONCLI.DLL - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\SYSwow64\SHCORE.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             Psapi.dll - C:\WINDOWS\SYSwow64\Psapi.dll - Microsoft Corporation
             COMDLG32.dll - C:\WINDOWS\SYSwow64\COMDLG32.dll - Microsoft Corporation
             COMCTL32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09\COMCTL32.dll - Microsoft Corporation
             msimg32.dll - C:\WINDOWS\SYSwow64\msimg32.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             iphlpapi.DLL - C:\WINDOWS\SYSwow64\iphlpapi.DLL - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             wxmsw28uh_vc.dll - C:\Users\J R\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll - 
             gdiplus.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_dadf89385bc5c7d7\gdiplus.dll - Microsoft Corporation
             MSVCP90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCP90.dll - Microsoft Corporation
             ntmarta.dll - C:\WINDOWS\SYSwow64\ntmarta.dll - Microsoft Corporation
             Crypt32.DLL - C:\WINDOWS\SYSwow64\Crypt32.DLL - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             DPAPI.dll - C:\WINDOWS\SYSwow64\DPAPI.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSwow64\clbcatq.dll - Microsoft Corporation
             FirewallAPI.dll - C:\Windows\SYSwow64\FirewallAPI.dll - Microsoft Corporation
             sxs.dll - C:\WINDOWS\SYSwow64\sxs.dll - Microsoft Corporation
             dhcpcsvc.DLL - C:\WINDOWS\SYSwow64\dhcpcsvc.DLL - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\syswow64\dwmapi.dll - Microsoft Corporation
             libcef.dll - C:\Users\J R\AppData\Roaming\Dropbox\bin\libcef.dll - 
             WINHTTP.dll - C:\WINDOWS\SYSwow64\WINHTTP.dll - Microsoft Corporation
             USP10.dll - C:\WINDOWS\SYSwow64\USP10.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSwow64\WINMM.dll - Microsoft Corporation
             OLEACC.dll - C:\WINDOWS\SYSwow64\OLEACC.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSwow64\WINSPOOL.DRV - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSwow64\WINMMBASE.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSwow64\cfgmgr32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             icudt.dll - C:\Users\J R\AppData\Roaming\Dropbox\bin\icudt.dll - The ICU Project
             d3dcompiler_43.dll - C:\WINDOWS\SYSwow64\d3dcompiler_43.dll - Microsoft Corporation
             d3dx9_43.dll - C:\WINDOWS\SYSwow64\d3dx9_43.dll - Microsoft Corporation
             NLAapi.dll - C:\WINDOWS\syswow64\NLAapi.dll - Microsoft Corporation
             dhcpcsvc6.DLL - C:\WINDOWS\SYSwow64\dhcpcsvc6.DLL - Microsoft Corporation
             napinsp.dll - C:\WINDOWS\syswow64\napinsp.dll - Microsoft Corporation
             pnrpnsp.dll - C:\WINDOWS\syswow64\pnrpnsp.dll - Microsoft Corporation
             DNSAPI.dll - C:\WINDOWS\SYSwow64\DNSAPI.dll - Microsoft Corporation
             winrnr.dll - C:\WINDOWS\Syswow64\winrnr.dll - Microsoft Corporation
             wshbth.dll - C:\WINDOWS\syswow64\wshbth.dll - Microsoft Corporation
             fwpuclnt.dll - C:\WINDOWS\Syswow64\fwpuclnt.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\Syswow64\rasadhlp.dll - Microsoft Corporation
             apphelp.dll - C:\WINDOWS\syswow64\apphelp.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\SYSwow64\actxprxy.dll - Microsoft Corporation
             gpapi.dll - C:\WINDOWS\SYSwow64\gpapi.dll - Microsoft Corporation
             ncrypt.dll - C:\WINDOWS\SYSwow64\ncrypt.dll - Microsoft Corporation
             NTASN1.dll - C:\WINDOWS\SYSwow64\NTASN1.dll - Microsoft Corporation
             cryptnet.dll - C:\Windows\SYSwow64\cryptnet.dll - Microsoft Corporation
             WLDAP32.dll - C:\WINDOWS\SYSwow64\WLDAP32.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\WINDOWS\System32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\System32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\System32\bcryptPrimitives.dll - Microsoft Corporation
             user32.dll - C:\WINDOWS\SYSTEM32\user32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             wevtsvc.dll - c:\windows\system32\wevtsvc.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             sspicli.dll - C:\WINDOWS\System32\sspicli.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             gpapi.dll - C:\WINDOWS\SYSTEM32\gpapi.dll - Microsoft Corporation
             audiosrv.dll - c:\windows\system32\audiosrv.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             HID.DLL - c:\windows\system32\HID.DLL - Microsoft Corporation
             MMDevAPI.DLL - c:\windows\system32\MMDevAPI.DLL - Microsoft Corporation
             AVRT.dll - c:\windows\system32\AVRT.dll - Microsoft Corporation
             DEVOBJ.dll - c:\windows\system32\DEVOBJ.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSTEM32\cfgmgr32.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             winsta.dll - C:\WINDOWS\SYSTEM32\winsta.dll - Microsoft Corporation
             wtsapi32.dll - C:\WINDOWS\SYSTEM32\wtsapi32.dll - Microsoft Corporation
             lmhsvc.dll - c:\windows\system32\lmhsvc.dll - Microsoft Corporation
             IPHLPAPI.DLL - c:\windows\system32\IPHLPAPI.DLL - Microsoft Corporation
             nrpsrv.DLL - c:\windows\system32\nrpsrv.DLL - Microsoft Corporation
             WINNSI.DLL - c:\windows\system32\WINNSI.DLL - Microsoft Corporation
             wcmsvc.dll - c:\windows\system32\wcmsvc.dll - Microsoft Corporation
             dhcpcore.dll - c:\windows\system32\dhcpcore.dll - Microsoft Corporation
             DNSAPI.dll - c:\windows\system32\DNSAPI.dll - Microsoft Corporation
             firewallapi.dll - C:\WINDOWS\System32\firewallapi.dll - Microsoft Corporation
             dhcpcore6.dll - C:\WINDOWS\System32\dhcpcore6.dll - Microsoft Corporation
             wcmcsp.dll - C:\WINDOWS\System32\wcmcsp.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             WMICLNT.dll - C:\WINDOWS\System32\WMICLNT.dll - Microsoft Corporation
             kerberos.DLL - C:\WINDOWS\system32\kerberos.DLL - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             cryptdll.dll - C:\WINDOWS\System32\cryptdll.dll - Microsoft Corporation
             nlaapi.dll - c:\windows\system32\nlaapi.dll - Microsoft Corporation
             Wlanapi.dll - C:\WINDOWS\System32\Wlanapi.dll - Microsoft Corporation
             Wlanhlp.dll - C:\WINDOWS\System32\Wlanhlp.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\System32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\System32\bcrypt.dll - Microsoft Corporation
             SubscriptionMgr.dll - C:\WINDOWS\System32\SubscriptionMgr.dll - Microsoft Corporation
             wevtapi.dll - C:\WINDOWS\System32\wevtapi.dll - Microsoft Corporation
             wcmapi.dll - C:\WINDOWS\System32\wcmapi.dll - Microsoft Corporation
             dhcpcsvc6.DLL - c:\windows\system32\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - c:\windows\system32\dhcpcsvc.DLL - Microsoft Corporation
             provsvc.dll - c:\windows\system32\provsvc.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSTEM32\shcore.dll - Microsoft Corporation
             npmproxy.dll - C:\WINDOWS\System32\npmproxy.dll - Microsoft Corporation
             FunDisc.dll - C:\Windows\System32\FunDisc.dll - Microsoft Corporation
             XmlLite.dll - C:\Windows\System32\XmlLite.dll - Microsoft Corporation
             fdproxy.dll - C:\Windows\System32\fdproxy.dll - Microsoft Corporation
             P2P.dll - c:\windows\system32\P2P.dll - Microsoft Corporation
             advapi32.dll - C:\WINDOWS\SYSTEM32\advapi32.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             propsys.dll - C:\WINDOWS\system32\propsys.dll - Microsoft Corporation
             pnrpnsp.dll - C:\WINDOWS\system32\pnrpnsp.dll - Microsoft Corporation
             wbemprox.dll - C:\WINDOWS\system32\wbem\wbemprox.dll - Microsoft Corporation
             wbemcomn.dll - C:\WINDOWS\SYSTEM32\wbemcomn.dll - Microsoft Corporation
             wbemsvc.dll - C:\WINDOWS\system32\wbem\wbemsvc.dll - Microsoft Corporation
             fastprox.dll - C:\WINDOWS\system32\wbem\fastprox.dll - Microsoft Corporation
             wkscli.dll - C:\WINDOWS\SYSTEM32\wkscli.dll - Microsoft Corporation
             netutils.dll - C:\WINDOWS\SYSTEM32\netutils.dll - Microsoft Corporation
             shacct.dll - C:\WINDOWS\System32\shacct.dll - Microsoft Corporation
             SAMLIB.dll - C:\WINDOWS\System32\SAMLIB.dll - Microsoft Corporation
             IDStore.dll - C:\WINDOWS\System32\IDStore.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             DPAPI.dll - C:\WINDOWS\system32\DPAPI.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\System32\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\System32\profapi.dll - Microsoft Corporation
             wshbth.dll - C:\WINDOWS\system32\wshbth.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\System32\rasadhlp.dll - Microsoft Corporation
             winrnr.dll - C:\WINDOWS\System32\winrnr.dll - Microsoft Corporation
             napinsp.dll - C:\WINDOWS\system32\napinsp.dll - Microsoft Corporation
             wscsvc.dll - c:\windows\system32\wscsvc.dll - Microsoft Corporation
             dbghelp.dll - c:\windows\system32\dbghelp.dll - Microsoft Corporation
             WINHTTP.dll - c:\windows\system32\WINHTTP.dll - Microsoft Corporation
             WINTRUST.DLL - C:\Windows\System32\WINTRUST.DLL - Microsoft Corporation
             imagehlp.dll - C:\WINDOWS\system32\imagehlp.dll - Microsoft Corporation
             ncrypt.dll - C:\WINDOWS\system32\ncrypt.dll - Microsoft Corporation
             NTASN1.dll - C:\WINDOWS\system32\NTASN1.dll - Microsoft Corporation
             wuapi.dll - C:\Windows\System32\wuapi.dll - Microsoft Corporation
             Cabinet.dll - C:\Windows\System32\Cabinet.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\System32\VERSION.dll - Microsoft Corporation
             svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             wuapi.dll - C:\Windows\System32\wuapi.dll - Microsoft Corporation
             dbghelp.dll - C:\Windows\System32\dbghelp.dll - Microsoft Corporation
             cabinet.dll - C:\Windows\System32\cabinet.dll - Microsoft Corporation
             wscsvc.dll - C:\Windows\System32\wscsvc.dll - Microsoft Corporation
             P2P.dll - C:\Windows\System32\P2P.dll - Microsoft Corporation
             fdProxy.dll - C:\Windows\System32\fdProxy.dll - Microsoft Corporation
             provsvc.dll - C:\Windows\System32\provsvc.dll - Microsoft Corporation
             wbemsvc.dll - C:\Windows\System32\wbem\wbemsvc.dll - Microsoft Corporation
             fastprox.dll - C:\Windows\System32\wbem\fastprox.dll - Microsoft Corporation
             wbemprox.dll - C:\Windows\System32\wbem\wbemprox.dll - Microsoft Corporation
             NapiNSP.dll - C:\Windows\System32\NapiNSP.dll - Microsoft Corporation
             pnrpnsp.dll - C:\Windows\System32\pnrpnsp.dll - Microsoft Corporation
             winrnr.dll - C:\Windows\System32\winrnr.dll - Microsoft Corporation
             wshbth.dll - C:\Windows\System32\wshbth.dll - Microsoft Corporation
             IDStore.dll - C:\Windows\System32\IDStore.dll - Microsoft Corporation
             shacct.dll - C:\Windows\System32\shacct.dll - Microsoft Corporation
             wbemcomn.dll - C:\Windows\System32\wbemcomn.dll - Microsoft Corporation
             fundisc.dll - C:\Windows\System32\fundisc.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\System32\rasadhlp.dll - Microsoft Corporation
             winhttp.dll - C:\Windows\System32\winhttp.dll - Microsoft Corporation
             version.dll - C:\Windows\System32\version.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             wcmapi.dll - C:\Windows\System32\wcmapi.dll - Microsoft Corporation
             SubscriptionMgr.dll - C:\Windows\System32\SubscriptionMgr.dll - Microsoft Corporation
             wlanhlp.dll - C:\Windows\System32\wlanhlp.dll - Microsoft Corporation
             npmproxy.dll - C:\Windows\System32\npmproxy.dll - Microsoft Corporation
             wlanapi.dll - C:\Windows\System32\wlanapi.dll - Microsoft Corporation
             dhcpcsvc6.dll - C:\Windows\System32\dhcpcsvc6.dll - Microsoft Corporation
             dhcpcsvc.dll - C:\Windows\System32\dhcpcsvc.dll - Microsoft Corporation
             samlib.dll - C:\Windows\System32\samlib.dll - Microsoft Corporation
             wcmcsp.dll - C:\Windows\System32\wcmcsp.dll - Microsoft Corporation
             dhcpcore6.dll - C:\Windows\System32\dhcpcore6.dll - Microsoft Corporation
             dhcpcore.dll - C:\Windows\System32\dhcpcore.dll - Microsoft Corporation
             wcmsvc.dll - C:\Windows\System32\wcmsvc.dll - Microsoft Corporation
             winnsi.dll - C:\Windows\System32\winnsi.dll - Microsoft Corporation
             nrpsrv.dll - C:\Windows\System32\nrpsrv.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             lmhsvc.dll - C:\Windows\System32\lmhsvc.dll - Microsoft Corporation
             audiosrv.dll - C:\Windows\System32\audiosrv.dll - Microsoft Corporation
             wkscli.dll - C:\Windows\System32\wkscli.dll - Microsoft Corporation
             nlaapi.dll - C:\Windows\System32\nlaapi.dll - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             wevtapi.dll - C:\Windows\System32\wevtapi.dll - Microsoft Corporation
             wevtsvc.dll - C:\Windows\System32\wevtsvc.dll - Microsoft Corporation
             xmllite.dll - C:\Windows\System32\xmllite.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             MMDevAPI.dll - C:\Windows\System32\MMDevAPI.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             avrt.dll - C:\Windows\System32\avrt.dll - Microsoft Corporation
             wmiclnt.dll - C:\Windows\System32\wmiclnt.dll - Microsoft Corporation
             dpapi.dll - C:\Windows\System32\dpapi.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             FirewallAPI.dll - C:\Windows\System32\FirewallAPI.dll - Microsoft Corporation
             gpapi.dll - C:\Windows\System32\gpapi.dll - Microsoft Corporation
             hid.dll - C:\Windows\System32\hid.dll - Microsoft Corporation
             netutils.dll - C:\Windows\System32\netutils.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             userenv.dll - C:\Windows\System32\userenv.dll - Microsoft Corporation
             dnsapi.dll - C:\Windows\System32\dnsapi.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             kerberos.dll - C:\Windows\System32\kerberos.dll - Microsoft Corporation
             cryptdll.dll - C:\Windows\System32\cryptdll.dll - Microsoft Corporation
             ntasn1.dll - C:\Windows\System32\ntasn1.dll - Microsoft Corporation
             ncrypt.dll - C:\Windows\System32\ncrypt.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             wintrust.dll - C:\Windows\System32\wintrust.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imagehlp.dll - C:\Windows\System32\imagehlp.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[VivoBook.exe]Modules
             VivoBook.exe - C:\Program Files\ASUS\ASUS VivoBook\VivoBook.exe - ASUSTeK Computer Inc.
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             MSCOREE.DLL - C:\WINDOWS\SYSTEM32\MSCOREE.DLL - Microsoft Corporation
             KERNEL32.dll - C:\WINDOWS\system32\KERNEL32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             mscoreei.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             MSVCR120_CLR0400.dll - C:\WINDOWS\SYSTEM32\MSVCR120_CLR0400.dll - Microsoft Corporation
             mscorlib.ni.dll - C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\mscorlib\1c4f23e80bd4b68fb3f56bdb16dbb647\mscorlib.ni.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSTEM32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSTEM32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSTEM32\bcrypt.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSTEM32\VERSION.dll - Microsoft Corporation
             PresentationFramework.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll - Microsoft Corporation
             WindowsBase.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll - Microsoft Corporation
             System.Xaml.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll - Microsoft Corporation
             clrjit.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             System.ServiceProcess.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - Microsoft Corporation
             System.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSTEM32\SspiCli.dll - Microsoft Corporation
             PresentationCore.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - Microsoft Corporation
             dwrite.dll - C:\WINDOWS\SYSTEM32\dwrite.dll - Microsoft Corporation
             wpfgfx_v0400.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\wpfgfx_v0400.dll - Microsoft Corporation
             PresentationNative_v0400.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationNative_v0400.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\system32\dwmapi.dll - Microsoft Corporation
             System.Xml.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.dll - Microsoft Corporation
             System.Configuration.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll - Microsoft Corporation
             PresentationFramework.resources.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\PresentationFramework.resources\v4.0_4.0.0.0_cs_31bf3856ad364e35\PresentationFramework.resources.dll - Microsoft Corporation
             UIAutomationTypes.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll - Microsoft Corporation
             VivoBookResource.dll - C:\Program Files\ASUS\ASUS VivoBook\VivoBookResource.dll - ASUSTek Computer Inc.
             urlmon.dll - C:\WINDOWS\SYSTEM32\urlmon.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSTEM32\iertutil.dll - Microsoft Corporation
             WININET.dll - C:\WINDOWS\SYSTEM32\WININET.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\WINDOWS\SYSTEM32\WindowsCodecs.dll - Microsoft Corporation
             mscms.dll - C:\WINDOWS\SYSTEM32\mscms.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSTEM32\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSTEM32\profapi.dll - Microsoft Corporation
             WindowsCodecsExt.dll - C:\WINDOWS\SYSTEM32\WindowsCodecsExt.dll - Microsoft Corporation
             icm32.dll - C:\WINDOWS\SYSTEM32\icm32.dll - Microsoft Corporation
             d3d9.dll - C:\WINDOWS\SYSTEM32\d3d9.dll - Microsoft Corporation
             igdumdim64.dll - C:\WINDOWS\SYSTEM32\igdumdim64.dll - Intel Corporation
             igdusc64.dll - C:\WINDOWS\SYSTEM32\igdusc64.dll - Intel Corporation
             PresentationFramework.Aero2.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\PresentationFramework.Aero2\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero2.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             WtsApi32.dll - C:\WINDOWS\SYSTEM32\WtsApi32.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSTEM32\WINSTA.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             PenIMC.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PenIMC.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             wisp.dll - C:\WINDOWS\System32\wisp.dll - Microsoft Corporation
             tpcps.dll - C:\Program Files\Common Files\Microsoft Shared\Ink\tpcps.dll - Microsoft Corporation
             msctfui.dll - C:\WINDOWS\system32\msctfui.dll - Microsoft Corporation
             UIAutomationProvider.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll - Microsoft Corporation
             UIAutomationCore.dll - C:\WINDOWS\SYSTEM32\UIAutomationCore.dll - Microsoft Corporation
             sxs.dll - C:\WINDOWS\SYSTEM32\sxs.dll - Microsoft Corporation
             PresentationFramework-SystemXml.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\PresentationFramework-SystemXml\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXml.dll - Microsoft Corporation
             Windows.ApplicationModel.dll - C:\Windows\System32\Windows.ApplicationModel.dll - Microsoft Corporation
             wintypes.dll - C:\WINDOWS\SYSTEM32\wintypes.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSTEM32\shcore.dll - Microsoft Corporation
             Windows.Graphics.winmd - C:\WINDOWS\system32\WinMetadata\Windows.Graphics.winmd - 
             ASUSTouchPadControl.dll - C:\Program Files\ASUS\ASUS VivoBook\ASUSTouchPadControl.dll - ASUSTek Computer Inc.
             psapi.dll - C:\WINDOWS\system32\psapi.dll - Microsoft Corporation
             ASUSMaxxAudioControl.dll - C:\Program Files\ASUS\ASUS VivoBook\ASUSMaxxAudioControl.dll - ASUSTek Computer Inc.
             PresentationCore.resources.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\PresentationCore.resources\v4.0_4.0.0.0_cs_31bf3856ad364e35\PresentationCore.resources.dll - Microsoft Corporation
             Windows.Foundation.winmd - C:\WINDOWS\system32\WinMetadata\Windows.Foundation.winmd - 
             System.Runtime.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Runtime\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.dll - Microsoft Corporation
             FontLibrary.dll - C:\Program Files\ASUS\ASUS VivoBook\FontLibrary.dll - ASUSTek Computer Inc.
             System.Xaml.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll - Microsoft Corporation
             PresentationFramework.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll - Microsoft Corporation
             WindowsBase.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll - Microsoft Corporation
             System.ServiceProcess.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - Microsoft Corporation
             System.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll - Microsoft Corporation
             PresentationCore.dll - C:\Windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - Microsoft Corporation
             System.Configuration.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll - Microsoft Corporation
             PresentationFramework.resources.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.resources\v4.0_4.0.0.0_cs_31bf3856ad364e35\PresentationFramework.resources.dll - Microsoft Corporation
             UIAutomationTypes.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll - Microsoft Corporation
             System.XML.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll - Microsoft Corporation
             VivoBookResource.dll - C:\Program Files\ASUS\ASUS VivoBook\VivoBookResource.dll - ASUSTek Computer Inc.
             PresentationFramework.Aero2.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero2\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero2.dll - Microsoft Corporation
             PresentationFramework-SystemXml.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXml\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXml.dll - Microsoft Corporation
             Windows.Graphics.winmd - C:\Windows\System32\WinMetadata\Windows.Graphics.winmd - 
             ASUSTouchPadControl.dll - C:\Program Files\ASUS\ASUS VivoBook\ASUSTouchPadControl.dll - ASUSTek Computer Inc.
             ASUSMaxxAudioControl.dll - C:\Program Files\ASUS\ASUS VivoBook\ASUSMaxxAudioControl.dll - ASUSTek Computer Inc.
             PresentationCore.resources.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationCore.resources\v4.0_4.0.0.0_cs_31bf3856ad364e35\PresentationCore.resources.dll - Microsoft Corporation
             FontLibrary.dll - C:\Program Files\ASUS\ASUS VivoBook\FontLibrary.dll - ASUSTek Computer Inc.
             Windows.Foundation.winmd - C:\Windows\System32\WinMetadata\Windows.Foundation.winmd - 
             System.Runtime.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.dll - Microsoft Corporation
             UIAutomationProvider.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll - Microsoft Corporation
             igdumdim64.dll - C:\Windows\System32\igdumdim64.dll - Intel Corporation
             d3d9.dll - C:\Windows\System32\d3d9.dll - Microsoft Corporation
             PresentationNative_v0400.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationNative_v0400.dll - Microsoft Corporation
             wpfgfx_v0400.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\wpfgfx_v0400.dll - Microsoft Corporation
             Windows.ApplicationModel.dll - C:\Windows\System32\Windows.ApplicationModel.dll - Microsoft Corporation
             msctfui.dll - C:\Windows\System32\msctfui.dll - Microsoft Corporation
             tpcps.dll - C:\Program Files\Common Files\microsoft shared\ink\tpcps.dll - Microsoft Corporation
             wisp.dll - C:\Windows\System32\wisp.dll - Microsoft Corporation
             PenIMC.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PenIMC.dll - Microsoft Corporation
             icm32.dll - C:\Windows\System32\icm32.dll - Microsoft Corporation
             WindowsCodecsExt.dll - C:\Windows\System32\WindowsCodecsExt.dll - Microsoft Corporation
             mscms.dll - C:\Windows\System32\mscms.dll - Microsoft Corporation
             WinTypes.dll - C:\Windows\System32\WinTypes.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             UIAutomationCore.dll - C:\Windows\System32\UIAutomationCore.dll - Microsoft Corporation
             clrjit.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll - Microsoft Corporation
             mscorlib.ni.dll - C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\1c4f23e80bd4b68fb3f56bdb16dbb647\mscorlib.ni.dll - Microsoft Corporation
             msvcr120_clr0400.dll - C:\Windows\System32\msvcr120_clr0400.dll - Microsoft Corporation
             clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             mscoreei.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll - Microsoft Corporation
             mscoree.dll - C:\Windows\System32\mscoree.dll - Microsoft Corporation
             wininet.dll - C:\Windows\System32\wininet.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\System32\iertutil.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\System32\urlmon.dll - Microsoft Corporation
             version.dll - C:\Windows\System32\version.dll - Microsoft Corporation
             DWrite.dll - C:\Windows\System32\DWrite.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             igdusc64.dll - C:\Windows\System32\igdusc64.dll - Intel Corporation
             dwmapi.dll - C:\Windows\System32\dwmapi.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\Windows\System32\WindowsCodecs.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             userenv.dll - C:\Windows\System32\userenv.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             sxs.dll - C:\Windows\System32\sxs.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             psapi.dll - C:\Windows\System32\psapi.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[QuickGesture64.exe]Modules
             QuickGesture64.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe - ASUSTeK Computer Inc.
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             QuickGesture64.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.dll - ASUSTeK Computer Inc.
             MSVCR100.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\MSVCR100.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             MSIMG32.dll - C:\WINDOWS\SYSTEM32\MSIMG32.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\system32\dwmapi.dll - Microsoft Corporation
             OLEACC.DLL - C:\WINDOWS\SYSTEM32\OLEACC.DLL - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSTEM32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             uiautomationcore.dll - C:\Windows\System32\uiautomationcore.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSTEM32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSTEM32\bcrypt.dll - Microsoft Corporation
             sxs.dll - C:\WINDOWS\SYSTEM32\sxs.dll - Microsoft Corporation
             QuickGesture64.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe - ASUSTeK Computer Inc.
             QuickGesture64.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.dll - ASUSTeK Computer Inc.
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             UIAutomationCore.dll - C:\Windows\System32\UIAutomationCore.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\System32\dwmapi.dll - Microsoft Corporation
             oleacc.dll - C:\Windows\System32\oleacc.dll - Microsoft Corporation
             msimg32.dll - C:\Windows\System32\msimg32.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             sxs.dll - C:\Windows\System32\sxs.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[BtvStack.exe]Modules
             BtvStack.exe - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe - Qualcomm Atheros Commnucations
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             utils.dll - C:\Program Files (x86)\Bluetooth Suite\utils.dll - Qualcomm Atheros Commnucations
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             bthprops.cpl - C:\WINDOWS\SYSTEM32\bthprops.cpl - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSTEM32\WTSAPI32.dll - Microsoft Corporation
             ModuleManager.dll - C:\Program Files (x86)\Bluetooth Suite\ModuleManager.dll - Qualcomm Atheros Commnucations
             MSVCP100.dll - C:\WINDOWS\SYSTEM32\MSVCP100.dll - Microsoft Corporation
             MSVCR100.dll - C:\WINDOWS\SYSTEM32\MSVCR100.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             credui.dll - C:\WINDOWS\SYSTEM32\credui.dll - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSTEM32\Secur32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             RASAPI32.dll - C:\WINDOWS\SYSTEM32\RASAPI32.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\system32\CFGMGR32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSTEM32\DEVOBJ.dll - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             BluetoothApis.dll - C:\WINDOWS\SYSTEM32\BluetoothApis.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             rasman.dll - C:\WINDOWS\SYSTEM32\rasman.dll - Microsoft Corporation
             SSPICLI.DLL - C:\WINDOWS\SYSTEM32\SSPICLI.DLL - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\comctl32.dll - Microsoft Corporation
             ipc.dll - C:\Program Files (x86)\Bluetooth Suite\ipc.dll - Qualcomm Atheros Commnucations
             TCPConnection.dll - C:\Program Files (x86)\Bluetooth Suite\TCPConnection.dll - Qualcomm Atheros Commnucations
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSTEM32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             urlmon.dll - C:\WINDOWS\SYSTEM32\urlmon.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSTEM32\iertutil.dll - Microsoft Corporation
             WININET.dll - C:\WINDOWS\SYSTEM32\WININET.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\system32\dwmapi.dll - Microsoft Corporation
             ActivateDesktopDebugger.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll - 
             rfcommlib.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\RfcommLib\rfcommlib.dll - Qualcomm Atheros Commnucations
             apphelp.dll - C:\WINDOWS\system32\apphelp.dll - Microsoft Corporation
             audio.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\Audio\audio.dll - Qualcomm Atheros Commnucations
             Handsfree.dll - C:\Program Files (x86)\Bluetooth Suite\Handsfree.dll - Qualcomm Atheros Commnucations
             DSOUND.dll - C:\WINDOWS\SYSTEM32\DSOUND.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSTEM32\WINMM.dll - Microsoft Corporation
             mfc100u.dll - C:\WINDOWS\SYSTEM32\mfc100u.dll - Microsoft Corporation
             ATL100.DLL - C:\WINDOWS\SYSTEM32\ATL100.DLL - Microsoft Corporation
             POWRPROF.dll - C:\WINDOWS\SYSTEM32\POWRPROF.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSTEM32\WINMMBASE.dll - Microsoft Corporation
             MSIMG32.dll - C:\WINDOWS\SYSTEM32\MSIMG32.dll - Microsoft Corporation
             MFC100ENU.DLL - C:\WINDOWS\SYSTEM32\MFC100ENU.DLL - Microsoft Corporation
             Fax.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\FAX\Fax.dll - Qualcomm Atheros Commnucations
             l2caplib.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\L2capLib\l2caplib.dll - Qualcomm Atheros Commnucations
             sesmgr.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\SesMgr\sesmgr.dll - Qualcomm Atheros Commnucations
             propsys.dll - C:\WINDOWS\system32\propsys.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSTEM32\profapi.dll - Microsoft Corporation
             goep.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\goep\goep.dll - Qualcomm Atheros Commnucations
             BIP.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\BIP\BIP.dll - Qualcomm Atheros Commnucations
             gdiplus.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_9332526147499ed1\gdiplus.dll - Microsoft Corporation
             DId.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\DID\DId.dll - Qualcomm Atheros Commnucations
             BPP.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\BasicPrintProfile\BPP.dll - Qualcomm Atheros Commnucations
             COMDLG32.dll - C:\WINDOWS\system32\COMDLG32.dll - Microsoft Corporation
             GapSdp.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\GapSdp\GapSdp.dll - Qualcomm Atheros Commnucations
             HDP.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\HealthDevice\HDP.dll - Qualcomm Atheros Commnucations
             WINTRUST.dll - C:\WINDOWS\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             spp.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\spp\spp.dll - Qualcomm Atheros Commnucations
             LE.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\LE\LE.dll - Qualcomm Atheros Commnucations
             gatts.DLL - C:\Program Files (x86)\Bluetooth Suite\gatts.DLL - Qualcomm Atheros Commnucations
             IPHLPAPI.DLL - C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL - Microsoft Corporation
             WSOCK32.dll - C:\WINDOWS\SYSTEM32\WSOCK32.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSTEM32\WINNSI.DLL - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSTEM32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSTEM32\bcrypt.dll - Microsoft Corporation
             GattI.dll - C:\Program Files (x86)\Bluetooth Suite\GattI.dll - Qualcomm Atheros Commnucations
             sxs.dll - C:\WINDOWS\SYSTEM32\sxs.dll - Microsoft Corporation
             sap.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\sap\sap.dll - Qualcomm Atheros Commnucations
             pbap.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\pbap\pbap.dll - Qualcomm Atheros Commnucations
             FileTransfer.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\FileTransfer\FileTransfer.dll - Qualcomm Atheros Commnucations
             OutlookLib.dll - C:\Program Files (x86)\Bluetooth Suite\OutlookLib.dll - Qualcomm Atheros Commnucations
             Hcrp.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\HCRP\Hcrp.dll - Qualcomm Atheros Commnucations
             WINSPOOL.DRV - C:\WINDOWS\SYSTEM32\WINSPOOL.DRV - Microsoft Corporation
             OppOperation.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\OppOperation\OppOperation.dll - Qualcomm Atheros Commnucations
             Sync.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\Sync\Sync.dll - Qualcomm Atheros Commnucations
             WINSTA.dll - C:\WINDOWS\SYSTEM32\WINSTA.dll - Microsoft Corporation
             wshBth.dll - C:\WINDOWS\System32\wshBth.dll - Microsoft Corporation
             ObjPush.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\OppOperation\ObjPush.dll - Qualcomm Atheros Commnucations
             napinsp.dll - C:\WINDOWS\system32\napinsp.dll - Microsoft Corporation
             pnrpnsp.dll - C:\WINDOWS\system32\pnrpnsp.dll - Microsoft Corporation
             NLAapi.dll - C:\WINDOWS\system32\NLAapi.dll - Microsoft Corporation
             DNSAPI.dll - C:\WINDOWS\SYSTEM32\DNSAPI.dll - Microsoft Corporation
             winrnr.dll - C:\WINDOWS\System32\winrnr.dll - Microsoft Corporation
             BtvStack.exe - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe - Qualcomm Atheros Commnucations
             wsock32.dll - C:\Windows\System32\wsock32.dll - Microsoft Corporation
             Handsfree.dll - C:\Program Files (x86)\Bluetooth Suite\Handsfree.dll - Qualcomm Atheros Commnucations
             Audio.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\Audio\Audio.dll - Qualcomm Atheros Commnucations
             RfcommLib.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\RfcommLib\RfcommLib.dll - Qualcomm Atheros Commnucations
             gatts.dll - C:\Program Files (x86)\Bluetooth Suite\gatts.dll - Qualcomm Atheros Commnucations
             LE.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\LE\LE.dll - Qualcomm Atheros Commnucations
             spp.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\spp\spp.dll - Qualcomm Atheros Commnucations
             HDP.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\HealthDevice\HDP.dll - Qualcomm Atheros Commnucations
             OutLookLib.dll - C:\Program Files (x86)\Bluetooth Suite\OutLookLib.dll - Qualcomm Atheros Commnucations
             ObjPush.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\OppOperation\ObjPush.dll - Qualcomm Atheros Commnucations
             Sync.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\Sync\Sync.dll - Qualcomm Atheros Commnucations
             OppOperation.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\OppOperation\OppOperation.dll - Qualcomm Atheros Commnucations
             FileTransfer.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\FileTransfer\FileTransfer.dll - Qualcomm Atheros Commnucations
             pbap.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\pbap\pbap.dll - Qualcomm Atheros Commnucations
             sap.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\sap\sap.dll - Qualcomm Atheros Commnucations
             GapSdp.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\GapSdp\GapSdp.dll - Qualcomm Atheros Commnucations
             BPP.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\BasicPrintProfile\BPP.dll - Qualcomm Atheros Commnucations
             BIP.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\BIP\BIP.dll - Qualcomm Atheros Commnucations
             goep.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\goep\goep.dll - Qualcomm Atheros Commnucations
             SesMgr.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\SesMgr\SesMgr.dll - Qualcomm Atheros Commnucations
             L2capLib.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\L2capLib\L2capLib.dll - Qualcomm Atheros Commnucations
             ActivateDesktopDebugger.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll - 
             DId.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\DID\DId.dll - Qualcomm Atheros Commnucations
             Fax.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\FAX\Fax.dll - Qualcomm Atheros Commnucations
             TCPConnection.dll - C:\Program Files (x86)\Bluetooth Suite\TCPConnection.dll - Qualcomm Atheros Commnucations
             ipc.dll - C:\Program Files (x86)\Bluetooth Suite\ipc.dll - Qualcomm Atheros Commnucations
             credui.dll - C:\Windows\System32\credui.dll - Microsoft Corporation
             utils.dll - C:\Program Files (x86)\Bluetooth Suite\utils.dll - Qualcomm Atheros Commnucations
             dsound.dll - C:\Windows\System32\dsound.dll - Microsoft Corporation
             GattI.dll - C:\Program Files (x86)\Bluetooth Suite\GattI.dll - Qualcomm Atheros Commnucations
             ModuleManager.dll - C:\Program Files (x86)\Bluetooth Suite\ModuleManager.dll - Qualcomm Atheros Commnucations
             winmmbase.dll - C:\Windows\System32\winmmbase.dll - Microsoft Corporation
             winmm.dll - C:\Windows\System32\winmm.dll - Microsoft Corporation
             Hcrp.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\HCRP\Hcrp.dll - Qualcomm Atheros Commnucations
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             NapiNSP.dll - C:\Windows\System32\NapiNSP.dll - Microsoft Corporation
             pnrpnsp.dll - C:\Windows\System32\pnrpnsp.dll - Microsoft Corporation
             winrnr.dll - C:\Windows\System32\winrnr.dll - Microsoft Corporation
             wshbth.dll - C:\Windows\System32\wshbth.dll - Microsoft Corporation
             winspool.drv - C:\Windows\System32\winspool.drv - Microsoft Corporation
             wininet.dll - C:\Windows\System32\wininet.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\System32\iertutil.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\System32\urlmon.dll - Microsoft Corporation
             winnsi.dll - C:\Windows\System32\winnsi.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             nlaapi.dll - C:\Windows\System32\nlaapi.dll - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             rasman.dll - C:\Windows\System32\rasman.dll - Microsoft Corporation
             rasapi32.dll - C:\Windows\System32\rasapi32.dll - Microsoft Corporation
             BluetoothApis.dll - C:\Windows\System32\BluetoothApis.dll - Microsoft Corporation
             bthprops.cpl - C:\Windows\System32\bthprops.cpl - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             secur32.dll - C:\Windows\System32\secur32.dll - Microsoft Corporation
             comctl32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\comctl32.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\System32\dwmapi.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             msimg32.dll - C:\Windows\System32\msimg32.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\System32\apphelp.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             dnsapi.dll - C:\Windows\System32\dnsapi.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             sxs.dll - C:\Windows\System32\sxs.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             wintrust.dll - C:\Windows\System32\wintrust.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             comdlg32.dll - C:\Windows\System32\comdlg32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             GdiPlus.dll - C:\Windows\System32\GdiPlus.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[wininit.exe]Modules
             wininit.exe - C:\WINDOWS\system32\wininit.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\system32\profapi.dll - Microsoft Corporation
             wininitext.dll - C:\WINDOWS\SYSTEM32\wininitext.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             sspicli.dll - C:\WINDOWS\system32\sspicli.dll - Microsoft Corporation
             wininit.exe - C:\Windows\System32\wininit.exe - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             wininitext.dll - C:\Windows\System32\wininitext.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[explorer.exe]Modules
             explorer.exe - C:\WINDOWS\explorer.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             apphelp.dll - C:\WINDOWS\system32\apphelp.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             advapi32.dll - C:\WINDOWS\SYSTEM32\advapi32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             UxTheme.dll - C:\WINDOWS\SYSTEM32\UxTheme.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\SYSTEM32\dwmapi.dll - Microsoft Corporation
             TWINAPI.dll - C:\WINDOWS\SYSTEM32\TWINAPI.dll - Microsoft Corporation
             d3d11.dll - C:\WINDOWS\SYSTEM32\d3d11.dll - Microsoft Corporation
             dcomp.dll - C:\WINDOWS\SYSTEM32\dcomp.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSTEM32\SspiCli.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSTEM32\USERENV.dll - Microsoft Corporation
             PROPSYS.dll - C:\WINDOWS\SYSTEM32\PROPSYS.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             SLC.dll - C:\WINDOWS\SYSTEM32\SLC.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSTEM32\profapi.dll - Microsoft Corporation
             dxgi.dll - C:\WINDOWS\SYSTEM32\dxgi.dll - Microsoft Corporation
             sppc.dll - C:\WINDOWS\SYSTEM32\sppc.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSTEM32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSTEM32\WINSTA.dll - Microsoft Corporation
             Bcp47Langs.dll - C:\WINDOWS\SYSTEM32\Bcp47Langs.dll - Microsoft Corporation
             IDStore.dll - C:\WINDOWS\System32\IDStore.dll - Microsoft Corporation
             SAMLIB.dll - C:\WINDOWS\System32\SAMLIB.dll - Microsoft Corporation
             SETTINGSYNCPOLICY.dll - C:\WINDOWS\SYSTEM32\SETTINGSYNCPOLICY.dll - Microsoft Corporation
             DUI70.dll - C:\WINDOWS\SYSTEM32\DUI70.dll - Microsoft Corporation
             wkscli.dll - C:\WINDOWS\SYSTEM32\wkscli.dll - Microsoft Corporation
             Comctl32.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\Comctl32.dll - Microsoft Corporation
             netutils.dll - C:\WINDOWS\SYSTEM32\netutils.dll - Microsoft Corporation
             DUser.dll - C:\WINDOWS\SYSTEM32\DUser.dll - Microsoft Corporation
             SndVolSSO.DLL - C:\WINDOWS\SYSTEM32\SndVolSSO.DLL - Microsoft Corporation
             HID.DLL - C:\WINDOWS\SYSTEM32\HID.DLL - Microsoft Corporation
             themeui.dll - C:\WINDOWS\system32\themeui.dll - Microsoft Corporation
             MMDevApi.dll - C:\WINDOWS\System32\MMDevApi.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\System32\DEVOBJ.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSTEM32\cfgmgr32.dll - Microsoft Corporation
             OLEACC.dll - C:\WINDOWS\SYSTEM32\OLEACC.dll - Microsoft Corporation
             D3D10Warp.dll - C:\WINDOWS\SYSTEM32\D3D10Warp.dll - Microsoft Corporation
             Windows.UI.Immersive.dll - C:\Windows\System32\Windows.UI.Immersive.dll - Microsoft Corporation
             twinui.dll - C:\WINDOWS\system32\twinui.dll - Microsoft Corporation
             twinapi.appcore.dll - C:\WINDOWS\SYSTEM32\twinapi.appcore.dll - Microsoft Corporation
             XmlLite.dll - C:\WINDOWS\system32\XmlLite.dll - Microsoft Corporation
             ntmarta.dll - C:\WINDOWS\SYSTEM32\ntmarta.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSTEM32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSTEM32\bcrypt.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             windowscodecs.dll - C:\WINDOWS\system32\windowscodecs.dll - Microsoft Corporation
             explorerframe.dll - C:\WINDOWS\system32\explorerframe.dll - Microsoft Corporation
             tabbtn.dll - C:\WINDOWS\SYSTEM32\tabbtn.dll - Microsoft Corporation
             TabBtnEx.dll - C:\Windows\System32\TabBtnEx.dll - Microsoft Corporation
             windows.immersiveshell.serviceprovider.dll - C:\Windows\System32\windows.immersiveshell.serviceprovider.dll - Microsoft Corporation
             mscoree.dll - C:\WINDOWS\SYSTEM32\mscoree.dll - Microsoft Corporation
             mscoreei.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll - Microsoft Corporation
             sxs.dll - C:\WINDOWS\SYSTEM32\sxs.dll - Microsoft Corporation
             mscorwks.dll - C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll - Microsoft Corporation
             MSVCR80.dll - C:\WINDOWS\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.8428_none_88dcdb0b2fb19957\MSVCR80.dll - Microsoft Corporation
             mscorlib.dll - C:\WINDOWS\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll - Microsoft Corporation
             mscorjit.dll - C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll - Microsoft Corporation
             BatteryBar.dll - C:\Program Files\BatteryBar\BatteryBar.dll - Osiris Development
             System.Windows.Forms.dll - C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - Microsoft Corporation
             System.dll - C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSTEM32\VERSION.dll - Microsoft Corporation
             System.Drawing.dll - C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - Microsoft Corporation
             BatteryBar.Utilities.dll - C:\Program Files\BatteryBar\BatteryBar.Utilities.dll - Osiris Development
             Accessibility.dll - C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - Microsoft Corporation
             diasymreader.dll - C:\Windows\Microsoft.NET\Framework64\v2.0.50727\diasymreader.dll - Microsoft Corporation
             System.Xml.dll - C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.dll - Microsoft Corporation
             System.Configuration.dll - C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll - Microsoft Corporation
             shfolder.dll - C:\WINDOWS\SYSTEM32\shfolder.dll - Microsoft Corporation
             mscorlib.resources.dll - C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_cs_b77a5c561934e089\mscorlib.resources.dll - Microsoft Corporation
             System.Management.dll - C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll - Microsoft Corporation
             wminet_utils.dll - C:\Windows\Microsoft.NET\Framework64\v2.0.50727\wminet_utils.dll - Microsoft Corporation
             setupapi.dll - C:\WINDOWS\system32\setupapi.dll - Microsoft Corporation
             wmiutils.dll - C:\WINDOWS\system32\wbem\wmiutils.dll - Microsoft Corporation
             wbemcomn.dll - C:\WINDOWS\SYSTEM32\wbemcomn.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             wbemprox.dll - C:\WINDOWS\system32\wbem\wbemprox.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             gdiplus.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_9332526147499ed1\gdiplus.dll - Microsoft Corporation
             DWrite.dll - C:\WINDOWS\SYSTEM32\DWrite.dll - Microsoft Corporation
             TipBand.dll - C:\Program Files\Common Files\microsoft shared\ink\TipBand.dll - Microsoft Corporation
             System.Web.Services.dll - C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - Microsoft Corporation
             WLDP.DLL - C:\WINDOWS\SYSTEM32\WLDP.DLL - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSTEM32\WTSAPI32.dll - Microsoft Corporation
             twinui.appcore.dll - C:\WINDOWS\System32\twinui.appcore.dll - Microsoft Corporation
             wpncore.dll - C:\WINDOWS\System32\wpncore.dll - Microsoft Corporation
             UIAnimation.dll - C:\WINDOWS\System32\UIAnimation.dll - Microsoft Corporation
             igd10iumd64.dll - C:\WINDOWS\SYSTEM32\igd10iumd64.dll - Intel Corporation
             ncrypt.dll - C:\WINDOWS\SYSTEM32\ncrypt.dll - Microsoft Corporation
             NTASN1.dll - C:\WINDOWS\SYSTEM32\NTASN1.dll - Microsoft Corporation
             igdusc64.dll - C:\WINDOWS\SYSTEM32\igdusc64.dll - Intel Corporation
             wlidprov.dll - C:\WINDOWS\System32\wlidprov.dll - Microsoft Corporation
             samcli.dll - C:\Windows\System32\samcli.dll - Microsoft Corporation
             thumbcache.dll - C:\Windows\System32\thumbcache.dll - Microsoft Corporation
             Windows.Networking.Connectivity.dll - C:\Windows\System32\Windows.Networking.Connectivity.dll - Microsoft Corporation
             InputSwitch.dll - C:\Windows\System32\InputSwitch.dll - Microsoft Corporation
             MsftEdit.dll - C:\WINDOWS\SYSTEM32\MsftEdit.dll - Microsoft Corporation
             MSIMG32.dll - C:\WINDOWS\SYSTEM32\MSIMG32.dll - Microsoft Corporation
             Windows.Globalization.dll - C:\Windows\System32\Windows.Globalization.dll - Microsoft Corporation
             globinputhost.dll - C:\WINDOWS\SYSTEM32\globinputhost.dll - Microsoft Corporation
             NInput.dll - C:\WINDOWS\SYSTEM32\NInput.dll - Microsoft Corporation
             stobject.dll - C:\WINDOWS\system32\stobject.dll - Microsoft Corporation
             BatMeter.dll - C:\WINDOWS\system32\BatMeter.dll - Microsoft Corporation
             WININET.dll - C:\WINDOWS\System32\WININET.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\System32\iertutil.dll - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSTEM32\Secur32.dll - Microsoft Corporation
             npmproxy.dll - C:\WINDOWS\System32\npmproxy.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - C:\Windows\System32\WINNSI.DLL - Microsoft Corporation
             wlanapi.dll - C:\WINDOWS\SYSTEM32\wlanapi.dll - Microsoft Corporation
             WinTypes.dll - C:\Windows\System32\WinTypes.dll - Microsoft Corporation
             netprofm.dll - C:\WINDOWS\System32\netprofm.dll - Microsoft Corporation
             es.dll - C:\WINDOWS\system32\es.dll - Microsoft Corporation
             prnfldr.dll - C:\WINDOWS\system32\prnfldr.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\system32\WINSPOOL.DRV - Microsoft Corporation
             wevtapi.dll - C:\WINDOWS\system32\wevtapi.dll - Microsoft Corporation
             AUDIOSES.DLL - C:\WINDOWS\SYSTEM32\AUDIOSES.DLL - Microsoft Corporation
             dxp.dll - C:\WINDOWS\system32\dxp.dll - Microsoft Corporation
             SHDOCVW.dll - C:\WINDOWS\system32\SHDOCVW.dll - Microsoft Corporation
             Syncreg.dll - C:\WINDOWS\system32\Syncreg.dll - Microsoft Corporation
             wcmapi.dll - C:\Windows\System32\wcmapi.dll - Microsoft Corporation
             AltTab.dll - C:\WINDOWS\System32\AltTab.dll - Microsoft Corporation
             authui.dll - C:\WINDOWS\system32\authui.dll - Microsoft Corporation
             wpdshserviceobj.dll - C:\WINDOWS\system32\wpdshserviceobj.dll - Microsoft Corporation
             PortableDeviceTypes.dll - C:\Windows\System32\PortableDeviceTypes.dll - Microsoft Corporation
             PortableDeviceApi.dll - C:\Windows\System32\PortableDeviceApi.dll - Microsoft Corporation
             SqmApi.dll - C:\Program Files\Windows Portable Devices\SqmApi.dll - Microsoft Corporation
             taskschd.dll - C:\Windows\System32\taskschd.dll - Microsoft Corporation
             pnidui.dll - C:\WINDOWS\System32\pnidui.dll - Microsoft Corporation
             NetworkStatus.dll - C:\WINDOWS\system32\NetworkStatus.dll - Microsoft Corporation
             dhcpcsvc6.DLL - C:\Windows\System32\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - C:\Windows\System32\dhcpcsvc.DLL - Microsoft Corporation
             SettingMonitor.dll - C:\WINDOWS\system32\SettingMonitor.dll - Microsoft Corporation
             srchadmin.dll - C:\WINDOWS\System32\srchadmin.dll - Microsoft Corporation
             CSCAPI.dll - C:\WINDOWS\System32\CSCAPI.dll - Microsoft Corporation
             mssprxy.dll - C:\WINDOWS\system32\mssprxy.dll - Microsoft Corporation
             shacct.dll - C:\WINDOWS\System32\shacct.dll - Microsoft Corporation
             bthprops.cpl - C:\Windows\System32\bthprops.cpl - Microsoft Corporation
             BluetoothApis.dll - C:\Windows\System32\BluetoothApis.dll - Microsoft Corporation
             SyncCenter.dll - C:\WINDOWS\System32\SyncCenter.dll - Microsoft Corporation
             Actioncenter.dll - C:\WINDOWS\System32\Actioncenter.dll - Microsoft Corporation
             imapi2.dll - C:\Windows\System32\imapi2.dll - Microsoft Corporation
             hgcpl.dll - C:\WINDOWS\System32\hgcpl.dll - Microsoft Corporation
             provsvc.dll - C:\WINDOWS\System32\provsvc.dll - Microsoft Corporation
             ntshrui.dll - C:\WINDOWS\SYSTEM32\ntshrui.dll - Microsoft Corporation
             srvcli.dll - C:\WINDOWS\SYSTEM32\srvcli.dll - Microsoft Corporation
             IconCodecService.dll - C:\WINDOWS\system32\IconCodecService.dll - Microsoft Corporation
             gameux.dll - C:\Windows\System32\gameux.dll - Microsoft Corporation
             LINKINFO.dll - C:\WINDOWS\SYSTEM32\LINKINFO.dll - Microsoft Corporation
             NetworkExplorer.dll - C:\WINDOWS\system32\NetworkExplorer.dll - Microsoft Corporation
             msiltcfg.dll - C:\WINDOWS\SYSTEM32\msiltcfg.dll - Microsoft Corporation
             msi.dll - C:\WINDOWS\SYSTEM32\msi.dll - Microsoft Corporation
             PhotoMetadataHandler.dll - C:\WINDOWS\SYSTEM32\PhotoMetadataHandler.dll - Microsoft Corporation
             ashShA64.dll - C:\Program Files\AVAST Software\Avast\ashShA64.dll - AVAST Software
             ASUSWSShellExt64.dll - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.10.123\ASUSWSShellExt64.dll - ASUS Cloud Corporation.
             EhStorShell.dll - C:\Windows\System32\EhStorShell.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\System32\urlmon.dll - Microsoft Corporation
             MrmCoreR.dll - C:\WINDOWS\SYSTEM32\MrmCoreR.dll - Microsoft Corporation
             pcacli.dll - C:\WINDOWS\SYSTEM32\pcacli.dll - Microsoft Corporation
             MPR.dll - C:\WINDOWS\SYSTEM32\MPR.dll - Microsoft Corporation
             sfc_os.dll - C:\WINDOWS\System32\sfc_os.dll - Microsoft Corporation
             DEVRTL.dll - C:\WINDOWS\SYSTEM32\DEVRTL.dll - Microsoft Corporation
             dlnashext.dll - C:\Windows\System32\dlnashext.dll - Microsoft Corporation
             ieframe.dll - C:\Windows\System32\ieframe.dll - Microsoft Corporation
             MLANG.dll - C:\WINDOWS\SYSTEM32\MLANG.dll - Microsoft Corporation
             wbemsvc.dll - C:\WINDOWS\system32\wbem\wbemsvc.dll - Microsoft Corporation
             fastprox.dll - C:\WINDOWS\system32\wbem\fastprox.dll - Microsoft Corporation
             rasapi32.dll - C:\WINDOWS\SYSTEM32\rasapi32.dll - Microsoft Corporation
             rasman.dll - C:\WINDOWS\SYSTEM32\rasman.dll - Microsoft Corporation
             rtutils.dll - C:\WINDOWS\SYSTEM32\rtutils.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             System.resources.dll - C:\WINDOWS\assembly\GAC_MSIL\System.resources\2.0.0.0_cs_b77a5c561934e089\System.resources.dll - Microsoft Corporation
             winhttp.dll - C:\WINDOWS\SYSTEM32\winhttp.dll - Microsoft Corporation
             DNSAPI.dll - C:\Windows\System32\DNSAPI.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\System32\rasadhlp.dll - Microsoft Corporation
             fwpuclnt.dll - C:\WINDOWS\System32\fwpuclnt.dll - Microsoft Corporation
             zipfldr.dll - C:\WINDOWS\system32\zipfldr.dll - Microsoft Corporation
             rarext.dll - C:\Program Files\WinRAR\rarext.dll - Alexander Roshal
             CHARTV.dll - C:\WINDOWS\SYSTEM32\CHARTV.dll - Microsoft Corporation
             FolderViewImpl.dll - C:\Program Files (x86)\Bluetooth Suite\FolderViewImpl.dll - Qualcomm Atheros Commnucations
             COMDLG32.dll - C:\WINDOWS\system32\COMDLG32.dll - Microsoft Corporation
             MSVCR100.dll - C:\WINDOWS\SYSTEM32\MSVCR100.dll - Microsoft Corporation
             MSVCP100.dll - C:\WINDOWS\SYSTEM32\MSVCP100.dll - Microsoft Corporation
             utils.dll - C:\Program Files (x86)\Bluetooth Suite\utils.dll - Qualcomm Atheros Commnucations
             CommApi.dll - C:\Program Files (x86)\Bluetooth Suite\CommApi.dll - Qualcomm Atheros Commnucations
             credui.dll - C:\WINDOWS\SYSTEM32\credui.dll - Microsoft Corporation
             ipc.dll - C:\Program Files (x86)\Bluetooth Suite\ipc.dll - Qualcomm Atheros Commnucations
             TCPConnection.dll - C:\Program Files (x86)\Bluetooth Suite\TCPConnection.dll - Qualcomm Atheros Commnucations
             UIRibbon.dll - C:\WINDOWS\system32\UIRibbon.dll - Microsoft Corporation
             UIRibbonRes.dll - C:\WINDOWS\SYSTEM32\UIRibbonRes.dll - Microsoft Corporation
             uiautomationcore.dll - C:\Windows\System32\uiautomationcore.dll - Microsoft Corporation
             WorkFoldersShell.dll - C:\Windows\System32\WorkFoldersShell.dll - Microsoft Corporation
             drprov.dll - C:\WINDOWS\System32\drprov.dll - Microsoft Corporation
             ntlanman.dll - C:\WINDOWS\System32\ntlanman.dll - Microsoft Corporation
             davclnt.dll - C:\WINDOWS\System32\davclnt.dll - Microsoft Corporation
             DAVHLPR.dll - C:\WINDOWS\System32\DAVHLPR.dll - Microsoft Corporation
             PlayToDevice.dll - C:\Windows\System32\PlayToDevice.dll - Microsoft Corporation
             StructuredQuery.dll - C:\WINDOWS\System32\StructuredQuery.dll - Microsoft Corporation
             DevDispItemProvider.dll - C:\Windows\System32\DevDispItemProvider.dll - Microsoft Corporation
             wpdshext.dll - C:\WINDOWS\system32\wpdshext.dll - Microsoft Corporation
             EhStorAPI.dll - C:\Windows\System32\EhStorAPI.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\system32\WINMM.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\system32\WINMMBASE.dll - Microsoft Corporation
             apprepapi.dll - C:\WINDOWS\system32\apprepapi.dll - Microsoft Corporation
             tbs.dll - C:\WINDOWS\system32\tbs.dll - Microsoft Corporation
             imagehlp.dll - C:\WINDOWS\system32\imagehlp.dll - Microsoft Corporation
             gpapi.dll - C:\WINDOWS\SYSTEM32\gpapi.dll - Microsoft Corporation
             cryptnet.dll - C:\Windows\System32\cryptnet.dll - Microsoft Corporation
             WLDAP32.dll - C:\WINDOWS\system32\WLDAP32.dll - Microsoft Corporation
             webio.dll - C:\WINDOWS\SYSTEM32\webio.dll - Microsoft Corporation
             NETAPI32.dll - C:\WINDOWS\system32\NETAPI32.dll - Microsoft Corporation
             webservices.dll - C:\WINDOWS\system32\webservices.dll - Microsoft Corporation
             ondemandconnroutehelper.dll - C:\WINDOWS\SYSTEM32\ondemandconnroutehelper.dll - Microsoft Corporation
             schannel.DLL - C:\WINDOWS\system32\schannel.DLL - Microsoft Corporation
             ncryptsslp.dll - C:\WINDOWS\system32\ncryptsslp.dll - Microsoft Corporation
             msxml6.dll - C:\Windows\System32\msxml6.dll - Microsoft Corporation
             Accessibility.dll - C:\Windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - Microsoft Corporation
             System.configuration.dll - C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll - Microsoft Corporation
             BatteryBar.dll - C:\Program Files\BatteryBar\BatteryBar.dll - Osiris Development
             mscorlib.dll - C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll - Microsoft Corporation
             System.Windows.Forms.dll - C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - Microsoft Corporation
             System.dll - C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll - Microsoft Corporation
             System.Drawing.dll - C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - Microsoft Corporation
             BatteryBar.Utilities.dll - C:\Program Files\BatteryBar\BatteryBar.Utilities.dll - Osiris Development
             System.XML.dll - C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll - Microsoft Corporation
             mscorlib.resources.dll - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_cs_b77a5c561934e089\mscorlib.resources.dll - Microsoft Corporation
             System.Management.dll - C:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll - Microsoft Corporation
             System.Web.Services.dll - C:\Windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - Microsoft Corporation
             system.resources.dll - C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_cs_b77a5c561934e089\system.resources.dll - Microsoft Corporation
             explorer.exe - C:\Windows\explorer.exe - Microsoft Corporation
             TCPConnection.dll - C:\Program Files (x86)\Bluetooth Suite\TCPConnection.dll - Qualcomm Atheros Commnucations
             ipc.dll - C:\Program Files (x86)\Bluetooth Suite\ipc.dll - Qualcomm Atheros Commnucations
             credui.dll - C:\Windows\System32\credui.dll - Microsoft Corporation
             utils.dll - C:\Program Files (x86)\Bluetooth Suite\utils.dll - Qualcomm Atheros Commnucations
             UIRibbon.dll - C:\Windows\System32\UIRibbon.dll - Microsoft Corporation
             WinTypes.dll - C:\Windows\System32\WinTypes.dll - Microsoft Corporation
             StructuredQuery.dll - C:\Windows\System32\StructuredQuery.dll - Microsoft Corporation
             FolderViewImpl.dll - C:\Program Files (x86)\Bluetooth Suite\FolderViewImpl.dll - Qualcomm Atheros Commnucations
             RarExt.dll - C:\Program Files\WinRAR\RarExt.dll - Alexander Roshal
             zipfldr.dll - C:\Windows\System32\zipfldr.dll - Microsoft Corporation
             ieframe.dll - C:\Windows\System32\ieframe.dll - Microsoft Corporation
             msi.dll - C:\Windows\System32\msi.dll - Microsoft Corporation
             SyncCenter.dll - C:\Windows\System32\SyncCenter.dll - Microsoft Corporation
             authui.dll - C:\Windows\System32\authui.dll - Microsoft Corporation
             msftedit.dll - C:\Windows\System32\msftedit.dll - Microsoft Corporation
             pcacli.dll - C:\Windows\System32\pcacli.dll - Microsoft Corporation
             ntshrui.dll - C:\Windows\System32\ntshrui.dll - Microsoft Corporation
             chartv.dll - C:\Windows\System32\chartv.dll - Microsoft Corporation
             wpdshext.dll - C:\Windows\System32\wpdshext.dll - Microsoft Corporation
             networkexplorer.dll - C:\Windows\System32\networkexplorer.dll - Microsoft Corporation
             gameux.dll - C:\Windows\System32\gameux.dll - Microsoft Corporation
             dlnashext.dll - C:\Windows\System32\dlnashext.dll - Microsoft Corporation
             hgcpl.dll - C:\Windows\System32\hgcpl.dll - Microsoft Corporation
             imapi2.dll - C:\Windows\System32\imapi2.dll - Microsoft Corporation
             wlidprov.dll - C:\Windows\System32\wlidprov.dll - Microsoft Corporation
             mlang.dll - C:\Windows\System32\mlang.dll - Microsoft Corporation
             ActionCenter.dll - C:\Windows\System32\ActionCenter.dll - Microsoft Corporation
             srchadmin.dll - C:\Windows\System32\srchadmin.dll - Microsoft Corporation
             batmeter.dll - C:\Windows\System32\batmeter.dll - Microsoft Corporation
             mscorwks.dll - C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll - Microsoft Corporation
             ExplorerFrame.dll - C:\Windows\System32\ExplorerFrame.dll - Microsoft Corporation
             twinui.dll - C:\Windows\System32\twinui.dll - Microsoft Corporation
             pnidui.dll - C:\Windows\System32\pnidui.dll - Microsoft Corporation
             mpr.dll - C:\Windows\System32\mpr.dll - Microsoft Corporation
             cryptnet.dll - C:\Windows\System32\cryptnet.dll - Microsoft Corporation
             ncryptsslp.dll - C:\Windows\System32\ncryptsslp.dll - Microsoft Corporation
             provsvc.dll - C:\Windows\System32\provsvc.dll - Microsoft Corporation
             winmmbase.dll - C:\Windows\System32\winmmbase.dll - Microsoft Corporation
             winmm.dll - C:\Windows\System32\winmm.dll - Microsoft Corporation
             DevDispItemProvider.dll - C:\Windows\System32\DevDispItemProvider.dll - Microsoft Corporation
             PlayToDevice.dll - C:\Windows\System32\PlayToDevice.dll - Microsoft Corporation
             CommApi.dll - C:\Program Files (x86)\Bluetooth Suite\CommApi.dll - Qualcomm Atheros Commnucations
             sqmapi.dll - C:\Program Files\Windows Portable Devices\sqmapi.dll - Microsoft Corporation
             PortableDeviceTypes.dll - C:\Windows\System32\PortableDeviceTypes.dll - Microsoft Corporation
             wmiutils.dll - C:\Windows\System32\wbem\wmiutils.dll - Microsoft Corporation
             wbemsvc.dll - C:\Windows\System32\wbem\wbemsvc.dll - Microsoft Corporation
             fastprox.dll - C:\Windows\System32\wbem\fastprox.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             apprepapi.dll - C:\Windows\System32\apprepapi.dll - Microsoft Corporation
             EhStorAPI.dll - C:\Windows\System32\EhStorAPI.dll - Microsoft Corporation
             UIRibbonRes.dll - C:\Windows\System32\UIRibbonRes.dll - Microsoft Corporation
             PhotoMetadataHandler.dll - C:\Windows\System32\PhotoMetadataHandler.dll - Microsoft Corporation
             SettingMonitor.dll - C:\Windows\System32\SettingMonitor.dll - Microsoft Corporation
             twinapi.dll - C:\Windows\System32\twinapi.dll - Microsoft Corporation
             davclnt.dll - C:\Windows\System32\davclnt.dll - Microsoft Corporation
             prnfldr.dll - C:\Windows\System32\prnfldr.dll - Microsoft Corporation
             AudioSes.dll - C:\Windows\System32\AudioSes.dll - Microsoft Corporation
             DXP.dll - C:\Windows\System32\DXP.dll - Microsoft Corporation
             Windows.Globalization.dll - C:\Windows\System32\Windows.Globalization.dll - Microsoft Corporation
             twinui.appcore.dll - C:\Windows\System32\twinui.appcore.dll - Microsoft Corporation
             themeui.dll - C:\Windows\System32\themeui.dll - Microsoft Corporation
             wbemprox.dll - C:\Windows\System32\wbem\wbemprox.dll - Microsoft Corporation
             PortableDeviceApi.dll - C:\Windows\System32\PortableDeviceApi.dll - Microsoft Corporation
             stobject.dll - C:\Windows\System32\stobject.dll - Microsoft Corporation
             mscorjit.dll - C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll - Microsoft Corporation
             ntlanman.dll - C:\Windows\System32\ntlanman.dll - Microsoft Corporation
             OnDemandConnRouteHelper.dll - C:\Windows\System32\OnDemandConnRouteHelper.dll - Microsoft Corporation
             mssprxy.dll - C:\Windows\System32\mssprxy.dll - Microsoft Corporation
             netprofm.dll - C:\Windows\System32\netprofm.dll - Microsoft Corporation
             IDStore.dll - C:\Windows\System32\IDStore.dll - Microsoft Corporation
             UIAutomationCore.dll - C:\Windows\System32\UIAutomationCore.dll - Microsoft Corporation
             shdocvw.dll - C:\Windows\System32\shdocvw.dll - Microsoft Corporation
             Windows.UI.Immersive.dll - C:\Windows\System32\Windows.UI.Immersive.dll - Microsoft Corporation
             shacct.dll - C:\Windows\System32\shacct.dll - Microsoft Corporation
             webio.dll - C:\Windows\System32\webio.dll - Microsoft Corporation
             WorkFoldersShell.dll - C:\Windows\System32\WorkFoldersShell.dll - Microsoft Corporation
             cscapi.dll - C:\Windows\System32\cscapi.dll - Microsoft Corporation
             devrtl.dll - C:\Windows\System32\devrtl.dll - Microsoft Corporation
             wbemcomn.dll - C:\Windows\System32\wbemcomn.dll - Microsoft Corporation
             webservices.dll - C:\Windows\System32\webservices.dll - Microsoft Corporation
             mscoreei.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll - Microsoft Corporation
             winspool.drv - C:\Windows\System32\winspool.drv - Microsoft Corporation
             mscoree.dll - C:\Windows\System32\mscoree.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\System32\rasadhlp.dll - Microsoft Corporation
             winhttp.dll - C:\Windows\System32\winhttp.dll - Microsoft Corporation
             ninput.dll - C:\Windows\System32\ninput.dll - Microsoft Corporation
             wininet.dll - C:\Windows\System32\wininet.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\System32\iertutil.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\System32\urlmon.dll - Microsoft Corporation
             MrmCoreR.dll - C:\Windows\System32\MrmCoreR.dll - Microsoft Corporation
             samcli.dll - C:\Windows\System32\samcli.dll - Microsoft Corporation
             sfc_os.dll - C:\Windows\System32\sfc_os.dll - Microsoft Corporation
             version.dll - C:\Windows\System32\version.dll - Microsoft Corporation
             EhStorShell.dll - C:\Windows\System32\EhStorShell.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\System32\ntmarta.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             wcmapi.dll - C:\Windows\System32\wcmapi.dll - Microsoft Corporation
             npmproxy.dll - C:\Windows\System32\npmproxy.dll - Microsoft Corporation
             wlanapi.dll - C:\Windows\System32\wlanapi.dll - Microsoft Corporation
             msxml6.dll - C:\Windows\System32\msxml6.dll - Microsoft Corporation
             dhcpcsvc6.dll - C:\Windows\System32\dhcpcsvc6.dll - Microsoft Corporation
             dhcpcsvc.dll - C:\Windows\System32\dhcpcsvc.dll - Microsoft Corporation
             FWPUCLNT.DLL - C:\Windows\System32\FWPUCLNT.DLL - Microsoft Corporation
             samlib.dll - C:\Windows\System32\samlib.dll - Microsoft Corporation
             winnsi.dll - C:\Windows\System32\winnsi.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             es.dll - C:\Windows\System32\es.dll - Microsoft Corporation
             taskschd.dll - C:\Windows\System32\taskschd.dll - Microsoft Corporation
             wkscli.dll - C:\Windows\System32\wkscli.dll - Microsoft Corporation
             netapi32.dll - C:\Windows\System32\netapi32.dll - Microsoft Corporation
             NetworkStatus.dll - C:\Windows\System32\NetworkStatus.dll - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             tbs.dll - C:\Windows\System32\tbs.dll - Microsoft Corporation
             wevtapi.dll - C:\Windows\System32\wevtapi.dll - Microsoft Corporation
             d3d10warp.dll - C:\Windows\System32\d3d10warp.dll - Microsoft Corporation
             rasman.dll - C:\Windows\System32\rasman.dll - Microsoft Corporation
             rtutils.dll - C:\Windows\System32\rtutils.dll - Microsoft Corporation
             rasapi32.dll - C:\Windows\System32\rasapi32.dll - Microsoft Corporation
             Windows.Networking.Connectivity.dll - C:\Windows\System32\Windows.Networking.Connectivity.dll - Microsoft Corporation
             xmllite.dll - C:\Windows\System32\xmllite.dll - Microsoft Corporation
             diasymreader.dll - C:\Windows\Microsoft.NET\Framework64\v2.0.50727\diasymreader.dll - Microsoft Corporation
             BluetoothApis.dll - C:\Windows\System32\BluetoothApis.dll - Microsoft Corporation
             bthprops.cpl - C:\Windows\System32\bthprops.cpl - Microsoft Corporation
             DWrite.dll - C:\Windows\System32\DWrite.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             davhlpr.dll - C:\Windows\System32\davhlpr.dll - Microsoft Corporation
             WPDShServiceObj.dll - C:\Windows\System32\WPDShServiceObj.dll - Microsoft Corporation
             secur32.dll - C:\Windows\System32\secur32.dll - Microsoft Corporation
             globinputhost.dll - C:\Windows\System32\globinputhost.dll - Microsoft Corporation
             drprov.dll - C:\Windows\System32\drprov.dll - Microsoft Corporation
             AltTab.dll - C:\Windows\System32\AltTab.dll - Microsoft Corporation
             UIAnimation.dll - C:\Windows\System32\UIAnimation.dll - Microsoft Corporation
             msiltcfg.dll - C:\Windows\System32\msiltcfg.dll - Microsoft Corporation
             InputSwitch.dll - C:\Windows\System32\InputSwitch.dll - Microsoft Corporation
             thumbcache.dll - C:\Windows\System32\thumbcache.dll - Microsoft Corporation
             IconCodecService.dll - C:\Windows\System32\IconCodecService.dll - Microsoft Corporation
             wpncore.dll - C:\Windows\System32\wpncore.dll - Microsoft Corporation
             BCP47Langs.dll - C:\Windows\System32\BCP47Langs.dll - Microsoft Corporation
             linkinfo.dll - C:\Windows\System32\linkinfo.dll - Microsoft Corporation
             Syncreg.dll - C:\Windows\System32\Syncreg.dll - Microsoft Corporation
             TipBand.dll - C:\Program Files\Common Files\microsoft shared\ink\TipBand.dll - Microsoft Corporation
             MMDevAPI.dll - C:\Windows\System32\MMDevAPI.dll - Microsoft Corporation
             wldp.dll - C:\Windows\System32\wldp.dll - Microsoft Corporation
             shfolder.dll - C:\Windows\System32\shfolder.dll - Microsoft Corporation
             duser.dll - C:\Windows\System32\duser.dll - Microsoft Corporation
             comctl32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\comctl32.dll - Microsoft Corporation
             igdusc64.dll - C:\Windows\System32\igdusc64.dll - Intel Corporation
             dwmapi.dll - C:\Windows\System32\dwmapi.dll - Microsoft Corporation
             dui70.dll - C:\Windows\System32\dui70.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             windows.immersiveshell.serviceprovider.dll - C:\Windows\System32\windows.immersiveshell.serviceprovider.dll - Microsoft Corporation
             TabbtnEx.dll - C:\Windows\System32\TabbtnEx.dll - Microsoft Corporation
             Tabbtn.dll - C:\Windows\System32\Tabbtn.dll - Microsoft Corporation
             twinapi.appcore.dll - C:\Windows\System32\twinapi.appcore.dll - Microsoft Corporation
             oleacc.dll - C:\Windows\System32\oleacc.dll - Microsoft Corporation
             SndVolSSO.dll - C:\Windows\System32\SndVolSSO.dll - Microsoft Corporation
             SettingSyncPolicy.dll - C:\Windows\System32\SettingSyncPolicy.dll - Microsoft Corporation
             sppc.dll - C:\Windows\System32\sppc.dll - Microsoft Corporation
             slc.dll - C:\Windows\System32\slc.dll - Microsoft Corporation
             msimg32.dll - C:\Windows\System32\msimg32.dll - Microsoft Corporation
             igd10iumd64.dll - C:\Windows\System32\igd10iumd64.dll - Intel Corporation
             dxgi.dll - C:\Windows\System32\dxgi.dll - Microsoft Corporation
             d3d11.dll - C:\Windows\System32\d3d11.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\Windows\System32\WindowsCodecs.dll - Microsoft Corporation
             dcomp.dll - C:\Windows\System32\dcomp.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\System32\apphelp.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             gpapi.dll - C:\Windows\System32\gpapi.dll - Microsoft Corporation
             hid.dll - C:\Windows\System32\hid.dll - Microsoft Corporation
             netutils.dll - C:\Windows\System32\netutils.dll - Microsoft Corporation
             schannel.dll - C:\Windows\System32\schannel.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             userenv.dll - C:\Windows\System32\userenv.dll - Microsoft Corporation
             dnsapi.dll - C:\Windows\System32\dnsapi.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             ntasn1.dll - C:\Windows\System32\ntasn1.dll - Microsoft Corporation
             ncrypt.dll - C:\Windows\System32\ncrypt.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\System32\srvcli.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             sxs.dll - C:\Windows\System32\sxs.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             wintrust.dll - C:\Windows\System32\wintrust.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imagehlp.dll - C:\Windows\System32\imagehlp.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             comdlg32.dll - C:\Windows\System32\comdlg32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             Wldap32.dll - C:\Windows\System32\Wldap32.dll - Microsoft Corporation
             GdiPlus.dll - C:\Windows\System32\GdiPlus.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[services.exe]Modules
             services.exe - C:\WINDOWS\system32\services.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\system32\SspiCli.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\system32\profapi.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             scext.dll - C:\WINDOWS\system32\scext.dll - Microsoft Corporation
             DABAPI.dll - C:\WINDOWS\system32\DABAPI.dll - Microsoft Corporation
             EventAggregation.dll - C:\WINDOWS\system32\EventAggregation.dll - Microsoft Corporation
             srvcli.dll - C:\WINDOWS\system32\srvcli.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             spinf.dll - C:\WINDOWS\SYSTEM32\spinf.dll - Microsoft Corporation
             scesrv.dll - C:\WINDOWS\SYSTEM32\scesrv.dll - Microsoft Corporation
             AUTHZ.dll - C:\WINDOWS\system32\AUTHZ.dll - Microsoft Corporation
             apphelp.dll - C:\WINDOWS\system32\apphelp.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             services.exe - C:\Windows\System32\services.exe - Microsoft Corporation
             apphelp.dll - C:\Windows\System32\apphelp.dll - Microsoft Corporation
             authz.dll - C:\Windows\System32\authz.dll - Microsoft Corporation
             scesrv.dll - C:\Windows\System32\scesrv.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             SPInf.dll - C:\Windows\System32\SPInf.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\System32\srvcli.dll - Microsoft Corporation
             EventAggregation.dll - C:\Windows\System32\EventAggregation.dll - Microsoft Corporation
             dabapi.dll - C:\Windows\System32\dabapi.dll - Microsoft Corporation
             scext.dll - C:\Windows\System32\scext.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[BtTray.exe]Modules
             BtTray.exe - C:\Program Files (x86)\Bluetooth Suite\BtTray.exe - Qualcomm Atheros
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             MSCOREE.DLL - C:\WINDOWS\SYSTEM32\MSCOREE.DLL - Microsoft Corporation
             KERNEL32.dll - C:\WINDOWS\system32\KERNEL32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             mscoreei.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             MSVCR120_CLR0400.dll - C:\WINDOWS\SYSTEM32\MSVCR120_CLR0400.dll - Microsoft Corporation
             mscorlib.ni.dll - C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\mscorlib\1c4f23e80bd4b68fb3f56bdb16dbb647\mscorlib.ni.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSTEM32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSTEM32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSTEM32\bcrypt.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSTEM32\VERSION.dll - Microsoft Corporation
             PresentationFramework.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll - Microsoft Corporation
             WindowsBase.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll - Microsoft Corporation
             System.Xaml.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll - Microsoft Corporation
             clrjit.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll - Microsoft Corporation
             PresentationCore.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - Microsoft Corporation
             System.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll - Microsoft Corporation
             ExtensionToolkit.dll - C:\Program Files (x86)\Bluetooth Suite\ExtensionToolkit.dll - Qualcomm Atheros
             dwrite.dll - C:\WINDOWS\SYSTEM32\dwrite.dll - Microsoft Corporation
             wpfgfx_v0400.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\wpfgfx_v0400.dll - Microsoft Corporation
             PresentationNative_v0400.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationNative_v0400.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\system32\dwmapi.dll - Microsoft Corporation
             System.Xml.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.dll - Microsoft Corporation
             System.Configuration.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll - Microsoft Corporation
             UIAutomationTypes.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll - Microsoft Corporation
             PresentationFramework.resources.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\PresentationFramework.resources\v4.0_4.0.0.0_cs_31bf3856ad364e35\PresentationFramework.resources.dll - Microsoft Corporation
             BtTray.Infrastructure.dll - C:\Program Files (x86)\Bluetooth Suite\BtTray.Infrastructure.dll - Qualcomm Atheros
             CommApiInterop.dll - C:\Program Files (x86)\Bluetooth Suite\CommApiInterop.dll - Qualcomm Atheros
             System.Windows.Forms.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - Microsoft Corporation
             System.Runtime.Remoting.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - Microsoft Corporation
             ws2_32.dll - C:\WINDOWS\system32\ws2_32.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             ipc.dll - C:\Program Files (x86)\Bluetooth Suite\ipc.dll - Qualcomm Atheros Commnucations
             utils.dll - C:\Program Files (x86)\Bluetooth Suite\utils.dll - Qualcomm Atheros Commnucations
             MSVCP100.dll - C:\WINDOWS\SYSTEM32\MSVCP100.dll - Microsoft Corporation
             MSVCR100.dll - C:\WINDOWS\SYSTEM32\MSVCR100.dll - Microsoft Corporation
             TCPConnection.dll - C:\Program Files (x86)\Bluetooth Suite\TCPConnection.dll - Qualcomm Atheros Commnucations
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             bthprops.cpl - C:\WINDOWS\SYSTEM32\bthprops.cpl - Microsoft Corporation
             credui.dll - C:\WINDOWS\SYSTEM32\credui.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSTEM32\WTSAPI32.dll - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSTEM32\Secur32.dll - Microsoft Corporation
             RASAPI32.dll - C:\WINDOWS\SYSTEM32\RASAPI32.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\system32\CFGMGR32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSTEM32\DEVOBJ.dll - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             BluetoothApis.dll - C:\WINDOWS\SYSTEM32\BluetoothApis.dll - Microsoft Corporation
             rasman.dll - C:\WINDOWS\SYSTEM32\rasman.dll - Microsoft Corporation
             SSPICLI.DLL - C:\WINDOWS\SYSTEM32\SSPICLI.DLL - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\comctl32.dll - Microsoft Corporation
             ContactsApi.dll - C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll - 
             mfc90u.dll - C:\WINDOWS\WinSxS\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_044aad0bab1eb146\mfc90u.dll - Microsoft Corporation
             MSVCR90.dll - C:\WINDOWS\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\MSVCR90.dll - Microsoft Corporation
             msvcm90.dll - C:\WINDOWS\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\msvcm90.dll - Microsoft Corporation
             COMCTL32.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\COMCTL32.dll - Microsoft Corporation
             MSIMG32.dll - C:\WINDOWS\SYSTEM32\MSIMG32.dll - Microsoft Corporation
             BtTray.Toolkit.dll - C:\Program Files (x86)\Bluetooth Suite\BtTray.Toolkit.dll - Qualcomm Atheros
             CombineAgent.dll - C:\Program Files (x86)\Bluetooth Suite\CombineAgent.dll - Qualcomm Atheros Commnucations
             mfc100u.dll - C:\WINDOWS\SYSTEM32\mfc100u.dll - Microsoft Corporation
             BtvSdkDll.dll - C:\Program Files (x86)\Bluetooth Suite\BtvSdkDll.dll - Qualcomm Atheros Commnucations
             CommApi.dll - C:\Program Files (x86)\Bluetooth Suite\CommApi.dll - Qualcomm Atheros Commnucations
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             MFC100ENU.DLL - C:\WINDOWS\SYSTEM32\MFC100ENU.DLL - Microsoft Corporation
             d3d9.dll - C:\WINDOWS\SYSTEM32\d3d9.dll - Microsoft Corporation
             igdumdim64.dll - C:\WINDOWS\SYSTEM32\igdumdim64.dll - Intel Corporation
             igdusc64.dll - C:\WINDOWS\SYSTEM32\igdusc64.dll - Intel Corporation
             PresentationFramework.Aero2.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\PresentationFramework.Aero2\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero2.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSTEM32\WINSTA.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             PenIMC.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PenIMC.dll - Microsoft Corporation
             wisp.dll - C:\WINDOWS\System32\wisp.dll - Microsoft Corporation
             tpcps.dll - C:\Program Files\Common Files\Microsoft Shared\Ink\tpcps.dll - Microsoft Corporation
             msctfui.dll - C:\WINDOWS\system32\msctfui.dll - Microsoft Corporation
             UIAutomationProvider.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll - Microsoft Corporation
             UIAutomationCore.dll - C:\WINDOWS\SYSTEM32\UIAutomationCore.dll - Microsoft Corporation
             sxs.dll - C:\WINDOWS\SYSTEM32\sxs.dll - Microsoft Corporation
             twinapi.dll - C:\Windows\System32\twinapi.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\system32\WINTRUST.dll - Microsoft Corporation
             urlmon.dll - C:\WINDOWS\SYSTEM32\urlmon.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSTEM32\iertutil.dll - Microsoft Corporation
             WININET.dll - C:\WINDOWS\SYSTEM32\WININET.dll - Microsoft Corporation
             BtTray.cs-CZ.dll - C:\Program Files (x86)\Bluetooth Suite\L10n\cs-CZ\BtTray.cs-CZ.dll - 
             System.Runtime.Serialization.Formatters.Soap.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll - Microsoft Corporation
             System.Web.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll - Microsoft Corporation
             BtTray.Infrastructure.dll - C:\Program Files (x86)\Bluetooth Suite\BtTray.Infrastructure.dll - Qualcomm Atheros
             ExtensionToolkit.dll - C:\Program Files (x86)\Bluetooth Suite\ExtensionToolkit.dll - Qualcomm Atheros
             PresentationFramework.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll - Microsoft Corporation
             WindowsBase.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll - Microsoft Corporation
             System.Xaml.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll - Microsoft Corporation
             PresentationCore.dll - C:\Windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - Microsoft Corporation
             System.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll - Microsoft Corporation
             UIAutomationTypes.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll - Microsoft Corporation
             CommApiInterop.dll - C:\Program Files (x86)\Bluetooth Suite\CommApiInterop.dll - Qualcomm Atheros
             System.Configuration.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll - Microsoft Corporation
             System.XML.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll - Microsoft Corporation
             PresentationFramework.resources.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.resources\v4.0_4.0.0.0_cs_31bf3856ad364e35\PresentationFramework.resources.dll - Microsoft Corporation
             System.Windows.Forms.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - Microsoft Corporation
             System.Runtime.Remoting.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - Microsoft Corporation
             ContactsApi.dll - C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll - 
             BtTray.Toolkit.dll - C:\Program Files (x86)\Bluetooth Suite\BtTray.Toolkit.dll - Qualcomm Atheros
             PresentationFramework.Aero2.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero2\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero2.dll - Microsoft Corporation
             UIAutomationProvider.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll - Microsoft Corporation
             BtTray.cs-CZ.dll - C:\Program Files (x86)\Bluetooth Suite\L10n\cs-CZ\BtTray.cs-CZ.dll - 
             System.Runtime.Serialization.Formatters.Soap.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll - Microsoft Corporation
             System.Web.dll - C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll - Microsoft Corporation
             igdumdim64.dll - C:\Windows\System32\igdumdim64.dll - Intel Corporation
             d3d9.dll - C:\Windows\System32\d3d9.dll - Microsoft Corporation
             PresentationNative_v0400.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationNative_v0400.dll - Microsoft Corporation
             wpfgfx_v0400.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\wpfgfx_v0400.dll - Microsoft Corporation
             msctfui.dll - C:\Windows\System32\msctfui.dll - Microsoft Corporation
             tpcps.dll - C:\Program Files\Common Files\microsoft shared\ink\tpcps.dll - Microsoft Corporation
             wisp.dll - C:\Windows\System32\wisp.dll - Microsoft Corporation
             PenIMC.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PenIMC.dll - Microsoft Corporation
             BtvSdkDll.dll - C:\Program Files (x86)\Bluetooth Suite\BtvSdkDll.dll - Qualcomm Atheros Commnucations
             TCPConnection.dll - C:\Program Files (x86)\Bluetooth Suite\TCPConnection.dll - Qualcomm Atheros Commnucations
             ipc.dll - C:\Program Files (x86)\Bluetooth Suite\ipc.dll - Qualcomm Atheros Commnucations
             credui.dll - C:\Windows\System32\credui.dll - Microsoft Corporation
             utils.dll - C:\Program Files (x86)\Bluetooth Suite\utils.dll - Qualcomm Atheros Commnucations
             CommApi.dll - C:\Program Files (x86)\Bluetooth Suite\CommApi.dll - Qualcomm Atheros Commnucations
             CombineAgent.dll - C:\Program Files (x86)\Bluetooth Suite\CombineAgent.dll - Qualcomm Atheros Commnucations
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             twinapi.dll - C:\Windows\System32\twinapi.dll - Microsoft Corporation
             UIAutomationCore.dll - C:\Windows\System32\UIAutomationCore.dll - Microsoft Corporation
             clrjit.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll - Microsoft Corporation
             mscorlib.ni.dll - C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\1c4f23e80bd4b68fb3f56bdb16dbb647\mscorlib.ni.dll - Microsoft Corporation
             msvcr120_clr0400.dll - C:\Windows\System32\msvcr120_clr0400.dll - Microsoft Corporation
             clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             mscoreei.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll - Microsoft Corporation
             mscoree.dll - C:\Windows\System32\mscoree.dll - Microsoft Corporation
             wininet.dll - C:\Windows\System32\wininet.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\System32\iertutil.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\System32\urlmon.dll - Microsoft Corporation
             version.dll - C:\Windows\System32\version.dll - Microsoft Corporation
             rasman.dll - C:\Windows\System32\rasman.dll - Microsoft Corporation
             rasapi32.dll - C:\Windows\System32\rasapi32.dll - Microsoft Corporation
             BluetoothApis.dll - C:\Windows\System32\BluetoothApis.dll - Microsoft Corporation
             bthprops.cpl - C:\Windows\System32\bthprops.cpl - Microsoft Corporation
             DWrite.dll - C:\Windows\System32\DWrite.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             secur32.dll - C:\Windows\System32\secur32.dll - Microsoft Corporation
             comctl32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\comctl32.dll - Microsoft Corporation
             igdusc64.dll - C:\Windows\System32\igdusc64.dll - Intel Corporation
             dwmapi.dll - C:\Windows\System32\dwmapi.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             msimg32.dll - C:\Windows\System32\msimg32.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             sxs.dll - C:\Windows\System32\sxs.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             wintrust.dll - C:\Windows\System32\wintrust.dll - Microsoft Corporation
             comctl32.dll - C:\Windows\System32\comctl32.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             user32.dll - C:\WINDOWS\SYSTEM32\user32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSTEM32\cfgmgr32.dll - Microsoft Corporation
             ssdpsrv.dll - c:\windows\system32\ssdpsrv.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             FirewallAPI.dll - c:\windows\system32\FirewallAPI.dll - Microsoft Corporation
             IPHLPAPI.DLL - c:\windows\system32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - c:\windows\system32\WINNSI.DLL - Microsoft Corporation
             dhcpcsvc6.DLL - c:\windows\system32\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - c:\windows\system32\dhcpcsvc.DLL - Microsoft Corporation
             CRYPTSP.dll - c:\windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\system32\bcrypt.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             sspicli.dll - C:\WINDOWS\system32\sspicli.dll - Microsoft Corporation
             POWRPROF.dll - c:\windows\system32\POWRPROF.dll - Microsoft Corporation
             fdrespub.dll - c:\windows\system32\fdrespub.dll - Microsoft Corporation
             wsdapi.dll - c:\windows\system32\wsdapi.dll - Microsoft Corporation
             webservices.dll - c:\windows\system32\webservices.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             FunDisc.dll - C:\Windows\System32\FunDisc.dll - Microsoft Corporation
             WINHTTP.dll - c:\windows\system32\WINHTTP.dll - Microsoft Corporation
             HTTPAPI.dll - c:\windows\system32\HTTPAPI.dll - Microsoft Corporation
             wkscli.dll - c:\windows\system32\wkscli.dll - Microsoft Corporation
             netutils.dll - c:\windows\system32\netutils.dll - Microsoft Corporation
             XmlLite.dll - C:\Windows\System32\XmlLite.dll - Microsoft Corporation
             webio.dll - c:\windows\system32\webio.dll - Microsoft Corporation
             DNSAPI.dll - c:\windows\system32\DNSAPI.dll - Microsoft Corporation
             timebrokerserver.dll - c:\windows\system32\timebrokerserver.dll - Microsoft Corporation
             bi.dll - C:\WINDOWS\SYSTEM32\bi.dll - Microsoft Corporation
             twinapi.dll - C:\Windows\System32\twinapi.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSTEM32\shcore.dll - Microsoft Corporation
             upnphost.dll - c:\windows\system32\upnphost.dll - Microsoft Corporation
             SSDPAPI.dll - c:\windows\system32\SSDPAPI.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             profapi.dll - c:\windows\system32\profapi.dll - Microsoft Corporation
             advapi32.dll - C:\WINDOWS\SYSTEM32\advapi32.dll - Microsoft Corporation
             ntmarta.dll - C:\WINDOWS\SYSTEM32\ntmarta.dll - Microsoft Corporation
             msxml6.dll - C:\Windows\System32\msxml6.dll - Microsoft Corporation
             urlmon.dll - C:\WINDOWS\system32\urlmon.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\system32\iertutil.dll - Microsoft Corporation
             WININET.dll - C:\WINDOWS\system32\WININET.dll - Microsoft Corporation
             MSOXMLMF.DLL - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             MSVCR80.dll - C:\WINDOWS\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.8428_none_88dcdb0b2fb19957\MSVCR80.dll - Microsoft Corporation
             svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             upnphost.dll - C:\Windows\System32\upnphost.dll - Microsoft Corporation
             TimeBrokerServer.dll - C:\Windows\System32\TimeBrokerServer.dll - Microsoft Corporation
             httpapi.dll - C:\Windows\System32\httpapi.dll - Microsoft Corporation
             FDResPub.dll - C:\Windows\System32\FDResPub.dll - Microsoft Corporation
             twinapi.dll - C:\Windows\System32\twinapi.dll - Microsoft Corporation
             ssdpsrv.dll - C:\Windows\System32\ssdpsrv.dll - Microsoft Corporation
             webio.dll - C:\Windows\System32\webio.dll - Microsoft Corporation
             fundisc.dll - C:\Windows\System32\fundisc.dll - Microsoft Corporation
             webservices.dll - C:\Windows\System32\webservices.dll - Microsoft Corporation
             WSDApi.dll - C:\Windows\System32\WSDApi.dll - Microsoft Corporation
             ssdpapi.dll - C:\Windows\System32\ssdpapi.dll - Microsoft Corporation
             winhttp.dll - C:\Windows\System32\winhttp.dll - Microsoft Corporation
             wininet.dll - C:\Windows\System32\wininet.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\System32\iertutil.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\System32\urlmon.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\System32\ntmarta.dll - Microsoft Corporation
             msxml6.dll - C:\Windows\System32\msxml6.dll - Microsoft Corporation
             dhcpcsvc6.dll - C:\Windows\System32\dhcpcsvc6.dll - Microsoft Corporation
             dhcpcsvc.dll - C:\Windows\System32\dhcpcsvc.dll - Microsoft Corporation
             winnsi.dll - C:\Windows\System32\winnsi.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             wkscli.dll - C:\Windows\System32\wkscli.dll - Microsoft Corporation
             xmllite.dll - C:\Windows\System32\xmllite.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             bi.dll - C:\Windows\System32\bi.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             FirewallAPI.dll - C:\Windows\System32\FirewallAPI.dll - Microsoft Corporation
             netutils.dll - C:\Windows\System32\netutils.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             dnsapi.dll - C:\Windows\System32\dnsapi.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[lsass.exe]Modules
             lsass.exe - C:\WINDOWS\system32\lsass.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             SspiSrv.dll - C:\WINDOWS\system32\SspiSrv.dll - Microsoft Corporation
             lsasrv.dll - C:\WINDOWS\system32\lsasrv.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\system32\SspiCli.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSTEM32\cfgmgr32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             samsrv.dll - C:\WINDOWS\SYSTEM32\samsrv.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\system32\bcrypt.dll - Microsoft Corporation
             ncrypt.dll - C:\WINDOWS\system32\ncrypt.dll - Microsoft Corporation
             NTASN1.dll - C:\WINDOWS\system32\NTASN1.dll - Microsoft Corporation
             msprivs.DLL - C:\WINDOWS\system32\msprivs.DLL - Microsoft Corporation
             netjoin.dll - C:\WINDOWS\SYSTEM32\netjoin.dll - Microsoft Corporation
             negoexts.DLL - C:\WINDOWS\system32\negoexts.DLL - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             cryptdll.dll - C:\WINDOWS\system32\cryptdll.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             kerberos.DLL - C:\WINDOWS\system32\kerberos.DLL - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\system32\CRYPTSP.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             msv1_0.DLL - C:\WINDOWS\system32\msv1_0.DLL - Microsoft Corporation
             netlogon.DLL - C:\WINDOWS\system32\netlogon.DLL - Microsoft Corporation
             DNSAPI.dll - C:\WINDOWS\system32\DNSAPI.dll - Microsoft Corporation
             logoncli.dll - C:\WINDOWS\system32\logoncli.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\system32\USERENV.dll - Microsoft Corporation
             advapi32.dll - C:\WINDOWS\SYSTEM32\advapi32.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\system32\profapi.dll - Microsoft Corporation
             tspkg.DLL - C:\WINDOWS\system32\tspkg.DLL - Microsoft Corporation
             pku2u.DLL - C:\WINDOWS\system32\pku2u.DLL - Microsoft Corporation
             livessp.DLL - C:\WINDOWS\system32\livessp.DLL - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             wdigest.DLL - C:\WINDOWS\system32\wdigest.DLL - Microsoft Corporation
             schannel.DLL - C:\WINDOWS\system32\schannel.DLL - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             efslsaext.dll - C:\WINDOWS\system32\efslsaext.dll - Microsoft Corporation
             dpapisrv.dll - C:\WINDOWS\system32\dpapisrv.dll - Microsoft Corporation
             scecli.DLL - C:\WINDOWS\system32\scecli.DLL - Microsoft Corporation
             netutils.dll - C:\WINDOWS\system32\netutils.dll - Microsoft Corporation
             winsta.dll - C:\WINDOWS\SYSTEM32\winsta.dll - Microsoft Corporation
             wevtapi.dll - C:\WINDOWS\SYSTEM32\wevtapi.dll - Microsoft Corporation
             ncryptsslp.dll - C:\WINDOWS\system32\ncryptsslp.dll - Microsoft Corporation
             ncryptprov.dll - C:\WINDOWS\system32\ncryptprov.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             dssenh.dll - C:\WINDOWS\system32\dssenh.dll - Microsoft Corporation
             gpapi.dll - C:\WINDOWS\SYSTEM32\gpapi.dll - Microsoft Corporation
             DPAPI.dll - C:\WINDOWS\system32\DPAPI.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\system32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\system32\WINNSI.DLL - Microsoft Corporation
             wkscli.dll - C:\WINDOWS\system32\wkscli.dll - Microsoft Corporation
             fveapi.dll - C:\WINDOWS\SYSTEM32\fveapi.dll - Microsoft Corporation
             bcd.dll - C:\WINDOWS\system32\bcd.dll - Microsoft Corporation
             FVECERTS.dll - C:\WINDOWS\system32\FVECERTS.dll - Microsoft Corporation
             keyiso.dll - C:\WINDOWS\system32\keyiso.dll - Microsoft Corporation
             AUTHZ.dll - C:\WINDOWS\system32\AUTHZ.dll - Microsoft Corporation
             lsass.exe - C:\Windows\System32\lsass.exe - Microsoft Corporation
             keyiso.dll - C:\Windows\System32\keyiso.dll - Microsoft Corporation
             dssenh.dll - C:\Windows\System32\dssenh.dll - Microsoft Corporation
             ncryptprov.dll - C:\Windows\System32\ncryptprov.dll - Microsoft Corporation
             ncryptsslp.dll - C:\Windows\System32\ncryptsslp.dll - Microsoft Corporation
             fvecerts.dll - C:\Windows\System32\fvecerts.dll - Microsoft Corporation
             bcd.dll - C:\Windows\System32\bcd.dll - Microsoft Corporation
             fveapi.dll - C:\Windows\System32\fveapi.dll - Microsoft Corporation
             winnsi.dll - C:\Windows\System32\winnsi.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             wkscli.dll - C:\Windows\System32\wkscli.dll - Microsoft Corporation
             wevtapi.dll - C:\Windows\System32\wevtapi.dll - Microsoft Corporation
             dpapi.dll - C:\Windows\System32\dpapi.dll - Microsoft Corporation
             gpapi.dll - C:\Windows\System32\gpapi.dll - Microsoft Corporation
             netutils.dll - C:\Windows\System32\netutils.dll - Microsoft Corporation
             authz.dll - C:\Windows\System32\authz.dll - Microsoft Corporation
             scecli.dll - C:\Windows\System32\scecli.dll - Microsoft Corporation
             dpapisrv.dll - C:\Windows\System32\dpapisrv.dll - Microsoft Corporation
             efslsaext.dll - C:\Windows\System32\efslsaext.dll - Microsoft Corporation
             schannel.dll - C:\Windows\System32\schannel.dll - Microsoft Corporation
             wdigest.dll - C:\Windows\System32\wdigest.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             livessp.dll - C:\Windows\System32\livessp.dll - Microsoft Corporation
             pku2u.dll - C:\Windows\System32\pku2u.dll - Microsoft Corporation
             TSpkg.dll - C:\Windows\System32\TSpkg.dll - Microsoft Corporation
             userenv.dll - C:\Windows\System32\userenv.dll - Microsoft Corporation
             logoncli.dll - C:\Windows\System32\logoncli.dll - Microsoft Corporation
             dnsapi.dll - C:\Windows\System32\dnsapi.dll - Microsoft Corporation
             netlogon.dll - C:\Windows\System32\netlogon.dll - Microsoft Corporation
             msv1_0.dll - C:\Windows\System32\msv1_0.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             kerberos.dll - C:\Windows\System32\kerberos.dll - Microsoft Corporation
             cryptdll.dll - C:\Windows\System32\cryptdll.dll - Microsoft Corporation
             negoexts.dll - C:\Windows\System32\negoexts.dll - Microsoft Corporation
             netjoin.dll - C:\Windows\System32\netjoin.dll - Microsoft Corporation
             msprivs.dll - C:\Windows\System32\msprivs.dll - Microsoft Corporation
             ntasn1.dll - C:\Windows\System32\ntasn1.dll - Microsoft Corporation
             ncrypt.dll - C:\Windows\System32\ncrypt.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             samsrv.dll - C:\Windows\System32\samsrv.dll - Microsoft Corporation
             lsasrv.dll - C:\Windows\System32\lsasrv.dll - Microsoft Corporation
             sspisrv.dll - C:\Windows\System32\sspisrv.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[SearchFilterHost.exe]Modules
             SearchFilterHost.exe - C:\WINDOWS\system32\SearchFilterHost.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             TQUERY.DLL - C:\WINDOWS\system32\TQUERY.DLL - Microsoft Corporation
             IMM32.dll - C:\WINDOWS\system32\IMM32.dll - Microsoft Corporation
             MSSHooks.dll - C:\WINDOWS\system32\MSSHooks.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\system32\bcrypt.dll - Microsoft Corporation
             mssprxy.dll - C:\WINDOWS\system32\mssprxy.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSTEM32\shcore.dll - Microsoft Corporation
             propsys.dll - C:\WINDOWS\system32\propsys.dll - Microsoft Corporation
             PhotoMetadataHandler.dll - C:\WINDOWS\system32\PhotoMetadataHandler.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\WINDOWS\system32\WindowsCodecs.dll - Microsoft Corporation
             mfsrcsnk.dll - C:\WINDOWS\System32\mfsrcsnk.dll - Microsoft Corporation
             MFPlat.DLL - C:\WINDOWS\System32\MFPlat.DLL - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSTEM32\cfgmgr32.dll - Microsoft Corporation
             RTWorkQ.DLL - C:\WINDOWS\System32\RTWorkQ.DLL - Microsoft Corporation
             AVRT.dll - C:\WINDOWS\System32\AVRT.dll - Microsoft Corporation
             sxs.dll - C:\WINDOWS\SYSTEM32\sxs.dll - Microsoft Corporation
             query.dll - C:\WINDOWS\system32\query.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             xmlfilter.dll - C:\WINDOWS\system32\xmlfilter.dll - Microsoft Corporation
             msxml3.dll - C:\WINDOWS\System32\msxml3.dll - Microsoft Corporation
             SearchFilterHost.exe - C:\Windows\System32\SearchFilterHost.exe - Microsoft Corporation
             msxml3.dll - C:\Windows\System32\msxml3.dll - Microsoft Corporation
             tquery.dll - C:\Windows\System32\tquery.dll - Microsoft Corporation
             mfplat.dll - C:\Windows\System32\mfplat.dll - Microsoft Corporation
             mfsrcsnk.dll - C:\Windows\System32\mfsrcsnk.dll - Microsoft Corporation
             Query.dll - C:\Windows\System32\Query.dll - Microsoft Corporation
             RTWorkQ.dll - C:\Windows\System32\RTWorkQ.dll - Microsoft Corporation
             xmlfilter.dll - C:\Windows\System32\xmlfilter.dll - Microsoft Corporation
             PhotoMetadataHandler.dll - C:\Windows\System32\PhotoMetadataHandler.dll - Microsoft Corporation
             mssprxy.dll - C:\Windows\System32\mssprxy.dll - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             msshooks.dll - C:\Windows\System32\msshooks.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             avrt.dll - C:\Windows\System32\avrt.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\Windows\System32\WindowsCodecs.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             sxs.dll - C:\Windows\System32\sxs.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             user32.dll - C:\WINDOWS\SYSTEM32\user32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             es.dll - c:\windows\system32\es.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\system32\bcrypt.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             advapi32.dll - C:\WINDOWS\SYSTEM32\advapi32.dll - Microsoft Corporation
             fntcache.dll - c:\windows\system32\fntcache.dll - Microsoft Corporation
             nsisvc.dll - c:\windows\system32\nsisvc.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             sxs.dll - C:\WINDOWS\SYSTEM32\sxs.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             winhttp.dll - c:\windows\system32\winhttp.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             IPHLPAPI.DLL - c:\windows\system32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - c:\windows\system32\WINNSI.DLL - Microsoft Corporation
             DNSAPI.dll - c:\windows\system32\DNSAPI.dll - Microsoft Corporation
             dhcpcsvc6.DLL - c:\windows\system32\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - c:\windows\system32\dhcpcsvc.DLL - Microsoft Corporation
             rasadhlp.dll - C:\Windows\System32\rasadhlp.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\system32\CFGMGR32.dll - Microsoft Corporation
             wdi.dll - c:\windows\system32\wdi.dll - Microsoft Corporation
             netprofmsvc.dll - c:\windows\system32\netprofmsvc.dll - Microsoft Corporation
             nlaapi.dll - c:\windows\system32\nlaapi.dll - Microsoft Corporation
             perftrack.dll - C:\WINDOWS\system32\perftrack.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\system32\SspiCli.dll - Microsoft Corporation
             wer.dll - C:\WINDOWS\system32\wer.dll - Microsoft Corporation
             AEPIC.dll - C:\WINDOWS\system32\AEPIC.dll - Microsoft Corporation
             pcwum.dll - C:\WINDOWS\system32\pcwum.dll - Microsoft Corporation
             sfc_os.dll - C:\WINDOWS\system32\sfc_os.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\system32\VERSION.dll - Microsoft Corporation
             npmproxy.dll - C:\WINDOWS\System32\npmproxy.dll - Microsoft Corporation
             bthserv.dll - c:\windows\system32\bthserv.dll - Microsoft Corporation
             profapi.dll - c:\windows\system32\profapi.dll - Microsoft Corporation
             DEVOBJ.dll - c:\windows\system32\DEVOBJ.dll - Microsoft Corporation
             msv1_0.DLL - C:\WINDOWS\system32\msv1_0.DLL - Microsoft Corporation
             cryptdll.dll - C:\WINDOWS\system32\cryptdll.dll - Microsoft Corporation
             gpapi.dll - C:\WINDOWS\SYSTEM32\gpapi.dll - Microsoft Corporation
             fdphost.dll - c:\windows\system32\fdphost.dll - Microsoft Corporation
             fdwsd.dll - C:\Windows\System32\fdwsd.dll - Microsoft Corporation
             wsdapi.dll - C:\Windows\System32\wsdapi.dll - Microsoft Corporation
             webservices.dll - C:\Windows\System32\webservices.dll - Microsoft Corporation
             FirewallAPI.dll - C:\Windows\System32\FirewallAPI.dll - Microsoft Corporation
             fdssdp.dll - C:\Windows\System32\fdssdp.dll - Microsoft Corporation
             SSDPAPI.dll - C:\Windows\System32\SSDPAPI.dll - Microsoft Corporation
             fdproxy.dll - C:\Windows\System32\fdproxy.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             XmlLite.dll - C:\Windows\System32\XmlLite.dll - Microsoft Corporation
             webio.dll - c:\windows\system32\webio.dll - Microsoft Corporation
             FunDisc.dll - C:\Windows\System32\FunDisc.dll - Microsoft Corporation
             propsys.dll - C:\WINDOWS\system32\propsys.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             apphelp.dll - C:\WINDOWS\system32\apphelp.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             DEVRTL.dll - C:\WINDOWS\system32\DEVRTL.dll - Microsoft Corporation
             svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             fdProxy.dll - C:\Windows\System32\fdProxy.dll - Microsoft Corporation
             fdSSDP.dll - C:\Windows\System32\fdSSDP.dll - Microsoft Corporation
             fdWSD.dll - C:\Windows\System32\fdWSD.dll - Microsoft Corporation
             fdPHost.dll - C:\Windows\System32\fdPHost.dll - Microsoft Corporation
             wer.dll - C:\Windows\System32\wer.dll - Microsoft Corporation
             bthserv.dll - C:\Windows\System32\bthserv.dll - Microsoft Corporation
             perftrack.dll - C:\Windows\System32\perftrack.dll - Microsoft Corporation
             webio.dll - C:\Windows\System32\webio.dll - Microsoft Corporation
             devrtl.dll - C:\Windows\System32\devrtl.dll - Microsoft Corporation
             fundisc.dll - C:\Windows\System32\fundisc.dll - Microsoft Corporation
             webservices.dll - C:\Windows\System32\webservices.dll - Microsoft Corporation
             WSDApi.dll - C:\Windows\System32\WSDApi.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\System32\rasadhlp.dll - Microsoft Corporation
             ssdpapi.dll - C:\Windows\System32\ssdpapi.dll - Microsoft Corporation
             aepic.dll - C:\Windows\System32\aepic.dll - Microsoft Corporation
             winhttp.dll - C:\Windows\System32\winhttp.dll - Microsoft Corporation
             sfc_os.dll - C:\Windows\System32\sfc_os.dll - Microsoft Corporation
             version.dll - C:\Windows\System32\version.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             npmproxy.dll - C:\Windows\System32\npmproxy.dll - Microsoft Corporation
             netprofmsvc.dll - C:\Windows\System32\netprofmsvc.dll - Microsoft Corporation
             wdi.dll - C:\Windows\System32\wdi.dll - Microsoft Corporation
             dhcpcsvc6.dll - C:\Windows\System32\dhcpcsvc6.dll - Microsoft Corporation
             dhcpcsvc.dll - C:\Windows\System32\dhcpcsvc.dll - Microsoft Corporation
             winnsi.dll - C:\Windows\System32\winnsi.dll - Microsoft Corporation
             nsisvc.dll - C:\Windows\System32\nsisvc.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             FntCache.dll - C:\Windows\System32\FntCache.dll - Microsoft Corporation
             es.dll - C:\Windows\System32\es.dll - Microsoft Corporation
             nlaapi.dll - C:\Windows\System32\nlaapi.dll - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             xmllite.dll - C:\Windows\System32\xmllite.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\System32\apphelp.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             FirewallAPI.dll - C:\Windows\System32\FirewallAPI.dll - Microsoft Corporation
             gpapi.dll - C:\Windows\System32\gpapi.dll - Microsoft Corporation
             pcwum.dll - C:\Windows\System32\pcwum.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             dnsapi.dll - C:\Windows\System32\dnsapi.dll - Microsoft Corporation
             msv1_0.dll - C:\Windows\System32\msv1_0.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             cryptdll.dll - C:\Windows\System32\cryptdll.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             sxs.dll - C:\Windows\System32\sxs.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[AvastUI.exe]Modules
             AvastUI.exe - C:\Program Files\AVAST Software\Avast\AvastUI.exe - AVAST Software
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             libcef.dll - C:\Program Files\AVAST Software\Avast\libcef.dll - 
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             CRYPTUI.dll - C:\WINDOWS\SYSwow64\CRYPTUI.dll - Microsoft Corporation
             DNSAPI.dll - C:\WINDOWS\SYSwow64\DNSAPI.dll - Microsoft Corporation
             aswAux.dll - C:\Program Files\AVAST Software\Avast\aswAux.dll - AVAST Software
             ashBase.dll - C:\Program Files\AVAST Software\Avast\ashBase.dll - AVAST Software
             ashTask.dll - C:\Program Files\AVAST Software\Avast\ashTask.dll - AVAST Software
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             avastIP.dll - C:\Program Files\AVAST Software\Avast\avastIP.dll - AVAST Software
             AavmRpch.dll - C:\Program Files\AVAST Software\Avast\AavmRpch.dll - AVAST Software
             aswLog.dll - C:\Program Files\AVAST Software\Avast\aswLog.dll - AVAST Software
             aswProperty.dll - C:\Program Files\AVAST Software\Avast\aswProperty.dll - AVAST Software
             aswUtil.dll - C:\Program Files\AVAST Software\Avast\aswUtil.dll - AVAST Software
             mfc110u.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\mfc110u.dll - Microsoft Corporation
             MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             MSIMG32.dll - C:\WINDOWS\SYSwow64\MSIMG32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             COMCTL32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_7c55c866aa0c3ff0\COMCTL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             MSVCP110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCP110.dll - Microsoft Corporation
             OLEACC.dll - C:\WINDOWS\SYSwow64\OLEACC.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSwow64\WINMM.dll - Microsoft Corporation
             aswCmnIS.dll - C:\Program Files\AVAST Software\Avast\aswCmnIS.dll - AVAST Software
             aswCmnOS.dll - C:\Program Files\AVAST Software\Avast\aswCmnOS.dll - AVAST Software
             aswCmnBS.dll - C:\Program Files\AVAST Software\Avast\aswCmnBS.dll - AVAST Software
             PSAPI.DLL - C:\WINDOWS\SYSwow64\PSAPI.DLL - Microsoft Corporation
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             WINHTTP.dll - C:\WINDOWS\SYSwow64\WINHTTP.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             urlmon.dll - C:\WINDOWS\SYSwow64\urlmon.dll - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSwow64\Secur32.dll - Microsoft Corporation
             USP10.dll - C:\WINDOWS\SYSwow64\USP10.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSwow64\WINSPOOL.DRV - Microsoft Corporation
             COMDLG32.dll - C:\WINDOWS\SYSwow64\COMDLG32.dll - Microsoft Corporation
             IMM32.dll - C:\WINDOWS\SYSwow64\IMM32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             WSOCK32.dll - C:\WINDOWS\SYSwow64\WSOCK32.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\SYSwow64\SETUPAPI.dll - Microsoft Corporation
             aswCommChannel.dll - C:\Program Files\AVAST Software\Avast\aswCommChannel.dll - AVAST Software
             aswEngLdr.dll - C:\Program Files\AVAST Software\Avast\aswEngLdr.dll - AVAST Software
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             aswSqLt.dll - C:\Program Files\AVAST Software\Avast\aswSqLt.dll - AVAST Software
             UxTheme.dll - C:\WINDOWS\SYSwow64\UxTheme.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSwow64\WINMMBASE.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\SYSwow64\CFGMGR32.dll - Microsoft Corporation
             WLDAP32.dll - C:\WINDOWS\SYSwow64\WLDAP32.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             SHCORE.DLL - C:\WINDOWS\SYSwow64\SHCORE.DLL - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             HTMLayout.dll - C:\Program Files\AVAST Software\Avast\HTMLayout.dll - AVAST Software
             dbghelp.dll - C:\Program Files\AVAST Software\Avast\dbghelp.dll - Microsoft Corporation
             Base.dll - C:\Program Files\AVAST Software\Avast\1029\Base.dll - AVAST Software
             ssleay32.dll - C:\Program Files\AVAST Software\Avast\ssleay32.dll - The OpenSSL Project, http://www.openssl.org/
             LIBEAY32.dll - C:\Program Files\AVAST Software\Avast\LIBEAY32.dll - The OpenSSL Project, http://www.openssl.org/
             CRYPTSP.dll - C:\WINDOWS\SYSwow64\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\syswow64\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSwow64\bcrypt.dll - Microsoft Corporation
             aswAra.dll - C:\Program Files\AVAST Software\Avast\aswAra.dll - AVAST Software
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSwow64\kernel.appcore.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             aswData.dll - C:\Program Files\AVAST Software\Avast\aswData.dll - AVAST Software
             Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             ashTaskEx.dll - C:\Program Files\AVAST Software\Avast\ashTaskEx.dll - AVAST Software
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             UILangRes.dll - C:\Program Files\AVAST Software\Avast\1029\UILangRes.dll - AVAST Software
             CommonRes.dll - C:\Program Files\AVAST Software\Avast\CommonRes.dll - AVAST Software
             aswResourceLib.dll - C:\Program Files\AVAST Software\Avast\aswResourceLib.dll - AVAST Software
             aswRemoteCache.dll - C:\Program Files\AVAST Software\Avast\aswRemoteCache.dll - AVAST Software
             dwmapi.dll - C:\WINDOWS\SYSwow64\dwmapi.dll - Microsoft Corporation
             icudt.dll - C:\Program Files\AVAST Software\Avast\icudt.dll - The ICU Project
             D3DCompiler_43.dll - C:\WINDOWS\SYSwow64\D3DCompiler_43.dll - Microsoft Corporation
             NLAapi.dll - C:\WINDOWS\syswow64\NLAapi.dll - Microsoft Corporation
             dhcpcsvc6.DLL - C:\WINDOWS\SYSwow64\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - C:\WINDOWS\SYSwow64\dhcpcsvc.DLL - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSwow64\clbcatq.dll - Microsoft Corporation
             WinSATAPI.dll - C:\WINDOWS\syswow64\WinSATAPI.dll - Microsoft Corporation
             dxgi.dll - C:\WINDOWS\syswow64\dxgi.dll - Microsoft Corporation
             gdiplus.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_dadf89385bc5c7d7\gdiplus.dll - Microsoft Corporation
             msxml6.dll - C:\Windows\SYSwow64\msxml6.dll - Microsoft Corporation
             PROPSYS.dll - C:\WINDOWS\SYSwow64\PROPSYS.dll - Microsoft Corporation
             DSOUND.dll - C:\WINDOWS\SYSwow64\DSOUND.dll - Microsoft Corporation
             UIAutomationCore.DLL - C:\WINDOWS\SYSwow64\UIAutomationCore.DLL - Microsoft Corporation
             POWRPROF.dll - C:\WINDOWS\SYSwow64\POWRPROF.dll - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09\comctl32.dll - Microsoft Corporation
             sxs.dll - C:\WINDOWS\SYSwow64\sxs.dll - Microsoft Corporation
             uiExt.dll - C:\Program Files\AVAST Software\Avast\defs\14021301\uiExt.dll - AVAST Software
             Activeds.dll - C:\WINDOWS\SYSwow64\Activeds.dll - Microsoft Corporation
             adsldpc.dll - C:\WINDOWS\SYSwow64\adsldpc.dll - Microsoft Corporation
             adsldp.dll - C:\WINDOWS\syswow64\adsldp.dll - Microsoft Corporation
             NETAPI32.DLL - C:\WINDOWS\syswow64\NETAPI32.DLL - Microsoft Corporation
             netutils.dll - C:\WINDOWS\SYSwow64\netutils.dll - Microsoft Corporation
             srvcli.dll - C:\WINDOWS\SYSwow64\srvcli.dll - Microsoft Corporation
             wkscli.dll - C:\WINDOWS\SYSwow64\wkscli.dll - Microsoft Corporation
             LOGONCLI.DLL - C:\WINDOWS\SYSwow64\LOGONCLI.DLL - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[PCHunter64.exe]Modules
             PCHunter64.exe - C:\Users\J R\Desktop\PCHunter_free\PCHunter64.exe - ????(??)????????
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             apphelp.dll - C:\WINDOWS\system32\apphelp.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             MSIMG32.dll - C:\WINDOWS\SYSTEM32\MSIMG32.dll - Microsoft Corporation
             COMDLG32.dll - C:\WINDOWS\system32\COMDLG32.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSTEM32\WINSPOOL.DRV - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             COMCTL32.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_34a8918f959016ea\COMCTL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             oledlg.dll - C:\WINDOWS\SYSTEM32\oledlg.dll - Microsoft Corporation
             urlmon.dll - C:\WINDOWS\SYSTEM32\urlmon.dll - Microsoft Corporation
             gdiplus.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_9332526147499ed1\gdiplus.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSTEM32\VERSION.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL - Microsoft Corporation
             NETAPI32.dll - C:\WINDOWS\SYSTEM32\NETAPI32.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             WININET.dll - C:\WINDOWS\SYSTEM32\WININET.dll - Microsoft Corporation
             OLEACC.dll - C:\WINDOWS\SYSTEM32\OLEACC.dll - Microsoft Corporation
             IMM32.dll - C:\WINDOWS\system32\IMM32.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSTEM32\WINMM.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSTEM32\iertutil.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSTEM32\WINNSI.DLL - Microsoft Corporation
             netutils.dll - C:\WINDOWS\SYSTEM32\netutils.dll - Microsoft Corporation
             srvcli.dll - C:\WINDOWS\SYSTEM32\srvcli.dll - Microsoft Corporation
             wkscli.dll - C:\WINDOWS\SYSTEM32\wkscli.dll - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSTEM32\WINMMBASE.dll - Microsoft Corporation
             SAMCLI.DLL - C:\WINDOWS\SYSTEM32\SAMCLI.DLL - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSTEM32\cfgmgr32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSTEM32\DEVOBJ.dll - Microsoft Corporation
             SHCORE.DLL - C:\WINDOWS\SYSTEM32\SHCORE.DLL - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\system32\dwmapi.dll - Microsoft Corporation
             Psapi.dll - C:\WINDOWS\system32\Psapi.dll - Microsoft Corporation
             RICHED32.DLL - C:\WINDOWS\SYSTEM32\RICHED32.DLL - Microsoft Corporation
             RICHED20.dll - C:\WINDOWS\SYSTEM32\RICHED20.dll - Microsoft Corporation
             USP10.dll - C:\WINDOWS\SYSTEM32\USP10.dll - Microsoft Corporation
             msls31.dll - C:\WINDOWS\SYSTEM32\msls31.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             comctl32.DLL - C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\comctl32.DLL - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSTEM32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             PROPSYS.dll - C:\WINDOWS\SYSTEM32\PROPSYS.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\WINDOWS\SYSTEM32\WindowsCodecs.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSTEM32\profapi.dll - Microsoft Corporation
             MrmCoreR.dll - C:\WINDOWS\SYSTEM32\MrmCoreR.dll - Microsoft Corporation
             Bcp47Langs.dll - C:\WINDOWS\SYSTEM32\Bcp47Langs.dll - Microsoft Corporation
             thumbcache.dll - C:\Windows\System32\thumbcache.dll - Microsoft Corporation
             dhcpcsvc.DLL - C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSTEM32\Secur32.dll - Microsoft Corporation
             SSPICLI.DLL - C:\WINDOWS\SYSTEM32\SSPICLI.DLL - Microsoft Corporation
             ondemandconnroutehelper.dll - C:\WINDOWS\SYSTEM32\ondemandconnroutehelper.dll - Microsoft Corporation
             winhttp.dll - C:\WINDOWS\SYSTEM32\winhttp.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             DNSAPI.dll - C:\WINDOWS\SYSTEM32\DNSAPI.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\System32\rasadhlp.dll - Microsoft Corporation
             fwpuclnt.dll - C:\WINDOWS\System32\fwpuclnt.dll - Microsoft Corporation
             riched20.dll - C:\Windows\System32\riched20.dll - Microsoft Corporation
             oledlg.dll - C:\Windows\System32\oledlg.dll - Microsoft Corporation
             msls31.dll - C:\Windows\System32\msls31.dll - Microsoft Corporation
             winmmbase.dll - C:\Windows\System32\winmmbase.dll - Microsoft Corporation
             winmm.dll - C:\Windows\System32\winmm.dll - Microsoft Corporation
             usp10.dll - C:\Windows\System32\usp10.dll - Microsoft Corporation
             riched32.dll - C:\Windows\System32\riched32.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             OnDemandConnRouteHelper.dll - C:\Windows\System32\OnDemandConnRouteHelper.dll - Microsoft Corporation
             winspool.drv - C:\Windows\System32\winspool.drv - Microsoft Corporation
             rasadhlp.dll - C:\Windows\System32\rasadhlp.dll - Microsoft Corporation
             winhttp.dll - C:\Windows\System32\winhttp.dll - Microsoft Corporation
             wininet.dll - C:\Windows\System32\wininet.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\System32\iertutil.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\System32\urlmon.dll - Microsoft Corporation
             MrmCoreR.dll - C:\Windows\System32\MrmCoreR.dll - Microsoft Corporation
             samcli.dll - C:\Windows\System32\samcli.dll - Microsoft Corporation
             version.dll - C:\Windows\System32\version.dll - Microsoft Corporation
             dhcpcsvc.dll - C:\Windows\System32\dhcpcsvc.dll - Microsoft Corporation
             FWPUCLNT.DLL - C:\Windows\System32\FWPUCLNT.DLL - Microsoft Corporation
             winnsi.dll - C:\Windows\System32\winnsi.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             wkscli.dll - C:\Windows\System32\wkscli.dll - Microsoft Corporation
             netapi32.dll - C:\Windows\System32\netapi32.dll - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             secur32.dll - C:\Windows\System32\secur32.dll - Microsoft Corporation
             thumbcache.dll - C:\Windows\System32\thumbcache.dll - Microsoft Corporation
             BCP47Langs.dll - C:\Windows\System32\BCP47Langs.dll - Microsoft Corporation
             comctl32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\comctl32.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\System32\dwmapi.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             oleacc.dll - C:\Windows\System32\oleacc.dll - Microsoft Corporation
             msimg32.dll - C:\Windows\System32\msimg32.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\Windows\System32\WindowsCodecs.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\System32\apphelp.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             netutils.dll - C:\Windows\System32\netutils.dll - Microsoft Corporation
             dnsapi.dll - C:\Windows\System32\dnsapi.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\System32\srvcli.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             comctl32.dll - C:\Windows\System32\comctl32.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             psapi.dll - C:\Windows\System32\psapi.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             comdlg32.dll - C:\Windows\System32\comdlg32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             GdiPlus.dll - C:\Windows\System32\GdiPlus.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\WINDOWS\System32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             wersvc.dll - c:\windows\system32\wersvc.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             wersvc.dll - C:\Windows\System32\wersvc.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             rpcepmap.dll - c:\windows\system32\rpcepmap.dll - Microsoft Corporation
             sspicli.dll - C:\WINDOWS\system32\sspicli.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\WINDOWS\system32\RpcRtRemote.dll - Microsoft Corporation
             rpcss.dll - c:\windows\system32\rpcss.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             CRYPTSP.dll - c:\windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\system32\bcrypt.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             FirewallAPI.dll - C:\WINDOWS\system32\FirewallAPI.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             wtsapi32.dll - C:\WINDOWS\SYSTEM32\wtsapi32.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSTEM32\WINSTA.dll - Microsoft Corporation
             fwpuclnt.dll - C:\WINDOWS\system32\fwpuclnt.dll - Microsoft Corporation
             advapi32.dll - C:\WINDOWS\SYSTEM32\advapi32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSTEM32\ole32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             FWPUCLNT.DLL - C:\Windows\System32\FWPUCLNT.DLL - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             FirewallAPI.dll - C:\Windows\System32\FirewallAPI.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\System32\RpcRtRemote.dll - Microsoft Corporation
             RpcEpMap.dll - C:\Windows\System32\RpcEpMap.dll - Microsoft Corporation
             rpcss.dll - C:\Windows\System32\rpcss.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[SetPoint.exe]Modules
             SetPoint.exe - C:\Program Files\Logitech\SetPointP\SetPoint.exe - Logitech, Inc.
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSTEM32\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSTEM32\WINMM.dll - Microsoft Corporation
             WSOCK32.dll - C:\WINDOWS\SYSTEM32\WSOCK32.dll - Microsoft Corporation
             KemUtil.dll - C:\Program Files\Logitech\SetPointP\KemUtil.dll - Logitech, Inc.
             SetPointCOM.dll - C:\Program Files\Logitech\SetPointP\SetPointCOM.dll - Logitech, Inc.
             kemutb.dll - C:\Program Files\Logitech\SetPointP\kemutb.dll - Logitech, Inc.
             KemWnd.dll - C:\Program Files\Logitech\SetPointP\KemWnd.dll - Logitech, Inc.
             KemXML.dll - C:\Program Files\Logitech\SetPointP\KemXML.dll - Logitech, Inc.
             khalwrapper.dll - C:\Program Files\Logitech\SetPointP\khalwrapper.dll - Logitech, Inc.
             mfc90u.dll - C:\WINDOWS\WinSxS\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_044aad0bab1eb146\mfc90u.dll - Microsoft Corporation
             MSVCR90.dll - C:\WINDOWS\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\MSVCR90.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             COMCTL32.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\COMCTL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             MSVCP90.dll - C:\WINDOWS\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\MSVCP90.dll - Microsoft Corporation
             PSAPI.DLL - C:\WINDOWS\system32\PSAPI.DLL - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSTEM32\WINMMBASE.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             COMDLG32.dll - C:\WINDOWS\system32\COMDLG32.dll - Microsoft Corporation
             MSIMG32.dll - C:\WINDOWS\SYSTEM32\MSIMG32.dll - Microsoft Corporation
             gdiplus.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_9332526147499ed1\gdiplus.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSTEM32\cfgmgr32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSTEM32\DEVOBJ.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             SHCORE.DLL - C:\WINDOWS\SYSTEM32\SHCORE.DLL - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             UxTheme.dll - C:\WINDOWS\system32\UxTheme.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\system32\dwmapi.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSTEM32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             MacroCore.dll - C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll - Logitech, Inc.
             POWRPROF.dll - C:\WINDOWS\SYSTEM32\POWRPROF.dll - Microsoft Corporation
             WebBrowserSupport.dll - C:\Program Files\Logitech\SetPointP\WebBrowserSupport.dll - Logitech, Inc.
             ATL90.DLL - C:\WINDOWS\WinSxS\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_0a1fd3a3a768b895\ATL90.DLL - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSTEM32\WTSAPI32.dll - Microsoft Corporation
             MacroAppSwitch.dll - C:\Program Files\Logitech\SetPointP\Macros\MacroAppSwitch.dll - Logitech, Inc.
             MacroMedia.dll - C:\Program Files\Logitech\SetPointP\Macros\MacroMedia.dll - Logitech, Inc.
             MacroEmail.dll - C:\Program Files\Logitech\SetPointP\Macros\MacroEmail.dll - Logitech, Inc.
             KemMon.dll - C:\Program Files\Logitech\SetPointP\KemMon.dll - Logitech, Inc.
             profapi.dll - C:\WINDOWS\SYSTEM32\profapi.dll - Microsoft Corporation
             KhalApi.dll - C:\Program Files\Common Files\LogiShrd\KHAL3\KhalApi.dll - Logitech, Inc.
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             ntmarta.dll - C:\WINDOWS\SYSTEM32\ntmarta.dll - Microsoft Corporation
             apphelp.dll - C:\WINDOWS\system32\apphelp.dll - Microsoft Corporation
             LBTServ.dll - C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.dll - Logitech, Inc.
             PROPSYS.dll - C:\WINDOWS\SYSTEM32\PROPSYS.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\System32\urlmon.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\System32\iertutil.dll - Microsoft Corporation
             WININET.dll - C:\Windows\System32\WININET.dll - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSTEM32\Secur32.dll - Microsoft Corporation
             SSPICLI.DLL - C:\WINDOWS\SYSTEM32\SSPICLI.DLL - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSTEM32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSTEM32\bcrypt.dll - Microsoft Corporation
             pcacli.dll - C:\WINDOWS\SYSTEM32\pcacli.dll - Microsoft Corporation
             MPR.dll - C:\WINDOWS\SYSTEM32\MPR.dll - Microsoft Corporation
             sfc_os.dll - C:\WINDOWS\System32\sfc_os.dll - Microsoft Corporation
             DEVRTL.dll - C:\WINDOWS\SYSTEM32\DEVRTL.dll - Microsoft Corporation
             kgame.dll - C:\Program Files\Logitech\SetPointP\kgame.dll - Logitech, Inc.
             LCabHandler.dll - C:\Program Files\Logitech\SetPointP\LCabHandler.dll - Logitech, Inc.
             D3D9.DLL - C:\WINDOWS\SYSTEM32\D3D9.DLL - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSTEM32\WINSTA.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             igdumdim64.dll - C:\WINDOWS\SYSTEM32\igdumdim64.dll - Intel Corporation
             igdusc64.dll - C:\WINDOWS\SYSTEM32\igdusc64.dll - Intel Corporation
             WinRTProxy.DLL - C:\Program Files\Logitech\SetPointP\WinRTProxy.DLL - Logitech, Inc.
             vccorlib110.DLL - C:\Program Files\Logitech\SetPointP\vccorlib110.DLL - Microsoft Corporation
             MSVCR110.dll - C:\Program Files\Logitech\SetPointP\MSVCR110.dll - Microsoft Corporation
             MSVCP110.dll - C:\Program Files\Logitech\SetPointP\MSVCP110.dll - Microsoft Corporation
             wpnapps.dll - C:\Windows\System32\wpnapps.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             igdumdim64.dll - C:\Windows\System32\igdumdim64.dll - Intel Corporation
             wsock32.dll - C:\Windows\System32\wsock32.dll - Microsoft Corporation
             d3d9.dll - C:\Windows\System32\d3d9.dll - Microsoft Corporation
             msvcp110.dll - C:\Program Files\Logitech\SetPointP\msvcp110.dll - Microsoft Corporation
             msvcr110.dll - C:\Program Files\Logitech\SetPointP\msvcr110.dll - Microsoft Corporation
             wpnapps.dll - C:\Windows\System32\wpnapps.dll - Microsoft Corporation
             vccorlib110.dll - C:\Program Files\Logitech\SetPointP\vccorlib110.dll - Microsoft Corporation
             pcacli.dll - C:\Windows\System32\pcacli.dll - Microsoft Corporation
             mpr.dll - C:\Windows\System32\mpr.dll - Microsoft Corporation
             WinRTProxy.dll - C:\Program Files\Logitech\SetPointP\WinRTProxy.dll - Logitech, Inc.
             winmmbase.dll - C:\Windows\System32\winmmbase.dll - Microsoft Corporation
             winmm.dll - C:\Windows\System32\winmm.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             devrtl.dll - C:\Windows\System32\devrtl.dll - Microsoft Corporation
             wininet.dll - C:\Windows\System32\wininet.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\System32\iertutil.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\System32\urlmon.dll - Microsoft Corporation
             sfc_os.dll - C:\Windows\System32\sfc_os.dll - Microsoft Corporation
             version.dll - C:\Windows\System32\version.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\System32\ntmarta.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             secur32.dll - C:\Windows\System32\secur32.dll - Microsoft Corporation
             comctl32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\comctl32.dll - Microsoft Corporation
             igdusc64.dll - C:\Windows\System32\igdusc64.dll - Intel Corporation
             dwmapi.dll - C:\Windows\System32\dwmapi.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             msimg32.dll - C:\Windows\System32\msimg32.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\System32\apphelp.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             psapi.dll - C:\Windows\System32\psapi.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             comdlg32.dll - C:\Windows\System32\comdlg32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             GdiPlus.dll - C:\Windows\System32\GdiPlus.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Modules
             new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSwow64\WINMM.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSwow64\WINMMBASE.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSwow64\cfgmgr32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSwow64\shcore.dll - Microsoft Corporation
             chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             USP10.dll - C:\WINDOWS\SYSwow64\USP10.dll - Microsoft Corporation
             PSAPI.DLL - C:\WINDOWS\SYSwow64\PSAPI.DLL - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSwow64\WINSPOOL.DRV - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSwow64\Secur32.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             dbghelp.dll - C:\WINDOWS\SYSwow64\dbghelp.dll - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09\comctl32.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\icudt.dll - The ICU Project
             pdf.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll - 
             ppGoogleNaClPluginChrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll - 
             libpeerconnection.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libpeerconnection.dll - Google Inc.
             ffmpegsumo.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll - 
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[AsusTPLoader.exe]Modules
             AsusTPLoader.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe - AsusTek
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSTEM32\WTSAPI32.dll - Microsoft Corporation
             MSVCR100.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\MSVCR100.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSTEM32\SspiCli.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSTEM32\WINSTA.dll - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\comctl32.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSTEM32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             PROPSYS.dll - C:\WINDOWS\SYSTEM32\PROPSYS.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSTEM32\profapi.dll - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSTEM32\Secur32.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSTEM32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSTEM32\bcrypt.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\system32\CFGMGR32.dll - Microsoft Corporation
             apphelp.dll - C:\WINDOWS\system32\apphelp.dll - Microsoft Corporation
             AsusTPLoader.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe - AsusTek
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             secur32.dll - C:\Windows\System32\secur32.dll - Microsoft Corporation
             comctl32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\comctl32.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\System32\apphelp.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[ASUSWakeupService.exe]Modules
             ASUSWakeupService.exe - C:\Program Files\ASUS\ASUS VivoBook\ASUSWakeupService.exe - ASUSTek Computer Inc.
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             MSCOREE.DLL - C:\WINDOWS\SYSTEM32\MSCOREE.DLL - Microsoft Corporation
             KERNEL32.dll - C:\WINDOWS\system32\KERNEL32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             mscoreei.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             MSVCR120_CLR0400.dll - C:\WINDOWS\SYSTEM32\MSVCR120_CLR0400.dll - Microsoft Corporation
             mscorlib.ni.dll - C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\mscorlib\1c4f23e80bd4b68fb3f56bdb16dbb647\mscorlib.ni.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSTEM32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll - Microsoft Corporation
             System.ServiceProcess.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSTEM32\VERSION.dll - Microsoft Corporation
             System.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll - Microsoft Corporation
             clrjit.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             Wtsapi32.dll - C:\WINDOWS\SYSTEM32\Wtsapi32.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             taskschd.dll - C:\Windows\System32\taskschd.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSTEM32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSTEM32\bcrypt.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\System32\SspiCli.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSTEM32\WINSTA.dll - Microsoft Corporation
             System.ServiceProcess.resources.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.ServiceProcess.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll - Microsoft Corporation
             System.resources.dll - C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.resources.dll - Microsoft Corporation
             System.ServiceProcess.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - Microsoft Corporation
             System.ServiceProcess.resources.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll - Microsoft Corporation
             System.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll - Microsoft Corporation
             System.resources.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.resources.dll - Microsoft Corporation
             clrjit.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll - Microsoft Corporation
             mscorlib.ni.dll - C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\1c4f23e80bd4b68fb3f56bdb16dbb647\mscorlib.ni.dll - Microsoft Corporation
             msvcr120_clr0400.dll - C:\Windows\System32\msvcr120_clr0400.dll - Microsoft Corporation
             clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             mscoreei.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll - Microsoft Corporation
             mscoree.dll - C:\Windows\System32\mscoree.dll - Microsoft Corporation
             version.dll - C:\Windows\System32\version.dll - Microsoft Corporation
             taskschd.dll - C:\Windows\System32\taskschd.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[AvastSvc.exe]Modules
             AvastSvc.exe - C:\Program Files\AVAST Software\Avast\AvastSvc.exe - AVAST Software
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             ashBase.dll - C:\Program Files\AVAST Software\Avast\ashBase.dll - AVAST Software
             MSVCP110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCP110.dll - Microsoft Corporation
             aswCmnBS.dll - C:\Program Files\AVAST Software\Avast\aswCmnBS.dll - AVAST Software
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             WSOCK32.dll - C:\WINDOWS\SYSwow64\WSOCK32.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             PSAPI.DLL - C:\WINDOWS\SYSwow64\PSAPI.DLL - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             aswCmnOS.dll - C:\Program Files\AVAST Software\Avast\aswCmnOS.dll - AVAST Software
             SETUPAPI.dll - C:\WINDOWS\SYSwow64\SETUPAPI.dll - Microsoft Corporation
             avastIP.dll - C:\Program Files\AVAST Software\Avast\avastIP.dll - AVAST Software
             aswCommChannel.dll - C:\Program Files\AVAST Software\Avast\aswCommChannel.dll - AVAST Software
             aswEngLdr.dll - C:\Program Files\AVAST Software\Avast\aswEngLdr.dll - AVAST Software
             aswCmnIS.dll - C:\Program Files\AVAST Software\Avast\aswCmnIS.dll - AVAST Software
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\SYSwow64\CFGMGR32.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             WINHTTP.dll - C:\WINDOWS\SYSwow64\WINHTTP.dll - Microsoft Corporation
             WLDAP32.dll - C:\WINDOWS\SYSwow64\WLDAP32.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             dbghelp.dll - C:\Program Files\AVAST Software\Avast\dbghelp.dll - Microsoft Corporation
             Base.dll - C:\Program Files\AVAST Software\Avast\1029\Base.dll - AVAST Software
             ssleay32.dll - C:\Program Files\AVAST Software\Avast\ssleay32.dll - The OpenSSL Project, http://www.openssl.org/
             LIBEAY32.dll - C:\Program Files\AVAST Software\Avast\LIBEAY32.dll - The OpenSSL Project, http://www.openssl.org/
             CRYPTSP.dll - C:\WINDOWS\SYSwow64\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\syswow64\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSwow64\bcrypt.dll - Microsoft Corporation
             ashServ.dll - C:\Program Files\AVAST Software\Avast\ashServ.dll - AVAST Software
             RASAPI32.dll - C:\WINDOWS\SYSwow64\RASAPI32.dll - Microsoft Corporation
             aswProperty.dll - C:\Program Files\AVAST Software\Avast\aswProperty.dll - AVAST Software
             ashTask.dll - C:\Program Files\AVAST Software\Avast\ashTask.dll - AVAST Software
             Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             aswIdle.dll - C:\Program Files\AVAST Software\Avast\aswIdle.dll - AVAST Software
             aswLog.dll - C:\Program Files\AVAST Software\Avast\aswLog.dll - AVAST Software
             ashTaskEx.dll - C:\Program Files\AVAST Software\Avast\ashTaskEx.dll - AVAST Software
             aswStrm.dll - C:\Program Files\AVAST Software\Avast\aswStrm.dll - AVAST Software
             aswAux.dll - C:\Program Files\AVAST Software\Avast\aswAux.dll - AVAST Software
             rasman.dll - C:\WINDOWS\SYSwow64\rasman.dll - Microsoft Corporation
             AavmRpch.dll - C:\Program Files\AVAST Software\Avast\AavmRpch.dll - AVAST Software
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             aswSqLt.dll - C:\Program Files\AVAST Software\Avast\aswSqLt.dll - AVAST Software
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             wscisvif.dll - C:\WINDOWS\syswow64\wscisvif.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             WSCAPI.dll - C:\WINDOWS\SYSwow64\WSCAPI.dll - Microsoft Corporation
             aswEngin.dll - C:\Program Files\AVAST Software\Avast\defs\14021301\aswEngin.dll - AVAST Software
             aswCmnIS.dll - C:\Program Files\AVAST Software\Avast\defs\14021301\aswCmnIS.dll - AVAST Software
             aswCmnOS.dll - C:\Program Files\AVAST Software\Avast\defs\14021301\aswCmnOS.dll - AVAST Software
             aswCmnBS.dll - C:\Program Files\AVAST Software\Avast\defs\14021301\aswCmnBS.dll - AVAST Software
             aswScan.dll - C:\Program Files\AVAST Software\Avast\defs\14021301\aswScan.dll - AVAST Software
             aswRep.dll - C:\Program Files\AVAST Software\Avast\defs\14021301\aswRep.dll - AVAST Software
             aswFiDb.dll - C:\Program Files\AVAST Software\Avast\defs\14021301\aswFiDb.dll - AVAST Software
             algo.dll - C:\Program Files\AVAST Software\Avast\defs\14021301\algo.dll - 
             secur32.dll - C:\WINDOWS\SYSwow64\secur32.dll - Microsoft Corporation
             FltLib.dll - C:\WINDOWS\SYSwow64\FltLib.dll - Microsoft Corporation
             napinsp.dll - C:\WINDOWS\syswow64\napinsp.dll - Microsoft Corporation
             Wtsapi32.dll - C:\WINDOWS\SYSwow64\Wtsapi32.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSwow64\WINSTA.dll - Microsoft Corporation
             NetApi32.dll - C:\WINDOWS\SYSwow64\NetApi32.dll - Microsoft Corporation
             netutils.dll - C:\WINDOWS\SYSwow64\netutils.dll - Microsoft Corporation
             srvcli.dll - C:\WINDOWS\SYSwow64\srvcli.dll - Microsoft Corporation
             wkscli.dll - C:\WINDOWS\SYSwow64\wkscli.dll - Microsoft Corporation
             AhResMai.dll - C:\Program Files\AVAST Software\Avast\AhResMai.dll - AVAST Software
             AhResStd.dll - C:\Program Files\AVAST Software\Avast\AhResStd.dll - AVAST Software
             AhResWS.dll - C:\Program Files\AVAST Software\Avast\AhResWS.dll - AVAST Software
             AhResWS2.dll - C:\Program Files\AVAST Software\Avast\AhResWS2.dll - AVAST Software
             pnrpnsp.dll - C:\WINDOWS\syswow64\pnrpnsp.dll - Microsoft Corporation
             NLAapi.dll - C:\WINDOWS\syswow64\NLAapi.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\Syswow64\mswsock.dll - Microsoft Corporation
             DNSAPI.dll - C:\WINDOWS\SYSwow64\DNSAPI.dll - Microsoft Corporation
             winrnr.dll - C:\WINDOWS\Syswow64\winrnr.dll - Microsoft Corporation
             wshbth.dll - C:\WINDOWS\syswow64\wshbth.dll - Microsoft Corporation
             fwpuclnt.dll - C:\WINDOWS\Syswow64\fwpuclnt.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\Syswow64\rasadhlp.dll - Microsoft Corporation
             dhcpcsvc6.DLL - C:\WINDOWS\SYSwow64\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - C:\WINDOWS\SYSwow64\dhcpcsvc.DLL - Microsoft Corporation
             wlanapi.dll - C:\WINDOWS\SYSwow64\wlanapi.dll - Microsoft Corporation
             netshell.dll - C:\WINDOWS\SYSwow64\netshell.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSwow64\kernel.appcore.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSwow64\clbcatq.dll - Microsoft Corporation
             ashMaiSv.dll - C:\Program Files\AVAST Software\Avast\ashMaiSv.dll - AVAST Software
             WINTRUST.dll - C:\WINDOWS\SYSwow64\WINTRUST.dll - Microsoft Corporation
             DPAPI.dll - C:\WINDOWS\SYSwow64\DPAPI.dll - Microsoft Corporation
             aswStreamFilter.dll - C:\Program Files\AVAST Software\Avast\aswStreamFilter.dll - AVAST Software
             apphelp.dll - C:\WINDOWS\syswow64\apphelp.dll - Microsoft Corporation
             aswJSScan.dll - C:\Program Files\AVAST Software\Avast\aswJSScan.dll - AVAST Software
             aswpatchmgt.dll - C:\Program Files\AVAST Software\Avast\aswpatchmgt.dll - AVAST Software
             SAMCLI.DLL - C:\WINDOWS\SYSwow64\SAMCLI.DLL - Microsoft Corporation
             webio.dll - C:\WINDOWS\SYSwow64\webio.dll - Microsoft Corporation
             schannel.dll - C:\WINDOWS\SYSwow64\schannel.dll - Microsoft Corporation
             gpapi.dll - C:\WINDOWS\SYSwow64\gpapi.dll - Microsoft Corporation
             ncrypt.dll - C:\WINDOWS\SYSwow64\ncrypt.dll - Microsoft Corporation
             NTASN1.dll - C:\WINDOWS\SYSwow64\NTASN1.dll - Microsoft Corporation
             ncryptsslp.dll - C:\WINDOWS\syswow64\ncryptsslp.dll - Microsoft Corporation
             wscproxystub.dll - C:\WINDOWS\syswow64\wscproxystub.dll - Microsoft Corporation
             urlmon.dll - C:\WINDOWS\SYSwow64\urlmon.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\WINDOWS\System32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\System32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\System32\bcryptPrimitives.dll - Microsoft Corporation
             user32.dll - C:\WINDOWS\SYSTEM32\user32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             audioendpointbuilder.dll - c:\windows\system32\audioendpointbuilder.dll - Microsoft Corporation
             bcrypt.dll - c:\windows\system32\bcrypt.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSTEM32\cfgmgr32.dll - Microsoft Corporation
             MMDevAPI.DLL - c:\windows\system32\MMDevAPI.DLL - Microsoft Corporation
             DEVOBJ.dll - c:\windows\system32\DEVOBJ.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             wtsapi32.dll - C:\WINDOWS\SYSTEM32\wtsapi32.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSTEM32\WINSTA.dll - Microsoft Corporation
             tabsvc.dll - c:\windows\system32\tabsvc.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             wudfsvc.dll - c:\windows\system32\wudfsvc.dll - Microsoft Corporation
             WUDFPlatform.dll - c:\windows\system32\WUDFPlatform.dll - Microsoft Corporation
             SspiCli.dll - c:\windows\system32\SspiCli.dll - Microsoft Corporation
             advapi32.dll - C:\WINDOWS\SYSTEM32\advapi32.dll - Microsoft Corporation
             HID.DLL - c:\windows\system32\HID.DLL - Microsoft Corporation
             wlansvc.dll - c:\windows\system32\wlansvc.dll - Microsoft Corporation
             WLANMSM.DLL - c:\windows\system32\WLANMSM.DLL - Microsoft Corporation
             OneX.DLL - c:\windows\system32\OneX.DLL - Microsoft Corporation
             SYSNTFY.dll - c:\windows\system32\SYSNTFY.dll - Microsoft Corporation
             CRYPTSP.dll - c:\windows\system32\CRYPTSP.dll - Microsoft Corporation
             WLANSEC.dll - c:\windows\system32\WLANSEC.dll - Microsoft Corporation
             IPHLPAPI.DLL - c:\windows\system32\IPHLPAPI.DLL - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             eappprxy.dll - c:\windows\system32\eappprxy.dll - Microsoft Corporation
             dhcpcsvc.DLL - c:\windows\system32\dhcpcsvc.DLL - Microsoft Corporation
             WINNSI.DLL - c:\windows\system32\WINNSI.DLL - Microsoft Corporation
             wlansvcpal.dll - C:\WINDOWS\System32\wlansvcpal.dll - Microsoft Corporation
             FirewallAPI.dll - C:\WINDOWS\System32\FirewallAPI.dll - Microsoft Corporation
             msxml6.dll - C:\Windows\System32\msxml6.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             DPAPI.DLL - c:\windows\system32\DPAPI.DLL - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             TetheringIeProvider.dll - C:\WINDOWS\System32\TetheringIeProvider.dll - Microsoft Corporation
             WiFiDisplay.dll - C:\WINDOWS\System32\WiFiDisplay.dll - Microsoft Corporation
             wlanapi.dll - C:\WINDOWS\System32\wlanapi.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             WMICLNT.dll - c:\windows\system32\WMICLNT.dll - Microsoft Corporation
             wevtapi.dll - C:\WINDOWS\System32\wevtapi.dll - Microsoft Corporation
             wlgpclnt.dll - C:\WINDOWS\SYSTEM32\wlgpclnt.dll - Microsoft Corporation
             l2gpstore.dll - c:\windows\system32\l2gpstore.dll - Microsoft Corporation
             gpapi.dll - C:\WINDOWS\SYSTEM32\gpapi.dll - Microsoft Corporation
             DSROLE.dll - c:\windows\system32\DSROLE.dll - Microsoft Corporation
             kerberos.DLL - C:\WINDOWS\system32\kerberos.DLL - Microsoft Corporation
             cryptdll.dll - C:\WINDOWS\System32\cryptdll.dll - Microsoft Corporation
             profapi.dll - c:\windows\system32\profapi.dll - Microsoft Corporation
             netcfgx.dll - C:\Windows\System32\netcfgx.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\system32\WINTRUST.dll - Microsoft Corporation
             das.dll - c:\windows\system32\das.dll - Microsoft Corporation
             pcasvc.dll - c:\windows\system32\pcasvc.dll - Microsoft Corporation
             AEPIC.dll - c:\windows\system32\AEPIC.dll - Microsoft Corporation
             apphelp.dll - c:\windows\system32\apphelp.dll - Microsoft Corporation
             USERENV.dll - c:\windows\system32\USERENV.dll - Microsoft Corporation
             sfc_os.dll - c:\windows\system32\sfc_os.dll - Microsoft Corporation
             VERSION.dll - c:\windows\system32\VERSION.dll - Microsoft Corporation
             sysmain.dll - c:\windows\system32\sysmain.dll - Microsoft Corporation
             trkwks.dll - c:\windows\system32\trkwks.dll - Microsoft Corporation
             netman.dll - c:\windows\system32\netman.dll - Microsoft Corporation
             hidserv.dll - c:\windows\system32\hidserv.dll - Microsoft Corporation
             netshell.dll - C:\WINDOWS\System32\netshell.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             nlaapi.dll - C:\WINDOWS\System32\nlaapi.dll - Microsoft Corporation
             PortableDeviceApi.dll - C:\WINDOWS\System32\PortableDeviceApi.dll - Microsoft Corporation
             hnetcfg.dll - C:\WINDOWS\system32\hnetcfg.dll - Microsoft Corporation
             ATL.DLL - C:\WINDOWS\system32\ATL.DLL - Microsoft Corporation
             wbemprox.dll - C:\WINDOWS\system32\wbem\wbemprox.dll - Microsoft Corporation
             wbemcomn.dll - C:\WINDOWS\SYSTEM32\wbemcomn.dll - Microsoft Corporation
             wbemsvc.dll - C:\WINDOWS\system32\wbem\wbemsvc.dll - Microsoft Corporation
             portabledeviceconnectapi.dll - C:\Windows\System32\portabledeviceconnectapi.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSTEM32\shcore.dll - Microsoft Corporation
             dafBth.dll - C:\WINDOWS\system32\dafBth.dll - Microsoft Corporation
             BluetoothApis.dll - C:\WINDOWS\System32\BluetoothApis.dll - Microsoft Corporation
             fastprox.dll - C:\WINDOWS\system32\wbem\fastprox.dll - Microsoft Corporation
             NCI.dll - C:\WINDOWS\system32\NCI.dll - Microsoft Corporation
             listsvc.dll - c:\windows\system32\listsvc.dll - Microsoft Corporation
             shacct.dll - C:\WINDOWS\System32\shacct.dll - Microsoft Corporation
             SAMLIB.dll - C:\WINDOWS\System32\SAMLIB.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             fhlisten.dll - C:\WINDOWS\System32\fhlisten.dll - Microsoft Corporation
             XmlLite.dll - C:\WINDOWS\System32\XmlLite.dll - Microsoft Corporation
             hgprint.dll - C:\WINDOWS\system32\hgprint.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\system32\WINSPOOL.DRV - Microsoft Corporation
             wkscli.dll - C:\WINDOWS\SYSTEM32\wkscli.dll - Microsoft Corporation
             IdListen.dll - C:\WINDOWS\System32\IdListen.dll - Microsoft Corporation
             NETAPI32.dll - C:\WINDOWS\System32\NETAPI32.dll - Microsoft Corporation
             PROPSYS.dll - C:\WINDOWS\System32\PROPSYS.dll - Microsoft Corporation
             ncrypt.dll - C:\WINDOWS\System32\ncrypt.dll - Microsoft Corporation
             netutils.dll - C:\WINDOWS\System32\netutils.dll - Microsoft Corporation
             srvcli.dll - C:\WINDOWS\System32\srvcli.dll - Microsoft Corporation
             NTASN1.dll - C:\WINDOWS\System32\NTASN1.dll - Microsoft Corporation
             SAMCLI.DLL - C:\WINDOWS\System32\SAMCLI.DLL - Microsoft Corporation
             SPINF.dll - C:\WINDOWS\System32\SPINF.dll - Microsoft Corporation
             ncryptprov.dll - C:\WINDOWS\system32\ncryptprov.dll - Microsoft Corporation
             IDStore.dll - C:\WINDOWS\System32\IDStore.dll - Microsoft Corporation
             provsvc.dll - C:\WINDOWS\System32\provsvc.dll - Microsoft Corporation
             ntmarta.dll - C:\WINDOWS\SYSTEM32\ntmarta.dll - Microsoft Corporation
             RASDLG.dll - c:\windows\system32\RASDLG.dll - Microsoft Corporation
             MPRAPI.dll - c:\windows\system32\MPRAPI.dll - Microsoft Corporation
             RASAPI32.dll - c:\windows\system32\RASAPI32.dll - Microsoft Corporation
             rtutils.dll - c:\windows\system32\rtutils.dll - Microsoft Corporation
             rasman.dll - c:\windows\system32\rasman.dll - Microsoft Corporation
             taskschd.dll - C:\Windows\System32\taskschd.dll - Microsoft Corporation
             bi.dll - C:\WINDOWS\System32\bi.dll - Microsoft Corporation
             SystemEventsBrokerClient.dll - C:\WINDOWS\System32\SystemEventsBrokerClient.dll - Microsoft Corporation
             ncbservice.dll - c:\windows\system32\ncbservice.dll - Microsoft Corporation
             BrokerLib.dll - c:\windows\system32\BrokerLib.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             twinapi.dll - C:\Windows\System32\twinapi.dll - Microsoft Corporation
             netprofm.dll - C:\WINDOWS\System32\netprofm.dll - Microsoft Corporation
             npmproxy.dll - C:\WINDOWS\System32\npmproxy.dll - Microsoft Corporation
             wdi.dll - c:\windows\system32\wdi.dll - Microsoft Corporation
             pcadm.dll - C:\WINDOWS\system32\pcadm.dll - Microsoft Corporation
             wer.dll - C:\WINDOWS\System32\wer.dll - Microsoft Corporation
             pcacli.dll - C:\WINDOWS\System32\pcacli.dll - Microsoft Corporation
             MPR.dll - C:\WINDOWS\System32\MPR.dll - Microsoft Corporation
             sxs.dll - C:\WINDOWS\SYSTEM32\sxs.dll - Microsoft Corporation
             DEVRTL.dll - C:\WINDOWS\System32\DEVRTL.dll - Microsoft Corporation
             imagehlp.dll - C:\WINDOWS\system32\imagehlp.dll - Microsoft Corporation
             cryptnet.dll - C:\Windows\System32\cryptnet.dll - Microsoft Corporation
             WLDAP32.dll - C:\WINDOWS\system32\WLDAP32.dll - Microsoft Corporation
             svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             pcacli.dll - C:\Windows\System32\pcacli.dll - Microsoft Corporation
             rasdlg.dll - C:\Windows\System32\rasdlg.dll - Microsoft Corporation
             BrokerLib.dll - C:\Windows\System32\BrokerLib.dll - Microsoft Corporation
             ncbservice.dll - C:\Windows\System32\ncbservice.dll - Microsoft Corporation
             mpr.dll - C:\Windows\System32\mpr.dll - Microsoft Corporation
             ncryptprov.dll - C:\Windows\System32\ncryptprov.dll - Microsoft Corporation
             IdListen.dll - C:\Windows\System32\IdListen.dll - Microsoft Corporation
             hgprint.dll - C:\Windows\System32\hgprint.dll - Microsoft Corporation
             fhlisten.dll - C:\Windows\System32\fhlisten.dll - Microsoft Corporation
             cryptnet.dll - C:\Windows\System32\cryptnet.dll - Microsoft Corporation
             ListSvc.dll - C:\Windows\System32\ListSvc.dll - Microsoft Corporation
             provsvc.dll - C:\Windows\System32\provsvc.dll - Microsoft Corporation
             mprapi.dll - C:\Windows\System32\mprapi.dll - Microsoft Corporation
             SystemEventsBrokerClient.dll - C:\Windows\System32\SystemEventsBrokerClient.dll - Microsoft Corporation
             pcadm.dll - C:\Windows\System32\pcadm.dll - Microsoft Corporation
             dafBth.dll - C:\Windows\System32\dafBth.dll - Microsoft Corporation
             PortableDeviceConnectApi.dll - C:\Windows\System32\PortableDeviceConnectApi.dll - Microsoft Corporation
             wbemsvc.dll - C:\Windows\System32\wbem\wbemsvc.dll - Microsoft Corporation
             fastprox.dll - C:\Windows\System32\wbem\fastprox.dll - Microsoft Corporation
             hnetcfg.dll - C:\Windows\System32\hnetcfg.dll - Microsoft Corporation
             netshell.dll - C:\Windows\System32\netshell.dll - Microsoft Corporation
             twinapi.dll - C:\Windows\System32\twinapi.dll - Microsoft Corporation
             wbemprox.dll - C:\Windows\System32\wbem\wbemprox.dll - Microsoft Corporation
             PortableDeviceApi.dll - C:\Windows\System32\PortableDeviceApi.dll - Microsoft Corporation
             wer.dll - C:\Windows\System32\wer.dll - Microsoft Corporation
             netman.dll - C:\Windows\System32\netman.dll - Microsoft Corporation
             nci.dll - C:\Windows\System32\nci.dll - Microsoft Corporation
             netprofm.dll - C:\Windows\System32\netprofm.dll - Microsoft Corporation
             IDStore.dll - C:\Windows\System32\IDStore.dll - Microsoft Corporation
             shacct.dll - C:\Windows\System32\shacct.dll - Microsoft Corporation
             devrtl.dll - C:\Windows\System32\devrtl.dll - Microsoft Corporation
             wbemcomn.dll - C:\Windows\System32\wbemcomn.dll - Microsoft Corporation
             winspool.drv - C:\Windows\System32\winspool.drv - Microsoft Corporation
             trkwks.dll - C:\Windows\System32\trkwks.dll - Microsoft Corporation
             sysmain.dll - C:\Windows\System32\sysmain.dll - Microsoft Corporation
             aepic.dll - C:\Windows\System32\aepic.dll - Microsoft Corporation
             pcasvc.dll - C:\Windows\System32\pcasvc.dll - Microsoft Corporation
             samcli.dll - C:\Windows\System32\samcli.dll - Microsoft Corporation
             das.dll - C:\Windows\System32\das.dll - Microsoft Corporation
             sfc_os.dll - C:\Windows\System32\sfc_os.dll - Microsoft Corporation
             version.dll - C:\Windows\System32\version.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\System32\ntmarta.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             netcfgx.dll - C:\Windows\System32\netcfgx.dll - Microsoft Corporation
             l2gpstore.dll - C:\Windows\System32\l2gpstore.dll - Microsoft Corporation
             wlgpclnt.dll - C:\Windows\System32\wlgpclnt.dll - Microsoft Corporation
             hidserv.dll - C:\Windows\System32\hidserv.dll - Microsoft Corporation
             npmproxy.dll - C:\Windows\System32\npmproxy.dll - Microsoft Corporation
             wdi.dll - C:\Windows\System32\wdi.dll - Microsoft Corporation
             wlanapi.dll - C:\Windows\System32\wlanapi.dll - Microsoft Corporation
             WiFiDisplay.dll - C:\Windows\System32\WiFiDisplay.dll - Microsoft Corporation
             TetheringIeProvider.dll - C:\Windows\System32\TetheringIeProvider.dll - Microsoft Corporation
             msxml6.dll - C:\Windows\System32\msxml6.dll - Microsoft Corporation
             wlansvcpal.dll - C:\Windows\System32\wlansvcpal.dll - Microsoft Corporation
             dhcpcsvc.dll - C:\Windows\System32\dhcpcsvc.dll - Microsoft Corporation
             eappprxy.dll - C:\Windows\System32\eappprxy.dll - Microsoft Corporation
             wlansec.dll - C:\Windows\System32\wlansec.dll - Microsoft Corporation
             onex.dll - C:\Windows\System32\onex.dll - Microsoft Corporation
             wlanmsm.dll - C:\Windows\System32\wlanmsm.dll - Microsoft Corporation
             wlansvc.dll - C:\Windows\System32\wlansvc.dll - Microsoft Corporation
             samlib.dll - C:\Windows\System32\samlib.dll - Microsoft Corporation
             winnsi.dll - C:\Windows\System32\winnsi.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             WUDFPlatform.dll - C:\Windows\System32\WUDFPlatform.dll - Microsoft Corporation
             WUDFSvc.dll - C:\Windows\System32\WUDFSvc.dll - Microsoft Corporation
             TabSvc.dll - C:\Windows\System32\TabSvc.dll - Microsoft Corporation
             AudioEndpointBuilder.dll - C:\Windows\System32\AudioEndpointBuilder.dll - Microsoft Corporation
             taskschd.dll - C:\Windows\System32\taskschd.dll - Microsoft Corporation
             wkscli.dll - C:\Windows\System32\wkscli.dll - Microsoft Corporation
             atl.dll - C:\Windows\System32\atl.dll - Microsoft Corporation
             netapi32.dll - C:\Windows\System32\netapi32.dll - Microsoft Corporation
             dsrole.dll - C:\Windows\System32\dsrole.dll - Microsoft Corporation
             nlaapi.dll - C:\Windows\System32\nlaapi.dll - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             wevtapi.dll - C:\Windows\System32\wevtapi.dll - Microsoft Corporation
             rasman.dll - C:\Windows\System32\rasman.dll - Microsoft Corporation
             rtutils.dll - C:\Windows\System32\rtutils.dll - Microsoft Corporation
             rasapi32.dll - C:\Windows\System32\rasapi32.dll - Microsoft Corporation
             xmllite.dll - C:\Windows\System32\xmllite.dll - Microsoft Corporation
             BluetoothApis.dll - C:\Windows\System32\BluetoothApis.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             MMDevAPI.dll - C:\Windows\System32\MMDevAPI.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             wmiclnt.dll - C:\Windows\System32\wmiclnt.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\System32\apphelp.dll - Microsoft Corporation
             dpapi.dll - C:\Windows\System32\dpapi.dll - Microsoft Corporation
             bi.dll - C:\Windows\System32\bi.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             sysntfy.dll - C:\Windows\System32\sysntfy.dll - Microsoft Corporation
             FirewallAPI.dll - C:\Windows\System32\FirewallAPI.dll - Microsoft Corporation
             gpapi.dll - C:\Windows\System32\gpapi.dll - Microsoft Corporation
             hid.dll - C:\Windows\System32\hid.dll - Microsoft Corporation
             netutils.dll - C:\Windows\System32\netutils.dll - Microsoft Corporation
             authz.dll - C:\Windows\System32\authz.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             userenv.dll - C:\Windows\System32\userenv.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             kerberos.dll - C:\Windows\System32\kerberos.dll - Microsoft Corporation
             cryptdll.dll - C:\Windows\System32\cryptdll.dll - Microsoft Corporation
             ntasn1.dll - C:\Windows\System32\ntasn1.dll - Microsoft Corporation
             ncrypt.dll - C:\Windows\System32\ncrypt.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             SPInf.dll - C:\Windows\System32\SPInf.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\System32\srvcli.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             sxs.dll - C:\Windows\System32\sxs.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             wintrust.dll - C:\Windows\System32\wintrust.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imagehlp.dll - C:\Windows\System32\imagehlp.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             Wldap32.dll - C:\Windows\System32\Wldap32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             wiaservc.dll - c:\windows\system32\wiaservc.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             VERSION.dll - c:\windows\system32\VERSION.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\system32\combase.dll - Microsoft Corporation
             wiatrace.dll - C:\WINDOWS\system32\wiatrace.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             sspicli.dll - C:\WINDOWS\system32\sspicli.dll - Microsoft Corporation
             msv1_0.DLL - C:\WINDOWS\system32\msv1_0.DLL - Microsoft Corporation
             cryptdll.dll - C:\WINDOWS\system32\cryptdll.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\system32\cfgmgr32.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\system32\bcrypt.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\system32\DEVOBJ.dll - Microsoft Corporation
             WSDCHNGR.DLL - C:\WINDOWS\system32\WSDCHNGR.DLL - Microsoft Corporation
             deviceassociation.dll - C:\WINDOWS\system32\deviceassociation.dll - Microsoft Corporation
             FunDisc.dll - C:\Windows\System32\FunDisc.dll - Microsoft Corporation
             XmlLite.dll - C:\Windows\System32\XmlLite.dll - Microsoft Corporation
             fdPnp.dll - C:\Windows\System32\fdPnp.dll - Microsoft Corporation
             ATL.DLL - C:\Windows\System32\ATL.DLL - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             deviceassociation.dll - C:\Windows\System32\deviceassociation.dll - Microsoft Corporation
             wsdchngr.dll - C:\Windows\System32\wsdchngr.dll - Microsoft Corporation
             fdPnp.dll - C:\Windows\System32\fdPnp.dll - Microsoft Corporation
             fundisc.dll - C:\Windows\System32\fundisc.dll - Microsoft Corporation
             wiatrace.dll - C:\Windows\System32\wiatrace.dll - Microsoft Corporation
             wiaservc.dll - C:\Windows\System32\wiaservc.dll - Microsoft Corporation
             version.dll - C:\Windows\System32\version.dll - Microsoft Corporation
             atl.dll - C:\Windows\System32\atl.dll - Microsoft Corporation
             xmllite.dll - C:\Windows\System32\xmllite.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             msv1_0.dll - C:\Windows\System32\msv1_0.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             cryptdll.dll - C:\Windows\System32\cryptdll.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             wintrust.dll - C:\Windows\System32\wintrust.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[LiveUpdate.exe]Modules
             LiveUpdate.exe - C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe - ASUSTeK Computer Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             MSCOREE.DLL - C:\WINDOWS\SYSwow64\MSCOREE.DLL - Microsoft Corporation
             KERNEL32.dll - C:\WINDOWS\SYSwow64\KERNEL32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             mscoreei.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             clr.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll - Microsoft Corporation
             MSVCR120_CLR0400.dll - C:\WINDOWS\SYSwow64\MSVCR120_CLR0400.dll - Microsoft Corporation
             mscorlib.ni.dll - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\ebdd49343f711b2029293f8e621b28a2\mscorlib.ni.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSwow64\kernel.appcore.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSwow64\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\syswow64\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSwow64\bcrypt.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             clrjit.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll - Microsoft Corporation
             dwrite.dll - C:\WINDOWS\SYSwow64\dwrite.dll - Microsoft Corporation
             wpfgfx_v0400.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpfgfx_v0400.dll - Microsoft Corporation
             PresentationNative_v0400.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationNative_v0400.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\syswow64\dwmapi.dll - Microsoft Corporation
             alvupdt.dll - C:\Program Files (x86)\ASUS\ASUS Live Update\alvupdt.dll - ASUSTek Computer Inc.
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\SYSwow64\SETUPAPI.dll - Microsoft Corporation
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\SYSwow64\CFGMGR32.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             urlmon.dll - C:\WINDOWS\SYSwow64\urlmon.dll - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\SYSwow64\SHCORE.dll - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.16384_none_7c55c866aa0c3ff0\comctl32.dll - Microsoft Corporation
             gdiplus.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_dadf89385bc5c7d7\gdiplus.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\WINDOWS\SYSwow64\WindowsCodecs.dll - Microsoft Corporation
             d3d9.dll - C:\WINDOWS\SYSwow64\d3d9.dll - Microsoft Corporation
             igdumdim32.dll - C:\WINDOWS\SYSwow64\igdumdim32.dll - Intel Corporation
             igdusc32.dll - C:\WINDOWS\SYSwow64\igdusc32.dll - Intel Corporation
             mscms.dll - C:\WINDOWS\SYSwow64\mscms.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             WindowsCodecsExt.dll - C:\WINDOWS\SYSwow64\WindowsCodecsExt.dll - Microsoft Corporation
             UIAutomationCore.dll - C:\WINDOWS\SYSwow64\UIAutomationCore.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSwow64\clbcatq.dll - Microsoft Corporation
             sxs.dll - C:\WINDOWS\SYSwow64\sxs.dll - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSwow64\Secur32.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\SYSwow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             mscorsecimpl.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsecimpl.dll - Microsoft Corporation
             imagehlp.dll - C:\WINDOWS\SYSwow64\imagehlp.dll - Microsoft Corporation
             ncrypt.dll - C:\WINDOWS\SYSwow64\ncrypt.dll - Microsoft Corporation
             NTASN1.dll - C:\WINDOWS\SYSwow64\NTASN1.dll - Microsoft Corporation
             gpapi.dll - C:\WINDOWS\SYSwow64\gpapi.dll - Microsoft Corporation
             cryptnet.dll - C:\WINDOWS\SYSwow64\cryptnet.dll - Microsoft Corporation
             WLDAP32.dll - C:\WINDOWS\SYSwow64\WLDAP32.dll - Microsoft Corporation
             WINHTTP.dll - C:\WINDOWS\SYSwow64\WINHTTP.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             dhcpcsvc6.DLL - C:\WINDOWS\SYSwow64\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - C:\WINDOWS\SYSwow64\dhcpcsvc.DLL - Microsoft Corporation
             webio.dll - C:\WINDOWS\SYSwow64\webio.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\syswow64\mswsock.dll - Microsoft Corporation
             DNSAPI.dll - C:\WINDOWS\SYSwow64\DNSAPI.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\Syswow64\rasadhlp.dll - Microsoft Corporation
             fwpuclnt.dll - C:\WINDOWS\Syswow64\fwpuclnt.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSwow64\powrprof.dll - Microsoft Corporation
             WtsApi32.dll - C:\WINDOWS\SYSwow64\WtsApi32.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSwow64\WINSTA.dll - Microsoft Corporation
             PenIMC.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\PenIMC.dll - Microsoft Corporation
             wisp.dll - C:\WINDOWS\Syswow64\wisp.dll - Microsoft Corporation
             tpcps.dll - C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\tpcps.dll - Microsoft Corporation
             msctfui.dll - C:\WINDOWS\syswow64\msctfui.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             System.Xaml.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll - Microsoft Corporation
             WindowsBase.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll - Microsoft Corporation
             System.Drawing.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - Microsoft Corporation
             PresentationFramework.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll - Microsoft Corporation
             PresentationCore.dll - C:\Windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - Microsoft Corporation
             UIAutomationTypes.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll - Microsoft Corporation
             System.Windows.Forms.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - Microsoft Corporation
             System.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll - Microsoft Corporation
             System.Configuration.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll - Microsoft Corporation
             System.XML.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll - Microsoft Corporation
             PresentationFramework.Aero2.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero2\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero2.dll - Microsoft Corporation
             UIAutomationProvider.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll - Microsoft Corporation
             PresentationFramework.resources.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.resources\v4.0_4.0.0.0_cs_31bf3856ad364e35\PresentationFramework.resources.dll - Microsoft Corporation
             PresentationFramework-SystemXml.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXml\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXml.dll - Microsoft Corporation
             PresentationCore.resources.dll - C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationCore.resources\v4.0_4.0.0.0_cs_31bf3856ad364e35\PresentationCore.resources.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             user32.dll - C:\WINDOWS\SYSTEM32\user32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             dnsrslvr.dll - c:\windows\system32\dnsrslvr.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             DNSAPI.dll - c:\windows\system32\DNSAPI.dll - Microsoft Corporation
             WINNSI.DLL - c:\windows\system32\WINNSI.DLL - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             Fwpuclnt.dll - C:\WINDOWS\SYSTEM32\Fwpuclnt.dll - Microsoft Corporation
             dnsext.dll - C:\WINDOWS\System32\dnsext.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\system32\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\system32\profapi.dll - Microsoft Corporation
             gpapi.dll - C:\WINDOWS\SYSTEM32\gpapi.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             iphlpapi.dll - C:\WINDOWS\SYSTEM32\iphlpapi.dll - Microsoft Corporation
             dhcpcsvc6.DLL - C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL - Microsoft Corporation
             wkssvc.dll - c:\windows\system32\wkssvc.dll - Microsoft Corporation
             netutils.dll - c:\windows\system32\netutils.dll - Microsoft Corporation
             SspiCli.dll - c:\windows\system32\SspiCli.dll - Microsoft Corporation
             netjoin.dll - C:\WINDOWS\SYSTEM32\netjoin.dll - Microsoft Corporation
             bcrypt.dll - c:\windows\system32\bcrypt.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             taskschd.dll - C:\Windows\System32\taskschd.dll - Microsoft Corporation
             cryptsvc.dll - c:\windows\system32\cryptsvc.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             crypttpmeksvc.dll - C:\Windows\System32\crypttpmeksvc.dll - Microsoft Corporation
             ncrypt.dll - C:\WINDOWS\system32\ncrypt.dll - Microsoft Corporation
             NTASN1.dll - C:\WINDOWS\system32\NTASN1.dll - Microsoft Corporation
             cryptcatsvc.dll - C:\Windows\System32\cryptcatsvc.dll - Microsoft Corporation
             VSSAPI.DLL - C:\WINDOWS\system32\VSSAPI.DLL - Microsoft Corporation
             VssTrace.DLL - C:\WINDOWS\system32\VssTrace.DLL - Microsoft Corporation
             DSROLE.dll - C:\WINDOWS\system32\DSROLE.dll - Microsoft Corporation
             bcd.dll - C:\WINDOWS\system32\bcd.dll - Microsoft Corporation
             samcli.dll - C:\WINDOWS\system32\samcli.dll - Microsoft Corporation
             SAMLIB.dll - C:\WINDOWS\system32\SAMLIB.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             es.dll - C:\WINDOWS\system32\es.dll - Microsoft Corporation
             PROPSYS.dll - C:\WINDOWS\system32\PROPSYS.dll - Microsoft Corporation
             nlasvc.dll - c:\windows\system32\nlasvc.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\system32\CFGMGR32.dll - Microsoft Corporation
             wevtapi.dll - c:\windows\system32\wevtapi.dll - Microsoft Corporation
             ncsi.dll - c:\windows\system32\ncsi.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             WINHTTP.dll - c:\windows\system32\WINHTTP.dll - Microsoft Corporation
             ssdpapi.dll - C:\WINDOWS\system32\ssdpapi.dll - Microsoft Corporation
             wkscli.dll - c:\windows\system32\wkscli.dll - Microsoft Corporation
             WMICLNT.dll - c:\windows\system32\WMICLNT.dll - Microsoft Corporation
             WlanApi.dll - C:\WINDOWS\system32\WlanApi.dll - Microsoft Corporation
             WTSAPI32.dll - c:\windows\system32\WTSAPI32.dll - Microsoft Corporation
             WINSTA.dll - c:\windows\system32\WINSTA.dll - Microsoft Corporation
             webio.dll - c:\windows\system32\webio.dll - Microsoft Corporation
             CRYPTNET.dll - c:\windows\system32\CRYPTNET.dll - Microsoft Corporation
             WLDAP32.dll - C:\WINDOWS\system32\WLDAP32.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\System32\rasadhlp.dll - Microsoft Corporation
             ESENT.dll - C:\WINDOWS\system32\ESENT.dll - Microsoft Corporation
             svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             cryptnet.dll - C:\Windows\System32\cryptnet.dll - Microsoft Corporation
             esent.dll - C:\Windows\System32\esent.dll - Microsoft Corporation
             webio.dll - C:\Windows\System32\webio.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\System32\rasadhlp.dll - Microsoft Corporation
             ssdpapi.dll - C:\Windows\System32\ssdpapi.dll - Microsoft Corporation
             winhttp.dll - C:\Windows\System32\winhttp.dll - Microsoft Corporation
             ncsi.dll - C:\Windows\System32\ncsi.dll - Microsoft Corporation
             nlasvc.dll - C:\Windows\System32\nlasvc.dll - Microsoft Corporation
             samcli.dll - C:\Windows\System32\samcli.dll - Microsoft Corporation
             vssapi.dll - C:\Windows\System32\vssapi.dll - Microsoft Corporation
             cryptsvc.dll - C:\Windows\System32\cryptsvc.dll - Microsoft Corporation
             vsstrace.dll - C:\Windows\System32\vsstrace.dll - Microsoft Corporation
             cryptcatsvc.dll - C:\Windows\System32\cryptcatsvc.dll - Microsoft Corporation
             crypttpmeksvc.dll - C:\Windows\System32\crypttpmeksvc.dll - Microsoft Corporation
             wkssvc.dll - C:\Windows\System32\wkssvc.dll - Microsoft Corporation
             bcd.dll - C:\Windows\System32\bcd.dll - Microsoft Corporation
             wlanapi.dll - C:\Windows\System32\wlanapi.dll - Microsoft Corporation
             dhcpcsvc6.dll - C:\Windows\System32\dhcpcsvc6.dll - Microsoft Corporation
             dnsext.dll - C:\Windows\System32\dnsext.dll - Microsoft Corporation
             dhcpcsvc.dll - C:\Windows\System32\dhcpcsvc.dll - Microsoft Corporation
             FWPUCLNT.DLL - C:\Windows\System32\FWPUCLNT.DLL - Microsoft Corporation
             dnsrslvr.dll - C:\Windows\System32\dnsrslvr.dll - Microsoft Corporation
             samlib.dll - C:\Windows\System32\samlib.dll - Microsoft Corporation
             winnsi.dll - C:\Windows\System32\winnsi.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             es.dll - C:\Windows\System32\es.dll - Microsoft Corporation
             taskschd.dll - C:\Windows\System32\taskschd.dll - Microsoft Corporation
             wkscli.dll - C:\Windows\System32\wkscli.dll - Microsoft Corporation
             dsrole.dll - C:\Windows\System32\dsrole.dll - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             wevtapi.dll - C:\Windows\System32\wevtapi.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             wmiclnt.dll - C:\Windows\System32\wmiclnt.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             gpapi.dll - C:\Windows\System32\gpapi.dll - Microsoft Corporation
             netutils.dll - C:\Windows\System32\netutils.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             userenv.dll - C:\Windows\System32\userenv.dll - Microsoft Corporation
             dnsapi.dll - C:\Windows\System32\dnsapi.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             netjoin.dll - C:\Windows\System32\netjoin.dll - Microsoft Corporation
             ntasn1.dll - C:\Windows\System32\ntasn1.dll - Microsoft Corporation
             ncrypt.dll - C:\Windows\System32\ncrypt.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             Wldap32.dll - C:\Windows\System32\Wldap32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[TabTip.exe]Modules
             TabTip.exe - C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSTEM32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSTEM32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSTEM32\bcrypt.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             tipskins.dll - C:\Program Files\Common Files\microsoft shared\ink\tipskins.dll - Microsoft Corporation
             Bcp47Langs.dll - C:\WINDOWS\SYSTEM32\Bcp47Langs.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSTEM32\WINSTA.dll - Microsoft Corporation
             DUI70.dll - C:\WINDOWS\SYSTEM32\DUI70.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\system32\SHCORE.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\SYSTEM32\dwmapi.dll - Microsoft Corporation
             twinapi.dll - C:\Windows\System32\twinapi.dll - Microsoft Corporation
             shell32.dll - C:\WINDOWS\system32\shell32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSTEM32\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSTEM32\profapi.dll - Microsoft Corporation
             gpapi.dll - C:\WINDOWS\SYSTEM32\gpapi.dll - Microsoft Corporation
             TipRes.dll - C:\Program Files\Common Files\microsoft shared\ink\TipRes.dll - Microsoft Corporation
             Comctl32.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\Comctl32.dll - Microsoft Corporation
             DUser.dll - C:\WINDOWS\SYSTEM32\DUser.dll - Microsoft Corporation
             gdiplus.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_9332526147499ed1\gdiplus.dll - Microsoft Corporation
             Windows.UI.dll - C:\Windows\System32\Windows.UI.dll - Microsoft Corporation
             NInput.dll - C:\Windows\System32\NInput.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             uiautomationcore.dll - C:\Windows\System32\uiautomationcore.dll - Microsoft Corporation
             InkObj.dll - C:\Program Files\Common Files\Microsoft Shared\Ink\InkObj.dll - Microsoft Corporation
             HID.DLL - C:\WINDOWS\SYSTEM32\HID.DLL - Microsoft Corporation
             TabTip.exe - C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe - Microsoft Corporation
             InkObj.dll - C:\Program Files\Common Files\microsoft shared\ink\InkObj.dll - Microsoft Corporation
             tipskins.dll - C:\Program Files\Common Files\microsoft shared\ink\tipskins.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             twinapi.dll - C:\Windows\System32\twinapi.dll - Microsoft Corporation
             UIAutomationCore.dll - C:\Windows\System32\UIAutomationCore.dll - Microsoft Corporation
             ninput.dll - C:\Windows\System32\ninput.dll - Microsoft Corporation
             Windows.UI.dll - C:\Windows\System32\Windows.UI.dll - Microsoft Corporation
             BCP47Langs.dll - C:\Windows\System32\BCP47Langs.dll - Microsoft Corporation
             duser.dll - C:\Windows\System32\duser.dll - Microsoft Corporation
             comctl32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\comctl32.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\System32\dwmapi.dll - Microsoft Corporation
             dui70.dll - C:\Windows\System32\dui70.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             TipRes.dll - C:\Program Files\Common Files\microsoft shared\ink\TipRes.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             gpapi.dll - C:\Windows\System32\gpapi.dll - Microsoft Corporation
             hid.dll - C:\Windows\System32\hid.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             userenv.dll - C:\Windows\System32\userenv.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             GdiPlus.dll - C:\Windows\System32\GdiPlus.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[AsLdrSrv.exe]Modules
             ASLDRSrv.exe - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe - ASUSTek Computer Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\SYSwow64\SETUPAPI.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\SYSwow64\CFGMGR32.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSwow64\WINSTA.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\SYSwow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             apphelp.dll - C:\WINDOWS\syswow64\apphelp.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Modules
             new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSwow64\WINMM.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSwow64\WINMMBASE.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSwow64\cfgmgr32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSwow64\shcore.dll - Microsoft Corporation
             chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             USP10.dll - C:\WINDOWS\SYSwow64\USP10.dll - Microsoft Corporation
             PSAPI.DLL - C:\WINDOWS\SYSwow64\PSAPI.DLL - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSwow64\WINSPOOL.DRV - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSwow64\Secur32.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             dbghelp.dll - C:\WINDOWS\SYSwow64\dbghelp.dll - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09\comctl32.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\icudt.dll - The ICU Project
             pdf.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll - 
             ppGoogleNaClPluginChrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll - 
             libpeerconnection.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libpeerconnection.dll - Google Inc.
             ffmpegsumo.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll - 
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[GFNEXSrv.exe]Modules
             GFNEXSrv.exe - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe - ASUS
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[spoolsv.exe]Modules
             spoolsv.exe - C:\WINDOWS\System32\spoolsv.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             DNSAPI.dll - C:\WINDOWS\System32\DNSAPI.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\System32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\System32\bcryptPrimitives.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\System32\SspiCli.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\System32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\System32\WINNSI.DLL - Microsoft Corporation
             rasadhlp.dll - C:\Windows\System32\rasadhlp.dll - Microsoft Corporation
             fwpuclnt.dll - C:\WINDOWS\System32\fwpuclnt.dll - Microsoft Corporation
             localspl.dll - C:\WINDOWS\System32\localspl.dll - Microsoft Corporation
             srvcli.dll - C:\WINDOWS\System32\srvcli.dll - Microsoft Corporation
             advapi32.dll - C:\WINDOWS\SYSTEM32\advapi32.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSTEM32\cfgmgr32.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\System32\CRYPTSP.dll - Microsoft Corporation
             SPOOLSS.DLL - C:\WINDOWS\System32\SPOOLSS.DLL - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             winspool.drv - C:\WINDOWS\system32\winspool.drv - Microsoft Corporation
             PrintIsolationProxy.dll - C:\WINDOWS\System32\PrintIsolationProxy.dll - Microsoft Corporation
             FXSMON.DLL - C:\WINDOWS\System32\FXSMON.DLL - Microsoft Corporation
             pdfcmon.dll - C:\WINDOWS\System32\pdfcmon.dll - pdfforge GmbH
             WTSAPI32.dll - C:\WINDOWS\System32\WTSAPI32.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\System32\USERENV.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\System32\VERSION.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\System32\profapi.dll - Microsoft Corporation
             602localmon.dll - C:\WINDOWS\System32\602localmon.dll - Windows (R) Win 7 DDK provider
             tcpmon.dll - C:\WINDOWS\System32\tcpmon.dll - Microsoft Corporation
             snmpapi.dll - C:\WINDOWS\System32\snmpapi.dll - Microsoft Corporation
             wsnmp32.dll - C:\WINDOWS\System32\wsnmp32.dll - Microsoft Corporation
             usbmon.dll - C:\WINDOWS\System32\usbmon.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\system32\DEVOBJ.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             WSDMon.dll - C:\WINDOWS\System32\WSDMon.dll - Microsoft Corporation
             wsdapi.dll - C:\WINDOWS\System32\wsdapi.dll - Microsoft Corporation
             webservices.dll - C:\WINDOWS\System32\webservices.dll - Microsoft Corporation
             FirewallAPI.dll - C:\WINDOWS\System32\FirewallAPI.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             FunDisc.dll - C:\Windows\System32\FunDisc.dll - Microsoft Corporation
             XmlLite.dll - C:\Windows\System32\XmlLite.dll - Microsoft Corporation
             fdPnp.dll - C:\Windows\System32\fdPnp.dll - Microsoft Corporation
             ATL.DLL - C:\Windows\System32\ATL.DLL - Microsoft Corporation
             drvstore.dll - C:\WINDOWS\system32\drvstore.dll - Microsoft Corporation
             winprint.dll - C:\WINDOWS\system32\spool\PRTPROCS\x64\winprint.dll - Microsoft Corporation
             gpapi.dll - C:\WINDOWS\SYSTEM32\gpapi.dll - Microsoft Corporation
             hpzpplhn.dll - C:\WINDOWS\system32\spool\PRTPROCS\x64\hpzpplhn.dll - Hewlett-Packard Corporation
             DSROLE.dll - C:\WINDOWS\System32\DSROLE.dll - Microsoft Corporation
             win32spl.dll - C:\WINDOWS\System32\win32spl.dll - Microsoft Corporation
             DEVRTL.dll - C:\WINDOWS\system32\DEVRTL.dll - Microsoft Corporation
             SPINF.dll - C:\WINDOWS\system32\SPINF.dll - Microsoft Corporation
             inetpp.dll - C:\WINDOWS\System32\inetpp.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\System32\WINSTA.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\System32\bcrypt.dll - Microsoft Corporation
             netutils.dll - C:\WINDOWS\System32\netutils.dll - Microsoft Corporation
             cscapi.dll - C:\WINDOWS\System32\cscapi.dll - Microsoft Corporation
             netshell.dll - C:\WINDOWS\System32\netshell.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             nlaapi.dll - C:\WINDOWS\System32\nlaapi.dll - Microsoft Corporation
             spoolsv.exe - C:\Windows\System32\spoolsv.exe - Microsoft Corporation
             netshell.dll - C:\Windows\System32\netshell.dll - Microsoft Corporation
             cscapi.dll - C:\Windows\System32\cscapi.dll - Microsoft Corporation
             inetpp.dll - C:\Windows\System32\inetpp.dll - Microsoft Corporation
             devrtl.dll - C:\Windows\System32\devrtl.dll - Microsoft Corporation
             win32spl.dll - C:\Windows\System32\win32spl.dll - Microsoft Corporation
             winprint.dll - C:\Windows\System32\spool\prtprocs\x64\winprint.dll - Microsoft Corporation
             drvstore.dll - C:\Windows\System32\drvstore.dll - Microsoft Corporation
             fdPnp.dll - C:\Windows\System32\fdPnp.dll - Microsoft Corporation
             fundisc.dll - C:\Windows\System32\fundisc.dll - Microsoft Corporation
             webservices.dll - C:\Windows\System32\webservices.dll - Microsoft Corporation
             WSDApi.dll - C:\Windows\System32\WSDApi.dll - Microsoft Corporation
             WSDMon.dll - C:\Windows\System32\WSDMon.dll - Microsoft Corporation
             usbmon.dll - C:\Windows\System32\usbmon.dll - Microsoft Corporation
             wsnmp32.dll - C:\Windows\System32\wsnmp32.dll - Microsoft Corporation
             snmpapi.dll - C:\Windows\System32\snmpapi.dll - Microsoft Corporation
             tcpmon.dll - C:\Windows\System32\tcpmon.dll - Microsoft Corporation
             602localmon.dll - C:\Windows\System32\602localmon.dll - Windows (R) Win 7 DDK provider
             pdfcmon.dll - C:\Windows\System32\pdfcmon.dll - pdfforge GmbH
             FXSMON.dll - C:\Windows\System32\FXSMON.dll - Microsoft Corporation
             PrintIsolationProxy.dll - C:\Windows\System32\PrintIsolationProxy.dll - Microsoft Corporation
             winspool.drv - C:\Windows\System32\winspool.drv - Microsoft Corporation
             spoolss.dll - C:\Windows\System32\spoolss.dll - Microsoft Corporation
             localspl.dll - C:\Windows\System32\localspl.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\System32\rasadhlp.dll - Microsoft Corporation
             version.dll - C:\Windows\System32\version.dll - Microsoft Corporation
             FWPUCLNT.DLL - C:\Windows\System32\FWPUCLNT.DLL - Microsoft Corporation
             winnsi.dll - C:\Windows\System32\winnsi.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             atl.dll - C:\Windows\System32\atl.dll - Microsoft Corporation
             dsrole.dll - C:\Windows\System32\dsrole.dll - Microsoft Corporation
             nlaapi.dll - C:\Windows\System32\nlaapi.dll - Microsoft Corporation
             xmllite.dll - C:\Windows\System32\xmllite.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             FirewallAPI.dll - C:\Windows\System32\FirewallAPI.dll - Microsoft Corporation
             gpapi.dll - C:\Windows\System32\gpapi.dll - Microsoft Corporation
             netutils.dll - C:\Windows\System32\netutils.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             userenv.dll - C:\Windows\System32\userenv.dll - Microsoft Corporation
             dnsapi.dll - C:\Windows\System32\dnsapi.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             SPInf.dll - C:\Windows\System32\SPInf.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\System32\srvcli.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             wintrust.dll - C:\Windows\System32\wintrust.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[ATKOSD2.exe]Modules
             ATKOSD2.exe - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe - ASUSTek Computer Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             MSIMG32.dll - C:\WINDOWS\SYSwow64\MSIMG32.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSwow64\WINSPOOL.DRV - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             COMCTL32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09\COMCTL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             gdiplus.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_dadf89385bc5c7d7\gdiplus.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\SYSwow64\SETUPAPI.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\SYSwow64\CFGMGR32.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\SYSwow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             WaveThemeRes.dll - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\WaveThemeRes.dll - ASUSTek Computer Inc.
             dwmapi.dll - C:\WINDOWS\syswow64\dwmapi.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSwow64\kernel.appcore.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\WINDOWS\System32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             pnrpsvc.dll - c:\windows\system32\pnrpsvc.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             gpapi.dll - C:\WINDOWS\SYSTEM32\gpapi.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\System32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\System32\bcryptPrimitives.dll - Microsoft Corporation
             sspicli.dll - C:\WINDOWS\System32\sspicli.dll - Microsoft Corporation
             POWRPROF.dll - c:\windows\system32\POWRPROF.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             IPHLPAPI.DLL - c:\windows\system32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - c:\windows\system32\WINNSI.DLL - Microsoft Corporation
             dhcpcsvc6.DLL - c:\windows\system32\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - c:\windows\system32\dhcpcsvc.DLL - Microsoft Corporation
             sqmapi.dll - c:\windows\system32\sqmapi.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             SSDPAPI.DLL - C:\WINDOWS\System32\SSDPAPI.DLL - Microsoft Corporation
             profapi.dll - c:\windows\system32\profapi.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             ntmarta.dll - C:\WINDOWS\SYSTEM32\ntmarta.dll - Microsoft Corporation
             CRYPTSP.dll - c:\windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\System32\bcrypt.dll - Microsoft Corporation
             DPAPI.dll - C:\WINDOWS\system32\DPAPI.dll - Microsoft Corporation
             ncrypt.dll - C:\WINDOWS\system32\ncrypt.dll - Microsoft Corporation
             NTASN1.dll - C:\WINDOWS\system32\NTASN1.dll - Microsoft Corporation
             p2psvc.dll - c:\windows\system32\p2psvc.dll - Microsoft Corporation
             P2PGRAPH.dll - c:\windows\system32\P2PGRAPH.dll - Microsoft Corporation
             ESENT.dll - c:\windows\system32\ESENT.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             secur32.dll - C:\WINDOWS\system32\secur32.dll - Microsoft Corporation
             pnrpnsp.dll - C:\WINDOWS\system32\pnrpnsp.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\System32\rasadhlp.dll - Microsoft Corporation
             schannel.DLL - C:\WINDOWS\system32\schannel.DLL - Microsoft Corporation
             drttransport.dll - c:\windows\system32\drttransport.dll - Microsoft Corporation
             drt.dll - c:\windows\system32\drt.dll - Microsoft Corporation
             pcwum.dll - c:\windows\system32\pcwum.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             drt.dll - C:\Windows\System32\drt.dll - Microsoft Corporation
             P2PGraph.dll - C:\Windows\System32\P2PGraph.dll - Microsoft Corporation
             p2psvc.dll - C:\Windows\System32\p2psvc.dll - Microsoft Corporation
             drttransport.dll - C:\Windows\System32\drttransport.dll - Microsoft Corporation
             pnrpsvc.dll - C:\Windows\System32\pnrpsvc.dll - Microsoft Corporation
             esent.dll - C:\Windows\System32\esent.dll - Microsoft Corporation
             pnrpnsp.dll - C:\Windows\System32\pnrpnsp.dll - Microsoft Corporation
             sqmapi.dll - C:\Windows\System32\sqmapi.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\System32\rasadhlp.dll - Microsoft Corporation
             ssdpapi.dll - C:\Windows\System32\ssdpapi.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\System32\ntmarta.dll - Microsoft Corporation
             dhcpcsvc6.dll - C:\Windows\System32\dhcpcsvc6.dll - Microsoft Corporation
             dhcpcsvc.dll - C:\Windows\System32\dhcpcsvc.dll - Microsoft Corporation
             winnsi.dll - C:\Windows\System32\winnsi.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             secur32.dll - C:\Windows\System32\secur32.dll - Microsoft Corporation
             dpapi.dll - C:\Windows\System32\dpapi.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             gpapi.dll - C:\Windows\System32\gpapi.dll - Microsoft Corporation
             pcwum.dll - C:\Windows\System32\pcwum.dll - Microsoft Corporation
             authz.dll - C:\Windows\System32\authz.dll - Microsoft Corporation
             schannel.dll - C:\Windows\System32\schannel.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             ntasn1.dll - C:\Windows\System32\ntasn1.dll - Microsoft Corporation
             ncrypt.dll - C:\Windows\System32\ncrypt.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             user32.dll - C:\WINDOWS\SYSTEM32\user32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             bfe.dll - c:\windows\system32\bfe.dll - Microsoft Corporation
             AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             DNSAPI.dll - c:\windows\system32\DNSAPI.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             SspiCli.dll - c:\windows\system32\SspiCli.dll - Microsoft Corporation
             wevtapi.dll - C:\WINDOWS\SYSTEM32\wevtapi.dll - Microsoft Corporation
             pcwum.dll - c:\windows\system32\pcwum.dll - Microsoft Corporation
             mpssvc.dll - c:\windows\system32\mpssvc.dll - Microsoft Corporation
             FirewallAPI.dll - c:\windows\system32\FirewallAPI.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSTEM32\cfgmgr32.dll - Microsoft Corporation
             fwpuclnt.dll - c:\windows\system32\fwpuclnt.dll - Microsoft Corporation
             adhapi.dll - C:\WINDOWS\system32\adhapi.dll - Microsoft Corporation
             gpapi.dll - C:\WINDOWS\SYSTEM32\gpapi.dll - Microsoft Corporation
             IPHLPAPI.DLL - c:\windows\system32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - c:\windows\system32\WINNSI.DLL - Microsoft Corporation
             dhcpcsvc6.DLL - c:\windows\system32\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - c:\windows\system32\dhcpcsvc.DLL - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             wfapigp.dll - C:\WINDOWS\system32\wfapigp.dll - Microsoft Corporation
             dps.dll - c:\windows\system32\dps.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             taskschd.dll - C:\Windows\System32\taskschd.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             mrmcorer.dll - C:\WINDOWS\SYSTEM32\mrmcorer.dll - Microsoft Corporation
             Bcp47Langs.dll - C:\WINDOWS\SYSTEM32\Bcp47Langs.dll - Microsoft Corporation
             urlmon.dll - C:\WINDOWS\SYSTEM32\urlmon.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSTEM32\iertutil.dll - Microsoft Corporation
             WININET.dll - C:\WINDOWS\SYSTEM32\WININET.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSTEM32\profapi.dll - Microsoft Corporation
             Windows.UI.dll - C:\Windows\System32\Windows.UI.dll - Microsoft Corporation
             NInput.dll - C:\Windows\System32\NInput.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSTEM32\shcore.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\System32\dwmapi.dll - Microsoft Corporation
             ntmarta.dll - C:\WINDOWS\system32\ntmarta.dll - Microsoft Corporation
             bcrypt.dll - c:\windows\system32\bcrypt.dll - Microsoft Corporation
             wdi.dll - c:\windows\system32\wdi.dll - Microsoft Corporation
             diagperf.dll - C:\WINDOWS\system32\diagperf.dll - Microsoft Corporation
             pnpts.dll - C:\WINDOWS\system32\pnpts.dll - Microsoft Corporation
             pots.dll - C:\WINDOWS\system32\pots.dll - Microsoft Corporation
             tdh.dll - C:\WINDOWS\system32\tdh.dll - Microsoft Corporation
             netprofm.dll - C:\WINDOWS\System32\netprofm.dll - Microsoft Corporation
             srumsvc.dll - C:\WINDOWS\System32\srumsvc.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             ESENT.dll - C:\WINDOWS\system32\ESENT.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             npmproxy.dll - C:\WINDOWS\System32\npmproxy.dll - Microsoft Corporation
             wdiasqmmodule.dll - C:\WINDOWS\system32\wdiasqmmodule.dll - Microsoft Corporation
             dtsh.dll - C:\WINDOWS\system32\dtsh.dll - Microsoft Corporation
             Wintrust.dll - C:\WINDOWS\system32\Wintrust.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             imagehlp.dll - C:\WINDOWS\system32\imagehlp.dll - Microsoft Corporation
             ncrypt.dll - C:\WINDOWS\system32\ncrypt.dll - Microsoft Corporation
             NTASN1.dll - C:\WINDOWS\system32\NTASN1.dll - Microsoft Corporation
             cryptnet.dll - C:\WINDOWS\system32\cryptnet.dll - Microsoft Corporation
             WLDAP32.dll - C:\WINDOWS\system32\WLDAP32.dll - Microsoft Corporation
             nduprov.dll - C:\WINDOWS\System32\nduprov.dll - Microsoft Corporation
             wpnsruprov.dll - C:\WINDOWS\System32\wpnsruprov.dll - Microsoft Corporation
             appsruprov.dll - C:\WINDOWS\System32\appsruprov.dll - Microsoft Corporation
             ncuprov.dll - C:\WINDOWS\System32\ncuprov.dll - Microsoft Corporation
             wlanapi.dll - C:\WINDOWS\system32\wlanapi.dll - Microsoft Corporation
             wwapi.dll - C:\WINDOWS\system32\wwapi.dll - Microsoft Corporation
             energyprov.dll - C:\WINDOWS\System32\energyprov.dll - Microsoft Corporation
             XmlLite.dll - C:\WINDOWS\system32\XmlLite.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\system32\DEVOBJ.dll - Microsoft Corporation
             SrumAPI.dll - C:\WINDOWS\system32\SrumAPI.dll - Microsoft Corporation
             radardt.dll - C:\WINDOWS\system32\radardt.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\system32\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\system32\VERSION.dll - Microsoft Corporation
             svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             radardt.dll - C:\Windows\System32\radardt.dll - Microsoft Corporation
             srumapi.dll - C:\Windows\System32\srumapi.dll - Microsoft Corporation
             energyprov.dll - C:\Windows\System32\energyprov.dll - Microsoft Corporation
             wwapi.dll - C:\Windows\System32\wwapi.dll - Microsoft Corporation
             ncuprov.dll - C:\Windows\System32\ncuprov.dll - Microsoft Corporation
             appsruprov.dll - C:\Windows\System32\appsruprov.dll - Microsoft Corporation
             wpnsruprov.dll - C:\Windows\System32\wpnsruprov.dll - Microsoft Corporation
             nduprov.dll - C:\Windows\System32\nduprov.dll - Microsoft Corporation
             cryptnet.dll - C:\Windows\System32\cryptnet.dll - Microsoft Corporation
             dtsh.dll - C:\Windows\System32\dtsh.dll - Microsoft Corporation
             wdiasqmmodule.dll - C:\Windows\System32\wdiasqmmodule.dll - Microsoft Corporation
             esent.dll - C:\Windows\System32\esent.dll - Microsoft Corporation
             srumsvc.dll - C:\Windows\System32\srumsvc.dll - Microsoft Corporation
             tdh.dll - C:\Windows\System32\tdh.dll - Microsoft Corporation
             pots.dll - C:\Windows\System32\pots.dll - Microsoft Corporation
             pnpts.dll - C:\Windows\System32\pnpts.dll - Microsoft Corporation
             diagperf.dll - C:\Windows\System32\diagperf.dll - Microsoft Corporation
             netprofm.dll - C:\Windows\System32\netprofm.dll - Microsoft Corporation
             ninput.dll - C:\Windows\System32\ninput.dll - Microsoft Corporation
             Windows.UI.dll - C:\Windows\System32\Windows.UI.dll - Microsoft Corporation
             wininet.dll - C:\Windows\System32\wininet.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\System32\iertutil.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\System32\urlmon.dll - Microsoft Corporation
             MrmCoreR.dll - C:\Windows\System32\MrmCoreR.dll - Microsoft Corporation
             dps.dll - C:\Windows\System32\dps.dll - Microsoft Corporation
             version.dll - C:\Windows\System32\version.dll - Microsoft Corporation
             MPSSVC.dll - C:\Windows\System32\MPSSVC.dll - Microsoft Corporation
             BFE.DLL - C:\Windows\System32\BFE.DLL - Microsoft Corporation
             ntmarta.dll - C:\Windows\System32\ntmarta.dll - Microsoft Corporation
             wfapigp.dll - C:\Windows\System32\wfapigp.dll - Microsoft Corporation
             adhapi.dll - C:\Windows\System32\adhapi.dll - Microsoft Corporation
             npmproxy.dll - C:\Windows\System32\npmproxy.dll - Microsoft Corporation
             wdi.dll - C:\Windows\System32\wdi.dll - Microsoft Corporation
             wlanapi.dll - C:\Windows\System32\wlanapi.dll - Microsoft Corporation
             dhcpcsvc6.dll - C:\Windows\System32\dhcpcsvc6.dll - Microsoft Corporation
             dhcpcsvc.dll - C:\Windows\System32\dhcpcsvc.dll - Microsoft Corporation
             FWPUCLNT.DLL - C:\Windows\System32\FWPUCLNT.DLL - Microsoft Corporation
             winnsi.dll - C:\Windows\System32\winnsi.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             taskschd.dll - C:\Windows\System32\taskschd.dll - Microsoft Corporation
             wevtapi.dll - C:\Windows\System32\wevtapi.dll - Microsoft Corporation
             xmllite.dll - C:\Windows\System32\xmllite.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             BCP47Langs.dll - C:\Windows\System32\BCP47Langs.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\System32\dwmapi.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             FirewallAPI.dll - C:\Windows\System32\FirewallAPI.dll - Microsoft Corporation
             gpapi.dll - C:\Windows\System32\gpapi.dll - Microsoft Corporation
             pcwum.dll - C:\Windows\System32\pcwum.dll - Microsoft Corporation
             authz.dll - C:\Windows\System32\authz.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             dnsapi.dll - C:\Windows\System32\dnsapi.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             ntasn1.dll - C:\Windows\System32\ntasn1.dll - Microsoft Corporation
             ncrypt.dll - C:\Windows\System32\ncrypt.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             wintrust.dll - C:\Windows\System32\wintrust.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imagehlp.dll - C:\Windows\System32\imagehlp.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             Wldap32.dll - C:\Windows\System32\Wldap32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Modules
             new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSwow64\WINMM.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSwow64\WINMMBASE.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSwow64\cfgmgr32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSwow64\shcore.dll - Microsoft Corporation
             chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             USP10.dll - C:\WINDOWS\SYSwow64\USP10.dll - Microsoft Corporation
             PSAPI.DLL - C:\WINDOWS\SYSwow64\PSAPI.DLL - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSwow64\WINSPOOL.DRV - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSwow64\Secur32.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             dbghelp.dll - C:\WINDOWS\SYSwow64\dbghelp.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\icudt.dll - The ICU Project
             tiptsf.dll - C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             setupapi.dll - C:\WINDOWS\SYSwow64\setupapi.dll - Microsoft Corporation
             d3d9.dll - C:\WINDOWS\SYSwow64\d3d9.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\SYSwow64\dwmapi.dll - Microsoft Corporation
             dxva2.dll - C:\WINDOWS\SYSwow64\dxva2.dll - Microsoft Corporation
             mf.dll - C:\WINDOWS\SYSwow64\mf.dll - Microsoft Corporation
             mfplat.dll - C:\WINDOWS\SYSwow64\mfplat.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSwow64\kernel.appcore.dll - Microsoft Corporation
             RTWorkQ.DLL - C:\WINDOWS\SYSwow64\RTWorkQ.DLL - Microsoft Corporation
             AVRT.dll - C:\WINDOWS\SYSwow64\AVRT.dll - Microsoft Corporation
             msmpeg2vdec.dll - C:\WINDOWS\SYSwow64\msmpeg2vdec.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSwow64\CRYPTSP.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSwow64\bcrypt.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             igdumdim32.dll - C:\WINDOWS\SYSwow64\igdumdim32.dll - Intel Corporation
             igdusc32.dll - C:\WINDOWS\SYSwow64\igdusc32.dll - Intel Corporation
             D3DCompiler_46.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\D3DCompiler_46.dll - Microsoft Corporation
             libglesv2.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll - 
             libegl.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll - 
             comctl32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09\comctl32.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[602updsvc.exe]Modules
             602updsvc.exe - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe - Software602 a.s.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             imagehlp.dll - C:\WINDOWS\SYSwow64\imagehlp.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\SYSwow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[armsvc.exe]Modules
             armsvc.exe - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe - Adobe Systems Incorporated
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\SYSwow64\WINTRUST.dll - Microsoft Corporation
             MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSwow64\kernel.appcore.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[InsOnSrv.exe]Modules
             InsOnSrv.exe - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe - ASUS
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\SYSwow64\SETUPAPI.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             POWRPROF.dll - C:\WINDOWS\SYSwow64\POWRPROF.dll - Microsoft Corporation
             OLEACC.dll - C:\WINDOWS\SYSwow64\OLEACC.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSwow64\WINSPOOL.DRV - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\SYSwow64\CFGMGR32.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSwow64\WINSTA.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\SYSwow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSwow64\kernel.appcore.dll - Microsoft Corporation
             apphelp.dll - C:\WINDOWS\syswow64\apphelp.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[AdminService.exe]Modules
             adminservice.exe - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe - Qualcomm Atheros Commnucations
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             bthprops.cpl - C:\WINDOWS\SYSTEM32\bthprops.cpl - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             POWRPROF.dll - C:\WINDOWS\SYSTEM32\POWRPROF.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSTEM32\VERSION.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSTEM32\DEVOBJ.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSTEM32\cfgmgr32.dll - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             BluetoothApis.dll - C:\WINDOWS\SYSTEM32\BluetoothApis.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\comctl32.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             AdminService.exe - C:\Program Files (x86)\Bluetooth Suite\AdminService.exe - Qualcomm Atheros Commnucations
             version.dll - C:\Windows\System32\version.dll - Microsoft Corporation
             BluetoothApis.dll - C:\Windows\System32\BluetoothApis.dll - Microsoft Corporation
             bthprops.cpl - C:\Windows\System32\bthprops.cpl - Microsoft Corporation
             comctl32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\comctl32.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             wintrust.dll - C:\Windows\System32\wintrust.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[QuickGesture.exe]Modules
             QuickGesture.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe - ASUSTeK Computer Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             QuickGesture.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.dll - ASUSTeK Computer Inc.
             MSVCR100.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\MSVCR100.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             MSIMG32.dll - C:\WINDOWS\SYSwow64\MSIMG32.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\syswow64\dwmapi.dll - Microsoft Corporation
             OLEACC.DLL - C:\WINDOWS\SYSwow64\OLEACC.DLL - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSwow64\kernel.appcore.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSwow64\clbcatq.dll - Microsoft Corporation
             uiautomationcore.dll - C:\Windows\SYSwow64\uiautomationcore.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSwow64\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\syswow64\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSwow64\bcrypt.dll - Microsoft Corporation
             sxs.dll - C:\WINDOWS\SYSwow64\sxs.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[wmpnetwk.exe]Modules
             wmpnetwk.exe - C:\Program Files\Windows Media Player\wmpnetwk.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             WSOCK32.dll - C:\WINDOWS\SYSTEM32\WSOCK32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSTEM32\USERENV.dll - Microsoft Corporation
             Cabinet.dll - C:\WINDOWS\SYSTEM32\Cabinet.dll - Microsoft Corporation
             NETAPI32.dll - C:\WINDOWS\SYSTEM32\NETAPI32.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSTEM32\WTSAPI32.dll - Microsoft Corporation
             PROPSYS.dll - C:\WINDOWS\SYSTEM32\PROPSYS.dll - Microsoft Corporation
             XmlLite.dll - C:\WINDOWS\SYSTEM32\XmlLite.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\system32\combase.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSTEM32\WINNSI.DLL - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSTEM32\profapi.dll - Microsoft Corporation
             netutils.dll - C:\WINDOWS\SYSTEM32\netutils.dll - Microsoft Corporation
             srvcli.dll - C:\WINDOWS\SYSTEM32\srvcli.dll - Microsoft Corporation
             wkscli.dll - C:\WINDOWS\SYSTEM32\wkscli.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSTEM32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSTEM32\WINSTA.dll - Microsoft Corporation
             ntmarta.dll - C:\WINDOWS\SYSTEM32\ntmarta.dll - Microsoft Corporation
             dhcpcsvc6.DLL - C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\system32\CFGMGR32.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSTEM32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSTEM32\bcrypt.dll - Microsoft Corporation
             LINKINFO.dll - C:\WINDOWS\SYSTEM32\LINKINFO.dll - Microsoft Corporation
             tquery.dll - C:\WINDOWS\system32\tquery.dll - Microsoft Corporation
             wmpmde.dll - C:\WINDOWS\SYSTEM32\wmpmde.dll - Microsoft Corporation
             MFPlat.DLL - C:\WINDOWS\SYSTEM32\MFPlat.DLL - Microsoft Corporation
             RTWorkQ.DLL - C:\WINDOWS\SYSTEM32\RTWorkQ.DLL - Microsoft Corporation
             AVRT.dll - C:\WINDOWS\SYSTEM32\AVRT.dll - Microsoft Corporation
             HTTPAPI.dll - C:\WINDOWS\SYSTEM32\HTTPAPI.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             MFCORE.dll - C:\WINDOWS\SYSTEM32\MFCORE.dll - Microsoft Corporation
             ksuser.dll - C:\WINDOWS\SYSTEM32\ksuser.dll - Microsoft Corporation
             WinSATAPI.dll - C:\WINDOWS\system32\WinSATAPI.dll - Microsoft Corporation
             dxgi.dll - C:\WINDOWS\system32\dxgi.dll - Microsoft Corporation
             gdiplus.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_9332526147499ed1\gdiplus.dll - Microsoft Corporation
             msxml6.dll - C:\Windows\System32\msxml6.dll - Microsoft Corporation
             urlmon.dll - C:\WINDOWS\SYSTEM32\urlmon.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSTEM32\iertutil.dll - Microsoft Corporation
             WININET.dll - C:\WINDOWS\SYSTEM32\WININET.dll - Microsoft Corporation
             MSOXMLMF.DLL - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL - Microsoft Corporation
             MSVCR80.dll - C:\WINDOWS\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.8428_none_88dcdb0b2fb19957\MSVCR80.dll - Microsoft Corporation
             msmpeg2enc.dll - C:\Windows\System32\msmpeg2enc.dll - Microsoft Corporation
             netprofm.dll - C:\WINDOWS\System32\netprofm.dll - Microsoft Corporation
             npmproxy.dll - C:\WINDOWS\System32\npmproxy.dll - Microsoft Corporation
             StructuredQuery.dll - C:\WINDOWS\System32\StructuredQuery.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSTEM32\SspiCli.dll - Microsoft Corporation
             upnphost.dll - C:\WINDOWS\system32\upnphost.dll - Microsoft Corporation
             SSDPAPI.dll - C:\WINDOWS\system32\SSDPAPI.dll - Microsoft Corporation
             wbemprox.dll - C:\WINDOWS\system32\wbem\wbemprox.dll - Microsoft Corporation
             wbemcomn.dll - C:\WINDOWS\SYSTEM32\wbemcomn.dll - Microsoft Corporation
             wbemsvc.dll - C:\WINDOWS\system32\wbem\wbemsvc.dll - Microsoft Corporation
             fastprox.dll - C:\WINDOWS\system32\wbem\fastprox.dll - Microsoft Corporation
             gpapi.dll - C:\WINDOWS\SYSTEM32\gpapi.dll - Microsoft Corporation
             FirewallAPI.dll - C:\Windows\System32\FirewallAPI.dll - Microsoft Corporation
             wmpnetwk.exe - C:\Program Files\Windows Media Player\wmpnetwk.exe - Microsoft Corporation
             wsock32.dll - C:\Windows\System32\wsock32.dll - Microsoft Corporation
             MSMPEG2ENC.DLL - C:\Windows\System32\MSMPEG2ENC.DLL - Microsoft Corporation
             mfcore.dll - C:\Windows\System32\mfcore.dll - Microsoft Corporation
             wmpmde.dll - C:\Windows\System32\wmpmde.dll - Microsoft Corporation
             tquery.dll - C:\Windows\System32\tquery.dll - Microsoft Corporation
             upnphost.dll - C:\Windows\System32\upnphost.dll - Microsoft Corporation
             WinSATAPI.dll - C:\Windows\System32\WinSATAPI.dll - Microsoft Corporation
             StructuredQuery.dll - C:\Windows\System32\StructuredQuery.dll - Microsoft Corporation
             mfplat.dll - C:\Windows\System32\mfplat.dll - Microsoft Corporation
             cabinet.dll - C:\Windows\System32\cabinet.dll - Microsoft Corporation
             httpapi.dll - C:\Windows\System32\httpapi.dll - Microsoft Corporation
             RTWorkQ.dll - C:\Windows\System32\RTWorkQ.dll - Microsoft Corporation
             wbemsvc.dll - C:\Windows\System32\wbem\wbemsvc.dll - Microsoft Corporation
             fastprox.dll - C:\Windows\System32\wbem\fastprox.dll - Microsoft Corporation
             wbemprox.dll - C:\Windows\System32\wbem\wbemprox.dll - Microsoft Corporation
             netprofm.dll - C:\Windows\System32\netprofm.dll - Microsoft Corporation
             wbemcomn.dll - C:\Windows\System32\wbemcomn.dll - Microsoft Corporation
             ssdpapi.dll - C:\Windows\System32\ssdpapi.dll - Microsoft Corporation
             wininet.dll - C:\Windows\System32\wininet.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\System32\iertutil.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\System32\urlmon.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\System32\ntmarta.dll - Microsoft Corporation
             npmproxy.dll - C:\Windows\System32\npmproxy.dll - Microsoft Corporation
             msxml6.dll - C:\Windows\System32\msxml6.dll - Microsoft Corporation
             dhcpcsvc6.dll - C:\Windows\System32\dhcpcsvc6.dll - Microsoft Corporation
             dhcpcsvc.dll - C:\Windows\System32\dhcpcsvc.dll - Microsoft Corporation
             winnsi.dll - C:\Windows\System32\winnsi.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             wkscli.dll - C:\Windows\System32\wkscli.dll - Microsoft Corporation
             netapi32.dll - C:\Windows\System32\netapi32.dll - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             ksuser.dll - C:\Windows\System32\ksuser.dll - Microsoft Corporation
             xmllite.dll - C:\Windows\System32\xmllite.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             linkinfo.dll - C:\Windows\System32\linkinfo.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             dxgi.dll - C:\Windows\System32\dxgi.dll - Microsoft Corporation
             avrt.dll - C:\Windows\System32\avrt.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             FirewallAPI.dll - C:\Windows\System32\FirewallAPI.dll - Microsoft Corporation
             gpapi.dll - C:\Windows\System32\gpapi.dll - Microsoft Corporation
             netutils.dll - C:\Windows\System32\netutils.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             userenv.dll - C:\Windows\System32\userenv.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\System32\srvcli.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             GdiPlus.dll - C:\Windows\System32\GdiPlus.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[Ath_CoexAgent.exe]Modules
             Ath_CoexAgent.exe - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe - Atheros
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSwow64\cfgmgr32.dll - Microsoft Corporation
             wlanapi.dll - C:\WINDOWS\SYSwow64\wlanapi.dll - Microsoft Corporation
             Bthprops.cpl - C:\WINDOWS\SYSwow64\Bthprops.cpl - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\SYSwow64\SHCORE.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             BluetoothApis.dll - C:\WINDOWS\SYSwow64\BluetoothApis.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09\comctl32.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\SYSwow64\SETUPAPI.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\SYSwow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[DptfParticipantProcessorService.exe]Modules
             DptfParticipantProcessorService.exe - C:\WINDOWS\system32\DptfParticipantProcessorService.exe - Intel Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             MSVCR90.dll - C:\WINDOWS\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\MSVCR90.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\system32\CFGMGR32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\system32\DEVOBJ.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\system32\powrprof.dll - Microsoft Corporation
             DptfParticipantProcessorService.exe - C:\Windows\System32\DptfParticipantProcessorService.exe - Intel Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             wintrust.dll - C:\Windows\System32\wintrust.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[dasHost.exe]Modules
             dashost.exe - C:\WINDOWS\system32\dashost.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSTEM32\cfgmgr32.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             dafupnp.dll - C:\WINDOWS\system32\dafupnp.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\system32\IPHLPAPI.DLL - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\system32\bcrypt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             WINHTTP.dll - C:\WINDOWS\system32\WINHTTP.dll - Microsoft Corporation
             SSDPAPI.dll - C:\WINDOWS\system32\SSDPAPI.dll - Microsoft Corporation
             deviceassociation.dll - C:\WINDOWS\system32\deviceassociation.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\system32\WINNSI.DLL - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             dasHost.exe - C:\Windows\System32\dasHost.exe - Microsoft Corporation
             deviceassociation.dll - C:\Windows\System32\deviceassociation.dll - Microsoft Corporation
             ssdpapi.dll - C:\Windows\System32\ssdpapi.dll - Microsoft Corporation
             winhttp.dll - C:\Windows\System32\winhttp.dll - Microsoft Corporation
             dafupnp.dll - C:\Windows\System32\dafupnp.dll - Microsoft Corporation
             winnsi.dll - C:\Windows\System32\winnsi.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[DptfPolicyConfigTDPService.exe]Modules
             DptfPolicyConfigTDPService.exe - C:\WINDOWS\system32\DptfPolicyConfigTDPService.exe - Intel Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             MSVCR90.dll - C:\WINDOWS\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_08e793bfa83a89b5\MSVCR90.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\system32\CFGMGR32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\system32\DEVOBJ.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\system32\powrprof.dll - Microsoft Corporation
             DptfPolicyConfigTDPService.exe - C:\Windows\System32\DptfPolicyConfigTDPService.exe - Intel Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             wintrust.dll - C:\Windows\System32\wintrust.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[AsusTPHelper.exe]Modules
             AsusTPHelper.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe - AsusTek
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             MSVCR100.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\MSVCR100.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSTEM32\SspiCli.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             AsusTPHelper.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe - AsusTek
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Modules
             new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSwow64\WINMM.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSwow64\WINMMBASE.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSwow64\cfgmgr32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSwow64\shcore.dll - Microsoft Corporation
             chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             USP10.dll - C:\WINDOWS\SYSwow64\USP10.dll - Microsoft Corporation
             PSAPI.DLL - C:\WINDOWS\SYSwow64\PSAPI.DLL - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSwow64\WINSPOOL.DRV - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSwow64\Secur32.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             dbghelp.dll - C:\WINDOWS\SYSwow64\dbghelp.dll - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09\comctl32.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\icudt.dll - The ICU Project
             pdf.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll - 
             ppGoogleNaClPluginChrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll - 
             libpeerconnection.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libpeerconnection.dll - Google Inc.
             ffmpegsumo.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll - 
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[HeciServer.exe]Modules
             HeciServer.exe - C:\Program Files\Intel\iCLS Client\HeciServer.exe - Intel(R) Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\system32\CFGMGR32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSTEM32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSTEM32\profapi.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSTEM32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSTEM32\bcrypt.dll - Microsoft Corporation
             HeciServer.exe - C:\Program Files\Intel\iCLS Client\HeciServer.exe - Intel(R) Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[Jhi_service.exe]Modules
             jhi_service.exe - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe - Intel Corporation
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             MSVCP100.dll - C:\WINDOWS\SYSwow64\MSVCP100.dll - Microsoft Corporation
             MSVCR100.dll - C:\WINDOWS\SYSwow64\MSVCR100.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\syswow64\mswsock.dll - Microsoft Corporation
             DNSAPI.dll - C:\WINDOWS\SYSwow64\DNSAPI.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\Syswow64\rasadhlp.dll - Microsoft Corporation
             fwpuclnt.dll - C:\WINDOWS\Syswow64\fwpuclnt.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[HelperService.exe]Modules
             HelperService.exe - C:\Program Files (x86)\PDF Architect\HelperService.exe - pdfforge GmbH
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             msi.dll - C:\WINDOWS\SYSwow64\msi.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             NETAPI32.dll - C:\WINDOWS\SYSwow64\NETAPI32.dll - Microsoft Corporation
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             libcurl.dll - C:\Program Files (x86)\PDF Architect\libcurl.dll - The cURL library, http://curl.haxx.se/
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             netutils.dll - C:\WINDOWS\SYSwow64\netutils.dll - Microsoft Corporation
             srvcli.dll - C:\WINDOWS\SYSwow64\srvcli.dll - Microsoft Corporation
             wkscli.dll - C:\WINDOWS\SYSwow64\wkscli.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             WSOCK32.dll - C:\WINDOWS\SYSwow64\WSOCK32.dll - Microsoft Corporation
             WLDAP32.dll - C:\WINDOWS\SYSwow64\WLDAP32.dll - Microsoft Corporation
             LIBEAY32.dll - C:\Program Files (x86)\PDF Architect\LIBEAY32.dll - The OpenSSL Project, http://www.openssl.org/
             SSLEAY32.dll - C:\Program Files (x86)\PDF Architect\SSLEAY32.dll - The OpenSSL Project, http://www.openssl.org/
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             SAMCLI.DLL - C:\WINDOWS\SYSwow64\SAMCLI.DLL - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSwow64\kernel.appcore.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSwow64\WINSTA.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSwow64\clbcatq.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSwow64\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\syswow64\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSwow64\bcrypt.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[ConversionService.exe]Modules
             ConversionService.exe - C:\Program Files (x86)\PDF Architect\ConversionService.exe - pdfforge GmbH
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSwow64\WINSPOOL.DRV - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             NETAPI32.dll - C:\WINDOWS\SYSwow64\NETAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             netutils.dll - C:\WINDOWS\SYSwow64\netutils.dll - Microsoft Corporation
             srvcli.dll - C:\WINDOWS\SYSwow64\srvcli.dll - Microsoft Corporation
             wkscli.dll - C:\WINDOWS\SYSwow64\wkscli.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             SAMCLI.DLL - C:\WINDOWS\SYSwow64\SAMCLI.DLL - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSwow64\kernel.appcore.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSwow64\clbcatq.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSwow64\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\syswow64\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSwow64\bcrypt.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Modules
             new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSwow64\WINMM.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSwow64\WINMMBASE.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSwow64\cfgmgr32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSwow64\shcore.dll - Microsoft Corporation
             chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             USP10.dll - C:\WINDOWS\SYSwow64\USP10.dll - Microsoft Corporation
             PSAPI.DLL - C:\WINDOWS\SYSwow64\PSAPI.DLL - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSwow64\WINSPOOL.DRV - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSwow64\Secur32.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             dbghelp.dll - C:\WINDOWS\SYSwow64\dbghelp.dll - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09\comctl32.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\icudt.dll - The ICU Project
             ffmpegsumo.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll - 
             pepflashplayer.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll - 
             gdiplus.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_dadf89385bc5c7d7\gdiplus.dll - Microsoft Corporation
             dxva2.dll - C:\WINDOWS\SYSwow64\dxva2.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[LMS.exe]Modules
             LMS.exe - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe - Intel Corporation
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\SYSwow64\SETUPAPI.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             DNSAPI.dll - C:\WINDOWS\SYSwow64\DNSAPI.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\SYSwow64\CFGMGR32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\SYSwow64\WINTRUST.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[KBFiltr.exe]Modules
             KBFiltr.exe - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe - ASUSTek Computer Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\syswow64\dwmapi.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSwow64\WINSTA.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[WmiPrvSE.exe]Modules
             wmiprvse.exe - C:\WINDOWS\system32\wbem\wmiprvse.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             FastProx.dll - C:\WINDOWS\system32\wbem\FastProx.dll - Microsoft Corporation
             NCObjAPI.DLL - C:\WINDOWS\SYSTEM32\NCObjAPI.DLL - Microsoft Corporation
             wbemcomn.dll - C:\WINDOWS\SYSTEM32\wbemcomn.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             advapi32.dll - C:\WINDOWS\SYSTEM32\advapi32.dll - Microsoft Corporation
             user32.dll - C:\WINDOWS\SYSTEM32\user32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSTEM32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             wbemprox.dll - C:\WINDOWS\system32\wbem\wbemprox.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSTEM32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSTEM32\bcrypt.dll - Microsoft Corporation
             wbemsvc.dll - C:\WINDOWS\system32\wbem\wbemsvc.dll - Microsoft Corporation
             wmiutils.dll - C:\WINDOWS\system32\wbem\wmiutils.dll - Microsoft Corporation
             cimwin32.dll - C:\WINDOWS\system32\wbem\cimwin32.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             framedynos.dll - C:\WINDOWS\SYSTEM32\framedynos.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSTEM32\SspiCli.dll - Microsoft Corporation
             WMI.DLL - C:\WINDOWS\SYSTEM32\WMI.DLL - Microsoft Corporation
             wmiclnt.DLL - C:\WINDOWS\SYSTEM32\wmiclnt.DLL - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSTEM32\DEVOBJ.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSTEM32\cfgmgr32.dll - Microsoft Corporation
             WmiPrvSE.exe - C:\Windows\System32\wbem\WmiPrvSE.exe - Microsoft Corporation
             cimwin32.dll - C:\Windows\System32\wbem\cimwin32.dll - Microsoft Corporation
             ncobjapi.dll - C:\Windows\System32\ncobjapi.dll - Microsoft Corporation
             wmiutils.dll - C:\Windows\System32\wbem\wmiutils.dll - Microsoft Corporation
             wbemsvc.dll - C:\Windows\System32\wbem\wbemsvc.dll - Microsoft Corporation
             fastprox.dll - C:\Windows\System32\wbem\fastprox.dll - Microsoft Corporation
             framedynos.dll - C:\Windows\System32\framedynos.dll - Microsoft Corporation
             wbemprox.dll - C:\Windows\System32\wbem\wbemprox.dll - Microsoft Corporation
             wmi.dll - C:\Windows\System32\wmi.dll - Microsoft Corporation
             wbemcomn.dll - C:\Windows\System32\wbemcomn.dll - Microsoft Corporation
             wmiclnt.dll - C:\Windows\System32\wmiclnt.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[sppsvc.exe]Modules
             sppsvc.exe - C:\WINDOWS\system32\sppsvc.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSTEM32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSTEM32\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\system32\bcrypt.dll - Microsoft Corporation
             CRYPTXML.dll - C:\WINDOWS\system32\CRYPTXML.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             XmlLite.dll - C:\WINDOWS\system32\XmlLite.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             webservices.dll - C:\WINDOWS\system32\webservices.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             sppwinob.dll - C:\WINDOWS\system32\sppwinob.dll - Microsoft Corporation
             NETAPI32.dll - C:\WINDOWS\system32\NETAPI32.dll - Microsoft Corporation
             netutils.dll - C:\WINDOWS\system32\netutils.dll - Microsoft Corporation
             srvcli.dll - C:\WINDOWS\system32\srvcli.dll - Microsoft Corporation
             wkscli.dll - C:\WINDOWS\system32\wkscli.dll - Microsoft Corporation
             DSROLE.DLL - C:\WINDOWS\system32\DSROLE.DLL - Microsoft Corporation
             sppobjs.dll - C:\WINDOWS\system32\sppobjs.dll - Microsoft Corporation
             sppsvc.exe - C:\Windows\System32\sppsvc.exe - Microsoft Corporation
             sppobjs.dll - C:\Windows\System32\sppobjs.dll - Microsoft Corporation
             sppwinob.dll - C:\Windows\System32\sppwinob.dll - Microsoft Corporation
             cryptxml.dll - C:\Windows\System32\cryptxml.dll - Microsoft Corporation
             webservices.dll - C:\Windows\System32\webservices.dll - Microsoft Corporation
             wkscli.dll - C:\Windows\System32\wkscli.dll - Microsoft Corporation
             netapi32.dll - C:\Windows\System32\netapi32.dll - Microsoft Corporation
             dsrole.dll - C:\Windows\System32\dsrole.dll - Microsoft Corporation
             xmllite.dll - C:\Windows\System32\xmllite.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             netutils.dll - C:\Windows\System32\netutils.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\System32\srvcli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             ipsecsvc.dll - c:\windows\system32\ipsecsvc.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             fwpuclnt.dll - c:\windows\system32\fwpuclnt.dll - Microsoft Corporation
             FirewallAPI.dll - c:\windows\system32\FirewallAPI.dll - Microsoft Corporation
             FwRemoteSvr.DLL - c:\windows\system32\FwRemoteSvr.DLL - Microsoft Corporation
             combase.dll - C:\WINDOWS\system32\combase.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             IPHLPAPI.DLL - c:\windows\system32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - c:\windows\system32\WINNSI.DLL - Microsoft Corporation
             dhcpcsvc6.DLL - c:\windows\system32\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - c:\windows\system32\dhcpcsvc.DLL - Microsoft Corporation
             sspicli.dll - C:\WINDOWS\system32\sspicli.dll - Microsoft Corporation
             svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             FwRemoteSvr.dll - C:\Windows\System32\FwRemoteSvr.dll - Microsoft Corporation
             IPSECSVC.DLL - C:\Windows\System32\IPSECSVC.DLL - Microsoft Corporation
             dhcpcsvc6.dll - C:\Windows\System32\dhcpcsvc6.dll - Microsoft Corporation
             dhcpcsvc.dll - C:\Windows\System32\dhcpcsvc.dll - Microsoft Corporation
             FWPUCLNT.DLL - C:\Windows\System32\FWPUCLNT.DLL - Microsoft Corporation
             winnsi.dll - C:\Windows\System32\winnsi.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             FirewallAPI.dll - C:\Windows\System32\FirewallAPI.dll - Microsoft Corporation
             authz.dll - C:\Windows\System32\authz.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Modules
             new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSwow64\WINMM.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSwow64\WINMMBASE.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSwow64\cfgmgr32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSwow64\shcore.dll - Microsoft Corporation
             chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             USP10.dll - C:\WINDOWS\SYSwow64\USP10.dll - Microsoft Corporation
             PSAPI.DLL - C:\WINDOWS\SYSwow64\PSAPI.DLL - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSwow64\WINSPOOL.DRV - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSwow64\Secur32.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             dbghelp.dll - C:\WINDOWS\SYSwow64\dbghelp.dll - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09\comctl32.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\icudt.dll - The ICU Project
             pdf.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll - 
             ppGoogleNaClPluginChrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll - 
             libpeerconnection.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libpeerconnection.dll - Google Inc.
             ffmpegsumo.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll - 
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[IntelMeFWService.exe]Modules
             IntelMeFWService.exe - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe - Intel Corporation
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\SYSwow64\SETUPAPI.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\SYSwow64\CFGMGR32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[DMedia.exe]Modules
             DMedia.exe - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe - ASUSTek Computer Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\SYSwow64\SETUPAPI.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\SYSwow64\CFGMGR32.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\SYSwow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\syswow64\dwmapi.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSwow64\kernel.appcore.dll - Microsoft Corporation
             MetroInfo.dll - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\MetroInfo.dll - ASUSTek Computer Inc.
             tiptsf.dll - C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[WmiPrvSE.exe]Modules
             wmiprvse.exe - C:\WINDOWS\system32\wbem\wmiprvse.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             FastProx.dll - C:\WINDOWS\system32\wbem\FastProx.dll - Microsoft Corporation
             NCObjAPI.DLL - C:\WINDOWS\SYSTEM32\NCObjAPI.DLL - Microsoft Corporation
             wbemcomn.dll - C:\WINDOWS\SYSTEM32\wbemcomn.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             advapi32.dll - C:\WINDOWS\SYSTEM32\advapi32.dll - Microsoft Corporation
             user32.dll - C:\WINDOWS\SYSTEM32\user32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSTEM32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             wbemprox.dll - C:\WINDOWS\system32\wbem\wbemprox.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSTEM32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSTEM32\bcrypt.dll - Microsoft Corporation
             wbemsvc.dll - C:\WINDOWS\system32\wbem\wbemsvc.dll - Microsoft Corporation
             wmiutils.dll - C:\WINDOWS\system32\wbem\wmiutils.dll - Microsoft Corporation
             wmiprov.dll - C:\WINDOWS\system32\wbem\wmiprov.dll - Microsoft Corporation
             WMICLNT.dll - C:\WINDOWS\SYSTEM32\WMICLNT.dll - Microsoft Corporation
             WmiPrvSE.exe - C:\Windows\System32\wbem\WmiPrvSE.exe - Microsoft Corporation
             wmiprov.dll - C:\Windows\System32\wbem\wmiprov.dll - Microsoft Corporation
             ncobjapi.dll - C:\Windows\System32\ncobjapi.dll - Microsoft Corporation
             wmiutils.dll - C:\Windows\System32\wbem\wmiutils.dll - Microsoft Corporation
             wbemsvc.dll - C:\Windows\System32\wbem\wbemsvc.dll - Microsoft Corporation
             fastprox.dll - C:\Windows\System32\wbem\fastprox.dll - Microsoft Corporation
             wbemprox.dll - C:\Windows\System32\wbem\wbemprox.dll - Microsoft Corporation
             wbemcomn.dll - C:\Windows\System32\wbemcomn.dll - Microsoft Corporation
             wmiclnt.dll - C:\Windows\System32\wmiclnt.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[dllhost.exe]Modules
             DllHost.exe - C:\WINDOWS\system32\DllHost.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\system32\bcrypt.dll - Microsoft Corporation
             user32.dll - C:\WINDOWS\SYSTEM32\user32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             IDStore.dll - C:\WINDOWS\System32\IDStore.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             SAMLIB.dll - C:\WINDOWS\System32\SAMLIB.dll - Microsoft Corporation
             wlidprov.dll - C:\WINDOWS\System32\wlidprov.dll - Microsoft Corporation
             advapi32.dll - C:\WINDOWS\SYSTEM32\advapi32.dll - Microsoft Corporation
             shell32.dll - C:\WINDOWS\SYSTEM32\shell32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSTEM32\profapi.dll - Microsoft Corporation
             PROPSYS.dll - C:\WINDOWS\System32\PROPSYS.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             dllhost.exe - C:\Windows\System32\dllhost.exe - Microsoft Corporation
             wlidprov.dll - C:\Windows\System32\wlidprov.dll - Microsoft Corporation
             IDStore.dll - C:\Windows\System32\IDStore.dll - Microsoft Corporation
             actxprxy.dll - C:\Windows\System32\actxprxy.dll - Microsoft Corporation
             samlib.dll - C:\Windows\System32\samlib.dll - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[HControl.exe]Modules
             HControl.exe - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe - ASUSTek Computer Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\SYSwow64\SETUPAPI.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSwow64\WINMM.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\SYSwow64\CFGMGR32.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSwow64\WINMMBASE.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\SYSwow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\syswow64\dwmapi.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\SYSwow64\WINSTA.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSwow64\kernel.appcore.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSwow64\clbcatq.dll - Microsoft Corporation
             MMDevApi.dll - C:\WINDOWS\Syswow64\MMDevApi.dll - Microsoft Corporation
             AUDIOSES.DLL - C:\WINDOWS\SYSwow64\AUDIOSES.DLL - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSwow64\powrprof.dll - Microsoft Corporation
             apphelp.dll - C:\WINDOWS\syswow64\apphelp.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[InsOnWMI.exe]Modules
             InsOnWMI.exe - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe - ASUS
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\SYSwow64\SETUPAPI.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             POWRPROF.dll - C:\WINDOWS\SYSwow64\POWRPROF.dll - Microsoft Corporation
             OLEACC.dll - C:\WINDOWS\SYSwow64\OLEACC.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSwow64\WINSPOOL.DRV - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\SYSwow64\CFGMGR32.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\SYSwow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSwow64\kernel.appcore.dll - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\SYSwow64\SHCORE.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\syswow64\dwmapi.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSwow64\clbcatq.dll - Microsoft Corporation
             wbemprox.dll - C:\WINDOWS\syswow64\wbem\wbemprox.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             wbemcomn.dll - C:\WINDOWS\SYSwow64\wbemcomn.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\SYSwow64\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\syswow64\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\SYSwow64\bcrypt.dll - Microsoft Corporation
             wbemsvc.dll - C:\WINDOWS\syswow64\wbem\wbemsvc.dll - Microsoft Corporation
             fastprox.dll - C:\WINDOWS\syswow64\wbem\fastprox.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[taskhostex.exe]Modules
             taskhostex.exe - C:\WINDOWS\system32\taskhostex.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             user32.dll - C:\WINDOWS\SYSTEM32\user32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\system32\dwmapi.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             PlaySndSrv.dll - C:\WINDOWS\System32\PlaySndSrv.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\System32\WINMM.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\System32\WINMMBASE.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSTEM32\cfgmgr32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\System32\DEVOBJ.dll - Microsoft Corporation
             wininet.dll - C:\WINDOWS\system32\wininet.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\system32\iertutil.dll - Microsoft Corporation
             MsCtfMonitor.dll - C:\WINDOWS\system32\MsCtfMonitor.dll - Microsoft Corporation
             MSUTB.dll - C:\WINDOWS\system32\MSUTB.dll - Microsoft Corporation
             WINSTA.dll - C:\WINDOWS\system32\WINSTA.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\system32\WTSAPI32.dll - Microsoft Corporation
             ESENT.dll - C:\WINDOWS\system32\ESENT.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\system32\SHCORE.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\system32\profapi.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             sqmapi.dll - C:\Program Files\Internet Explorer\sqmapi.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             POWRPROF.dll - C:\WINDOWS\system32\POWRPROF.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\system32\USERENV.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\system32\SspiCli.dll - Microsoft Corporation
             taskhostex.exe - C:\Windows\System32\taskhostex.exe - Microsoft Corporation
             esent.dll - C:\Windows\System32\esent.dll - Microsoft Corporation
             msutb.dll - C:\Windows\System32\msutb.dll - Microsoft Corporation
             MsCtfMonitor.dll - C:\Windows\System32\MsCtfMonitor.dll - Microsoft Corporation
             winmmbase.dll - C:\Windows\System32\winmmbase.dll - Microsoft Corporation
             winmm.dll - C:\Windows\System32\winmm.dll - Microsoft Corporation
             PlaySndSrv.dll - C:\Windows\System32\PlaySndSrv.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             wininet.dll - C:\Windows\System32\wininet.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\System32\iertutil.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             sqmapi.dll - C:\Program Files\Internet Explorer\sqmapi.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\System32\dwmapi.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             userenv.dll - C:\Windows\System32\userenv.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[taskeng.exe]Modules
             taskeng.exe - C:\WINDOWS\system32\taskeng.exe - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             advapi32.dll - C:\WINDOWS\SYSTEM32\advapi32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\system32\bcrypt.dll - Microsoft Corporation
             UBPM.dll - C:\WINDOWS\system32\UBPM.dll - Microsoft Corporation
             ktmw32.dll - C:\WINDOWS\system32\ktmw32.dll - Microsoft Corporation
             DABAPI.dll - C:\WINDOWS\system32\DABAPI.dll - Microsoft Corporation
             CSystemEventsBrokerClient.dll - C:\WINDOWS\system32\CSystemEventsBrokerClient.dll - Microsoft Corporation
             EventAggregation.dll - C:\WINDOWS\system32\EventAggregation.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             user32.dll - C:\WINDOWS\SYSTEM32\user32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\system32\SspiCli.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             tschannel.dll - C:\Windows\System32\tschannel.dll - Microsoft Corporation
             XmlLite.dll - C:\WINDOWS\system32\XmlLite.dll - Microsoft Corporation
             apphelp.dll - C:\WINDOWS\system32\apphelp.dll - Microsoft Corporation
             taskeng.exe - C:\Windows\System32\taskeng.exe - Microsoft Corporation
             TSChannel.dll - C:\Windows\System32\TSChannel.dll - Microsoft Corporation
             CSystemEventsBrokerClient.dll - C:\Windows\System32\CSystemEventsBrokerClient.dll - Microsoft Corporation
             ktmw32.dll - C:\Windows\System32\ktmw32.dll - Microsoft Corporation
             ubpm.dll - C:\Windows\System32\ubpm.dll - Microsoft Corporation
             xmllite.dll - C:\Windows\System32\xmllite.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\System32\apphelp.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             EventAggregation.dll - C:\Windows\System32\EventAggregation.dll - Microsoft Corporation
             dabapi.dll - C:\Windows\System32\dabapi.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[AsPatchTouchPanel64.exe]Modules
             AsPatchTouchPanel64.exe - C:\ProgramData\AsTouchPanel\AsPatchTouchPanel64.exe - ASUSTek Computer INC.
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             POWRPROF.dll - C:\WINDOWS\SYSTEM32\POWRPROF.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\system32\CFGMGR32.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\system32\dwmapi.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             AsPatchTouchPanel64.exe - C:\ProgramData\AsTouchPanel\AsPatchTouchPanel64.exe - ASUSTek Computer INC.
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\System32\dwmapi.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[USBChargerPlus.exe]Modules
             USBChargerPlus.exe - C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe - ASUSTek Computer Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             mfc100u.dll - C:\Program Files (x86)\ASUS\USBChargerPlus\mfc100u.dll - Microsoft Corporation
             MSVCR100.dll - C:\Program Files (x86)\ASUS\USBChargerPlus\MSVCR100.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             COMCTL32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09\COMCTL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             gdiplus.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_dadf89385bc5c7d7\gdiplus.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\SYSwow64\SETUPAPI.dll - Microsoft Corporation
             MSIMG32.dll - C:\WINDOWS\SYSwow64\MSIMG32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\SYSwow64\CFGMGR32.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             UxTheme.dll - C:\WINDOWS\SYSwow64\UxTheme.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\syswow64\dwmapi.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\SYSwow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\SYSwow64\SHCORE.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[igfxtray.exe]Modules
             igfxtray.exe - C:\Windows\System32\igfxtray.exe - Intel Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\System32\VERSION.dll - Microsoft Corporation
             hccutils.DLL - C:\Windows\System32\hccutils.DLL - Intel Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\System32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\Windows\System32\bcryptPrimitives.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\system32\dwmapi.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\System32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             igfxsrvc.dll - C:\WINDOWS\system32\igfxsrvc.dll - Intel Corporation
             igfxrCSY.lrc - C:\WINDOWS\system32\igfxrCSY.lrc - Intel Corporation
             SHCORE.dll - C:\Windows\System32\SHCORE.dll - Microsoft Corporation
             igfxress.dll - C:\Windows\System32\igfxress.dll - Intel Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             igfxsrvc.dll - C:\Windows\System32\igfxsrvc.dll - Intel Corporation
             version.dll - C:\Windows\System32\version.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\System32\dwmapi.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[igfxpers.exe]Modules
             igfxpers.exe - C:\Windows\System32\igfxpers.exe - Intel Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             hccutils.DLL - C:\Windows\System32\hccutils.DLL - Intel Corporation
             POWRPROF.dll - C:\Windows\System32\POWRPROF.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\System32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\Windows\System32\bcryptPrimitives.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\System32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             igfxsrvc.dll - C:\WINDOWS\system32\igfxsrvc.dll - Intel Corporation
             dwmapi.dll - C:\WINDOWS\system32\dwmapi.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\system32\cfgmgr32.dll - Microsoft Corporation
             IccLibDll_x64.dll - C:\Windows\System32\IccLibDll_x64.dll - 
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             PSAPI.DLL - C:\WINDOWS\system32\PSAPI.DLL - Microsoft Corporation
             SHCORE.dll - C:\Windows\System32\SHCORE.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\System32\WINSTA.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\System32\DEVOBJ.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             igfxsrvc.dll - C:\Windows\System32\igfxsrvc.dll - Intel Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\System32\dwmapi.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             winsta.dll - C:\Windows\System32\winsta.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             wintrust.dll - C:\Windows\System32\wintrust.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             psapi.dll - C:\Windows\System32\psapi.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[igfxsrvc.exe]Modules
             igfxsrvc.exe - C:\WINDOWS\system32\igfxsrvc.exe - Intel Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\system32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\system32\bcryptPrimitives.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             CRYPTSP.dll - C:\WINDOWS\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\WINDOWS\system32\rsaenh.dll - Microsoft Corporation
             bcrypt.dll - C:\WINDOWS\system32\bcrypt.dll - Microsoft Corporation
             igfxsrvc.dll - C:\WINDOWS\system32\igfxsrvc.dll - Intel Corporation
             igfxdev.dll - C:\WINDOWS\system32\igfxdev.dll - Intel Corporation
             OPENGL32.dll - C:\WINDOWS\system32\OPENGL32.dll - Microsoft Corporation
             dxgi.dll - C:\WINDOWS\system32\dxgi.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             GLU32.dll - C:\WINDOWS\system32\GLU32.dll - Microsoft Corporation
             DDRAW.dll - C:\WINDOWS\system32\DDRAW.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\system32\CFGMGR32.dll - Microsoft Corporation
             DCIMAN32.dll - C:\WINDOWS\system32\DCIMAN32.dll - Microsoft Corporation
             ntmarta.dll - C:\WINDOWS\SYSTEM32\ntmarta.dll - Microsoft Corporation
             ddraw.dll - C:\Windows\System32\ddraw.dll - Microsoft Corporation
             glu32.dll - C:\Windows\System32\glu32.dll - Microsoft Corporation
             opengl32.dll - C:\Windows\System32\opengl32.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             igfxsrvc.dll - C:\Windows\System32\igfxsrvc.dll - Intel Corporation
             dciman32.dll - C:\Windows\System32\dciman32.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\System32\ntmarta.dll - Microsoft Corporation
             dxgi.dll - C:\Windows\System32\dxgi.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\System32\rsaenh.dll - Microsoft Corporation
             cryptsp.dll - C:\Windows\System32\cryptsp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[RAVCpl64.exe]Modules
             RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSTEM32\WINMM.dll - Microsoft Corporation
             DSOUND.dll - C:\WINDOWS\SYSTEM32\DSOUND.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSTEM32\VERSION.dll - Microsoft Corporation
             PROPSYS.dll - C:\WINDOWS\SYSTEM32\PROPSYS.dll - Microsoft Corporation
             UxTheme.dll - C:\WINDOWS\SYSTEM32\UxTheme.dll - Microsoft Corporation
             gdiplus.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_9332526147499ed1\gdiplus.dll - Microsoft Corporation
             IMM32.dll - C:\WINDOWS\system32\IMM32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             MSIMG32.dll - C:\WINDOWS\SYSTEM32\MSIMG32.dll - Microsoft Corporation
             COMDLG32.dll - C:\WINDOWS\system32\COMDLG32.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSTEM32\WINSPOOL.DRV - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             COMCTL32.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\COMCTL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             oledlg.dll - C:\WINDOWS\SYSTEM32\oledlg.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\system32\CFGMGR32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSTEM32\WINMMBASE.dll - Microsoft Corporation
             POWRPROF.dll - C:\WINDOWS\SYSTEM32\POWRPROF.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSTEM32\DEVOBJ.dll - Microsoft Corporation
             SHCORE.DLL - C:\WINDOWS\SYSTEM32\SHCORE.DLL - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSTEM32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\WINDOWS\SYSTEM32\WindowsCodecs.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             MMDevApi.dll - C:\WINDOWS\System32\MMDevApi.dll - Microsoft Corporation
             AUDIOSES.DLL - C:\WINDOWS\SYSTEM32\AUDIOSES.DLL - Microsoft Corporation
             oledlg.dll - C:\Windows\System32\oledlg.dll - Microsoft Corporation
             dsound.dll - C:\Windows\System32\dsound.dll - Microsoft Corporation
             winmmbase.dll - C:\Windows\System32\winmmbase.dll - Microsoft Corporation
             winmm.dll - C:\Windows\System32\winmm.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             AudioSes.dll - C:\Windows\System32\AudioSes.dll - Microsoft Corporation
             winspool.drv - C:\Windows\System32\winspool.drv - Microsoft Corporation
             version.dll - C:\Windows\System32\version.dll - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             MMDevAPI.dll - C:\Windows\System32\MMDevAPI.dll - Microsoft Corporation
             comctl32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\comctl32.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             msimg32.dll - C:\Windows\System32\msimg32.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\Windows\System32\WindowsCodecs.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             wintrust.dll - C:\Windows\System32\wintrust.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             comdlg32.dll - C:\Windows\System32\comdlg32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             GdiPlus.dll - C:\Windows\System32\GdiPlus.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[RAVBg64.exe]Modules
             RAVBg64.exe - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe - Realtek Semiconductor
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSTEM32\WTSAPI32.dll - Microsoft Corporation
             PROPSYS.dll - C:\WINDOWS\SYSTEM32\PROPSYS.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             MSIMG32.dll - C:\WINDOWS\SYSTEM32\MSIMG32.dll - Microsoft Corporation
             COMDLG32.dll - C:\WINDOWS\system32\COMDLG32.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSTEM32\WINSPOOL.DRV - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             COMCTL32.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\COMCTL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             oledlg.dll - C:\WINDOWS\SYSTEM32\oledlg.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             gdiplus.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_9332526147499ed1\gdiplus.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\system32\CFGMGR32.dll - Microsoft Corporation
             SHCORE.DLL - C:\WINDOWS\SYSTEM32\SHCORE.DLL - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\WINDOWS\SYSTEM32\WindowsCodecs.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSTEM32\kernel.appcore.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSTEM32\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSTEM32\DEVOBJ.dll - Microsoft Corporation
             WINTRUST.dll - C:\WINDOWS\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             clbcatq.dll - C:\WINDOWS\SYSTEM32\clbcatq.dll - Microsoft Corporation
             MMDevApi.dll - C:\WINDOWS\System32\MMDevApi.dll - Microsoft Corporation
             RtkCfg64.dll - C:\WINDOWS\system32\RtkCfg64.dll - Realtek Semiconductor Corp.
             audioses.dll - C:\WINDOWS\System32\audioses.dll - Microsoft Corporation
             powrprof.dll - C:\WINDOWS\SYSTEM32\powrprof.dll - Microsoft Corporation
             RtkAPO64.dll - C:\WINDOWS\system32\RtkAPO64.dll - Realtek Semiconductor Corp.
             audioeng.dll - C:\WINDOWS\system32\audioeng.dll - Microsoft Corporation
             AVRT.dll - C:\WINDOWS\system32\AVRT.dll - Microsoft Corporation
             MaxxAudioAPOShell64.dll - C:\WINDOWS\SYSTEM32\MaxxAudioAPOShell64.dll - Waves Audio Ltd.
             OPENGL32.dll - C:\WINDOWS\SYSTEM32\OPENGL32.dll - Microsoft Corporation
             GLU32.dll - C:\WINDOWS\SYSTEM32\GLU32.dll - Microsoft Corporation
             DDRAW.dll - C:\WINDOWS\SYSTEM32\DDRAW.dll - Microsoft Corporation
             DCIMAN32.dll - C:\WINDOWS\SYSTEM32\DCIMAN32.dll - Microsoft Corporation
             MaxxAudioAPOShell64.dll - C:\Windows\System32\MaxxAudioAPOShell64.dll - Waves Audio Ltd.
             AudioEng.dll - C:\Windows\System32\AudioEng.dll - Microsoft Corporation
             oledlg.dll - C:\Windows\System32\oledlg.dll - Microsoft Corporation
             ddraw.dll - C:\Windows\System32\ddraw.dll - Microsoft Corporation
             glu32.dll - C:\Windows\System32\glu32.dll - Microsoft Corporation
             opengl32.dll - C:\Windows\System32\opengl32.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             dciman32.dll - C:\Windows\System32\dciman32.dll - Microsoft Corporation
             AudioSes.dll - C:\Windows\System32\AudioSes.dll - Microsoft Corporation
             winspool.drv - C:\Windows\System32\winspool.drv - Microsoft Corporation
             propsys.dll - C:\Windows\System32\propsys.dll - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             MMDevAPI.dll - C:\Windows\System32\MMDevAPI.dll - Microsoft Corporation
             comctl32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\comctl32.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             msimg32.dll - C:\Windows\System32\msimg32.dll - Microsoft Corporation
             avrt.dll - C:\Windows\System32\avrt.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\Windows\System32\WindowsCodecs.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             kernel.appcore.dll - C:\Windows\System32\kernel.appcore.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\System32\bcryptprimitives.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\System32\cryptbase.dll - Microsoft Corporation
             powrprof.dll - C:\Windows\System32\powrprof.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             wintrust.dll - C:\Windows\System32\wintrust.dll - Microsoft Corporation
             clbcatq.dll - C:\Windows\System32\clbcatq.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             comdlg32.dll - C:\Windows\System32\comdlg32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             GdiPlus.dll - C:\Windows\System32\GdiPlus.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[jusched.exe]Modules
             jusched.exe - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe - Oracle Corporation
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             kernel.appcore.dll - C:\WINDOWS\SYSwow64\kernel.appcore.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[ActivateDesktop.exe]Modules
             ActivateDesktop.exe - C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe - 
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             utils.dll - C:\Program Files (x86)\Bluetooth Suite\utils.dll - Qualcomm Atheros Commnucations
             MSVCR100.dll - C:\WINDOWS\SYSTEM32\MSVCR100.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\system32\WS2_32.dll - Microsoft Corporation
             bthprops.cpl - C:\WINDOWS\SYSTEM32\bthprops.cpl - Microsoft Corporation
             credui.dll - C:\WINDOWS\SYSTEM32\credui.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSTEM32\WTSAPI32.dll - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSTEM32\Secur32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             ole32.dll - C:\WINDOWS\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             MSVCP100.dll - C:\WINDOWS\SYSTEM32\MSVCP100.dll - Microsoft Corporation
             RASAPI32.dll - C:\WINDOWS\SYSTEM32\RASAPI32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\system32\CFGMGR32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\system32\NSI.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSTEM32\DEVOBJ.dll - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             BluetoothApis.dll - C:\WINDOWS\SYSTEM32\BluetoothApis.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             rasman.dll - C:\WINDOWS\SYSTEM32\rasman.dll - Microsoft Corporation
             SSPICLI.DLL - C:\WINDOWS\SYSTEM32\SSPICLI.DLL - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\comctl32.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             dwmapi.dll - C:\WINDOWS\system32\dwmapi.dll - Microsoft Corporation
             ActivateDesktop.exe - C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe - 
             credui.dll - C:\Windows\System32\credui.dll - Microsoft Corporation
             utils.dll - C:\Program Files (x86)\Bluetooth Suite\utils.dll - Qualcomm Atheros Commnucations
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             rasman.dll - C:\Windows\System32\rasman.dll - Microsoft Corporation
             rasapi32.dll - C:\Windows\System32\rasapi32.dll - Microsoft Corporation
             BluetoothApis.dll - C:\Windows\System32\BluetoothApis.dll - Microsoft Corporation
             bthprops.cpl - C:\Windows\System32\bthprops.cpl - Microsoft Corporation
             wtsapi32.dll - C:\Windows\System32\wtsapi32.dll - Microsoft Corporation
             secur32.dll - C:\Windows\System32\secur32.dll - Microsoft Corporation
             comctl32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503\comctl32.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\System32\dwmapi.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             sspicli.dll - C:\Windows\System32\sspicli.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             nsi.dll - C:\Windows\System32\nsi.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             ws2_32.dll - C:\Windows\System32\ws2_32.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[KHALMNPR.exe]Modules
             KHALMNPR.EXE - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE - Logitech, Inc.
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\system32\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\system32\KERNELBASE.dll - Microsoft Corporation
             SETUPAPI.dll - C:\WINDOWS\system32\SETUPAPI.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\system32\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\system32\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation
             CFGMGR32.dll - C:\WINDOWS\system32\CFGMGR32.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\system32\RPCRT4.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\system32\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\system32\SHLWAPI.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             ntmarta.dll - C:\WINDOWS\SYSTEM32\ntmarta.dll - Microsoft Corporation
             KHALAPI.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALAPI.DLL - Logitech, Inc.
             LBTServ.dll - C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.dll - Logitech, Inc.
             hid.dll - C:\WINDOWS\SYSTEM32\hid.dll - Microsoft Corporation
             SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSTEM32\profapi.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\system32\uxtheme.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\system32\OLEAUT32.dll - Microsoft Corporation
             KHALITCH.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALITCH.DLL - Logitech, Inc.
             KHALMW.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMW.DLL - Logitech, Inc.
             KHALHPP.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALHPP.DLL - Logitech, Inc.
             WINMM.dll - C:\WINDOWS\SYSTEM32\WINMM.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSTEM32\WINMMBASE.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSTEM32\DEVOBJ.dll - Microsoft Corporation
             KHALMOU.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMOU.DLL - Logitech, Inc.
             KHALHID.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALHID.DLL - Logitech, Inc.
             KHALUSB.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALUSB.DLL - Logitech, Inc.
             WINTRUST.dll - C:\WINDOWS\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\system32\MSASN1.dll - Microsoft Corporation
             winmmbase.dll - C:\Windows\System32\winmmbase.dll - Microsoft Corporation
             winmm.dll - C:\Windows\System32\winmm.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\System32\ntmarta.dll - Microsoft Corporation
             SHCore.dll - C:\Windows\System32\SHCore.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\System32\uxtheme.dll - Microsoft Corporation
             devobj.dll - C:\Windows\System32\devobj.dll - Microsoft Corporation
             hid.dll - C:\Windows\System32\hid.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             msasn1.dll - C:\Windows\System32\msasn1.dll - Microsoft Corporation
             crypt32.dll - C:\Windows\System32\crypt32.dll - Microsoft Corporation
             KernelBase.dll - C:\Windows\System32\KernelBase.dll - Microsoft Corporation
             cfgmgr32.dll - C:\Windows\System32\cfgmgr32.dll - Microsoft Corporation
             wintrust.dll - C:\Windows\System32\wintrust.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             rpcrt4.dll - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\System32\sechost.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             imm32.dll - C:\Windows\System32\imm32.dll - Microsoft Corporation
             gdi32.dll - C:\Windows\System32\gdi32.dll - Microsoft Corporation
             shell32.dll - C:\Windows\System32\shell32.dll - Microsoft Corporation
             msctf.dll - C:\Windows\System32\msctf.dll - Microsoft Corporation
             setupapi.dll - C:\Windows\System32\setupapi.dll - Microsoft Corporation
             shlwapi.dll - C:\Windows\System32\shlwapi.dll - Microsoft Corporation
             user32.dll - C:\Windows\System32\user32.dll - Microsoft Corporation
             combase.dll - C:\Windows\System32\combase.dll - Microsoft Corporation
             oleaut32.dll - C:\Windows\System32\oleaut32.dll - Microsoft Corporation
             advapi32.dll - C:\Windows\System32\advapi32.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Modules
             new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSwow64\WINMM.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSwow64\WINMMBASE.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSwow64\cfgmgr32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSwow64\shcore.dll - Microsoft Corporation
             chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             USP10.dll - C:\WINDOWS\SYSwow64\USP10.dll - Microsoft Corporation
             PSAPI.DLL - C:\WINDOWS\SYSwow64\PSAPI.DLL - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSwow64\WINSPOOL.DRV - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSwow64\Secur32.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             dbghelp.dll - C:\WINDOWS\SYSwow64\dbghelp.dll - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09\comctl32.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\icudt.dll - The ICU Project
             pdf.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll - 
             ppGoogleNaClPluginChrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll - 
             libpeerconnection.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libpeerconnection.dll - Google Inc.
             ffmpegsumo.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll - 
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Modules
             new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSwow64\WINMM.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSwow64\WINMMBASE.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSwow64\cfgmgr32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSwow64\shcore.dll - Microsoft Corporation
             chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             USP10.dll - C:\WINDOWS\SYSwow64\USP10.dll - Microsoft Corporation
             PSAPI.DLL - C:\WINDOWS\SYSwow64\PSAPI.DLL - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSwow64\WINSPOOL.DRV - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSwow64\Secur32.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             dbghelp.dll - C:\WINDOWS\SYSwow64\dbghelp.dll - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09\comctl32.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\icudt.dll - The ICU Project
             pdf.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll - 
             ppGoogleNaClPluginChrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll - 
             libpeerconnection.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libpeerconnection.dll - Google Inc.
             ffmpegsumo.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll - 
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Modules
             new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSwow64\WINMM.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSwow64\WINMMBASE.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSwow64\cfgmgr32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSwow64\shcore.dll - Microsoft Corporation
             chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             USP10.dll - C:\WINDOWS\SYSwow64\USP10.dll - Microsoft Corporation
             PSAPI.DLL - C:\WINDOWS\SYSwow64\PSAPI.DLL - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSwow64\WINSPOOL.DRV - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSwow64\Secur32.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             dbghelp.dll - C:\WINDOWS\SYSwow64\dbghelp.dll - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09\comctl32.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\icudt.dll - The ICU Project
             pdf.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll - 
             ppGoogleNaClPluginChrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll - 
             libpeerconnection.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libpeerconnection.dll - Google Inc.
             ffmpegsumo.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll - 
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Modules
             new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             KERNEL32.DLL - C:\WINDOWS\SYSwow64\KERNEL32.DLL - Microsoft Corporation
             KERNELBASE.dll - C:\WINDOWS\SYSwow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\WINDOWS\SYSwow64\SHLWAPI.dll - Microsoft Corporation
             ADVAPI32.dll - C:\WINDOWS\SYSwow64\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\WINDOWS\SYSwow64\USER32.dll - Microsoft Corporation
             USERENV.dll - C:\WINDOWS\SYSwow64\USERENV.dll - Microsoft Corporation
             WTSAPI32.dll - C:\WINDOWS\SYSwow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\WINDOWS\SYSwow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\WINDOWS\SYSwow64\WINMM.dll - Microsoft Corporation
             msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             GDI32.dll - C:\WINDOWS\SYSwow64\GDI32.dll - Microsoft Corporation
             sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\WINDOWS\SYSwow64\RPCRT4.dll - Microsoft Corporation
             profapi.dll - C:\WINDOWS\SYSwow64\profapi.dll - Microsoft Corporation
             WINMMBASE.dll - C:\WINDOWS\SYSwow64\WINMMBASE.dll - Microsoft Corporation
             SspiCli.dll - C:\WINDOWS\SYSwow64\SspiCli.dll - Microsoft Corporation
             cfgmgr32.dll - C:\WINDOWS\SYSwow64\cfgmgr32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\WINDOWS\SYSwow64\DEVOBJ.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\WINDOWS\SYSwow64\CRYPTBASE.dll - Microsoft Corporation
             bcryptPrimitives.dll - C:\WINDOWS\SYSwow64\bcryptPrimitives.dll - Microsoft Corporation
             IMM32.DLL - C:\WINDOWS\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\WINDOWS\SYSwow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\WINDOWS\SYSwow64\SHELL32.dll - Microsoft Corporation
             shcore.dll - C:\WINDOWS\SYSwow64\shcore.dll - Microsoft Corporation
             chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             WININET.dll - C:\WINDOWS\SYSwow64\WININET.dll - Microsoft Corporation
             WS2_32.dll - C:\WINDOWS\SYSwow64\WS2_32.dll - Microsoft Corporation
             USP10.dll - C:\WINDOWS\SYSwow64\USP10.dll - Microsoft Corporation
             PSAPI.DLL - C:\WINDOWS\SYSwow64\PSAPI.DLL - Microsoft Corporation
             WINSPOOL.DRV - C:\WINDOWS\SYSwow64\WINSPOOL.DRV - Microsoft Corporation
             ole32.dll - C:\WINDOWS\SYSwow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\WINDOWS\SYSwow64\OLEAUT32.dll - Microsoft Corporation
             CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\WINDOWS\SYSwow64\IPHLPAPI.DLL - Microsoft Corporation
             Secur32.dll - C:\WINDOWS\SYSwow64\Secur32.dll - Microsoft Corporation
             iertutil.dll - C:\WINDOWS\SYSwow64\iertutil.dll - Microsoft Corporation
             NSI.dll - C:\WINDOWS\SYSwow64\NSI.dll - Microsoft Corporation
             MSASN1.dll - C:\WINDOWS\SYSwow64\MSASN1.dll - Microsoft Corporation
             WINNSI.DLL - C:\WINDOWS\SYSwow64\WINNSI.DLL - Microsoft Corporation
             dbghelp.dll - C:\WINDOWS\SYSwow64\dbghelp.dll - Microsoft Corporation
             comctl32.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09\comctl32.dll - Microsoft Corporation
             uxtheme.dll - C:\WINDOWS\syswow64\uxtheme.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\icudt.dll - The ICU Project
             pdf.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll - 
             ppGoogleNaClPluginChrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll - 
             libpeerconnection.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libpeerconnection.dll - Google Inc.
             ffmpegsumo.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll - 
             ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\WINDOWS\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\WINDOWS\system32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\WINDOWS\system32\wow64cpu.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[Idle]Modules

==========================================================================================

Process Threads

      Image File Name[System]Threads
             8 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             12 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             16 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             20 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             24 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             28 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             32 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             36 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             40 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             44 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             48 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             52 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             56 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             60 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             64 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             68 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             72 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             76 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             88 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             92 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             96 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             100 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             104 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             108 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             112 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             116 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             120 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             124 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             128 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             132 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             140 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             144 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             148 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             152 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             156 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             160 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             164 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             168 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             172 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             176 - Wait - ACPI.sys - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
             180 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             184 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             188 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             192 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             196 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             200 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             208 - Wait - pci.sys - C:\WINDOWS\System32\drivers\pci.sys - Microsoft Corporation
             212 - Wait - ACPI.sys - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
             216 - Wait - iaStorA.sys - C:\WINDOWS\System32\drivers\iaStorA.sys - Intel Corporation
             220 - Wait - ndis.sys - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
             224 - Wait - ndis.sys - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
             228 - Wait - ndis.sys - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
             232 - Wait - ndis.sys - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
             236 - Wait - ndis.sys - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
             240 - Wait - ndis.sys - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
             256 - Wait - volsnap.sys - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
             260 - Wait - volsnap.sys - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
             264 - Wait - volsnap.sys - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
             268 - Wait - volsnap.sys - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
             272 - Wait - volsnap.sys - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
             276 - Wait - volsnap.sys - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
             280 - Wait - volsnap.sys - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
             284 - Wait - volsnap.sys - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
             288 - Wait - volsnap.sys - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
             292 - Wait - luafv.sys - C:\WINDOWS\system32\drivers\luafv.sys - Microsoft Corporation
             296 - Terminate - aswMonFlt.sys - C:\Windows\system32\drivers\aswMonFlt.sys - AVAST Software
             300 - Terminate - aswMonFlt.sys - C:\Windows\system32\drivers\aswMonFlt.sys - AVAST Software
             304 - Terminate - aswMonFlt.sys - C:\Windows\system32\drivers\aswMonFlt.sys - AVAST Software
             308 - Wait - aswMonFlt.sys - C:\Windows\system32\drivers\aswMonFlt.sys - AVAST Software
             312 - Wait - aswSnx.sys - C:\Windows\system32\drivers\aswSnx.sys - AVAST Software
             316 - Wait - aswSnx.sys - C:\Windows\system32\drivers\aswSnx.sys - AVAST Software
             320 - Wait - aswSnx.sys - C:\Windows\system32\drivers\aswSnx.sys - AVAST Software
             324 - Wait - aswSnx.sys - C:\Windows\system32\drivers\aswSnx.sys - AVAST Software
             328 - Wait - aswSnx.sys - C:\Windows\system32\drivers\aswSnx.sys - AVAST Software
             332 - Terminate - aswMonFlt.sys - C:\Windows\system32\drivers\aswMonFlt.sys - AVAST Software
             336 - Terminate - aswMonFlt.sys - C:\Windows\system32\drivers\aswMonFlt.sys - AVAST Software
             344 - Terminate - aswMonFlt.sys - C:\Windows\system32\drivers\aswMonFlt.sys - AVAST Software
             364 - Wait - aswSnx.sys - C:\Windows\system32\drivers\aswSnx.sys - AVAST Software
             384 - Wait - aswSP.sys - C:\Windows\system32\drivers\aswSP.sys - AVAST Software
             388 - Wait - aswSP.sys - C:\Windows\system32\drivers\aswSP.sys - AVAST Software
             392 - Wait - watchdog.sys - C:\WINDOWS\System32\drivers\watchdog.sys - Microsoft Corporation
             396 - Wait - aswRdr2.sys - C:\Windows\system32\drivers\aswRdr2.sys - AVAST Software
             400 - Wait - truecrypt.sys - C:\WINDOWS\System32\drivers\truecrypt.sys - TrueCrypt Foundation
             404 - Wait - truecrypt.sys - C:\WINDOWS\System32\drivers\truecrypt.sys - TrueCrypt Foundation
             408 - Wait - truecrypt.sys - C:\WINDOWS\System32\drivers\truecrypt.sys - TrueCrypt Foundation
             412 - Wait - truecrypt.sys - C:\WINDOWS\System32\drivers\truecrypt.sys - TrueCrypt Foundation
             416 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             432 - Wait - igdkmd64.sys - C:\WINDOWS\system32\DRIVERS\igdkmd64.sys - Intel Corporation
             436 - Wait - dxgkrnl.sys - C:\WINDOWS\System32\drivers\dxgkrnl.sys - Microsoft Corporation
             440 - Wait - AsusTP.sys - C:\WINDOWS\System32\drivers\AsusTP.sys - ASUS Corporation
             444 - Wait - dtsoftbus01.sys - C:\WINDOWS\System32\drivers\dtsoftbus01.sys - Disc Soft Ltd
             448 - Wait - DptfDevProc.sys - C:\WINDOWS\system32\DRIVERS\DptfDevProc.sys - Intel Corporation
             452 - Wait - DptfDevProc.sys - C:\WINDOWS\system32\DRIVERS\DptfDevProc.sys - Intel Corporation
             456 - Wait - athw8x.sys - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
             460 - Wait - athw8x.sys - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
             464 - Wait - athw8x.sys - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
             468 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             472 - Wait - athw8x.sys - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
             476 - Wait - DptfDevGen.sys - C:\WINDOWS\system32\DRIVERS\DptfDevGen.sys - Intel Corporation
             480 - Wait - DptfDevGen.sys - C:\WINDOWS\system32\DRIVERS\DptfDevGen.sys - Intel Corporation
             484 - Wait - DptfDevGen.sys - C:\WINDOWS\system32\DRIVERS\DptfDevGen.sys - Intel Corporation
             488 - Wait - DptfDevGen.sys - C:\WINDOWS\system32\DRIVERS\DptfDevGen.sys - Intel Corporation
             492 - Wait - DptfDevDram.sys - C:\WINDOWS\system32\DRIVERS\DptfDevDram.sys - Intel Corporation
             496 - Wait - DptfDevDram.sys - C:\WINDOWS\system32\DRIVERS\DptfDevDram.sys - Intel Corporation
             500 - Wait - DptfManager.sys - C:\WINDOWS\system32\DRIVERS\DptfManager.sys - Intel Corporation
             504 - Wait - DptfDevPch.sys - C:\WINDOWS\system32\DRIVERS\DptfDevPch.sys - Intel Corporation
             508 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             512 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             516 - Wait - RTKVHD64.sys - C:\WINDOWS\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             520 - Wait - RTKVHD64.sys - C:\WINDOWS\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             524 - Wait - RTKVHD64.sys - C:\WINDOWS\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             528 - Wait - RTKVHD64.sys - C:\WINDOWS\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             532 - Wait - RTKVHD64.sys - C:\WINDOWS\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             536 - Wait - RTKVHD64.sys - C:\WINDOWS\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             540 - Wait - RTKVHD64.sys - C:\WINDOWS\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             544 - Wait - RTKVHD64.sys - C:\WINDOWS\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             548 - Wait - RTKVHD64.sys - C:\WINDOWS\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             552 - Wait - RTKVHD64.sys - C:\WINDOWS\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             576 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             580 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             584 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             588 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             596 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             600 - Wait - btfilter.sys - C:\WINDOWS\system32\DRIVERS\btfilter.sys - Qualcomm Atheros
             604 - Wait - bthport.sys - C:\WINDOWS\System32\Drivers\bthport.sys - Microsoft Corporation
             636 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             640 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             648 - Wait - btath_hcrp.sys - C:\WINDOWS\System32\drivers\btath_hcrp.sys - Qualcomm Atheros
             684 - Wait - dxgmms1.sys - C:\WINDOWS\System32\drivers\dxgmms1.sys - Microsoft Corporation
             688 - Wait - BasicRender.sys - C:\WINDOWS\System32\drivers\BasicRender.sys - Microsoft Corporation
             692 - Wait - dxgmms1.sys - C:\WINDOWS\System32\drivers\dxgmms1.sys - Microsoft Corporation
             696 - Wait - dxgkrnl.sys - C:\WINDOWS\System32\drivers\dxgkrnl.sys - Microsoft Corporation
             752 - Wait - msrpc.sys - C:\WINDOWS\System32\drivers\msrpc.sys - Microsoft Corporation
             1556 - Wait - HTTP.sys - C:\WINDOWS\system32\drivers\HTTP.sys - Microsoft Corporation
             1560 - Wait - HTTP.sys - C:\WINDOWS\system32\drivers\HTTP.sys - Microsoft Corporation
             1564 - Wait - HTTP.sys - C:\WINDOWS\system32\drivers\HTTP.sys - Microsoft Corporation
             1644 - Wait - mpsdrv.sys - C:\WINDOWS\System32\drivers\mpsdrv.sys - Microsoft Corporation
             1664 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             1940 - Wait - Ndu.sys - C:\WINDOWS\system32\drivers\Ndu.sys - Microsoft Corporation
             2540 - Wait - srv2.sys - C:\WINDOWS\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2544 - Wait - srv2.sys - C:\WINDOWS\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2548 - Wait - srv2.sys - C:\WINDOWS\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2552 - Wait - srv2.sys - C:\WINDOWS\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2560 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             2564 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             2568 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             2572 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             2576 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             2580 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             2584 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             2588 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             2592 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             2704 - Wait - ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
             3220 - Wait - HTTP.sys - C:\WINDOWS\system32\drivers\HTTP.sys - Microsoft Corporation
             3224 - Wait - HTTP.sys - C:\WINDOWS\system32\drivers\HTTP.sys - Microsoft Corporation
             3232 - Wait - HTTP.sys - C:\WINDOWS\system32\drivers\HTTP.sys - Microsoft Corporation
             3368 - Wait - HTTP.sys - C:\WINDOWS\system32\drivers\HTTP.sys - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             80 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             84 - Wait - DAB.dll - c:\windows\system32\DAB.dll - Microsoft Corporation
             920 - Wait - svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             924 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             932 - Terminate - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             944 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             956 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2152 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2796 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2808 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3380 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             3388 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3824 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4612 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5432 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5436 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[UNS.exe]Threads
             136 - Wait - MSVCR100.dll - C:\WINDOWS\SYSwow64\MSVCR100.dll - Microsoft Corporation
             1964 - Wait - UNS.exe - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe - Intel Corporation
             2140 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             2188 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             3432 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             3524 - Wait - combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             3984 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5368 - Wait - sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             5664 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5668 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[SearchProtocolHost.exe]Threads
             244 - Wait - SearchProtocolHost.exe - C:\WINDOWS\system32\SearchProtocolHost.exe - Microsoft Corporation
             248 - Wait - SearchProtocolHost.exe - C:\WINDOWS\system32\SearchProtocolHost.exe - Microsoft Corporation
             612 - Wait - SearchProtocolHost.exe - C:\WINDOWS\system32\SearchProtocolHost.exe - Microsoft Corporation
             2072 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             3244 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5872 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Threads
             252 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             360 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             1280 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             3576 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             3580 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             3588 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             3600 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             3620 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             3736 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             3828 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             3880 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             3920 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5852 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Threads
             340 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             1380 - Wait - combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             1620 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             1944 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             2156 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             2252 - Wait - combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             2340 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             2436 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             2628 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             2648 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             2768 - Wait - combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             2868 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             3084 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             3568 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             4000 - Wait - mswsock.dll - C:\WINDOWS\syswow64\mswsock.dll - Microsoft Corporation
             4104 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             4128 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             4140 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             4152 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             4156 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             4168 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             4192 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             4224 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             4400 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             4456 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4500 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             4712 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             4812 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             4836 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             4856 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             4880 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             4900 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             5028 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             5032 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             5036 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             5052 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             5056 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5072 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5080 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             5084 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5088 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5092 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             5104 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             5108 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             5112 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             5116 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             5176 - Wait - combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             5332 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome.dll - Google Inc.
             5832 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5836 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5884 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[SearchIndexer.exe]Threads
             348 - Wait - SearchIndexer.exe - C:\WINDOWS\system32\SearchIndexer.exe - Microsoft Corporation
             628 - Wait - MSSRCH.DLL - C:\WINDOWS\system32\MSSRCH.DLL - Microsoft Corporation
             796 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             836 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1276 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1332 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1716 - Wait - ESENT.dll - C:\WINDOWS\system32\ESENT.dll - Microsoft Corporation
             1748 - Wait - ESENT.dll - C:\WINDOWS\system32\ESENT.dll - Microsoft Corporation
             1772 - Wait - ESENT.dll - C:\WINDOWS\system32\ESENT.dll - Microsoft Corporation
             1840 - Wait - TQUERY.DLL - C:\WINDOWS\system32\TQUERY.DLL - Microsoft Corporation
             1880 - Wait - IpsPlugin.dll - C:\Program Files\Common Files\Microsoft Shared\Ink\IpsPlugin.dll - Microsoft Corporation
             1900 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1984 - Wait - MSSRCH.DLL - C:\WINDOWS\system32\MSSRCH.DLL - Microsoft Corporation
             2012 - Wait - MSSRCH.DLL - C:\WINDOWS\system32\MSSRCH.DLL - Microsoft Corporation
             2052 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2232 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2728 - Wait - MSSRCH.DLL - C:\WINDOWS\system32\MSSRCH.DLL - Microsoft Corporation
             3344 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3428 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             3500 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3520 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             3704 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3784 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3956 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3964 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5184 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5608 - Wait - TQUERY.DLL - C:\WINDOWS\system32\TQUERY.DLL - Microsoft Corporation
             5620 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5860 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5900 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             6012 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[winlogon.exe]Threads
             352 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             784 - Wait - winlogon.exe - C:\WINDOWS\system32\winlogon.exe - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             356 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             572 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             740 - Wait - svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             816 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             844 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             880 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             992 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1012 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             1068 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             1072 - Wait - mmcss.dll - c:\windows\system32\mmcss.dll - Microsoft Corporation
             1400 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             1408 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             1412 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1416 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1420 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1424 - Wait - schedsvc.dll - c:\windows\system32\schedsvc.dll - Microsoft Corporation
             1428 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1432 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1436 - Wait - shsvcs.dll - c:\windows\system32\shsvcs.dll - Microsoft Corporation
             1440 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1444 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1448 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1452 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1456 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1460 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1464 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1468 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1472 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             1476 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1480 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1484 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1488 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1492 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1496 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1500 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1504 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1508 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1512 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1516 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1548 - Wait - taskcomp.dll - C:\WINDOWS\system32\taskcomp.dll - Microsoft Corporation
             1552 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1632 - Wait - gpsvc.dll - c:\windows\system32\gpsvc.dll - Microsoft Corporation
             1808 - Wait - certprop.dll - c:\windows\system32\certprop.dll - Microsoft Corporation
             1948 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             2080 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             2200 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2204 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2452 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2496 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2504 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2520 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2524 - Wait - httpprxm.dll - C:\WINDOWS\system32\httpprxm.dll - Microsoft Corporation
             2528 - Wait - SSCORE.DLL - C:\WINDOWS\system32\SSCORE.DLL - Microsoft Corporation
             2556 - Wait - AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             2620 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2636 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2640 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2876 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             2884 - Wait - aelupsvc.dll - c:\windows\system32\aelupsvc.dll - Microsoft Corporation
             2888 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2900 - Wait - msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             3060 - Wait - AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             3140 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3300 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             3304 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3308 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3312 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3448 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3452 - Wait - gpsvc.dll - c:\windows\system32\gpsvc.dll - Microsoft Corporation
             3456 - Wait - gpsvc.dll - c:\windows\system32\gpsvc.dll - Microsoft Corporation
             3608 - Wait - SSDPAPI.dll - C:\WINDOWS\system32\SSDPAPI.dll - Microsoft Corporation
             3800 - Wait - certprop.dll - c:\windows\system32\certprop.dll - Microsoft Corporation
             4024 - Wait - wbemcomn.dll - C:\WINDOWS\SYSTEM32\wbemcomn.dll - Microsoft Corporation
             4424 - Wait - ncprov.dll - C:\WINDOWS\system32\wbem\ncprov.dll - Microsoft Corporation
             4428 - Wait - NCObjAPI.DLL - C:\WINDOWS\SYSTEM32\NCObjAPI.DLL - Microsoft Corporation
             4436 - Wait - NCObjAPI.DLL - C:\WINDOWS\SYSTEM32\NCObjAPI.DLL - Microsoft Corporation
             4872 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5640 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5644 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5648 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             5652 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5868 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[AsusTPCenter.exe]Threads
             368 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             1392 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1608 - Wait - AsusTPApi.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPApi.dll - AsusTek
             1868 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             2652 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3212 - Wait - AsusTPCenter.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe - AsusTek
             3236 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             3404 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3436 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5296 - Wait - AsusTPApi.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPApi.dll - AsusTek
             5324 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             5328 - Wait - AsusTPApi.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPApi.dll - AsusTek
             5376 - Wait - AsusTPApi.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPApi.dll - AsusTek
             5380 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5392 - Wait - AsusTPApi.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPApi.dll - AsusTek
             5404 - Wait - AsusTPApi.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPApi.dll - AsusTek
             5632 - Wait - AsusTPCenter.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe - AsusTek
             5740 - Wait - AsusTPApi.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPApi.dll - AsusTek
             6024 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[dwm.exe]Threads
             372 - Wait - dwm.exe - C:\WINDOWS\system32\dwm.exe - Microsoft Corporation
             564 - Wait - dwmcore.dll - C:\WINDOWS\system32\dwmcore.dll - Microsoft Corporation
             568 - Wait - dwm.exe - C:\WINDOWS\system32\dwm.exe - Microsoft Corporation
             592 - Wait - dwmcore.dll - C:\WINDOWS\system32\dwmcore.dll - Microsoft Corporation
             608 - Wait - dwmcore.dll - C:\WINDOWS\system32\dwmcore.dll - Microsoft Corporation
             616 - Wait - uDWM.dll - C:\WINDOWS\system32\uDWM.dll - Microsoft Corporation
             652 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4996 - Wait - dwm.exe - C:\WINDOWS\system32\dwm.exe - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[csrss.exe]Threads
             380 - Wait - CSRSRV.dll - C:\WINDOWS\system32\CSRSRV.dll - Microsoft Corporation
             760 - Wait - cdd.dll - C:\WINDOWS\System32\cdd.dll - Microsoft Corporation
             764 - Wait - winsrv.DLL - C:\WINDOWS\system32\winsrv.DLL - Microsoft Corporation
             768 - Wait - winsrv.DLL - C:\WINDOWS\system32\winsrv.DLL - Microsoft Corporation
             772 - Wait - CSRSRV.dll - C:\WINDOWS\system32\CSRSRV.dll - Microsoft Corporation
             776 - Wait - CSRSRV.dll - C:\WINDOWS\system32\CSRSRV.dll - Microsoft Corporation
             788 - Wait - CSRSRV.dll - C:\WINDOWS\system32\CSRSRV.dll - Microsoft Corporation
             808 - Wait - winsrv.DLL - C:\WINDOWS\system32\winsrv.DLL - Microsoft Corporation
             812 - Wait - winsrv.DLL - C:\WINDOWS\system32\winsrv.DLL - Microsoft Corporation
             1008 - Wait - winsrv.DLL - C:\WINDOWS\system32\winsrv.DLL - Microsoft Corporation
             4868 - Wait - CSRSRV.dll - C:\WINDOWS\system32\CSRSRV.dll - Microsoft Corporation
             5064 - Wait - winsrv.DLL - C:\WINDOWS\system32\winsrv.DLL - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[smss.exe]Threads
             424 - Wait - smss.exe - C:\WINDOWS\System32\smss.exe - Microsoft Corporation
             732 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[TabTip32.exe]Threads
             872 - Wait - TabTip32.exe - C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[csrss.exe]Threads
             556 - Wait - winsrv.DLL - C:\WINDOWS\system32\winsrv.DLL - Microsoft Corporation
             700 - Wait - winsrv.DLL - C:\WINDOWS\system32\winsrv.DLL - Microsoft Corporation
             704 - Wait - winsrv.DLL - C:\WINDOWS\system32\winsrv.DLL - Microsoft Corporation
             708 - Wait - CSRSRV.dll - C:\WINDOWS\system32\CSRSRV.dll - Microsoft Corporation
             712 - Wait - CSRSRV.dll - C:\WINDOWS\system32\CSRSRV.dll - Microsoft Corporation
             744 - Wait - CSRSRV.dll - C:\WINDOWS\system32\CSRSRV.dll - Microsoft Corporation
             800 - Wait - winsrv.DLL - C:\WINDOWS\system32\winsrv.DLL - Microsoft Corporation
             804 - Wait - winsrv.DLL - C:\WINDOWS\system32\winsrv.DLL - Microsoft Corporation
             1376 - Wait - CSRSRV.dll - C:\WINDOWS\system32\CSRSRV.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[Dropbox.exe]Threads
             560 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             2240 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             2284 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             2896 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             3384 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             3468 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             4032 - Wait - combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             4060 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             4384 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             4572 - Wait - Dropbox.exe - C:\Users\J R\AppData\Roaming\Dropbox\bin\Dropbox.exe - Dropbox, Inc.
             4912 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             5024 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5168 - Wait - libcef.dll - C:\Users\J R\AppData\Roaming\Dropbox\bin\libcef.dll - 
             5172 - Wait - libcef.dll - C:\Users\J R\AppData\Roaming\Dropbox\bin\libcef.dll - 
             5180 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             5188 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             5568 - Wait - libcef.dll - C:\Users\J R\AppData\Roaming\Dropbox\bin\libcef.dll - 
             5576 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5584 - Wait - libcef.dll - C:\Users\J R\AppData\Roaming\Dropbox\bin\libcef.dll - 
             5592 - Wait - libcef.dll - C:\Users\J R\AppData\Roaming\Dropbox\bin\libcef.dll - 
             5596 - Wait - libcef.dll - C:\Users\J R\AppData\Roaming\Dropbox\bin\libcef.dll - 
             5600 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             5604 - Wait - MSWSOCK.dll - C:\WINDOWS\SYSwow64\MSWSOCK.dll - Microsoft Corporation
             5880 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5892 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             5904 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             5920 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             6080 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             6084 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             6088 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             6092 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             6096 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             6100 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             6104 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             6108 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             6112 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation
             6116 - Wait - MSVCR90.dll - C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             620 - Wait - svchost.exe - C:\WINDOWS\System32\svchost.exe - Microsoft Corporation
             664 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             668 - Terminate - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             676 - Wait - wevtsvc.dll - c:\windows\system32\wevtsvc.dll - Microsoft Corporation
             680 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             728 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1116 - Wait - audiosrv.dll - c:\windows\system32\audiosrv.dll - Microsoft Corporation
             1120 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1152 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             1164 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             1168 - Wait - lmhsvc.dll - c:\windows\system32\lmhsvc.dll - Microsoft Corporation
             1180 - Wait - dhcpcore6.dll - C:\WINDOWS\System32\dhcpcore6.dll - Microsoft Corporation
             1184 - Wait - wcmsvc.dll - c:\windows\system32\wcmsvc.dll - Microsoft Corporation
             1236 - Wait - wevtsvc.dll - c:\windows\system32\wevtsvc.dll - Microsoft Corporation
             1240 - Wait - wevtsvc.dll - c:\windows\system32\wevtsvc.dll - Microsoft Corporation
             1244 - Wait - wevtsvc.dll - c:\windows\system32\wevtsvc.dll - Microsoft Corporation
             1248 - Wait - wevtsvc.dll - c:\windows\system32\wevtsvc.dll - Microsoft Corporation
             1264 - Wait - Wlanapi.dll - C:\WINDOWS\System32\Wlanapi.dll - Microsoft Corporation
             1268 - Wait - wcmcsp.dll - C:\WINDOWS\System32\wcmcsp.dll - Microsoft Corporation
             1272 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             1284 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1300 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2308 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2532 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             2736 - Wait - wscsvc.dll - c:\windows\system32\wscsvc.dll - Microsoft Corporation
             3032 - Wait - FunDisc.dll - C:\Windows\System32\FunDisc.dll - Microsoft Corporation
             3652 - Wait - shcore.dll - C:\WINDOWS\SYSTEM32\shcore.dll - Microsoft Corporation
             4312 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4556 - Wait - wscsvc.dll - c:\windows\system32\wscsvc.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[VivoBook.exe]Threads
             624 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             632 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             2788 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             3216 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             3240 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             3284 - Wait - VivoBook.exe - C:\Program Files\ASUS\ASUS VivoBook\VivoBook.exe - ASUSTeK Computer Inc.
             3352 - Wait - msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             4368 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             4592 - Wait - wpfgfx_v0400.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\wpfgfx_v0400.dll - Microsoft Corporation
             4832 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4888 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4980 - Wait - PenIMC.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PenIMC.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[QuickGesture64.exe]Threads
             644 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             3844 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             4316 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             4336 - Wait - QuickGesture64.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.dll - ASUSTeK Computer Inc.
             4392 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4584 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5888 - Wait - QuickGesture64.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe - ASUSTeK Computer Inc.

------------------------------------------------------------------------------------------

      Image File Name[BtvStack.exe]Threads
             660 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             1020 - Wait - LE.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\LE\LE.dll - Qualcomm Atheros Commnucations
             1124 - Wait - Hcrp.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\HCRP\Hcrp.dll - Qualcomm Atheros Commnucations
             1128 - Wait - l2caplib.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\L2capLib\l2caplib.dll - Qualcomm Atheros Commnucations
             1360 - Wait - sap.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\sap\sap.dll - Qualcomm Atheros Commnucations
             1932 - Wait - Sync.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\Sync\Sync.dll - Qualcomm Atheros Commnucations
             2004 - Wait - sap.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\sap\sap.dll - Qualcomm Atheros Commnucations
             2056 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             2116 - Wait - pbap.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\pbap\pbap.dll - Qualcomm Atheros Commnucations
             2236 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2328 - Wait - l2caplib.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\L2capLib\l2caplib.dll - Qualcomm Atheros Commnucations
             2428 - Wait - LE.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\LE\LE.dll - Qualcomm Atheros Commnucations
             2432 - Wait - LE.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\LE\LE.dll - Qualcomm Atheros Commnucations
             2500 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             2832 - Wait - Sync.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\Sync\Sync.dll - Qualcomm Atheros Commnucations
             2852 - Wait - pbap.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\pbap\pbap.dll - Qualcomm Atheros Commnucations
             3056 - Wait - rfcommlib.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\RfcommLib\rfcommlib.dll - Qualcomm Atheros Commnucations
             3168 - Wait - Sync.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\Sync\Sync.dll - Qualcomm Atheros Commnucations
             3332 - Wait - l2caplib.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\L2capLib\l2caplib.dll - Qualcomm Atheros Commnucations
             3340 - Wait - LE.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\LE\LE.dll - Qualcomm Atheros Commnucations
             3564 - Wait - BtvStack.exe - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe - Qualcomm Atheros Commnucations
             4028 - Wait - OppOperation.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\OppOperation\OppOperation.dll - Qualcomm Atheros Commnucations
             4108 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4172 - Wait - LE.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\LE\LE.dll - Qualcomm Atheros Commnucations
             4184 - Wait - LE.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\LE\LE.dll - Qualcomm Atheros Commnucations
             4416 - Wait - BtvStack.exe - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe - Qualcomm Atheros Commnucations
             4444 - Wait - TCPConnection.dll - C:\Program Files (x86)\Bluetooth Suite\TCPConnection.dll - Qualcomm Atheros Commnucations
             4468 - Wait - TCPConnection.dll - C:\Program Files (x86)\Bluetooth Suite\TCPConnection.dll - Qualcomm Atheros Commnucations
             4476 - Wait - ActivateDesktopDebugger.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll - 
             4496 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4568 - Wait - Fax.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\FAX\Fax.dll - Qualcomm Atheros Commnucations
             4600 - Wait - BIP.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\BIP\BIP.dll - Qualcomm Atheros Commnucations
             4608 - Wait - BPP.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\BasicPrintProfile\BPP.dll - Qualcomm Atheros Commnucations
             4616 - Wait - GapSdp.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\GapSdp\GapSdp.dll - Qualcomm Atheros Commnucations
             4688 - Wait - LE.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\LE\LE.dll - Qualcomm Atheros Commnucations
             4700 - Wait - TCPConnection.dll - C:\Program Files (x86)\Bluetooth Suite\TCPConnection.dll - Qualcomm Atheros Commnucations
             4792 - Wait - GapSdp.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\GapSdp\GapSdp.dll - Qualcomm Atheros Commnucations
             4796 - Wait - spp.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\spp\spp.dll - Qualcomm Atheros Commnucations
             4808 - Wait - LE.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\LE\LE.dll - Qualcomm Atheros Commnucations
             5908 - Wait - FileTransfer.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\FileTransfer\FileTransfer.dll - Qualcomm Atheros Commnucations
             5928 - Wait - FileTransfer.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\FileTransfer\FileTransfer.dll - Qualcomm Atheros Commnucations
             5932 - Wait - gatts.DLL - C:\Program Files (x86)\Bluetooth Suite\gatts.DLL - Qualcomm Atheros Commnucations
             5936 - Wait - gatts.DLL - C:\Program Files (x86)\Bluetooth Suite\gatts.DLL - Qualcomm Atheros Commnucations
             5940 - Wait - GattI.dll - C:\Program Files (x86)\Bluetooth Suite\GattI.dll - Qualcomm Atheros Commnucations
             5944 - Wait - GattI.dll - C:\Program Files (x86)\Bluetooth Suite\GattI.dll - Qualcomm Atheros Commnucations
             5948 - Wait - GattI.dll - C:\Program Files (x86)\Bluetooth Suite\GattI.dll - Qualcomm Atheros Commnucations
             5952 - Wait - GattI.dll - C:\Program Files (x86)\Bluetooth Suite\GattI.dll - Qualcomm Atheros Commnucations
             5956 - Wait - spp.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\spp\spp.dll - Qualcomm Atheros Commnucations
             5960 - Wait - HDP.dll - C:\Program Files (x86)\Bluetooth Suite\Modules\HealthDevice\HDP.dll - Qualcomm Atheros Commnucations
             5964 - Wait - mswsock.dll - C:\WINDOWS\system32\mswsock.dll - Microsoft Corporation
             5968 - Wait - WINMM.dll - C:\WINDOWS\SYSTEM32\WINMM.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[wininit.exe]Threads
             720 - Wait - wininit.exe - C:\WINDOWS\system32\wininit.exe - Microsoft Corporation
             748 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             756 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[explorer.exe]Threads
             792 - Wait - SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             888 - Wait - windows.immersiveshell.serviceprovider.dll - C:\Windows\System32\windows.immersiveshell.serviceprovider.dll - Microsoft Corporation
             892 - Wait - twinui.appcore.dll - C:\WINDOWS\System32\twinui.appcore.dll - Microsoft Corporation
             960 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1144 - Wait - wlidprov.dll - C:\WINDOWS\System32\wlidprov.dll - Microsoft Corporation
             1908 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1920 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2036 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2100 - Wait - DUI70.dll - C:\WINDOWS\SYSTEM32\DUI70.dll - Microsoft Corporation
             2176 - Wait - mscorwks.dll - C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll - Microsoft Corporation
             2216 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2224 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2272 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2320 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2480 - Wait - SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             2600 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2668 - Wait - msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             2688 - Wait - msiltcfg.dll - C:\WINDOWS\SYSTEM32\msiltcfg.dll - Microsoft Corporation
             2708 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2740 - Wait - SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             2784 - Wait - sppc.dll - C:\WINDOWS\SYSTEM32\sppc.dll - Microsoft Corporation
             3288 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             3572 - Wait - WorkFoldersShell.dll - C:\Windows\System32\WorkFoldersShell.dll - Microsoft Corporation
             3592 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3596 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3684 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             3856 - Wait - gdiplus.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_9332526147499ed1\gdiplus.dll - Microsoft Corporation
             3912 - Wait - UxTheme.dll - C:\WINDOWS\SYSTEM32\UxTheme.dll - Microsoft Corporation
             3960 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4092 - Wait - wlidprov.dll - C:\WINDOWS\System32\wlidprov.dll - Microsoft Corporation
             4100 - Wait - wlidprov.dll - C:\WINDOWS\System32\wlidprov.dll - Microsoft Corporation
             4388 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4716 - Wait - mscorwks.dll - C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll - Microsoft Corporation
             4784 - Wait - rasman.dll - C:\WINDOWS\SYSTEM32\rasman.dll - Microsoft Corporation
             5140 - Wait - SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             5164 - Wait - SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             5340 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5344 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             5348 - Wait - SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             5360 - Wait - wlidprov.dll - C:\WINDOWS\System32\wlidprov.dll - Microsoft Corporation
             5364 - Wait - SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             5388 - Wait - SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             5396 - Wait - SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             5420 - Wait - SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             5440 - Wait - SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             5452 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5536 - Wait - mscorwks.dll - C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll - Microsoft Corporation
             5540 - Wait - SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             5680 - Wait - explorer.exe - C:\WINDOWS\explorer.exe - Microsoft Corporation
             5772 - Wait - SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             5912 - Wait - SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             5924 - Wait - SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             5980 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             6020 - Wait - explorer.exe - C:\WINDOWS\explorer.exe - Microsoft Corporation
             6032 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             6044 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             6048 - Wait - SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             6052 - Wait - msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             6060 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             6064 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             6068 - Wait - SHCORE.dll - C:\WINDOWS\SYSTEM32\SHCORE.dll - Microsoft Corporation
             6072 - Wait - mscorwks.dll - C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll - Microsoft Corporation
             6076 - Wait - mscorwks.dll - C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll - Microsoft Corporation
             6120 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             6124 - Wait - mscorwks.dll - C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[services.exe]Threads
             824 - Terminate - services.exe - C:\WINDOWS\system32\services.exe - Microsoft Corporation
             896 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             900 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             936 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2444 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2612 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3688 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4020 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4112 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4540 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5656 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[BtTray.exe]Threads
             828 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             1092 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             2344 - Wait - msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             2976 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             3188 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             3228 - Wait - PenIMC.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PenIMC.dll - Microsoft Corporation
             3716 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             4180 - Wait - TCPConnection.dll - C:\Program Files (x86)\Bluetooth Suite\TCPConnection.dll - Qualcomm Atheros Commnucations
             4188 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4364 - Wait - BtTray.exe - C:\Program Files (x86)\Bluetooth Suite\BtTray.exe - Qualcomm Atheros
             4524 - Wait - wpfgfx_v0400.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\wpfgfx_v0400.dll - Microsoft Corporation
             4548 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             4552 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             4576 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             4620 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             4668 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             4684 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             4704 - Wait - CombineAgent.dll - C:\Program Files (x86)\Bluetooth Suite\CombineAgent.dll - Qualcomm Atheros Commnucations
             4740 - Wait - TCPConnection.dll - C:\Program Files (x86)\Bluetooth Suite\TCPConnection.dll - Qualcomm Atheros Commnucations
             4744 - Wait - TCPConnection.dll - C:\Program Files (x86)\Bluetooth Suite\TCPConnection.dll - Qualcomm Atheros Commnucations
             5016 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             5816 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             832 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1356 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1596 - Wait - svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             1604 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1820 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2424 - Wait - FunDisc.dll - C:\Windows\System32\FunDisc.dll - Microsoft Corporation
             2448 - Wait - FunDisc.dll - C:\Windows\System32\FunDisc.dll - Microsoft Corporation
             2716 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             2816 - Terminate - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             2848 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2904 - Wait - ssdpsrv.dll - c:\windows\system32\ssdpsrv.dll - Microsoft Corporation
             2908 - Wait - ssdpsrv.dll - c:\windows\system32\ssdpsrv.dll - Microsoft Corporation
             2912 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2936 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2944 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2952 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3516 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             3760 - Wait - upnphost.dll - c:\windows\system32\upnphost.dll - Microsoft Corporation
             4064 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[lsass.exe]Threads
             848 - Wait - lsass.exe - C:\WINDOWS\system32\lsass.exe - Microsoft Corporation
             852 - Wait - lsasrv.dll - C:\WINDOWS\system32\lsasrv.dll - Microsoft Corporation
             856 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             860 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             868 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             908 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             912 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4440 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[SearchFilterHost.exe]Threads
             864 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             2512 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3864 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5292 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5828 - Wait - SearchFilterHost.exe - C:\WINDOWS\system32\SearchFilterHost.exe - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             876 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             976 - Wait - svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             1032 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1036 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             1040 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1108 - Wait - fntcache.dll - c:\windows\system32\fntcache.dll - Microsoft Corporation
             1112 - Wait - fntcache.dll - c:\windows\system32\fntcache.dll - Microsoft Corporation
             1216 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1648 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1876 - Wait - es.dll - c:\windows\system32\es.dll - Microsoft Corporation
             2112 - Wait - bthserv.dll - c:\windows\system32\bthserv.dll - Microsoft Corporation
             2124 - Wait - netprofmsvc.dll - c:\windows\system32\netprofmsvc.dll - Microsoft Corporation
             2296 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2776 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             2792 - Wait - netprofmsvc.dll - c:\windows\system32\netprofmsvc.dll - Microsoft Corporation
             2812 - Wait - netprofmsvc.dll - c:\windows\system32\netprofmsvc.dll - Microsoft Corporation
             2820 - Wait - netprofmsvc.dll - c:\windows\system32\netprofmsvc.dll - Microsoft Corporation
             2824 - Wait - netprofmsvc.dll - c:\windows\system32\netprofmsvc.dll - Microsoft Corporation
             2828 - Wait - netprofmsvc.dll - c:\windows\system32\netprofmsvc.dll - Microsoft Corporation
             2836 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             3068 - Wait - perftrack.dll - C:\WINDOWS\system32\perftrack.dll - Microsoft Corporation
             3136 - Wait - perftrack.dll - C:\WINDOWS\system32\perftrack.dll - Microsoft Corporation
             3184 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3248 - Wait - perftrack.dll - C:\WINDOWS\system32\perftrack.dll - Microsoft Corporation
             3460 - Wait - es.dll - c:\windows\system32\es.dll - Microsoft Corporation
             5424 - Wait - perftrack.dll - C:\WINDOWS\system32\perftrack.dll - Microsoft Corporation
             6000 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[AvastUI.exe]Threads
             884 - Wait - AvastUI.exe - C:\Program Files\AVAST Software\Avast\AvastUI.exe - AVAST Software
             1352 - Wait - libcef.dll - C:\Program Files\AVAST Software\Avast\libcef.dll - 
             1928 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2440 - Wait - MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             2624 - Wait - libcef.dll - C:\Program Files\AVAST Software\Avast\libcef.dll - 
             2660 - Wait - libcef.dll - C:\Program Files\AVAST Software\Avast\libcef.dll - 
             2748 - Wait - libcef.dll - C:\Program Files\AVAST Software\Avast\libcef.dll - 
             3348 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             3412 - Wait - aswData.dll - C:\Program Files\AVAST Software\Avast\aswData.dll - AVAST Software
             3732 - Wait - MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             3788 - Wait - libcef.dll - C:\Program Files\AVAST Software\Avast\libcef.dll - 
             4088 - Wait - AvastUI.exe - C:\Program Files\AVAST Software\Avast\AvastUI.exe - AVAST Software
             4120 - Wait - AvastUI.exe - C:\Program Files\AVAST Software\Avast\AvastUI.exe - AVAST Software
             4176 - Wait - libcef.dll - C:\Program Files\AVAST Software\Avast\libcef.dll - 
             4460 - Wait - MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             4488 - Wait - libcef.dll - C:\Program Files\AVAST Software\Avast\libcef.dll - 
             4680 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5460 - Wait - libcef.dll - C:\Program Files\AVAST Software\Avast\libcef.dll - 
             5548 - Wait - libcef.dll - C:\Program Files\AVAST Software\Avast\libcef.dll - 
             5552 - Wait - libcef.dll - C:\Program Files\AVAST Software\Avast\libcef.dll - 
             5736 - Wait - libcef.dll - C:\Program Files\AVAST Software\Avast\libcef.dll - 
             5784 - Wait - AvastUI.exe - C:\Program Files\AVAST Software\Avast\AvastUI.exe - AVAST Software
             5788 - Wait - AvastUI.exe - C:\Program Files\AVAST Software\Avast\AvastUI.exe - AVAST Software
             5792 - Wait - AvastUI.exe - C:\Program Files\AVAST Software\Avast\AvastUI.exe - AVAST Software
             5796 - Wait - AvastUI.exe - C:\Program Files\AVAST Software\Avast\AvastUI.exe - AVAST Software
             5800 - Wait - AvastUI.exe - C:\Program Files\AVAST Software\Avast\AvastUI.exe - AVAST Software
             5864 - Wait - AvastUI.exe - C:\Program Files\AVAST Software\Avast\AvastUI.exe - AVAST Software
             5916 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[PCHunter64.exe]Threads
             904 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3584 - Wait - PCHunter64.exe - C:\Users\J R\Desktop\PCHunter_free\PCHunter64.exe - ????(??)????????
             3892 - Run - PCHunter64.exe - C:\Users\J R\Desktop\PCHunter_free\PCHunter64.exe - ????(??)????????
             4196 - Terminate - PCHunter64.exe - C:\Users\J R\Desktop\PCHunter_free\PCHunter64.exe - ????(??)????????
             4728 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5524 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5992 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             3064 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3336 - Wait - wersvc.dll - c:\windows\system32\wersvc.dll - Microsoft Corporation
             4040 - Wait - svchost.exe - C:\WINDOWS\System32\svchost.exe - Microsoft Corporation
             4244 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             968 - Wait - svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             972 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             980 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             984 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             988 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2672 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4136 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             6056 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[SetPoint.exe]Threads
             996 - Wait - MacroCore.dll - C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll - Logitech, Inc.
             1788 - Wait - MacroCore.dll - C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll - Logitech, Inc.
             2184 - Wait - D3D9.DLL - C:\WINDOWS\SYSTEM32\D3D9.DLL - Microsoft Corporation
             3396 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             3712 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4052 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4132 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             4340 - Wait - MacroCore.dll - C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll - Logitech, Inc.
             4344 - Wait - MacroCore.dll - C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll - Logitech, Inc.
             4348 - Wait - MacroCore.dll - C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll - Logitech, Inc.
             4396 - Wait - KemMon.dll - C:\Program Files\Logitech\SetPointP\KemMon.dll - Logitech, Inc.
             4532 - Wait - SetPoint.exe - C:\Program Files\Logitech\SetPointP\SetPoint.exe - Logitech, Inc.
             4628 - Wait - D3D9.DLL - C:\WINDOWS\SYSTEM32\D3D9.DLL - Microsoft Corporation
             4676 - Wait - D3D9.DLL - C:\WINDOWS\SYSTEM32\D3D9.DLL - Microsoft Corporation
             4692 - Wait - SetPoint.exe - C:\Program Files\Logitech\SetPointP\SetPoint.exe - Logitech, Inc.
             4724 - Wait - D3D9.DLL - C:\WINDOWS\SYSTEM32\D3D9.DLL - Microsoft Corporation
             4780 - Wait - khalwrapper.dll - C:\Program Files\Logitech\SetPointP\khalwrapper.dll - Logitech, Inc.
             4800 - Wait - KhalApi.dll - C:\Program Files\Common Files\LogiShrd\KHAL3\KhalApi.dll - Logitech, Inc.
             4804 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4976 - Wait - khalwrapper.dll - C:\Program Files\Logitech\SetPointP\khalwrapper.dll - Logitech, Inc.
             4992 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             5000 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5060 - Wait - SetPoint.exe - C:\Program Files\Logitech\SetPointP\SetPoint.exe - Logitech, Inc.
             5100 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Threads
             1000 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             1288 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             1676 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             2160 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             2536 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             2772 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             3360 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             4768 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             4772 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             4776 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             4828 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             4892 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             4904 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5040 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.

------------------------------------------------------------------------------------------

      Image File Name[AsusTPLoader.exe]Threads
             1016 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1924 - Wait - AsusTPLoader.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe - AsusTek
             2132 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[ASUSWakeupService.exe]Threads
             1028 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1100 - Wait - ASUSWakeupService.exe - C:\Program Files\ASUS\ASUS VivoBook\ASUSWakeupService.exe - ASUSTek Computer Inc.
             1160 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             1204 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             1800 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1884 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2248 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - Microsoft Corporation
             2288 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2292 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2304 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2312 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3972 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3980 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[AvastSvc.exe]Threads
             1044 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1348 - Wait - AvastSvc.exe - C:\Program Files\AVAST Software\Avast\AvastSvc.exe - AVAST Software
             1384 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             1388 - Wait - MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             1396 - Wait - sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             1404 - Wait - ashServ.dll - C:\Program Files\AVAST Software\Avast\ashServ.dll - AVAST Software
             1520 - Wait - aswProperty.dll - C:\Program Files\AVAST Software\Avast\aswProperty.dll - AVAST Software
             1524 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             1528 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             1532 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1536 - Wait - MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             1540 - Wait - MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             1544 - Wait - MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             1784 - Wait - MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             2180 - Wait - MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             2212 - Wait - ashServ.dll - C:\Program Files\AVAST Software\Avast\ashServ.dll - AVAST Software
             2220 - Wait - ashServ.dll - C:\Program Files\AVAST Software\Avast\ashServ.dll - AVAST Software
             2244 - Wait - MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             2276 - Wait - ashServ.dll - C:\Program Files\AVAST Software\Avast\ashServ.dll - AVAST Software
             2348 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2352 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2356 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2360 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2364 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2368 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2372 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2376 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2380 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2384 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2388 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2392 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2396 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2400 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2404 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2408 - Wait - AhResMai.dll - C:\Program Files\AVAST Software\Avast\AhResMai.dll - AVAST Software
             2412 - Wait - AhResStd.dll - C:\Program Files\AVAST Software\Avast\AhResStd.dll - AVAST Software
             2416 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2420 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2456 - Wait - mswsock.dll - C:\WINDOWS\Syswow64\mswsock.dll - Microsoft Corporation
             2460 - Wait - MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             2464 - Wait - wlanapi.dll - C:\WINDOWS\SYSwow64\wlanapi.dll - Microsoft Corporation
             2468 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             2472 - Wait - aswLog.dll - C:\Program Files\AVAST Software\Avast\aswLog.dll - AVAST Software
             2484 - Wait - AhResMai.dll - C:\Program Files\AVAST Software\Avast\AhResMai.dll - AVAST Software
             2492 - Wait - ashMaiSv.dll - C:\Program Files\AVAST Software\Avast\ashMaiSv.dll - AVAST Software
             2980 - Wait - MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             2984 - Wait - MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             2988 - Wait - MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             2992 - Wait - MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             2996 - Wait - aswStreamFilter.dll - C:\Program Files\AVAST Software\Avast\aswStreamFilter.dll - AVAST Software
             3000 - Wait - aswStreamFilter.dll - C:\Program Files\AVAST Software\Avast\aswStreamFilter.dll - AVAST Software
             3004 - Wait - aswStreamFilter.dll - C:\Program Files\AVAST Software\Avast\aswStreamFilter.dll - AVAST Software
             3008 - Wait - aswStreamFilter.dll - C:\Program Files\AVAST Software\Avast\aswStreamFilter.dll - AVAST Software
             3012 - Wait - aswStreamFilter.dll - C:\Program Files\AVAST Software\Avast\aswStreamFilter.dll - AVAST Software
             3016 - Wait - aswStreamFilter.dll - C:\Program Files\AVAST Software\Avast\aswStreamFilter.dll - AVAST Software
             3020 - Wait - aswStreamFilter.dll - C:\Program Files\AVAST Software\Avast\aswStreamFilter.dll - AVAST Software
             3024 - Wait - aswStreamFilter.dll - C:\Program Files\AVAST Software\Avast\aswStreamFilter.dll - AVAST Software
             3028 - Wait - aswStreamFilter.dll - C:\Program Files\AVAST Software\Avast\aswStreamFilter.dll - AVAST Software
             3256 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3264 - Wait - MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             3268 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3276 - Wait - Aavm4h.dll - C:\Program Files\AVAST Software\Avast\Aavm4h.dll - AVAST Software
             3280 - Wait - MSVCR110.dll - C:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll - Microsoft Corporation
             3408 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             3660 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             3700 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5124 - Wait - combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             5128 - Wait - combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             1052 - Wait - svchost.exe - C:\WINDOWS\System32\svchost.exe - Microsoft Corporation
             1056 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1060 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1080 - Wait - audioendpointbuilder.dll - c:\windows\system32\audioendpointbuilder.dll - Microsoft Corporation
             1084 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1088 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1136 - Wait - wudfsvc.dll - c:\windows\system32\wudfsvc.dll - Microsoft Corporation
             1148 - Wait - msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             1232 - Wait - msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             1252 - Wait - wlgpclnt.dll - C:\WINDOWS\SYSTEM32\wlgpclnt.dll - Microsoft Corporation
             1292 - Wait - AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             1968 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1972 - Wait - pcasvc.dll - c:\windows\system32\pcasvc.dll - Microsoft Corporation
             2044 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             2840 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             2844 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             2856 - Wait - hidserv.dll - c:\windows\system32\hidserv.dll - Microsoft Corporation
             3044 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             3048 - Wait - hidserv.dll - c:\windows\system32\hidserv.dll - Microsoft Corporation
             3052 - Wait - hidserv.dll - c:\windows\system32\hidserv.dll - Microsoft Corporation
             3092 - Wait - shcore.dll - C:\WINDOWS\SYSTEM32\shcore.dll - Microsoft Corporation
             3100 - Wait - shcore.dll - C:\WINDOWS\SYSTEM32\shcore.dll - Microsoft Corporation
             3104 - Wait - shcore.dll - C:\WINDOWS\SYSTEM32\shcore.dll - Microsoft Corporation
             3108 - Wait - shcore.dll - C:\WINDOWS\SYSTEM32\shcore.dll - Microsoft Corporation
             3112 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3116 - Wait - shcore.dll - C:\WINDOWS\SYSTEM32\shcore.dll - Microsoft Corporation
             3120 - Wait - shcore.dll - C:\WINDOWS\SYSTEM32\shcore.dll - Microsoft Corporation
             3124 - Wait - shcore.dll - C:\WINDOWS\SYSTEM32\shcore.dll - Microsoft Corporation
             3480 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3512 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3664 - Wait - pcasvc.dll - c:\windows\system32\pcasvc.dll - Microsoft Corporation
             3748 - Wait - IdListen.dll - C:\WINDOWS\System32\IdListen.dll - Microsoft Corporation
             3808 - Wait - pcasvc.dll - c:\windows\system32\pcasvc.dll - Microsoft Corporation
             3868 - Terminate - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             4452 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             4464 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4520 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             1064 - Wait - wiaservc.dll - c:\windows\system32\wiaservc.dll - Microsoft Corporation
             1104 - Wait - wiaservc.dll - c:\windows\system32\wiaservc.dll - Microsoft Corporation
             1792 - Wait - FunDisc.dll - C:\Windows\System32\FunDisc.dll - Microsoft Corporation
             1844 - Wait - fdPnp.dll - C:\Windows\System32\fdPnp.dll - Microsoft Corporation
             2032 - Wait - svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             2040 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[LiveUpdate.exe]Threads
             1156 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             2128 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll - Microsoft Corporation
             2144 - Wait - gdiplus.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_dadf89385bc5c7d7\gdiplus.dll - Microsoft Corporation
             3076 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             3132 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll - Microsoft Corporation
             3144 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll - Microsoft Corporation
             3440 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll - Microsoft Corporation
             3604 - Wait - PenIMC.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\PenIMC.dll - Microsoft Corporation
             3692 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll - Microsoft Corporation
             3812 - Wait - combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             3816 - Wait - combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             3820 - Wait - combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             3940 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             3968 - Wait - wpfgfx_v0400.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpfgfx_v0400.dll - Microsoft Corporation
             4076 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll - Microsoft Corporation
             4264 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             4640 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll - Microsoft Corporation
             4756 - Wait - LiveUpdate.exe - C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe - ASUSTeK Computer Inc.
             4788 - Wait - msvcrt.dll - C:\WINDOWS\SYSwow64\msvcrt.dll - Microsoft Corporation
             4988 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5384 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll - Microsoft Corporation
             5560 - Wait - clr.dll - C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll - Microsoft Corporation
             5616 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5628 - Wait - combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             5876 - Wait - CRYPT32.dll - C:\WINDOWS\SYSwow64\CRYPT32.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             1176 - Wait - svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             1208 - Wait - dnsrslvr.dll - c:\windows\system32\dnsrslvr.dll - Microsoft Corporation
             1212 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1220 - Wait - dnsrslvr.dll - c:\windows\system32\dnsrslvr.dll - Microsoft Corporation
             1224 - Wait - dnsrslvr.dll - c:\windows\system32\dnsrslvr.dll - Microsoft Corporation
             1228 - Wait - dnsrslvr.dll - c:\windows\system32\dnsrslvr.dll - Microsoft Corporation
             1304 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1688 - Wait - wkssvc.dll - c:\windows\system32\wkssvc.dll - Microsoft Corporation
             1704 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1824 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1976 - Wait - nlasvc.dll - c:\windows\system32\nlasvc.dll - Microsoft Corporation
             2020 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2164 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2168 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2208 - Wait - msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             2924 - Wait - ssdpapi.dll - C:\WINDOWS\system32\ssdpapi.dll - Microsoft Corporation
             3200 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3252 - Wait - dnsrslvr.dll - c:\windows\system32\dnsrslvr.dll - Microsoft Corporation
             4516 - Wait - ESENT.dll - C:\WINDOWS\system32\ESENT.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[TabTip.exe]Threads
             1188 - Wait - msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             1192 - Wait - msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             1200 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1684 - Wait - TabTip.exe - C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe - Microsoft Corporation
             2676 - Wait - gdiplus.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_9332526147499ed1\gdiplus.dll - Microsoft Corporation
             2684 - Wait - TabTip.exe - C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe - Microsoft Corporation
             2700 - Wait - msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             2732 - Wait - msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             2756 - Wait - msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             2804 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             2916 - Wait - msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             3552 - Wait - TabTip.exe - C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe - Microsoft Corporation
             3916 - Wait - TabTip.exe - C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe - Microsoft Corporation
             5196 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[AsLdrSrv.exe]Threads
             1260 - Wait - ASLDRSrv.exe - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe - ASUSTek Computer Inc.
             1312 - Wait - sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             1316 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1320 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Threads
             1308 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             1732 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             2280 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             2616 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             2632 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             4124 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             4484 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             4560 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             4652 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             4656 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             4884 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5076 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             5096 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.

------------------------------------------------------------------------------------------

      Image File Name[GFNEXSrv.exe]Threads
             1328 - Wait - GFNEXSrv.exe - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe - ASUS
             1336 - Wait - sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             1340 - Wait - GFNEXSrv.exe - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe - ASUS

------------------------------------------------------------------------------------------

      Image File Name[spoolsv.exe]Threads
             1364 - Wait - FunDisc.dll - C:\Windows\System32\FunDisc.dll - Microsoft Corporation
             1572 - Wait - spoolsv.exe - C:\WINDOWS\System32\spoolsv.exe - Microsoft Corporation
             1576 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1580 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             1584 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1588 - Wait - spoolsv.exe - C:\WINDOWS\System32\spoolsv.exe - Microsoft Corporation
             1600 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1624 - Wait - fdPnp.dll - C:\Windows\System32\fdPnp.dll - Microsoft Corporation
             2084 - Wait - PrintIsolationProxy.dll - C:\WINDOWS\System32\PrintIsolationProxy.dll - Microsoft Corporation
             2088 - Wait - localspl.dll - C:\WINDOWS\System32\localspl.dll - Microsoft Corporation
             2096 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2104 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2108 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2136 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2664 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[ATKOSD2.exe]Threads
             3656 - Wait - ATKOSD2.exe - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe - ASUSTek Computer Inc.
             3672 - Wait - gdiplus.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_dadf89385bc5c7d7\gdiplus.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             2692 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2760 - Wait - svchost.exe - C:\WINDOWS\System32\svchost.exe - Microsoft Corporation
             3152 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3156 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3160 - Terminate - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             3164 - Wait - pnrpsvc.dll - c:\windows\system32\pnrpsvc.dll - Microsoft Corporation
             3296 - Wait - ESENT.dll - c:\windows\system32\ESENT.dll - Microsoft Corporation
             3320 - Wait - pnrpsvc.dll - c:\windows\system32\pnrpsvc.dll - Microsoft Corporation
             3616 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5896 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             1616 - Wait - svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             1628 - Wait - AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             1640 - Wait - AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             1652 - Wait - AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             1656 - Terminate - mpssvc.dll - c:\windows\system32\mpssvc.dll - Microsoft Corporation
             1660 - Wait - mpssvc.dll - c:\windows\system32\mpssvc.dll - Microsoft Corporation
             1668 - Wait - bfe.dll - c:\windows\system32\bfe.dll - Microsoft Corporation
             1672 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             1680 - Wait - mpssvc.dll - c:\windows\system32\mpssvc.dll - Microsoft Corporation
             1692 - Wait - mpssvc.dll - c:\windows\system32\mpssvc.dll - Microsoft Corporation
             1696 - Wait - mpssvc.dll - c:\windows\system32\mpssvc.dll - Microsoft Corporation
             1700 - Wait - mpssvc.dll - c:\windows\system32\mpssvc.dll - Microsoft Corporation
             1804 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             1872 - Wait - dps.dll - c:\windows\system32\dps.dll - Microsoft Corporation
             1960 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2256 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2780 - Wait - dps.dll - c:\windows\system32\dps.dll - Microsoft Corporation
             2892 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3088 - Wait - wdiasqmmodule.dll - C:\WINDOWS\system32\wdiasqmmodule.dll - Microsoft Corporation
             3096 - Wait - wpnsruprov.dll - C:\WINDOWS\System32\wpnsruprov.dll - Microsoft Corporation
             3128 - Wait - energyprov.dll - C:\WINDOWS\System32\energyprov.dll - Microsoft Corporation
             3376 - Wait - radardt.dll - C:\WINDOWS\system32\radardt.dll - Microsoft Corporation
             5808 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[602updsvc.exe]Threads
             1712 - Wait - 602updsvc.exe - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe - Software602 a.s.
             1720 - Wait - sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[armsvc.exe]Threads
             1728 - Wait - armsvc.exe - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe - Adobe Systems Incorporated
             1736 - Wait - sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[InsOnSrv.exe]Threads
             1744 - Wait - InsOnSrv.exe - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe - ASUS
             1752 - Wait - sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             1768 - Wait - InsOnSrv.exe - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe - ASUS

------------------------------------------------------------------------------------------

      Image File Name[AdminService.exe]Threads
             1760 - Wait - adminservice.exe - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe - Qualcomm Atheros Commnucations
             1796 - Wait - adminservice.exe - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe - Qualcomm Atheros Commnucations
             1980 - Wait - adminservice.exe - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe - Qualcomm Atheros Commnucations

------------------------------------------------------------------------------------------

      Image File Name[QuickGesture.exe]Threads
             1764 - Wait - QuickGesture.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe - ASUSTeK Computer Inc.
             2300 - Wait - combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             3492 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             3720 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             4736 - Wait - combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation
             4908 - Wait - QuickGesture.dll - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.dll - ASUSTeK Computer Inc.
             5848 - Wait - combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[wmpnetwk.exe]Threads
             1776 - Wait - wmpnetwk.exe - C:\Program Files\Windows Media Player\wmpnetwk.exe - Microsoft Corporation
             3392 - Wait - combase.dll - C:\WINDOWS\system32\combase.dll - Microsoft Corporation
             3476 - Wait - wmpnetwk.exe - C:\Program Files\Windows Media Player\wmpnetwk.exe - Microsoft Corporation
             4204 - Wait - wmpnetwk.exe - C:\Program Files\Windows Media Player\wmpnetwk.exe - Microsoft Corporation
             4660 - Wait - wmpnetwk.exe - C:\Program Files\Windows Media Player\wmpnetwk.exe - Microsoft Corporation
             4864 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             5020 - Wait - combase.dll - C:\WINDOWS\system32\combase.dll - Microsoft Corporation
             5672 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             5676 - Wait - wmpnetwk.exe - C:\Program Files\Windows Media Player\wmpnetwk.exe - Microsoft Corporation
             5856 - Wait - msvcrt.dll - C:\WINDOWS\system32\msvcrt.dll - Microsoft Corporation
             5996 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[Ath_CoexAgent.exe]Threads
             2024 - Wait - Ath_CoexAgent.exe - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe - Atheros
             2060 - Wait - Ath_CoexAgent.exe - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe - Atheros
             2064 - Wait - Ath_CoexAgent.exe - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe - Atheros
             2068 - Terminate - Ath_CoexAgent.exe - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe - Atheros
             2076 - Wait - wlanapi.dll - C:\WINDOWS\SYSwow64\wlanapi.dll - Microsoft Corporation
             3416 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[DptfParticipantProcessorService.exe]Threads
             1816 - Wait - DptfParticipantProcessorService.exe - C:\WINDOWS\system32\DptfParticipantProcessorService.exe - Intel Corporation
             1856 - Wait - DptfParticipantProcessorService.exe - C:\WINDOWS\system32\DptfParticipantProcessorService.exe - Intel Corporation

------------------------------------------------------------------------------------------

      Image File Name[dasHost.exe]Threads
             1836 - Wait - dashost.exe - C:\WINDOWS\system32\dashost.exe - Microsoft Corporation
             2932 - Wait - SSDPAPI.dll - C:\WINDOWS\system32\SSDPAPI.dll - Microsoft Corporation
             2940 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2948 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2956 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2964 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             2972 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[DptfPolicyConfigTDPService.exe]Threads
             1852 - Wait - DptfPolicyConfigTDPService.exe - C:\WINDOWS\system32\DptfPolicyConfigTDPService.exe - Intel Corporation
             1896 - Wait - DptfPolicyConfigTDPService.exe - C:\WINDOWS\system32\DptfPolicyConfigTDPService.exe - Intel Corporation

------------------------------------------------------------------------------------------

      Image File Name[AsusTPHelper.exe]Threads
             1860 - Wait - AsusTPHelper.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe - AsusTek

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Threads
             1864 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             2196 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             2260 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             2720 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             3172 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             3364 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             3860 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             3872 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             4596 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             4604 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             4632 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             4636 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             4672 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.

------------------------------------------------------------------------------------------

      Image File Name[HeciServer.exe]Threads
             1892 - Wait - HeciServer.exe - C:\Program Files\Intel\iCLS Client\HeciServer.exe - Intel(R) Corporation
             1904 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[Jhi_service.exe]Threads
             1916 - Wait - jhi_service.exe - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe - Intel Corporation
             1936 - Wait - jhi_service.exe - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe - Intel Corporation

------------------------------------------------------------------------------------------

      Image File Name[HelperService.exe]Threads
             1956 - Wait - HelperService.exe - C:\Program Files (x86)\PDF Architect\HelperService.exe - pdfforge GmbH
             1988 - Wait - sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             2000 - Wait - HelperService.exe - C:\Program Files (x86)\PDF Architect\HelperService.exe - pdfforge GmbH

------------------------------------------------------------------------------------------

      Image File Name[ConversionService.exe]Threads
             1996 - Wait - ConversionService.exe - C:\Program Files (x86)\PDF Architect\ConversionService.exe - pdfforge GmbH
             2016 - Wait - sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             2120 - Wait - ConversionService.exe - C:\Program Files (x86)\PDF Architect\ConversionService.exe - pdfforge GmbH

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Threads
             2092 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             2712 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             2744 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             3556 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             3776 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             4200 - Wait - pepflashplayer.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll - 
             4212 - Wait - pepflashplayer.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll - 
             4260 - Wait - pepflashplayer.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll - 
             5356 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5408 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5412 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5416 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5744 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5756 - Wait - pepflashplayer.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll - 
             5776 - Wait - pepflashplayer.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll - 
             5844 - Wait - pepflashplayer.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll - 
             6004 - Wait - pepflashplayer.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll - 

------------------------------------------------------------------------------------------

      Image File Name[LMS.exe]Threads
             2172 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             2696 - Wait - sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             3472 - Wait - LMS.exe - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe - Intel Corporation
             5564 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[KBFiltr.exe]Threads
             3260 - Wait - KBFiltr.exe - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe - ASUSTek Computer Inc.
             3328 - Wait - KBFiltr.exe - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe - ASUSTek Computer Inc.

------------------------------------------------------------------------------------------

      Image File Name[WmiPrvSE.exe]Threads
             2316 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3372 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             3540 - Wait - cimwin32.dll - C:\WINDOWS\system32\wbem\cimwin32.dll - Microsoft Corporation
             4084 - Wait - wmiprvse.exe - C:\WINDOWS\system32\wbem\wmiprvse.exe - Microsoft Corporation
             4116 - Wait - NCObjAPI.DLL - C:\WINDOWS\SYSTEM32\NCObjAPI.DLL - Microsoft Corporation
             4708 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             6028 - Wait - wmiprvse.exe - C:\WINDOWS\system32\wbem\wmiprvse.exe - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[sppsvc.exe]Threads

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Threads
             2516 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             3528 - Wait - d3d9.dll - C:\WINDOWS\SYSwow64\d3d9.dll - Microsoft Corporation
             3728 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             3756 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             3764 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             4404 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             4420 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             2864 - Wait - svchost.exe - C:\WINDOWS\system32\svchost.exe - Microsoft Corporation
             2872 - Wait - sechost.dll - C:\WINDOWS\SYSTEM32\sechost.dll - Microsoft Corporation
             3036 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Threads
             2968 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             3176 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             3192 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             3196 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             3744 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             3996 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             4472 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             4480 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             4492 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             4580 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             4624 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             4648 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             4748 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.

------------------------------------------------------------------------------------------

      Image File Name[IntelMeFWService.exe]Threads
             3204 - Wait - IntelMeFWService.exe - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe - Intel Corporation
             3724 - Wait - sechost.dll - C:\WINDOWS\SYSwow64\sechost.dll - Microsoft Corporation
             5048 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5192 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[DMedia.exe]Threads
             3316 - Wait - DMedia.exe - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe - ASUSTek Computer Inc.

------------------------------------------------------------------------------------------

      Image File Name[WmiPrvSE.exe]Threads
             3628 - Wait - wmiprvse.exe - C:\WINDOWS\system32\wbem\wmiprvse.exe - Microsoft Corporation
             3632 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3636 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3640 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3644 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             3648 - Wait - wmiprvse.exe - C:\WINDOWS\system32\wbem\wmiprvse.exe - Microsoft Corporation
             4432 - Wait - NCObjAPI.DLL - C:\WINDOWS\SYSTEM32\NCObjAPI.DLL - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[dllhost.exe]Threads
             3680 - Wait - DllHost.exe - C:\WINDOWS\system32\DllHost.exe - Microsoft Corporation
             3696 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation
             3752 - Wait - wlidprov.dll - C:\WINDOWS\System32\wlidprov.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[HControl.exe]Threads
             3772 - Wait - HControl.exe - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe - ASUSTek Computer Inc.
             3780 - Wait - HControl.exe - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe - ASUSTek Computer Inc.
             3804 - Wait - HControl.exe - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe - ASUSTek Computer Inc.

------------------------------------------------------------------------------------------

      Image File Name[InsOnWMI.exe]Threads
             3796 - Wait - InsOnWMI.exe - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe - ASUS
             3924 - Wait - InsOnWMI.exe - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe - ASUS
             4004 - Wait - combase.dll - C:\WINDOWS\SYSwow64\combase.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[taskhostex.exe]Threads
             3836 - Wait - taskhostex.exe - C:\WINDOWS\system32\taskhostex.exe - Microsoft Corporation
             3840 - Wait - taskhostex.exe - C:\WINDOWS\system32\taskhostex.exe - Microsoft Corporation
             3848 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3852 - Wait - PlaySndSrv.dll - C:\WINDOWS\System32\PlaySndSrv.dll - Microsoft Corporation
             3884 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3888 - Terminate - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3936 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             3992 - Wait - MsCtfMonitor.dll - C:\WINDOWS\system32\MsCtfMonitor.dll - Microsoft Corporation
             4008 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             4012 - Wait - WINMM.dll - C:\WINDOWS\System32\WINMM.dll - Microsoft Corporation
             4044 - Wait - MSCTF.dll - C:\WINDOWS\system32\MSCTF.dll - Microsoft Corporation
             5984 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation
             6008 - Wait - ESENT.dll - C:\WINDOWS\system32\ESENT.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[taskeng.exe]Threads
             3908 - Wait - taskeng.exe - C:\WINDOWS\system32\taskeng.exe - Microsoft Corporation
             4016 - Wait - ntdll.dll - C:\WINDOWS\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[AsPatchTouchPanel64.exe]Threads
             3932 - Wait - AsPatchTouchPanel64.exe - C:\ProgramData\AsTouchPanel\AsPatchTouchPanel64.exe - ASUSTek Computer INC.

------------------------------------------------------------------------------------------

      Image File Name[USBChargerPlus.exe]Threads
             4072 - Wait - USBChargerPlus.exe - C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe - ASUSTek Computer Inc.
             5804 - Wait - gdiplus.dll - C:\WINDOWS\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_dadf89385bc5c7d7\gdiplus.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[igfxtray.exe]Threads
             4148 - Wait - igfxtray.exe - C:\Windows\System32\igfxtray.exe - Intel Corporation
             4220 - Wait - combase.dll - C:\WINDOWS\SYSTEM32\combase.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[igfxpers.exe]Threads
             4164 - Wait - igfxpers.exe - C:\Windows\System32\igfxpers.exe - Intel Corporation
             4252 - Wait - IccLibDll_x64.dll - C:\Windows\System32\IccLibDll_x64.dll - 
             4256 - Wait - igfxpers.exe - C:\Windows\System32\igfxpers.exe - Intel Corporation

------------------------------------------------------------------------------------------

      Image File Name[igfxsrvc.exe]Threads
             4232 - Wait - igfxsrvc.exe - C:\WINDOWS\system32\igfxsrvc.exe - Intel Corporation
             4236 - Wait - igfxsrvc.exe - C:\WINDOWS\system32\igfxsrvc.exe - Intel Corporation

------------------------------------------------------------------------------------------

      Image File Name[RAVCpl64.exe]Threads
             4276 - Wait - RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor
             4280 - Wait - gdiplus.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_9332526147499ed1\gdiplus.dll - Microsoft Corporation
             4284 - Wait - RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor
             4288 - Wait - RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor
             4292 - Wait - RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor
             4296 - Wait - RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor
             4300 - Wait - RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor
             4304 - Wait - RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor

------------------------------------------------------------------------------------------

      Image File Name[RAVBg64.exe]Threads
             4324 - Wait - RAVBg64.exe - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe - Realtek Semiconductor
             4328 - Wait - gdiplus.dll - C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9600.16384_none_9332526147499ed1\gdiplus.dll - Microsoft Corporation
             4332 - Wait - RAVBg64.exe - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe - Realtek Semiconductor
             4352 - Wait - MaxxAudioAPOShell64.dll - C:\WINDOWS\SYSTEM32\MaxxAudioAPOShell64.dll - Waves Audio Ltd.
             4356 - Wait - RAVBg64.exe - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe - Realtek Semiconductor

------------------------------------------------------------------------------------------

      Image File Name[jusched.exe]Threads
             4372 - Wait - jusched.exe - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe - Oracle Corporation

------------------------------------------------------------------------------------------

      Image File Name[ActivateDesktop.exe]Threads
             4512 - Wait - ActivateDesktop.exe - C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe - 

------------------------------------------------------------------------------------------

      Image File Name[KHALMNPR.exe]Threads
             4820 - Wait - KHALMNPR.EXE - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE - Logitech, Inc.
             4824 - Wait - KHALAPI.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALAPI.DLL - Logitech, Inc.
             4840 - Wait - KHALAPI.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALAPI.DLL - Logitech, Inc.
             4844 - Wait - KHALAPI.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALAPI.DLL - Logitech, Inc.
             4848 - Wait - KHALAPI.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALAPI.DLL - Logitech, Inc.
             4852 - Wait - KHALAPI.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALAPI.DLL - Logitech, Inc.
             4860 - Wait - KHALAPI.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALAPI.DLL - Logitech, Inc.
             4876 - Wait - KHALAPI.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALAPI.DLL - Logitech, Inc.
             4916 - Wait - KHALMW.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMW.DLL - Logitech, Inc.
             4920 - Wait - KHALHPP.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALHPP.DLL - Logitech, Inc.
             4924 - Wait - KHALHPP.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALHPP.DLL - Logitech, Inc.
             4928 - Wait - KHALUSB.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALUSB.DLL - Logitech, Inc.
             4932 - Wait - KHALHID.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALHID.DLL - Logitech, Inc.
             4936 - Wait - KHALHID.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALHID.DLL - Logitech, Inc.
             4940 - Wait - KHALHID.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALHID.DLL - Logitech, Inc.
             4944 - Wait - KHALMOU.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMOU.DLL - Logitech, Inc.
             4948 - Wait - KHALHID.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALHID.DLL - Logitech, Inc.
             4952 - Wait - KHALHID.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALHID.DLL - Logitech, Inc.
             4956 - Wait - KHALHID.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALHID.DLL - Logitech, Inc.
             4960 - Wait - KHALAPI.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALAPI.DLL - Logitech, Inc.
             4964 - Wait - KHALAPI.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALAPI.DLL - Logitech, Inc.
             4968 - Wait - KHALAPI.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALAPI.DLL - Logitech, Inc.
             4972 - Wait - KHALAPI.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALAPI.DLL - Logitech, Inc.
             5004 - Wait - KHALHID.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALHID.DLL - Logitech, Inc.
             5008 - Wait - KHALMOU.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMOU.DLL - Logitech, Inc.
             5012 - Wait - KHALHPP.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALHPP.DLL - Logitech, Inc.
             5044 - Wait - KHALAPI.DLL - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALAPI.DLL - Logitech, Inc.

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Threads
             5204 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             5224 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             5228 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             5240 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5244 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5248 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5264 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5268 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5272 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5276 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5280 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5284 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5752 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Threads
             5216 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             5232 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             5236 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             5252 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5256 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5260 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5300 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5304 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5308 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5312 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5316 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5320 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5556 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Threads
             5476 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             5480 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             5484 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             5488 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5492 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5496 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5500 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5504 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5508 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5512 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5516 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5520 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5748 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.

------------------------------------------------------------------------------------------

      Image File Name[new_chrome.exe]Threads
             5688 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             5692 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             5696 - Wait - new_chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe - Google Inc.
             5700 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5704 - Wait - ntdll.dll - C:\WINDOWS\SYSwow64\ntdll.dll - Microsoft Corporation
             5708 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5712 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5716 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5720 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5724 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5728 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5732 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.
             5780 - Wait - chrome_child.dll - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll - Google Inc.

------------------------------------------------------------------------------------------

      Image File Name[Idle]Threads

==========================================================================================

Kernel Module

       ntoskrnl.exe - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       hal.dll - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       kd.dll - C:\WINDOWS\system32\kd.dll - Microsoft Corporation
       mcupdate_GenuineIntel.dll - C:\WINDOWS\system32\mcupdate_GenuineIntel.dll - Microsoft Corporation
       werkernel.sys - C:\WINDOWS\System32\drivers\werkernel.sys - Microsoft Corporation
       CLFS.SYS - C:\WINDOWS\System32\drivers\CLFS.SYS - Microsoft Corporation
       tm.sys - C:\WINDOWS\System32\drivers\tm.sys - Microsoft Corporation
       PSHED.dll - C:\WINDOWS\system32\PSHED.dll - Microsoft Corporation
       BOOTVID.dll - C:\WINDOWS\system32\BOOTVID.dll - Microsoft Corporation
       CI.dll - C:\WINDOWS\system32\CI.dll - Microsoft Corporation
       msrpc.sys - C:\WINDOWS\System32\drivers\msrpc.sys - Microsoft Corporation
       Wdf01000.sys - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WDFLDR.SYS - C:\WINDOWS\system32\drivers\WDFLDR.SYS - Microsoft Corporation
       acpiex.sys - C:\WINDOWS\System32\Drivers\acpiex.sys - Microsoft Corporation
       WppRecorder.sys - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       ACPI.sys - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       WMILIB.SYS - C:\WINDOWS\System32\drivers\WMILIB.SYS - Microsoft Corporation
       cng.sys - C:\WINDOWS\System32\Drivers\cng.sys - Microsoft Corporation
       msisadrv.sys - C:\WINDOWS\System32\drivers\msisadrv.sys - Microsoft Corporation
       pci.sys - C:\WINDOWS\System32\drivers\pci.sys - Microsoft Corporation
       vdrvroot.sys - C:\WINDOWS\System32\drivers\vdrvroot.sys - Microsoft Corporation
       pdc.sys - C:\WINDOWS\system32\drivers\pdc.sys - Microsoft Corporation
       partmgr.sys - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       spaceport.sys - C:\WINDOWS\System32\drivers\spaceport.sys - Microsoft Corporation
       volmgr.sys - C:\WINDOWS\System32\drivers\volmgr.sys - Microsoft Corporation
       volmgrx.sys - C:\WINDOWS\System32\drivers\volmgrx.sys - Microsoft Corporation
       mountmgr.sys - C:\WINDOWS\System32\drivers\mountmgr.sys - Microsoft Corporation
       iaStorA.sys - C:\WINDOWS\System32\drivers\iaStorA.sys - Intel Corporation
       storport.sys - C:\WINDOWS\System32\drivers\storport.sys - Microsoft Corporation
       EhStorClass.sys - C:\WINDOWS\System32\drivers\EhStorClass.sys - Microsoft Corporation
       fltmgr.sys - C:\WINDOWS\system32\drivers\fltmgr.sys - Microsoft Corporation
       fileinfo.sys - C:\WINDOWS\System32\drivers\fileinfo.sys - Microsoft Corporation
       Ntfs.sys - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       ksecdd.sys - C:\WINDOWS\System32\Drivers\ksecdd.sys - Microsoft Corporation
       pcw.sys - C:\WINDOWS\System32\drivers\pcw.sys - Microsoft Corporation
       Fs_Rec.sys - C:\WINDOWS\System32\Drivers\Fs_Rec.sys - Microsoft Corporation
       ndis.sys - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       NETIO.SYS - C:\WINDOWS\system32\drivers\NETIO.SYS - Microsoft Corporation
       ksecpkg.sys - C:\WINDOWS\System32\Drivers\ksecpkg.sys - Microsoft Corporation
       tcpip.sys - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       fwpkclnt.sys - C:\WINDOWS\System32\drivers\fwpkclnt.sys - Microsoft Corporation
       wfplwfs.sys - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       fvevol.sys - C:\WINDOWS\System32\DRIVERS\fvevol.sys - Microsoft Corporation
       volsnap.sys - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
       rdyboost.sys - C:\WINDOWS\System32\drivers\rdyboost.sys - Microsoft Corporation
       mup.sys - C:\WINDOWS\System32\Drivers\mup.sys - Microsoft Corporation
       intelpep.sys - C:\WINDOWS\System32\drivers\intelpep.sys - Microsoft Corporation
       disk.sys - C:\WINDOWS\System32\drivers\disk.sys - Microsoft Corporation
       CLASSPNP.SYS - C:\WINDOWS\System32\drivers\CLASSPNP.SYS - Microsoft Corporation
       aswVmm.sys - C:\WINDOWS\System32\Drivers\aswVmm.sys - 
       aswRvrt.sys - C:\WINDOWS\System32\Drivers\aswRvrt.sys - 
       crashdmp.sys - C:\WINDOWS\System32\Drivers\crashdmp.sys - Microsoft Corporation
       dtsoftbus01.sys - C:\WINDOWS\System32\drivers\dtsoftbus01.sys - Disc Soft Ltd
       aswSnx.sys - C:\Windows\system32\drivers\aswSnx.sys - AVAST Software
       aswSP.sys - C:\Windows\system32\drivers\aswSP.sys - AVAST Software
       Null.SYS - C:\WINDOWS\System32\Drivers\Null.SYS - Microsoft Corporation
       Beep.SYS - C:\WINDOWS\System32\Drivers\Beep.SYS - Microsoft Corporation
       BasicRender.sys - C:\WINDOWS\System32\drivers\BasicRender.sys - Microsoft Corporation
       dxgkrnl.sys - C:\WINDOWS\System32\drivers\dxgkrnl.sys - Microsoft Corporation
       watchdog.sys - C:\WINDOWS\System32\drivers\watchdog.sys - Microsoft Corporation
       dxgmms1.sys - C:\WINDOWS\System32\drivers\dxgmms1.sys - Microsoft Corporation
       BasicDisplay.sys - C:\WINDOWS\System32\drivers\BasicDisplay.sys - Microsoft Corporation
       Npfs.SYS - C:\WINDOWS\System32\Drivers\Npfs.SYS - Microsoft Corporation
       Msfs.SYS - C:\WINDOWS\System32\Drivers\Msfs.SYS - Microsoft Corporation
       tdx.sys - C:\WINDOWS\system32\DRIVERS\tdx.sys - Microsoft Corporation
       TDI.SYS - C:\WINDOWS\system32\DRIVERS\TDI.SYS - Microsoft Corporation
       netbt.sys - C:\WINDOWS\System32\DRIVERS\netbt.sys - Microsoft Corporation
       aswRdr2.sys - C:\Windows\system32\drivers\aswRdr2.sys - AVAST Software
       afd.sys - C:\WINDOWS\system32\drivers\afd.sys - Microsoft Corporation
       pacer.sys - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       vwififlt.sys - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       netbios.sys - C:\WINDOWS\system32\DRIVERS\netbios.sys - Microsoft Corporation
       rdbss.sys - C:\WINDOWS\system32\DRIVERS\rdbss.sys - Microsoft Corporation
       truecrypt.sys - C:\WINDOWS\System32\drivers\truecrypt.sys - TrueCrypt Foundation
       nsiproxy.sys - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       npsvctrig.sys - C:\WINDOWS\System32\drivers\npsvctrig.sys - Microsoft Corporation
       mssmbios.sys - C:\WINDOWS\System32\drivers\mssmbios.sys - Microsoft Corporation
       dfsc.sys - C:\WINDOWS\System32\Drivers\dfsc.sys - Microsoft Corporation
       atkwmiacpi64.sys - C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys - ASUS
       ahcache.sys - C:\WINDOWS\system32\DRIVERS\ahcache.sys - Microsoft Corporation
       CompositeBus.sys - C:\WINDOWS\System32\drivers\CompositeBus.sys - Microsoft Corporation
       kdnic.sys - C:\WINDOWS\system32\DRIVERS\kdnic.sys - Microsoft Corporation
       umbus.sys - C:\WINDOWS\System32\drivers\umbus.sys - Microsoft Corporation
       igdkmd64.sys - C:\WINDOWS\system32\DRIVERS\igdkmd64.sys - Intel Corporation
       DptfDevProc.sys - C:\WINDOWS\system32\DRIVERS\DptfDevProc.sys - Intel Corporation
       AiCharger.sys - C:\WINDOWS\system32\DRIVERS\AiCharger.sys - ASUSTek Computer Inc.
       USBXHCI.SYS - C:\WINDOWS\System32\drivers\USBXHCI.SYS - Microsoft Corporation
       ucx01000.sys - C:\WINDOWS\System32\drivers\ucx01000.sys - Microsoft Corporation
       HECIx64.sys - C:\WINDOWS\System32\drivers\HECIx64.sys - Intel Corporation
       usbehci.sys - C:\WINDOWS\System32\drivers\usbehci.sys - Microsoft Corporation
       USBPORT.SYS - C:\WINDOWS\System32\drivers\USBPORT.SYS - Microsoft Corporation
       HDAudBus.sys - C:\WINDOWS\System32\drivers\HDAudBus.sys - Microsoft Corporation
       athw8x.sys - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       vwifibus.sys - C:\WINDOWS\System32\drivers\vwifibus.sys - Microsoft Corporation
       L1C63x64.sys - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       i8042prt.sys - C:\WINDOWS\System32\drivers\i8042prt.sys - Microsoft Corporation
       AsusTP.sys - C:\WINDOWS\System32\drivers\AsusTP.sys - ASUS Corporation
       mouclass.sys - C:\WINDOWS\System32\drivers\mouclass.sys - Microsoft Corporation
       kbfiltr.sys - C:\WINDOWS\System32\drivers\kbfiltr.sys -  
       kbdclass.sys - C:\WINDOWS\System32\drivers\kbdclass.sys - Microsoft Corporation
       DptfDevFan.sys - C:\WINDOWS\system32\DRIVERS\DptfDevFan.sys - Intel Corporation
       DptfDevGen.sys - C:\WINDOWS\system32\DRIVERS\DptfDevGen.sys - Intel Corporation
       DptfDevPch.sys - C:\WINDOWS\system32\DRIVERS\DptfDevPch.sys - Intel Corporation
       CmBatt.sys - C:\WINDOWS\System32\drivers\CmBatt.sys - Microsoft Corporation
       BATTC.SYS - C:\WINDOWS\System32\drivers\BATTC.SYS - Microsoft Corporation
       DptfDevDram.sys - C:\WINDOWS\system32\DRIVERS\DptfDevDram.sys - Intel Corporation
       intelppm.sys - C:\WINDOWS\System32\drivers\intelppm.sys - Microsoft Corporation
       wmiacpi.sys - C:\WINDOWS\System32\drivers\wmiacpi.sys - Microsoft Corporation
       AsHIDSwitch64.sys - C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys - ASUS
       HIDCLASS.SYS - C:\WINDOWS\System32\drivers\HIDCLASS.SYS - Microsoft Corporation
       HIDPARSE.SYS - C:\WINDOWS\System32\drivers\HIDPARSE.SYS - Microsoft Corporation
       DptfManager.sys - C:\WINDOWS\system32\DRIVERS\DptfManager.sys - Intel Corporation
       NdisVirtualBus.sys - C:\WINDOWS\System32\drivers\NdisVirtualBus.sys - Microsoft Corporation
       swenum.sys - C:\WINDOWS\System32\drivers\swenum.sys - Microsoft Corporation
       ks.sys - C:\WINDOWS\System32\drivers\ks.sys - Microsoft Corporation
       iwdbus.sys - C:\WINDOWS\System32\drivers\iwdbus.sys - Intel Corporation
       rdpbus.sys - C:\WINDOWS\System32\drivers\rdpbus.sys - Microsoft Corporation
       usbhub.sys - C:\WINDOWS\System32\drivers\usbhub.sys - Microsoft Corporation
       USBD.SYS - C:\WINDOWS\System32\drivers\USBD.SYS - Microsoft Corporation
       cdrom.sys - C:\WINDOWS\System32\drivers\cdrom.sys - Microsoft Corporation
       UsbHub3.sys - C:\WINDOWS\System32\drivers\UsbHub3.sys - Microsoft Corporation
       RTKVHD64.sys - C:\WINDOWS\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
       portcls.sys - C:\WINDOWS\system32\drivers\portcls.sys - Microsoft Corporation
       drmk.sys - C:\WINDOWS\system32\drivers\drmk.sys - Microsoft Corporation
       ksthunk.sys - C:\WINDOWS\system32\drivers\ksthunk.sys - Microsoft Corporation
       IntcDAud.sys - C:\WINDOWS\system32\DRIVERS\IntcDAud.sys - Intel(R) Corporation
       btfilter.sys - C:\WINDOWS\system32\DRIVERS\btfilter.sys - Qualcomm Atheros
       BTHUSB.sys - C:\WINDOWS\System32\Drivers\BTHUSB.sys - Microsoft Corporation
       bthport.sys - C:\WINDOWS\System32\Drivers\bthport.sys - Microsoft Corporation
       usbccgp.sys - C:\WINDOWS\System32\drivers\usbccgp.sys - Microsoft Corporation
       usbvideo.sys - C:\WINDOWS\System32\Drivers\usbvideo.sys - Microsoft Corporation
       BthLEEnum.sys - C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys - Microsoft Corporation
       rfcomm.sys - C:\WINDOWS\system32\DRIVERS\rfcomm.sys - Microsoft Corporation
       BthEnum.sys - C:\WINDOWS\system32\DRIVERS\BthEnum.sys - Microsoft Corporation
       bthpan.sys - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       btath_hcrp.sys - C:\WINDOWS\System32\drivers\btath_hcrp.sys - Qualcomm Atheros
       hidusb.sys - C:\WINDOWS\System32\drivers\hidusb.sys - Microsoft Corporation
       LEqdUsb.Sys - C:\WINDOWS\system32\DRIVERS\LEqdUsb.Sys - Logitech, Inc.
       kbdhid.sys - C:\WINDOWS\System32\drivers\kbdhid.sys - Microsoft Corporation
       mouhid.sys - C:\WINDOWS\System32\drivers\mouhid.sys - Microsoft Corporation
       LHidEqd.Sys - C:\WINDOWS\system32\DRIVERS\LHidEqd.Sys - Logitech, Inc.
       LHidFilt.Sys - C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys - Logitech, Inc.
       LMouFilt.Sys - C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys - Logitech, Inc.
       fastfat.SYS - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       dump_diskdump.sys - C:\WINDOWS\System32\Drivers\dump_diskdump.sys - File not found
       dump_iaStorA.sys - C:\WINDOWS\System32\Drivers\dump_iaStorA.sys - File not found
       dump_dumpfve.sys - C:\WINDOWS\System32\Drivers\dump_dumpfve.sys - File not found
       win32k.sys - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       monitor.sys - C:\WINDOWS\System32\drivers\monitor.sys - Microsoft Corporation
       TSDDD.dll - C:\WINDOWS\System32\TSDDD.dll - Microsoft Corporation
       cdd.dll - C:\WINDOWS\System32\cdd.dll - Microsoft Corporation
       ATMFD.DLL - C:\WINDOWS\System32\ATMFD.DLL - Adobe Systems Incorporated
       luafv.sys - C:\WINDOWS\system32\drivers\luafv.sys - Microsoft Corporation
       aswMonFlt.sys - C:\Windows\system32\drivers\aswMonFlt.sys - AVAST Software
       WudfPf.sys - C:\WINDOWS\system32\drivers\WudfPf.sys - Microsoft Corporation
       lltdio.sys - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       nwifi.sys - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       ndisuio.sys - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       rspndr.sys - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       vwifimp.sys - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       ASMMAP64.sys - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys - ASUS
       condrv.sys - C:\WINDOWS\System32\drivers\condrv.sys - Microsoft Corporation
       HTTP.sys - C:\WINDOWS\system32\drivers\HTTP.sys - Microsoft Corporation
       bowser.sys - C:\WINDOWS\system32\DRIVERS\bowser.sys - Microsoft Corporation
       mpsdrv.sys - C:\WINDOWS\System32\drivers\mpsdrv.sys - Microsoft Corporation
       mrxsmb.sys - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys - Microsoft Corporation
       mrxsmb20.sys - C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys - Microsoft Corporation
       mrxsmb10.sys - C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys - Microsoft Corporation
       Ndu.sys - C:\WINDOWS\system32\drivers\Ndu.sys - Microsoft Corporation
       peauth.sys - C:\WINDOWS\system32\drivers\peauth.sys - Microsoft Corporation
       secdrv.SYS - C:\WINDOWS\System32\Drivers\secdrv.SYS - Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.
       srvnet.sys - C:\WINDOWS\System32\DRIVERS\srvnet.sys - Microsoft Corporation
       tcpipreg.sys - C:\WINDOWS\System32\drivers\tcpipreg.sys - Microsoft Corporation
       srv2.sys - C:\WINDOWS\System32\DRIVERS\srv2.sys - Microsoft Corporation
       srv.sys - C:\WINDOWS\System32\DRIVERS\srv.sys - Microsoft Corporation
       tunnel.sys - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       aswStm.sys - C:\WINDOWS\system32\drivers\aswStm.sys - AVAST Software
       PCHunter64af.sys - C:\Users\J R\Desktop\PCHunter_free\PCHunter64af.sys - File not found
      
       [UnloadDriver] rasacd.sys - C:\WINDOWS\System32\DRIVERS\rasacd.sys - Microsoft Corporation
       [UnloadDriver] scfilter.sys - C:\WINDOWS\System32\DRIVERS\scfilter.sys - Microsoft Corporation
       [UnloadDriver] msgpioclx.sys - C:\WINDOWS\System32\Drivers\msgpioclx.sys - Microsoft Corporation
       [UnloadDriver] 1394ohci.sys - C:\WINDOWS\System32\drivers\1394ohci.sys - Microsoft Corporation
       [UnloadDriver] 3ware.sys - C:\WINDOWS\System32\drivers\3ware.sys - LSI
       [UnloadDriver] ADP80XX.SYS - C:\WINDOWS\System32\drivers\ADP80XX.SYS - PMC-Sierra
       [UnloadDriver] BthAvrcpTg.sys - C:\WINDOWS\System32\drivers\BthAvrcpTg.sys - Microsoft Corporation
       [UnloadDriver] BthHFHid.sys - C:\WINDOWS\System32\drivers\BthHFHid.sys - Microsoft Corporation
       [UnloadDriver] EhStorTcgDrv.sys - C:\WINDOWS\System32\drivers\EhStorTcgDrv.sys - Microsoft Corporation
       [UnloadDriver] FsDepends.sys - C:\WINDOWS\System32\drivers\FsDepends.sys - Microsoft Corporation
       [UnloadDriver] HidBatt.sys - C:\WINDOWS\System32\drivers\HidBatt.sys - Microsoft Corporation
       [UnloadDriver] HpSAMD.sys - C:\WINDOWS\System32\drivers\HpSAMD.sys - Hewlett-Packard Company
       [UnloadDriver] IPMIDrv.sys - C:\WINDOWS\System32\drivers\IPMIDrv.sys - Microsoft Corporation
       [UnloadDriver] MTConfig.sys - C:\WINDOWS\System32\drivers\MTConfig.sys - Microsoft Corporation
       [UnloadDriver] SiSRaid2.sys - C:\WINDOWS\System32\drivers\SiSRaid2.sys - Silicon Integrated Systems Corp.
       [UnloadDriver] TsUsbGD.sys - C:\WINDOWS\System32\drivers\TsUsbGD.sys - Microsoft Corporation
       [UnloadDriver] UEFI.sys - C:\WINDOWS\System32\drivers\UEFI.sys - Microsoft Corporation
       [UnloadDriver] USBSTOR.SYS - C:\WINDOWS\System32\drivers\USBSTOR.SYS - Microsoft Corporation
       [UnloadDriver] VMBusHID.sys - C:\WINDOWS\System32\drivers\VMBusHID.sys - Microsoft Corporation
       [UnloadDriver] WUDFRd.sys - C:\WINDOWS\System32\drivers\WUDFRd.sys - Microsoft Corporation
       [UnloadDriver] WpdUpFltr.sys - C:\WINDOWS\System32\drivers\WpdUpFltr.sys - Microsoft Corporation
       [UnloadDriver] acpipagr.sys - C:\WINDOWS\System32\drivers\acpipagr.sys - Microsoft Corporation
       [UnloadDriver] acpipmi.sys - C:\WINDOWS\System32\drivers\acpipmi.sys - Microsoft Corporation
       [UnloadDriver] acpitime.sys - C:\WINDOWS\System32\drivers\acpitime.sys - Microsoft Corporation
       [UnloadDriver] agp440.sys - C:\WINDOWS\System32\drivers\agp440.sys - Microsoft Corporation
       [UnloadDriver] amdk8.sys - C:\WINDOWS\System32\drivers\amdk8.sys - Microsoft Corporation
       [UnloadDriver] amdppm.sys - C:\WINDOWS\System32\drivers\amdppm.sys - Microsoft Corporation
       [UnloadDriver] amdsata.sys - C:\WINDOWS\System32\drivers\amdsata.sys - Advanced Micro Devices
       [UnloadDriver] amdsbs.sys - C:\WINDOWS\System32\drivers\amdsbs.sys - AMD Technologies Inc.
       [UnloadDriver] amdxata.sys - C:\WINDOWS\System32\drivers\amdxata.sys - Advanced Micro Devices
       [UnloadDriver] arcsas.sys - C:\WINDOWS\System32\drivers\arcsas.sys - PMC-Sierra, Inc.
       [UnloadDriver] atapi.sys - C:\WINDOWS\System32\drivers\atapi.sys - Microsoft Corporation
       [UnloadDriver] bcmfn2.sys - C:\WINDOWS\System32\drivers\bcmfn2.sys - Windows (R) Win 7 DDK provider
       [UnloadDriver] bthhfenum.sys - C:\WINDOWS\System32\drivers\bthhfenum.sys - Microsoft Corporation
       [UnloadDriver] bthmodem.sys - C:\WINDOWS\System32\drivers\bthmodem.sys - Microsoft Corporation
       [UnloadDriver] bxvbda.sys - C:\WINDOWS\System32\drivers\bxvbda.sys - Broadcom Corporation
       [UnloadDriver] circlass.sys - C:\WINDOWS\System32\drivers\circlass.sys - Microsoft Corporation
       [UnloadDriver] dmvsc.sys - C:\WINDOWS\System32\drivers\dmvsc.sys - Microsoft Corporation
       [UnloadDriver] errdev.sys - C:\WINDOWS\System32\drivers\errdev.sys - Microsoft Corporation
       [UnloadDriver] evbda.sys - C:\WINDOWS\System32\drivers\evbda.sys - Broadcom Corporation
       [UnloadDriver] fdc.sys - C:\WINDOWS\System32\drivers\fdc.sys - Microsoft Corporation
       [UnloadDriver] flpydisk.sys - C:\WINDOWS\System32\drivers\flpydisk.sys - Microsoft Corporation
       [UnloadDriver] fxppm.sys - C:\WINDOWS\System32\drivers\fxppm.sys - Microsoft Corporation
       [UnloadDriver] gagp30kx.sys - C:\WINDOWS\System32\drivers\gagp30kx.sys - Microsoft Corporation
       [UnloadDriver] hidbth.sys - C:\WINDOWS\System32\drivers\hidbth.sys - Microsoft Corporation
       [UnloadDriver] hidi2c.sys - C:\WINDOWS\System32\drivers\hidi2c.sys - Microsoft Corporation
       [UnloadDriver] hidir.sys - C:\WINDOWS\System32\drivers\hidir.sys - Microsoft Corporation
       [UnloadDriver] hwpolicy.sys - C:\WINDOWS\System32\drivers\hwpolicy.sys - Microsoft Corporation
       [UnloadDriver] hyperkbd.sys - C:\WINDOWS\System32\drivers\hyperkbd.sys - Microsoft Corporation
       [UnloadDriver] iaLPSSi_GPIO.sys - C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys - Intel Corporation
       [UnloadDriver] iaLPSSi_I2C.sys - C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys - Intel Corporation
       [UnloadDriver] iaStorAV.sys - C:\WINDOWS\System32\drivers\iaStorAV.sys - Intel Corporation
       [UnloadDriver] iaStorV.sys - C:\WINDOWS\System32\drivers\iaStorV.sys - Intel Corporation
       [UnloadDriver] intelide.sys - C:\WINDOWS\System32\drivers\intelide.sys - Microsoft Corporation
       [UnloadDriver] ipnat.sys - C:\WINDOWS\System32\drivers\ipnat.sys - Microsoft Corporation
       [UnloadDriver] isapnp.sys - C:\WINDOWS\System32\drivers\isapnp.sys - Microsoft Corporation
       [UnloadDriver] lsi_sas.sys - C:\WINDOWS\System32\drivers\lsi_sas.sys - LSI Corporation
       [UnloadDriver] lsi_sas2.sys - C:\WINDOWS\System32\drivers\lsi_sas2.sys - LSI Corporation
       [UnloadDriver] lsi_sas3.sys - C:\WINDOWS\System32\drivers\lsi_sas3.sys - LSI Corporation
       [UnloadDriver] lsi_sss.sys - C:\WINDOWS\System32\drivers\lsi_sss.sys - LSI Corporation
       [UnloadDriver] megasas.sys - C:\WINDOWS\System32\drivers\megasas.sys - LSI Corporation
       [UnloadDriver] megasr.sys - C:\WINDOWS\System32\drivers\megasr.sys - LSI Corporation, Inc.
       [UnloadDriver] msgpiowin32.sys - C:\WINDOWS\System32\drivers\msgpiowin32.sys - Microsoft Corporation
       [UnloadDriver] mshidkmdf.sys - C:\WINDOWS\System32\drivers\mshidkmdf.sys - Microsoft Corporation
       [UnloadDriver] mshidumdf.sys - C:\WINDOWS\System32\drivers\mshidumdf.sys - Microsoft Corporation
       [UnloadDriver] msiscsi.sys - C:\WINDOWS\System32\drivers\msiscsi.sys - Microsoft Corporation
       [UnloadDriver] mvumis.sys - C:\WINDOWS\System32\drivers\mvumis.sys - Marvell Semiconductor, Inc.
       [UnloadDriver] nv_agp.sys - C:\WINDOWS\System32\drivers\nv_agp.sys - Microsoft Corporation
       [UnloadDriver] nvraid.sys - C:\WINDOWS\System32\drivers\nvraid.sys - NVIDIA Corporation
       [UnloadDriver] nvstor.sys - C:\WINDOWS\System32\drivers\nvstor.sys - NVIDIA Corporation
       [UnloadDriver] parport.sys - C:\WINDOWS\System32\drivers\parport.sys - Microsoft Corporation
       [UnloadDriver] pciide.sys - C:\WINDOWS\System32\drivers\pciide.sys - Microsoft Corporation
       [UnloadDriver] pcmcia.sys - C:\WINDOWS\System32\drivers\pcmcia.sys - Microsoft Corporation
       [UnloadDriver] processr.sys - C:\WINDOWS\System32\drivers\processr.sys - Microsoft Corporation
       [UnloadDriver] rdpdr.sys - C:\WINDOWS\System32\drivers\rdpdr.sys - Microsoft Corporation
       [UnloadDriver] rdpvideominiport.sys - C:\WINDOWS\System32\drivers\rdpvideominiport.sys - Microsoft Corporation
       [UnloadDriver] sbp2port.sys - C:\WINDOWS\System32\drivers\sbp2port.sys - Microsoft Corporation
       [UnloadDriver] sdbus.sys - C:\WINDOWS\System32\drivers\sdbus.sys - Microsoft Corporation
       [UnloadDriver] sdstor.sys - C:\WINDOWS\System32\drivers\sdstor.sys - Microsoft Corporation
       [UnloadDriver] serenum.sys - C:\WINDOWS\System32\drivers\serenum.sys - Microsoft Corporation
       [UnloadDriver] serial.sys - C:\WINDOWS\System32\drivers\serial.sys - Microsoft Corporation
       [UnloadDriver] sermouse.sys - C:\WINDOWS\System32\drivers\sermouse.sys - Microsoft Corporation
       [UnloadDriver] sfloppy.sys - C:\WINDOWS\System32\drivers\sfloppy.sys - Microsoft Corporation
       [UnloadDriver] sisraid4.sys - C:\WINDOWS\System32\drivers\sisraid4.sys - Silicon Integrated Systems
       [UnloadDriver] stexstor.sys - C:\WINDOWS\System32\drivers\stexstor.sys - Promise Technology, Inc.
       [UnloadDriver] storahci.sys - C:\WINDOWS\System32\drivers\storahci.sys - Microsoft Corporation
       [UnloadDriver] stornvme.sys - C:\WINDOWS\System32\drivers\stornvme.sys - Microsoft Corporation
       [UnloadDriver] storvsc.sys - C:\WINDOWS\System32\drivers\storvsc.sys - Microsoft Corporation
       [UnloadDriver] terminpt.sys - C:\WINDOWS\System32\drivers\terminpt.sys - Microsoft Corporation
       [UnloadDriver] uagp35.sys - C:\WINDOWS\System32\drivers\uagp35.sys - Microsoft Corporation
       [UnloadDriver] uaspstor.sys - C:\WINDOWS\System32\drivers\uaspstor.sys - Microsoft Corporation
       [UnloadDriver] uliagpkx.sys - C:\WINDOWS\System32\drivers\uliagpkx.sys - Microsoft Corporation
       [UnloadDriver] umpass.sys - C:\WINDOWS\System32\drivers\umpass.sys - Microsoft Corporation
       [UnloadDriver] usbcir.sys - C:\WINDOWS\System32\drivers\usbcir.sys - Microsoft Corporation
       [UnloadDriver] usbohci.sys - C:\WINDOWS\System32\drivers\usbohci.sys - Microsoft Corporation
       [UnloadDriver] usbprint.sys - C:\WINDOWS\System32\drivers\usbprint.sys - Microsoft Corporation
       [UnloadDriver] usbuhci.sys - C:\WINDOWS\System32\drivers\usbuhci.sys - Microsoft Corporation
       [UnloadDriver] vhdmp.sys - C:\WINDOWS\System32\drivers\vhdmp.sys - Microsoft Corporation
       [UnloadDriver] viaide.sys - C:\WINDOWS\System32\drivers\viaide.sys - VIA Technologies, Inc.
       [UnloadDriver] vmbus.sys - C:\WINDOWS\System32\drivers\vmbus.sys - Microsoft Corporation
       [UnloadDriver] vmgencounter.sys - C:\WINDOWS\System32\drivers\vmgencounter.sys - Microsoft Corporation
       [UnloadDriver] vms3cap.sys - C:\WINDOWS\System32\drivers\vms3cap.sys - Microsoft Corporation
       [UnloadDriver] vpci.sys - C:\WINDOWS\System32\drivers\vpci.sys - Microsoft Corporation
       [UnloadDriver] vsmraid.sys - C:\WINDOWS\System32\drivers\vsmraid.sys - VIA Technologies Inc.,Ltd
       [UnloadDriver] vstxraid.sys - C:\WINDOWS\System32\drivers\vstxraid.sys - VIA Corporation
       [UnloadDriver] wacompen.sys - C:\WINDOWS\System32\drivers\wacompen.sys - Microsoft Corporation
       [UnloadDriver] HyperVideo.sys - C:\WINDOWS\system32\DRIVERS\HyperVideo.sys - Microsoft Corporation
       [UnloadDriver] NdisImPlatform.sys - C:\WINDOWS\system32\DRIVERS\NdisImPlatform.sys - Microsoft Corporation
       [UnloadDriver] WUDFRd.sys - C:\WINDOWS\system32\DRIVERS\WUDFRd.sys - Microsoft Corporation
       [UnloadDriver] WinUsb.sys - C:\WINDOWS\system32\DRIVERS\WinUsb.sys - Microsoft Corporation
       [UnloadDriver] bridge.sys - C:\WINDOWS\system32\DRIVERS\bridge.sys - Microsoft Corporation
       [UnloadDriver] btath_flt.sys - C:\WINDOWS\system32\DRIVERS\btath_flt.sys - Qualcomm Atheros
       [UnloadDriver] btath_lwflt.sys - C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys - Qualcomm Atheros
       [UnloadDriver] cdfs.sys - C:\WINDOWS\system32\DRIVERS\cdfs.sys - Microsoft Corporation
       [UnloadDriver] ipfltdrv.sys - C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys - Microsoft Corporation
       [UnloadDriver] mslldp.sys - C:\WINDOWS\system32\DRIVERS\mslldp.sys - Microsoft Corporation
       [UnloadDriver] ndiscap.sys - C:\WINDOWS\system32\DRIVERS\ndiscap.sys - Microsoft Corporation
       [UnloadDriver] ndistapi.sys - C:\WINDOWS\system32\DRIVERS\ndistapi.sys - Microsoft Corporation
       [UnloadDriver] ndiswan.sys - C:\WINDOWS\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       [UnloadDriver] netvsc63.sys - C:\WINDOWS\system32\DRIVERS\netvsc63.sys - Microsoft Corporation
       [UnloadDriver] raspppoe.sys - C:\WINDOWS\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       [UnloadDriver] ssudbus.sys - C:\WINDOWS\system32\DRIVERS\ssudbus.sys - DEVGURU Co., LTD.(www.devguru.co.kr)
       [UnloadDriver] ssudmdm.sys - C:\WINDOWS\system32\DRIVERS\ssudmdm.sys - DEVGURU Co., LTD.(www.devguru.co.kr)
       [UnloadDriver] tcpip.sys - C:\WINDOWS\system32\DRIVERS\tcpip.sys - Microsoft Corporation
       [UnloadDriver] udfs.sys - C:\WINDOWS\system32\DRIVERS\udfs.sys - Microsoft Corporation
       [UnloadDriver] usbscan.sys - C:\WINDOWS\system32\DRIVERS\usbscan.sys - Microsoft Corporation
       [UnloadDriver] vmstorfl.sys - C:\WINDOWS\system32\DRIVERS\vmstorfl.sys - Microsoft Corporation
       [UnloadDriver] wpcfltr.sys - C:\WINDOWS\system32\DRIVERS\wpcfltr.sys - Microsoft Corporation
       [UnloadDriver] WdNisDrv.sys - C:\WINDOWS\system32\Drivers\WdNisDrv.sys - Microsoft Corporation
       [UnloadDriver] AmUStor.SYS - C:\WINDOWS\system32\drivers\AmUStor.SYS - Alcor Micro, Corp.
       [UnloadDriver] MSKSSRV.sys - C:\WINDOWS\system32\drivers\MSKSSRV.sys - Microsoft Corporation
       [UnloadDriver] MSPCLOCK.sys - C:\WINDOWS\system32\drivers\MSPCLOCK.sys - Microsoft Corporation
       [UnloadDriver] MSPQM.sys - C:\WINDOWS\system32\drivers\MSPQM.sys - Microsoft Corporation
       [UnloadDriver] MSTEE.sys - C:\WINDOWS\system32\drivers\MSTEE.sys - Microsoft Corporation
       [UnloadDriver] SerCx.sys - C:\WINDOWS\system32\drivers\SerCx.sys - Microsoft Corporation
       [UnloadDriver] SerCx2.sys - C:\WINDOWS\system32\drivers\SerCx2.sys - Microsoft Corporation
       [UnloadDriver] SpbCx.sys - C:\WINDOWS\system32\drivers\SpbCx.sys - Microsoft Corporation
       [UnloadDriver] VerifierExt.sys - C:\WINDOWS\system32\drivers\VerifierExt.sys - Microsoft Corporation
       [UnloadDriver] WdBoot.sys - C:\WINDOWS\system32\drivers\WdBoot.sys - Microsoft Corporation
       [UnloadDriver] WdFilter.sys - C:\WINDOWS\system32\drivers\WdFilter.sys - Microsoft Corporation
       [UnloadDriver] appid.sys - C:\WINDOWS\system32\drivers\appid.sys - Microsoft Corporation
       [UnloadDriver] dam.sys - C:\WINDOWS\system32\drivers\dam.sys - Microsoft Corporation
       [UnloadDriver] drmkaud.sys - C:\WINDOWS\system32\drivers\drmkaud.sys - Microsoft Corporation
       [UnloadDriver] filetrace.sys - C:\WINDOWS\system32\drivers\filetrace.sys - Microsoft Corporation
       [UnloadDriver] intelaud.sys - C:\WINDOWS\system32\drivers\intelaud.sys - Intel Corporation
       [UnloadDriver] irenum.sys - C:\WINDOWS\system32\drivers\irenum.sys - Microsoft Corporation
       [UnloadDriver] modem.sys - C:\WINDOWS\system32\drivers\modem.sys - Microsoft Corporation
       [UnloadDriver] mrxdav.sys - C:\WINDOWS\system32\drivers\mrxdav.sys - Microsoft Corporation
       [UnloadDriver] qwavedrv.sys - C:\WINDOWS\system32\drivers\qwavedrv.sys - Microsoft Corporation
       [UnloadDriver] tpm.sys - C:\WINDOWS\system32\drivers\tpm.sys - Microsoft Corporation
       [UnloadDriver] tsusbflt.sys - C:\WINDOWS\system32\drivers\tsusbflt.sys - Microsoft Corporation
       [UnloadDriver] wimmount.sys - C:\WINDOWS\system32\drivers\wimmount.sys - Microsoft Corporation
       [UnloadDriver] ws2ifsl.sys - C:\WINDOWS\system32\drivers\ws2ifsl.sys - Microsoft Corporation

==========================================================================================

Notify Routine

       CreateProcess - 0xFFFFF800E1D7AEC0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CreateProcess - 0xFFFFF8000055B660 - C:\WINDOWS\System32\Drivers\cng.sys - Microsoft Corporation
       CreateProcess - 0xFFFFF80000E4D350 - C:\WINDOWS\System32\Drivers\ksecdd.sys - Microsoft Corporation
       CreateProcess - 0xFFFFF8000109F470 - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       CreateProcess - 0xFFFFF8000146BF38 - C:\WINDOWS\System32\Drivers\aswVmm.sys - 
       CreateProcess - 0xFFFFF8000367A810 - C:\WINDOWS\system32\drivers\peauth.sys - Microsoft Corporation
       CreateProcess - 0xFFFFF80000032498 - C:\WINDOWS\system32\CI.dll - Microsoft Corporation
       CreateProcess - 0xFFFFF800014FC020 - C:\Windows\system32\drivers\aswSnx.sys - AVAST Software
       CreateProcess - 0xFFFFF800018355E8 - C:\Windows\system32\drivers\aswSP.sys - AVAST Software
       CreateProcess - 0xFFFFF800024422E0 - C:\WINDOWS\system32\DRIVERS\DptfDevProc.sys - Intel Corporation
       CreateThread - 0xFFFFF80001503138 - C:\Windows\system32\drivers\aswSnx.sys - AVAST Software
       CreateThread - 0xFFFFF80001835340 - C:\Windows\system32\drivers\aswSP.sys - AVAST Software
       CreateThread - 0xFFFFF80002442510 - C:\WINDOWS\system32\DRIVERS\DptfDevProc.sys - Intel Corporation
       LoadImage - 0xFFFFF8000146DB8C - C:\WINDOWS\System32\Drivers\aswVmm.sys - 
       LoadImage - 0xFFFFF80001503154 - C:\Windows\system32\drivers\aswSnx.sys - AVAST Software
       LoadImage - 0xFFFFF800018351C8 - C:\Windows\system32\drivers\aswSP.sys - AVAST Software
       LoadImage - 0xFFFFF80002441E54 - C:\WINDOWS\system32\DRIVERS\DptfDevProc.sys - Intel Corporation
       CmpCallback - 0xFFFFF800018216EC - C:\Windows\system32\drivers\aswSP.sys - AVAST Software
       CmpCallback - 0xFFFFF80001543068 - C:\Windows\system32\drivers\aswSnx.sys - AVAST Software
       BugCheckCallback - 0xFFFFF800E1C25D3C - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80002023CF0 - C:\WINDOWS\system32\DRIVERS\igdkmd64.sys - Intel Corporation
       BugCheckReasonCallback - 0xFFFFF800014A80C0 - C:\WINDOWS\System32\Drivers\crashdmp.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80002C9D340 - C:\WINDOWS\System32\drivers\usbhub.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80002C9D390 - C:\WINDOWS\System32\drivers\usbhub.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80002553A30 - C:\WINDOWS\System32\drivers\USBPORT.SYS - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF800025539BC - C:\WINDOWS\System32\drivers\USBPORT.SYS - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80002553A98 - C:\WINDOWS\System32\drivers\USBPORT.SYS - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80001E5D164 - C:\WINDOWS\System32\drivers\mssmbios.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80001E5D120 - C:\WINDOWS\System32\drivers\mssmbios.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80001E5D088 - C:\WINDOWS\System32\drivers\mssmbios.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80001E5D048 - C:\WINDOWS\System32\drivers\mssmbios.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80001C280FC - C:\WINDOWS\System32\drivers\dxgkrnl.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000BC428C - C:\WINDOWS\System32\drivers\storport.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF800014356B0 - C:\WINDOWS\System32\drivers\CLASSPNP.SYS - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000385FBC - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8000038600C - C:\WINDOWS\System32\Drivers\WppRecorder.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF80000329564 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF800E1EA2438 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeFileSystem - 0xFFFFF80003817EF0 - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys - Microsoft Corporation
       SeFileSystem - 0xFFFFF80002DC7014 - C:\WINDOWS\system32\drivers\luafv.sys - Microsoft Corporation
       Shutdown - 0xFFFFF80002C9D77C - C:\WINDOWS\System32\drivers\usbhub.sys - Microsoft Corporation
       Shutdown - 0xFFFFF80002C9D77C - C:\WINDOWS\System32\drivers\usbhub.sys - Microsoft Corporation
       Shutdown - 0xFFFFF80000292240 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       Shutdown - 0xFFFFF80002C9D77C - C:\WINDOWS\System32\drivers\usbhub.sys - Microsoft Corporation
       Shutdown - 0xFFFFF80002C9D77C - C:\WINDOWS\System32\drivers\usbhub.sys - Microsoft Corporation
       Shutdown - 0xFFFFF800024F753C - C:\WINDOWS\System32\drivers\HECIx64.sys - Intel Corporation
       Shutdown - 0xFFFFF80001FEE044 - C:\WINDOWS\system32\DRIVERS\ahcache.sys - Microsoft Corporation
       Shutdown - 0xFFFFF80001E05B4C - C:\WINDOWS\System32\drivers\truecrypt.sys - TrueCrypt Foundation
       Shutdown - 0xFFFFF80001496480 - C:\WINDOWS\System32\Drivers\aswRvrt.sys - 
       Shutdown - 0xFFFFF80001464E2C - C:\WINDOWS\System32\Drivers\aswVmm.sys - 
       Shutdown - 0xFFFFF80000E4D010 - C:\WINDOWS\System32\Drivers\ksecdd.sys - Microsoft Corporation
       Shutdown - 0xFFFFF8000069B528 - C:\WINDOWS\System32\drivers\mountmgr.sys - Microsoft Corporation
       Shutdown - 0xFFFFF800E2284A08 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Shutdown - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Shutdown - 0xFFFFF8000048EAB0 - C:\WINDOWS\System32\drivers\volmgr.sys - Microsoft Corporation
       Shutdown - 0xFFFFF80000392B00 - C:\WINDOWS\System32\drivers\spaceport.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF8000294C614 - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       PlugPlay - 0xFFFFF800E218BEA8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PlugPlay - 0xFFFFF800E218BEA8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PlugPlay - 0xFFFFF800005B1780 - C:\WINDOWS\System32\Drivers\cng.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF800003D03E4 - C:\WINDOWS\System32\drivers\spaceport.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF960002D2060 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF80001E6E94C - C:\WINDOWS\System32\drivers\CompositeBus.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF80002431008 - C:\WINDOWS\system32\DRIVERS\DptfDevProc.sys - Intel Corporation
       PlugPlay - 0xFFFFF80002B05304 - C:\WINDOWS\system32\DRIVERS\DptfDevFan.sys - Intel Corporation
       PlugPlay - 0xFFFFF80002B1771C - C:\WINDOWS\system32\DRIVERS\DptfDevGen.sys - Intel Corporation
       PlugPlay - 0xFFFFF80002B1771C - C:\WINDOWS\system32\DRIVERS\DptfDevGen.sys - Intel Corporation
       PlugPlay - 0xFFFFF80002B1771C - C:\WINDOWS\system32\DRIVERS\DptfDevGen.sys - Intel Corporation
       PlugPlay - 0xFFFFF80002B1771C - C:\WINDOWS\system32\DRIVERS\DptfDevGen.sys - Intel Corporation
       PlugPlay - 0xFFFFF80002B57414 - C:\WINDOWS\system32\DRIVERS\DptfDevDram.sys - Intel Corporation
       PlugPlay - 0xFFFFF80002B28494 - C:\WINDOWS\system32\DRIVERS\DptfDevPch.sys - Intel Corporation
       PlugPlay - 0xFFFFF800E218BEA8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PlugPlay - 0xFFFFF800E218BEA8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PlugPlay - 0xFFFFF800E1C68C90 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       PlugPlay - 0xFFFFF800005B18C8 - C:\WINDOWS\System32\Drivers\cng.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF80000466B8C - C:\WINDOWS\system32\drivers\pdc.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF80001C2BD7C - C:\WINDOWS\System32\drivers\dxgkrnl.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF80001E6E94C - C:\WINDOWS\System32\drivers\CompositeBus.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF800026063A4 - C:\WINDOWS\system32\DRIVERS\DptfManager.sys - Intel Corporation
       PlugPlay - 0xFFFFF80000494AE0 - C:\WINDOWS\System32\drivers\volmgr.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF80001CB9BE4 - C:\WINDOWS\System32\drivers\dxgkrnl.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF80002B4DF0C - C:\WINDOWS\System32\drivers\BATTC.SYS - Microsoft Corporation
       PlugPlay - 0xFFFFF960002D2060 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF9600020CD04 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF80002439FF8 - C:\WINDOWS\system32\DRIVERS\DptfDevProc.sys - Intel Corporation
       PlugPlay - 0xFFFFF80001F4B024 - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF80000494AE0 - C:\WINDOWS\System32\drivers\volmgr.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF80000692524 - C:\WINDOWS\System32\drivers\mountmgr.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF80000F0C664 - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF80001392648 - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF960002D2060 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF800E218BEA8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PlugPlay - 0xFFFFF80000480F48 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF800003BD5D0 - C:\WINDOWS\System32\drivers\spaceport.sys - Microsoft Corporation
       FsNotifyChange - 0xFFFFF800008540B0 - C:\WINDOWS\system32\drivers\fltmgr.sys - Microsoft Corporation
       PriorityCallback - 0xFFFFF8000140ABE8 - C:\WINDOWS\System32\drivers\CLASSPNP.SYS - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800E218E33C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800E2113A30 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800E218B458 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800E218B458 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800E218B458 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800E218B458 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800E218B458 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800E218B458 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800E218B458 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF80000466968 - C:\WINDOWS\system32\drivers\pdc.sys - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF80001D25260 - C:\WINDOWS\System32\drivers\dxgkrnl.sys - Microsoft Corporation
       CoalescingCallback - 0xFFFFF800E1E312F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CoalescingCallback - 0xFFFFF80000C897DC - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       CoalescingCallback - 0xFFFFF800E1D97360 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CoalescingCallback - 0xFFFFF800E1E34260 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CoalescingCallback - 0xFFFFF80002D80094 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IopTimer - 0xFFFFF800031BED1C - C:\WINDOWS\system32\drivers\portcls.sys - Microsoft Corporation
       IopTimer - 0xFFFFF800031BED1C - C:\WINDOWS\system32\drivers\portcls.sys - Microsoft Corporation

==========================================================================================

Filter

       File - \FileSystem\FltMgr->\FileSystem\Ntfs - 0xFFFFE00003B7D480[] - C:\WINDOWS\system32\drivers\fltmgr.sys - Microsoft Corporation
       Disk - \Driver\partmgr->\Driver\disk - 0xFFFFE00002961040[] - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       Raw - \FileSystem\FltMgr->\FileSystem\RAW - 0xFFFFE000007DE680[] - C:\WINDOWS\system32\drivers\fltmgr.sys - Microsoft Corporation
       Raw - \FileSystem\FltMgr->\FileSystem\RAW - 0xFFFFE000007DEB60[] - C:\WINDOWS\system32\drivers\fltmgr.sys - Microsoft Corporation
       Volume - \Driver\fvevol->\Driver\volmgr - 0xFFFFE00002870030[] - C:\WINDOWS\System32\DRIVERS\fvevol.sys - Microsoft Corporation
       Volume - \Driver\rdyboost->\Driver\fvevol - 0xFFFFE0000293B410[] - C:\WINDOWS\System32\drivers\rdyboost.sys - Microsoft Corporation
       Volume - \Driver\volsnap->\Driver\rdyboost - 0xFFFFE0000293A040[] - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
       I8042prt - \Driver\kbfiltr->\Driver\i8042prt - 0xFFFFE00003F43040[] - C:\WINDOWS\System32\drivers\kbfiltr.sys -  
       I8042prt - \Driver\kbdclass->\Driver\kbfiltr - 0xFFFFE00003F59CE0[KeyboardClass0] - C:\WINDOWS\System32\drivers\kbdclass.sys - Microsoft Corporation
       I8042prt - \Driver\ATP->\Driver\i8042prt - 0xFFFFE00003F7D030[] - C:\WINDOWS\System32\drivers\AsusTP.sys - ASUS Corporation
       I8042prt - \Driver\mouclass->\Driver\ATP - 0xFFFFE00003F5DC00[PointerClass0] - C:\WINDOWS\System32\drivers\mouclass.sys - Microsoft Corporation
       PnpManager - \Driver\rdpbus->\Driver\PnpManager - 0xFFFFE00003FC78B0[RdpBus] - C:\WINDOWS\System32\drivers\rdpbus.sys - Microsoft Corporation
       PnpManager - \Driver\dtsoftbus01->\Driver\PnpManager - 0xFFFFE00003FB74A0[] - C:\WINDOWS\System32\drivers\dtsoftbus01.sys - Disc Soft Ltd
       PnpManager - \Driver\iwdbus->\Driver\PnpManager - 0xFFFFE00003FCCBF0[] - C:\WINDOWS\System32\drivers\iwdbus.sys - Intel Corporation
       PnpManager - \Driver\swenum->\Driver\PnpManager - 0xFFFFE00003FCBCF0[] - C:\WINDOWS\System32\drivers\swenum.sys - Microsoft Corporation
       PnpManager - \Driver\mssmbios->\Driver\PnpManager - 0xFFFFE00003F568D0[] - C:\WINDOWS\System32\drivers\mssmbios.sys - Microsoft Corporation
       PnpManager - \Driver\NdisVirtualBus->\Driver\PnpManager - 0xFFFFE00003F56050[] - C:\WINDOWS\System32\drivers\NdisVirtualBus.sys - Microsoft Corporation
       PnpManager - \Driver\BasicRender->\Driver\PnpManager - 0xFFFFE00003FCD040[] - C:\WINDOWS\System32\drivers\BasicRender.sys - Microsoft Corporation
       PnpManager - \Driver\ACPI_HAL->\Driver\PnpManager - 0xFFFFE0000039B650[] -  - 
       PnpManager - \Driver\umbus->\Driver\PnpManager - 0xFFFFE00003EF19F0[] - C:\WINDOWS\System32\drivers\umbus.sys - Microsoft Corporation
       PnpManager - \Driver\kdnic->\Driver\PnpManager - 0xFFFFE00003EF2640[] - C:\WINDOWS\system32\DRIVERS\kdnic.sys - Microsoft Corporation
       PnpManager - \Driver\spaceport->\Driver\PnpManager - 0xFFFFE00000FF0060[Spaceport] - C:\WINDOWS\System32\drivers\spaceport.sys - Microsoft Corporation
       PnpManager - \Driver\vdrvroot->\Driver\PnpManager - 0xFFFFE00000FF5900[] - C:\WINDOWS\System32\drivers\vdrvroot.sys - Microsoft Corporation
       PnpManager - \Driver\CompositeBus->\Driver\PnpManager - 0xFFFFE00003C65990[] - C:\WINDOWS\System32\drivers\CompositeBus.sys - Microsoft Corporation
       PnpManager - \Driver\BasicDisplay->\Driver\PnpManager - 0xFFFFE00003C2C040[] - C:\WINDOWS\System32\drivers\BasicDisplay.sys - Microsoft Corporation
       PnpManager - \Driver\volmgr->\Driver\PnpManager - 0xFFFFE00000FEFCC0[VolMgrControl] - C:\WINDOWS\System32\drivers\volmgr.sys - Microsoft Corporation

==========================================================================================

DPC Timer

       0xFFFFE00002941310 - 0xFFFFF80001379394 - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
       0xFFFFE00004039450 - 0xFFFFF80000E7573C - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00001088770 - 0xFFFFF80000B9C078 - C:\WINDOWS\System32\drivers\storport.sys - Microsoft Corporation
       0xFFFFE00004074AC0 - 0xFFFFF80000E7573C - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00005D2CF50 - 0xFFFFF80001EDE7C8 - C:\WINDOWS\system32\drivers\afd.sys - Microsoft Corporation
       0xFFFFE00005617D40 - 0xFFFFF800E1D74B48 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFE00004B206B0 - 0xFFFFF80001EDE7C8 - C:\WINDOWS\system32\drivers\afd.sys - Microsoft Corporation
       0xFFFFF800E1F0B860 - 0xFFFFF800E1D74870 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFF80000BCD320 - 0xFFFFF80000BB8230 - C:\WINDOWS\System32\drivers\storport.sys - Microsoft Corporation
       0xFFFFE00004272488 - 0xFFFFF80000294480 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       0xFFFFE000028B03F0 - 0xFFFFF800010B0340 - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFF80000FC7240 - 0xFFFFF80000FBE3CC - C:\WINDOWS\System32\Drivers\dfsc.sys - Microsoft Corporation
       0xFFFFE000029264F0 - 0xFFFFF80001379394 - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
       0xFFFFE0000286F3F0 - 0xFFFFF80001379394 - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
       0xFFFFE00000FE4300 - 0xFFFFF800008250A4 - C:\WINDOWS\system32\drivers\fltmgr.sys - Microsoft Corporation
       0xFFFFE00002935170 - 0xFFFFF80001379394 - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
       0xFFFFE00003B7A090 - 0xFFFFF80001379394 - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
       0xFFFFE00003F13B40 - 0xFFFFF80002520860 - C:\WINDOWS\System32\drivers\USBPORT.SYS - Microsoft Corporation
       0xFFFFE000028B00F0 - 0xFFFFF800010B0340 - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000295C278 - 0xFFFFF80000E75C30 - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C7278 - 0xFFFFF80000E75C30 - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00003F0DB40 - 0xFFFFF80002520860 - C:\WINDOWS\System32\drivers\USBPORT.SYS - Microsoft Corporation
       0xFFFFE00002921130 - 0xFFFFF80001409E80 - C:\WINDOWS\System32\drivers\CLASSPNP.SYS - Microsoft Corporation
       0xFFFFE00003D2C310 - 0xFFFFF80000005800 - C:\WINDOWS\system32\CI.dll - Microsoft Corporation
       0xFFFFF800037B61A8 - 0xFFFFF80001F73690 - C:\WINDOWS\system32\DRIVERS\rdbss.sys - Microsoft Corporation
       0xFFFFF800E1F23C60 - 0xFFFFF800E1D7EF18 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFF80000EF6B70 - 0xFFFFF80000E8389C - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFF800E1F1BCE0 - 0xFFFFF800E1EA5804 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFE0000403D2D0 - 0xFFFFF80000E7573C - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFF8000083F600 - 0xFFFFF8000081BBB0 - C:\WINDOWS\system32\drivers\fltmgr.sys - Microsoft Corporation
       0xFFFFF800E1F1EE60 - 0xFFFFF800E1D81564 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFE000054D7820 - 0xFFFFF80001F73690 - C:\WINDOWS\system32\DRIVERS\rdbss.sys - Microsoft Corporation
       0xFFFFF800012488C0 - 0xFFFFF800010BE930 - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00000AA74D0 - 0xFFFFF80001EDE7C8 - C:\WINDOWS\system32\drivers\afd.sys - Microsoft Corporation
       0xFFFFE000040396A0 - 0xFFFFF80000E7573C - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00003ED9628 - 0xFFFFF80000294480 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       0xFFFFE00005777A50 - 0xFFFFF80001EDE7C8 - C:\WINDOWS\system32\drivers\afd.sys - Microsoft Corporation
       0xFFFFE000004563C8 - 0xFFFFF80002B490A4 - C:\WINDOWS\System32\drivers\BATTC.SYS - Microsoft Corporation
       0xFFFFE000044A1938 - 0xFFFFF800E1DB33C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFF800E1F1BC40 - 0xFFFFF800E1D74D8C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFE000028B0570 - 0xFFFFF800010B0340 - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000401F8A0 - 0xFFFFF80000E7573C - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000003724DA - 0xFFFFF800E1D74CE4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFE00004074D60 - 0xFFFFF80000E7573C - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00005108DC0 - 0xFFFFF800E1D74B48 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFF80000CAFD20 - 0xFFFFF80000C528E4 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       0xFFFFF800005D77B0 - 0xFFFFF8000056E840 - C:\WINDOWS\System32\Drivers\cng.sys - Microsoft Corporation
       0xFFFFE0000025B3C8 - 0xFFFFF80001C295BC - C:\WINDOWS\System32\drivers\dxgkrnl.sys - Microsoft Corporation
       0xFFFFF800E1F17B30 - 0xFFFFF800E1D82030 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFE000003792E0 - 0xFFFFF800E1D8201C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFE00004458FB0 - 0xFFFFF800007B11D0 - C:\WINDOWS\System32\DRIVERS\netbt.sys - Microsoft Corporation
       0xFFFFE00003DFD900 - 0xFFFFF800E1D11FCC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFE0000403C960 - 0xFFFFF80000E7573C - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00003C39F60 - 0xFFFFF8000182F308 - C:\Windows\system32\drivers\aswSP.sys - AVAST Software
       0xFFFFF800E1F0B920 - 0xFFFFF800E1D74870 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFE00002951F50 - 0xFFFFF8000106D930 - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000055C1E28 - 0xFFFFF80001EA70DC - C:\WINDOWS\system32\drivers\afd.sys - Microsoft Corporation
       0xFFFFF8000102DE80 - 0xFFFFF80001002230 - C:\WINDOWS\System32\drivers\rdyboost.sys - Microsoft Corporation
       0xFFFFE00002937E40 - 0xFFFFF8000138CBB0 - C:\WINDOWS\System32\drivers\volsnap.sys - Microsoft Corporation
       0xFFFFF800E1F4BD00 - 0xFFFFF800E1D79F74 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFF800E1F6B800 - 0xFFFFF800E1D7F7F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFD00020685800 - 0xFFFFF800E1D7F7F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFD000206FE800 - 0xFFFFF800E1D7F7F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFD00020785800 - 0xFFFFF800E1D7F7F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFF800E1F23F60 - 0xFFFFF800E1D0F94C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFE00005EC1E90 - 0xFFFFF80001EDE7C8 - C:\WINDOWS\system32\drivers\afd.sys - Microsoft Corporation
       0xFFFFF800E1C4F9A0 - 0xFFFFF800E1C0E0C0 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       0xFFFFF800E1F49250 - 0xFFFFF800E1D74960 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFF80003A1DB28 - 0xFFFFF80003A01550 - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE000045EC278 - 0xFFFFF80000E75C30 - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFF80003B6D180 - 0xFFFFF80003B4F1B0 - C:\WINDOWS\System32\DRIVERS\srv.sys - Microsoft Corporation
       0xFFFFF80000EF6C90 - 0xFFFFF80000E75298 - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000028B0270 - 0xFFFFF800010B0340 - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00003FD6918 - 0xFFFFF800E1DB33C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFE000059B9060 - 0xFFFFF800E1D74B48 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFF80000EF6ED0 - 0xFFFFF80000E80F7C - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFF8000143DD00 - 0xFFFFF80001408EE0 - C:\WINDOWS\System32\drivers\CLASSPNP.SYS - Microsoft Corporation
       0xFFFFF800039AD660 - 0xFFFFF800039A7C44 - C:\WINDOWS\system32\DRIVERS\bowser.sys - Microsoft Corporation
       0xFFFFF800E1F1BC80 - 0xFFFFF800E1D97860 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFF800001A15E0 - 0xFFFFF8000019CE24 - C:\WINDOWS\System32\drivers\tm.sys - Microsoft Corporation
       0xFFFFE000047668A0 - 0xFFFFF800022A8000 - C:\WINDOWS\system32\DRIVERS\igdkmd64.sys - Intel Corporation
       0xFFFFE00003F71440 - 0xFFFFF80000E7573C - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00006325AC0 - 0xFFFFF80000E7573C - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation

==========================================================================================

Worker Thread

       Nothing

==========================================================================================

HalDispatchTable

       0 - 0xFFFFF800E1C64324 - HaliQuerySystemInformation - C:\WINDOWS\system32\hal.dll
       1 - 0xFFFFF800E1C641A4 - HalpSetSystemInformation - C:\WINDOWS\system32\hal.dll
       2 - 0xFFFFF800E2194344 - xHalAllocatePmcCounterSet - C:\WINDOWS\system32\ntoskrnl.exe
       3 - 0x0000000000000000 - - - 
       4 - 0xFFFFF800E1D93E6C - HalExamineMBR - C:\WINDOWS\system32\ntoskrnl.exe
       5 - 0xFFFFF800E2148814 - IoReadPartitionTable - C:\WINDOWS\system32\ntoskrnl.exe
       6 - 0xFFFFF800E2148190 - IoSetPartitionInformation - C:\WINDOWS\system32\ntoskrnl.exe
       7 - 0xFFFFF800E2244EC4 - IoWritePartitionTable - C:\WINDOWS\system32\ntoskrnl.exe
       8 - 0xFFFFF800E1DD2E04 - MiInitializeCombining - C:\WINDOWS\system32\ntoskrnl.exe
       9 - 0xFFFFF800E1D97360 - _xHalResumeProcessorFromIdle - C:\WINDOWS\system32\ntoskrnl.exe
       10 - 0xFFFFF800E1D97360 - HaliInitPnpDriver - C:\WINDOWS\system32\ntoskrnl.exe
       11 - 0xFFFFF800E1C66CF4 - HaliInitPowerManagement - C:\WINDOWS\system32\hal.dll
       12 - 0xFFFFF800E1C64AB8 - HaliGetDmaAdapter - C:\WINDOWS\system32\hal.dll
       13 - 0xFFFFF800E1C21B34 - HaliGetInterruptTranslator - C:\WINDOWS\system32\hal.dll
       14 - 0xFFFFF800E1C66AAC - _xHalGetInterruptTranslator - C:\WINDOWS\system32\hal.dll
       15 - 0xFFFFF800E2194344 - _xHalStartMirroring - C:\WINDOWS\system32\ntoskrnl.exe
       16 - 0xFFFFF800E1DB49A0 - _ext_ms_win_ntos_kcminitcfg_l1_1_0_CmSetInitMachineConfig - C:\WINDOWS\system32\ntoskrnl.exe
       17 - 0xFFFFF800E1DB49A0 - HalpEndOfBoot - C:\WINDOWS\system32\ntoskrnl.exe
       18 - 0xFFFFF800E1C66D30 - _xHalSaveAndDisableHvEnlightenment - C:\WINDOWS\system32\hal.dll
       19 - 0xFFFFF800E1DB49A0 - HalAcpiGetTableDispatch - C:\WINDOWS\system32\ntoskrnl.exe
       20 - 0xFFFFF800E1C19840 - HaliSetPciErrorHandlerCallback - C:\WINDOWS\system32\hal.dll
       21 - 0xFFFFF800E1C25FC4 - UnknowName - C:\WINDOWS\system32\hal.dll

==========================================================================================

HalPrivateDispatchTable

       0 - 0xFFFFF800E1DD2E04 - _MiInitializeCombining - C:\WINDOWS\system32\ntoskrnl.exe
       1 - 0xFFFFF800E1DD2E04 - _MiInitializeCombining - C:\WINDOWS\system32\ntoskrnl.exe
       2 - 0xFFFFF800E1C5EED4 - HaliLocateHiberRanges - C:\WINDOWS\system32\hal.dll
       3 - 0xFFFFF800E2194344 - _xHalRegisterBusHandler - C:\WINDOWS\system32\ntoskrnl.exe
       4 - 0x0000000000000000 - - - 
       5 - 0xFFFFF800E1C5D440 - HaliSetWakeAlarm - C:\WINDOWS\system32\hal.dll
       6 - 0xFFFFF80000406344 - HalpTranslateBusAddress - C:\WINDOWS\System32\drivers\pci.sys
       7 - 0xFFFFF80000440C30 - HalpAssignSlotResourcesStub - C:\WINDOWS\System32\drivers\pci.sys
       8 - 0xFFFFF800E1C370EC - HaliHaltSystem - C:\WINDOWS\system32\hal.dll
       9 - 0xFFFFF800E1C24DA4 - HalpFindBusAddressTranslation - C:\WINDOWS\system32\hal.dll
       10 - 0x0000000000000000 - - - 
       11 - 0xFFFFF800E1C6827C - HalpAllocateMapRegisters - C:\WINDOWS\system32\hal.dll
       12 - 0xFFFFF800E1C6B69C - HalpKdSetupDebuggingDevice - C:\WINDOWS\system32\hal.dll
       13 - 0xFFFFF800E1C6B660 - HalpKdReleaseDebuggingDevice - C:\WINDOWS\system32\hal.dll
       14 - 0xFFFFF800E1C20DF4 - HalAcpiGetTable - C:\WINDOWS\system32\hal.dll
       15 - 0xFFFFF800E1C37190 - HalpCheckPowerButton - C:\WINDOWS\system32\hal.dll
       16 - 0xFFFFF800E1DD2D74 - _xHalVectorToIDTEntry - C:\WINDOWS\system32\ntoskrnl.exe
       17 - 0xFFFFF800E1C1DD70 - HalpMapPhysicalMemoryWriteThrough64 - C:\WINDOWS\system32\hal.dll
       18 - 0xFFFFF800E1C11020 - HalpUnmapVirtualAddress - C:\WINDOWS\system32\hal.dll
       19 - 0xFFFFF800E1C19608 - HalpKdReadPCIConfig - C:\WINDOWS\system32\hal.dll
       20 - 0xFFFFF800E1C1971C - HalpKdWritePCIConfig - C:\WINDOWS\system32\hal.dll
       21 - 0xFFFFF8000053BF80 - _xHalGetInterruptVector - C:\WINDOWS\System32\drivers\ACPI.sys
       22 - 0xFFFFF800004ECE78 - _ext_ms_win_ntos_tm_l1_1_0_NtQueryInformationTransactionManager - C:\WINDOWS\System32\drivers\ACPI.sys
       23 - 0xFFFFF800E1C68E60 - HalpLoadMicrocode - C:\WINDOWS\system32\hal.dll
       24 - 0xFFFFF800E1C66D40 - HalpUnloadMicrocode - C:\WINDOWS\system32\hal.dll
       25 - 0xFFFFF800E1C18530 - HalpMcUpdatePostUpdate - C:\WINDOWS\system32\hal.dll
       26 - 0xFFFFF8000053B958 - _ext_ms_win_fs_clfs_l1_1_0_ClfsReadNextLogRecord - C:\WINDOWS\System32\drivers\ACPI.sys
       27 - 0xFFFFF8000053BBD0 - _xKdUnmapVirtualAddress - C:\WINDOWS\System32\drivers\ACPI.sys
       28 - 0xFFFFF800E1C69028 - HalpDpReplaceBegin - C:\WINDOWS\system32\hal.dll
       29 - 0xFFFFF800E1C61EFC - HalpDpReplaceTarget - C:\WINDOWS\system32\hal.dll
       30 - 0xFFFFF800E1C61D44 - HalpDpReplaceControl - C:\WINDOWS\system32\hal.dll
       31 - 0xFFFFF800E1C691E0 - HalpDpReplaceEnd - C:\WINDOWS\system32\hal.dll
       32 - 0xFFFFF800E1C3B0E0 - HalpPrepareForBugcheck - C:\WINDOWS\system32\hal.dll
       33 - 0xFFFFF800E1C18554 - HalpTimerQueryWakeTime - C:\WINDOWS\system32\hal.dll
       34 - 0xFFFFF800E1C24288 - HalpTimerReportIdleStateUsage - C:\WINDOWS\system32\hal.dll
       35 - 0xFFFFF800E1C24DC8 - _xHalTscSynchronization - C:\WINDOWS\system32\hal.dll
       36 - 0xFFFFF800E1C41350 - HalpWheaInitProcessorGenericSection - C:\WINDOWS\system32\hal.dll
       37 - 0xFFFFF800E1C5D154 - HalpStopLegacyUsbInterrupts - C:\WINDOWS\system32\hal.dll
       38 - 0xFFFFF800E1C411C0 - HalpReadWheaPhysicalMemory - C:\WINDOWS\system32\hal.dll
       39 - 0xFFFFF800E1C4140C - HalpWriteWheaPhysicalMemory - C:\WINDOWS\system32\hal.dll
       40 - 0xFFFFF800E1C43D4C - HalpInterruptMaskLevelTriggeredLines - C:\WINDOWS\system32\hal.dll
       41 - 0xFFFFF800E1C43F10 - _xHalDpUnmaskLevelTriggeredInterrupts - C:\WINDOWS\system32\hal.dll
       42 - 0xFFFFF800E1C618A8 - HalpDpGetInterruptReplayState - C:\WINDOWS\system32\hal.dll
       43 - 0xFFFFF800E1C61F90 - HalpDpReplayInterrupts - C:\WINDOWS\system32\hal.dll
       44 - 0xFFFFF800E1DD2F40 - _PpmParkSteerInterrupts - C:\WINDOWS\system32\ntoskrnl.exe
       45 - 0xFFFFF800E1C6B69C - HalpInterruptUnmaskLevelTriggeredLines - C:\WINDOWS\system32\hal.dll
       46 - 0xFFFFF800E1C6B660 - HalpKdReleaseDebuggingDevice - C:\WINDOWS\system32\hal.dll
       47 - 0x0000000000000000 - - - 
       48 - 0xFFFFF800E1C37030 - HalpAllocateEarlyPages - C:\WINDOWS\system32\hal.dll
       49 - 0xFFFFF800E1C37094 - HalpMapEarlyPages - C:\WINDOWS\system32\hal.dll
       50 - 0x0000000000000000 - - - 
       51 - 0x0000000000000000 - - - 
       52 - 0xFFFFF800E1C375BC - HalpTimerNotifyProcessorFreeze - C:\WINDOWS\system32\hal.dll
       53 - 0xFFFFF800E1C0FCF0 - HalpProcessorPrepareForIdle - C:\WINDOWS\system32\hal.dll
       54 - 0xFFFFF800E1D97360 - _KeSetDmaIoCoherency - C:\WINDOWS\system32\ntoskrnl.exe
       55 - 0xFFFFF800E1C0FD30 - HalpProcessorResumeFromIdle - C:\WINDOWS\system32\hal.dll
       56 - 0x0000000000000000 - - - 
       57 - 0xFFFFF800E1DD2E34 - _xHalVectorToIDTEntryEx - C:\WINDOWS\system32\ntoskrnl.exe
       58 - 0xFFFFF800E1C68BB4 - HalpSecondaryInterruptQueryPrimaryInformation - C:\WINDOWS\system32\hal.dll
       59 - 0xFFFFF800E1C13398 - HalpMaskInterrupt - C:\WINDOWS\system32\hal.dll
       60 - 0xFFFFF800E1C13460 - HalpUnmaskInterrupt - C:\WINDOWS\system32\hal.dll
       61 - 0xFFFFF800E1C17F70 - HalpIsInterruptTypeSecondary - C:\WINDOWS\system32\hal.dll
       62 - 0xFFFFF800E1C35F24 - HalpAllocateGsivForSecondaryInterrupt - C:\WINDOWS\system32\hal.dll
       63 - 0xFFFFF800E1C65ADC - HaliAddInterruptRemapping - C:\WINDOWS\system32\hal.dll
       64 - 0xFFFFF800E1C66B2C - HaliRemoveInterruptRemapping - C:\WINDOWS\system32\hal.dll
       65 - 0xFFFFF800E1C3B2D0 - HalpSaveAndDisableEnlightenment - C:\WINDOWS\system32\hal.dll
       66 - 0xFFFFF800E1C3B140 - HalpRestoreHvEnlightenment - C:\WINDOWS\system32\hal.dll
       67 - 0xFFFFF800E1D97360 - _KiProcessorCallbackNop - C:\WINDOWS\system32\ntoskrnl.exe
       68 - 0xFFFFF800E1D97360 - _KeSetDmaIoCoherency - C:\WINDOWS\system32\ntoskrnl.exe
       69 - 0xFFFFF80000405650 - _xHalPciEarlyRestore - C:\WINDOWS\System32\drivers\pci.sys
       70 - 0xFFFFF800E1C23CEC - HalpInterruptGetLocalIdentifier - C:\WINDOWS\system32\hal.dll
       71 - 0xFFFFF800E1C343C8 - HalpAllocatePmcCounterSet - C:\WINDOWS\system32\hal.dll
       72 - 0xFFFFF800E1C3454C - HalpCollectPmcCounters - C:\WINDOWS\system32\hal.dll
       73 - 0xFFFFF800E1C345B8 - HalpFreePmcCounterSet - C:\WINDOWS\system32\hal.dll
       74 - 0xFFFFF800E1DD2E1C - _xHalProcessorHalt - C:\WINDOWS\system32\ntoskrnl.exe
       75 - 0xFFFFF800E1C24D50 - HalpTimerQueryCycleCounter - C:\WINDOWS\system32\hal.dll
       76 - 0x0000000000000000 - - - 
       77 - 0xFFFFF8000040DCDC - _xHalPciMarkHiberPhase - C:\WINDOWS\System32\drivers\pci.sys
       78 - 0xFFFFF800E1C25D30 - HalpInterruptQueryProcessorRestartEntryPoint - C:\WINDOWS\system32\hal.dll
       79 - 0xFFFFF800E1C352F0 - HalpInterruptRequestInterrupt - C:\WINDOWS\system32\hal.dll
       80 - 0xFFFFF800E1C34698 - HalpInterruptEnumerateUnmaskedInterrupts - C:\WINDOWS\system32\hal.dll
       81 - 0xFFFFF800E1D97360 - _KiProcessorCallbackNop - C:\WINDOWS\system32\ntoskrnl.exe
       82 - 0xFFFFF800E1C6B458 - HalpKdEnumerateDebuggingDevices - C:\WINDOWS\system32\hal.dll
       83 - 0xFFFFF800E1D97360 - _xHalFlushIoRectangleExternalCache - C:\WINDOWS\system32\ntoskrnl.exe
       84 - 0xFFFFF800E1C1894C - HalpPowerEarlyRestore - C:\WINDOWS\system32\hal.dll
       85 - 0xFFFFF800E1C437D0 - HalpQueryCapsuleCapabilities - C:\WINDOWS\system32\hal.dll
       86 - 0xFFFFF800E1C438B0 - HalpUpdateCapsule - C:\WINDOWS\system32\hal.dll
       87 - 0xFFFFF80000409960 - _xHalPciMultiStageResumeCapable - C:\WINDOWS\System32\drivers\pci.sys
       88 - 0xFFFFF800E1C11BEC - HalpDmaFreeCrashDumpRegisters - C:\WINDOWS\system32\hal.dll
       89 - 0xFFFFF800E1C66D24 - HalpAcpiAoacCapable - C:\WINDOWS\system32\hal.dll
       90 - 0xFFFFF800E1C34A0C - HalpInterruptSetDestination - C:\WINDOWS\system32\hal.dll
       91 - 0xFFFFF800E1C24948 - HalpTimerGetClockConfiguration - C:\WINDOWS\system32\hal.dll
       92 - 0xFFFFF800E1C16170 - HalpTimerClockActivate - C:\WINDOWS\system32\hal.dll
       93 - 0xFFFFF800E1C0E1C4 - HalpTimerClockInitialize - C:\WINDOWS\system32\hal.dll
       94 - 0xFFFFF800E1C0E160 - HalpTimerClockStop - C:\WINDOWS\system32\hal.dll
       95 - 0xFFFFF800E1C0E67C - HalpTimerClockArm - C:\WINDOWS\system32\hal.dll
       96 - 0xFFFFF800E1C37B00 - HalpTimerOnlyClockInterruptPending - C:\WINDOWS\system32\hal.dll
       97 - 0xFFFFF800E1C25CFC - HalAcpiGetRsdpDispatch - C:\WINDOWS\system32\hal.dll
       98 - 0xFFFFF800E1C25D5C - HalpPowerSetRebootHandler - C:\WINDOWS\system32\hal.dll
       99 - 0xFFFFF800E1C71F50 - HalpIommuRegisterDispatchTable - C:\WINDOWS\system32\hal.dll
       100 - 0xFFFFF800E1DD2E04 - HalpTimerWatchdogStart - C:\WINDOWS\system32\ntoskrnl.exe
       101 - 0xFFFFF800E1DD2E04 - HalpTimerWatchdogResetCountdown - C:\WINDOWS\system32\ntoskrnl.exe
       102 - 0xFFFFF800E1DD2E04 - HalpTimerWatchdogStop - C:\WINDOWS\system32\ntoskrnl.exe
       103 - 0xFFFFF800E2194178 - HalpTimerWatchdogGeneratedLastReset - C:\WINDOWS\system32\ntoskrnl.exe
       104 - 0xFFFFF800E1DD2E38 - HalpTimerWatchdogTriggerSystemReset - C:\WINDOWS\system32\ntoskrnl.exe

==========================================================================================

HalAcpiDispatchTable

       KeFlushWriteBuffer - 0xFFFFF800E1C24FB0 - - - 0xFFFFF800E1C24FB0 - C:\WINDOWS\system32\hal.dll
       HaliAcpiMachineStateInit - 0xFFFFF800E1C665E0 - - - 0xFFFFF800E1C665E0 - C:\WINDOWS\system32\hal.dll
       HaliAcpiQueryFlags - 0xFFFFF800E1C66E1C - - - 0xFFFFF800E1C66E1C - C:\WINDOWS\system32\hal.dll
       HalpInterruptIsPicStateIntact - 0xFFFFF800E1C60660 - - - 0xFFFFF800E1C60660 - C:\WINDOWS\system32\hal.dll
       HalpInterruptRestoreAllControllerState - 0xFFFFF800E1C5E868 - - - 0xFFFFF800E1C5E868 - C:\WINDOWS\system32\hal.dll
       HaliPciInterfaceReadConfig - 0xFFFFF800E1C10010 - - - 0xFFFFF800E1C10010 - C:\WINDOWS\system32\hal.dll
       HaliPciInterfaceWriteConfig - 0xFFFFF800E1C17C2C - - - 0xFFFFF800E1C17C2C - C:\WINDOWS\system32\hal.dll
       HalpInterruptGetApicVersion - 0xFFFFF800E1C240E8 - - - 0xFFFFF800E1C240E8 - C:\WINDOWS\system32\hal.dll
       HaliSetMaxLegacyPciBusNumber - 0xFFFFF800E1C17F8C - - - 0xFFFFF800E1C17F8C - C:\WINDOWS\system32\hal.dll
       HalpInterruptIsGsiValid - 0xFFFFF800E1C68A10 - - - 0xFFFFF800E1C68A10 - C:\WINDOWS\system32\hal.dll
       HalAcpiGetTableDispatch - 0xFFFFF800E1C19840 - - - 0xFFFFF800E1C19840 - C:\WINDOWS\system32\hal.dll
       HalAcpiGetRsdpDispatch - 0xFFFFF800E1C25CFC - - - 0xFFFFF800E1C25CFC - C:\WINDOWS\system32\hal.dll
       HalAcpiGetFacsMappingDispatch - 0xFFFFF800E1C1D8C4 - - - 0xFFFFF800E1C1D8C4 - C:\WINDOWS\system32\hal.dll
       HalAcpiGetAllTablesDispatch - 0xFFFFF800E1C1FAA0 - - - 0xFFFFF800E1C1FAA0 - C:\WINDOWS\system32\hal.dll
       HalpAcpiPmRegisterAvailable - 0xFFFFF800E1C18A60 - - - 0xFFFFF800E1C18A60 - C:\WINDOWS\system32\hal.dll
       HalpAcpiPmRegisterRead - 0xFFFFF800E1C189D0 - - - 0xFFFFF800E1C189D0 - C:\WINDOWS\system32\hal.dll
       HalpAcpiPmRegisterWrite - 0xFFFFF800E1C18A90 - - - 0xFFFFF800E1C18A90 - C:\WINDOWS\system32\hal.dll

==========================================================================================

HalSubComponents

       0 - 0xFFFFF800E1C5F48C - HalpAcpiInitSystem - C:\WINDOWS\system32\hal.dll
       1 - 0xFFFFF800E1C5F660 - HalpDbgInitSystem - C:\WINDOWS\system32\hal.dll
       2 - 0xFFFFF800E1C5F2E0 - HalpDmaInitSystem - C:\WINDOWS\system32\hal.dll
       3 - 0xFFFFF800E1C5F4C4 - HalpDpInitSystem - C:\WINDOWS\system32\hal.dll
       4 - 0xFFFFF800E1C5F6D4 - HalpErrataInitSystem - C:\WINDOWS\system32\hal.dll
       5 - 0xFFFFF800E1C5F914 - HalpFirmwareInitSystem - C:\WINDOWS\system32\hal.dll
       6 - 0xFFFFF800E1C5F5D8 - HalpHalExtInitSystem - C:\WINDOWS\system32\hal.dll
       7 - 0xFFFFF800E1C5F930 - HalpHvInitSystem - C:\WINDOWS\system32\hal.dll
       8 - 0xFFFFF800E1C5F8AC - HalpHwPerfCntInitSystem - C:\WINDOWS\system32\hal.dll
       9 - 0xFFFFF800E1C5F360 - HalpInterruptInitSystem - C:\WINDOWS\system32\hal.dll
       10 - 0xFFFFF800E1C5F570 - HalpIommuInitSystem - C:\WINDOWS\system32\hal.dll
       11 - 0xFFFFF800E1C5F6AC - HalpMiscInitSystem - C:\WINDOWS\system32\hal.dll
       12 - 0xFFFFF800E1C5F754 - HalpMmInitSystem - C:\WINDOWS\system32\hal.dll
       13 - 0xFFFFF800E1C5F468 - HalpPciInitSystem - C:\WINDOWS\system32\hal.dll
       14 - 0xFFFFF800E1C5F5E8 - HalpPnpInitSystem - C:\WINDOWS\system32\hal.dll
       15 - 0xFFFFF800E1C5F604 - HalpPowerInitSystem - C:\WINDOWS\system32\hal.dll
       16 - 0xFFFFF800E1C5F804 - HalpProcInitSystem - C:\WINDOWS\system32\hal.dll
       17 - 0xFFFFF800E1C20480 - HalpTimerInitSystem - C:\WINDOWS\system32\hal.dll
       18 - 0xFFFFF800E1C5F850 - HalpWheaInitSystem - C:\WINDOWS\system32\hal.dll

==========================================================================================

Wdf01000 Dispatch Fun

       IRP_MJ_CREATE - OK - 0xFFFFF800002C43EC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF800002C43EC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF800002C43EC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation

==========================================================================================

WdfFunction

       WdfChildListCreate - OK - 0xFFFFF800002A80C0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfChildListGetDevice - OK - 0xFFFFF800002A6C40 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfChildListRetrievePdo - OK - 0xFFFFF800002F0920 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfChildListRetrieveAddressDescription - OK - 0xFFFFF800002F0760 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfChildListBeginScan - OK - 0xFFFFF800002B8F00 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfChildListEndScan - OK - 0xFFFFF800002B8908 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfChildListBeginIteration - OK - 0xFFFFF800002B8A14 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfChildListRetrieveNextDevice - OK - 0xFFFFF800002B8CA8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfChildListEndIteration - OK - 0xFFFFF800002B896C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfChildListAddOrUpdateChildDescriptionAsPresent - OK - 0xFFFFF800002A6E7C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfChildListUpdateChildDescriptionAsMissing - OK - 0xFFFFF800002ABCE0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfChildListUpdateAllChildDescriptionsAsPresent - OK - 0xFFFFF800002F0B18 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfChildListRequestChildEject - OK - 0xFFFFF800002F056C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCollectionCreate - OK - 0xFFFFF800002A777C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCollectionGetCount - OK - 0xFFFFF8000029C448 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCollectionAdd - OK - 0xFFFFF800002A7F5C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCollectionRemove - OK - 0xFFFFF800002AA3F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCollectionRemoveItem - OK - 0xFFFFF800002CAD98 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCollectionGetItem - OK - 0xFFFFF8000029CF60 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCollectionGetFirstItem - OK - 0xFFFFF800002CACF0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCollectionGetLastItem - OK - 0xFFFFF80000306DD4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCommonBufferCreate - OK - 0xFFFFF800002EABE8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCommonBufferGetAlignedVirtualAddress - OK - 0xFFFFF800002C34EC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCommonBufferGetAlignedLogicalAddress - OK - 0xFFFFF800002C34A0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCommonBufferGetLength - OK - 0xFFFFF800002EAE10 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfControlDeviceInitAllocate - OK - 0xFFFFF800002BDAB8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfControlDeviceInitSetShutdownNotification - OK - 0xFFFFF800002F48A0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfControlFinishInitializing - OK - 0xFFFFF800002BD908 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceGetDeviceState - OK - 0xFFFFF800002F9D1C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceSetDeviceState - OK - 0xFFFFF800002FA4AC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWdmDeviceGetWdfDeviceHandle - OK - 0xFFFFF800002C0FB8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceWdmGetDeviceObject - OK - 0xFFFFF800002A5F64 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceWdmGetAttachedDevice - OK - 0xFFFFF800002C20F8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceWdmGetPhysicalDevice - OK - 0xFFFFF8000029A180 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceWdmDispatchPreprocessedIrp - OK - 0xFFFFF800002B2290 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceAddDependentUsageDeviceObject - OK - 0xFFFFF800002F5B80 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceAddRemovalRelationsPhysicalDevice - OK - 0xFFFFF800002F5C30 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceRemoveRemovalRelationsPhysicalDevice - OK - 0xFFFFF800002F6164 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceClearRemovalRelationsDevices - OK - 0xFFFFF800002F5CE0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceGetDriver - OK - 0xFFFFF800002BF970 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceRetrieveDeviceName - OK - 0xFFFFF800002FA1CC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceAssignMofResourceName - OK - 0xFFFFF800002BE7A4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceGetIoTarget - OK - 0xFFFFF800002B0AF8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceGetDevicePnpState - OK - 0xFFFFF800002F9BA8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceGetDevicePowerState - OK - 0xFFFFF800002F9CA0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceGetDevicePowerPolicyState - OK - 0xFFFFF800002F9C24 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceAssignS0IdleSettings - OK - 0xFFFFF800002B2678 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceAssignSxWakeSettings - OK - 0xFFFFF800002BFEC8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceOpenRegistryKey - OK - 0xFFFFF800002A4060 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceSetSpecialFileSupport - OK - 0xFFFFF800002BF338 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceSetCharacteristics - OK - 0xFFFFF800002FA41C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceGetCharacteristics - OK - 0xFFFFF800002F9A60 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceGetAlignmentRequirement - OK - 0xFFFFF800002F99DC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceSetAlignmentRequirement - OK - 0xFFFFF800002FA38C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitFree - OK - 0xFFFFF800002F497C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitSetPnpPowerEventCallbacks - OK - 0xFFFFF800002A2348 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitSetPowerPolicyEventCallbacks - OK - 0xFFFFF800002BFB18 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitSetPowerPolicyOwnership - OK - 0xFFFFF800002BEDC4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitRegisterPnpStateChangeCallback - OK - 0xFFFFF800002F49AC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitRegisterPowerStateChangeCallback - OK - 0xFFFFF800002F4D44 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitRegisterPowerPolicyStateChangeCallback - OK - 0xFFFFF800002F4B78 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitSetIoType - OK - 0xFFFFF800002BB0E8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitSetExclusive - OK - 0xFFFFF800002A203C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitSetPowerNotPageable - OK - 0xFFFFF800002F4FF0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitSetPowerPageable - OK - 0xFFFFF800002BEDF0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitSetPowerInrush - OK - 0xFFFFF800002F4FC8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitSetDeviceType - OK - 0xFFFFF800002A201C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitAssignName - OK - 0xFFFFF800002BD984 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitAssignSDDLString - OK - 0xFFFFF800002BB16C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitSetDeviceClass - OK - 0xFFFFF800002F4F10 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitSetCharacteristics - OK - 0xFFFFF800002A42C0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitSetFileObjectConfig - OK - 0xFFFFF800002BD514 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitSetRequestAttributes - OK - 0xFFFFF800002BDF34 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitAssignWdmIrpPreprocessCallback - OK - 0xFFFFF800002BF0A4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitSetIoInCallerContextCallback - OK - 0xFFFFF800002BDFDC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceCreate - OK - 0xFFFFF800002A0D74 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceSetStaticStopRemove - OK - 0xFFFFF800002FA7A8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceCreateDeviceInterface - OK - 0xFFFFF800002BC068 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceSetDeviceInterfaceState - OK - 0xFFFFF80000306F10 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceRetrieveDeviceInterfaceString - OK - 0xFFFFF800002BFD10 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceCreateSymbolicLink - OK - 0xFFFFF800002BDCA4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceQueryProperty - OK - 0xFFFFF800002BF428 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceAllocAndQueryProperty - OK - 0xFFFFF800002BF9D4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceSetPnpCapabilities - OK - 0xFFFFF800002A4DAC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceSetPowerCapabilities - OK - 0xFFFFF800002A468C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceSetBusInformationForChildren - OK - 0xFFFFF800002BCC50 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceIndicateWakeStatus - OK - 0xFFFFF800002F5F68 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceSetFailed - OK - 0xFFFFF800002FA660 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceStopIdle - OK - 0xFFFFF800002B376C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceResumeIdle - OK - 0xFFFFF800002B383C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceGetFileObject - OK - 0xFFFFF800002F9E40 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceEnqueueRequest - OK - 0xFFFFF80000295590 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceGetDefaultQueue - OK - 0xFFFFF800002F9AE0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceConfigureRequestDispatching - OK - 0xFFFFF800002C287C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaEnablerCreate - OK - 0xFFFFF800002C3868 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaEnablerGetMaximumLength - OK - 0xFFFFF800002EA9BC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaEnablerGetMaximumScatterGatherElements - OK - 0xFFFFF800002EAA38 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaEnablerSetMaximumScatterGatherElements - OK - 0xFFFFF800002EAAB4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionCreate - OK - 0xFFFFF800002E8CD0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionInitialize - OK - 0xFFFFF800002E94D0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionInitializeUsingRequest - OK - 0xFFFFF800002E9768 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionExecute - OK - 0xFFFFF800002E9024 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionRelease - OK - 0xFFFFF800002E9B48 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionDmaCompleted - OK - 0xFFFFF800002E8DF4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionDmaCompletedWithLength - OK - 0xFFFFF800002E8F64 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionDmaCompletedFinal - OK - 0xFFFFF800002E8EA4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionGetBytesTransferred - OK - 0xFFFFF800002E9204 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionSetMaximumLength - OK - 0xFFFFF800002E9F1C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionGetRequest - OK - 0xFFFFF800002E9394 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionGetCurrentDmaTransferLength - OK - 0xFFFFF800002E9280 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionGetDevice - OK - 0xFFFFF800002E92FC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDpcCreate - OK - 0xFFFFF800002F0D34 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDpcEnqueue - OK - 0xFFFFF800002F0F04 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDpcCancel - OK - 0xFFFFF800002F0C00 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDpcGetParentObject - OK - 0xFFFFF800002F0F88 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDpcWdmGetDpc - OK - 0xFFFFF800002F1024 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDriverCreate - OK - 0xFFFFF800002B9E60 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDriverGetRegistryPath - OK - 0xFFFFF800002FAE84 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDriverWdmGetDriverObject - OK - 0xFFFFF800002BF924 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDriverOpenParametersRegistryKey - OK - 0xFFFFF800002C0560 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWdmDriverGetWdfDriverHandle - OK - 0xFFFFF800002FB7A4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDriverRegisterTraceInfo - OK - 0xFFFFF800002CB110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDriverRetrieveVersionString - OK - 0xFFFFF800002FB144 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDriverIsVersionAvailable - OK - 0xFFFFF800002FAF8C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFdoInitWdmGetPhysicalDevice - OK - 0xFFFFF800002BCBA0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFdoInitOpenRegistryKey - OK - 0xFFFFF800002F51D8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFdoInitQueryProperty - OK - 0xFFFFF800002F52BC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFdoInitAllocAndQueryProperty - OK - 0xFFFFF800002C621C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFdoInitSetEventCallbacks - OK - 0xFFFFF800002C13B0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFdoInitSetFilter - OK - 0xFFFFF800002C0C9C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFdoInitSetDefaultChildListConfig - OK - 0xFFFFF800002BCDC0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFdoQueryForInterface - OK - 0xFFFFF800002B725C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFdoGetDefaultChildList - OK - 0xFFFFF8000029CEBC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFdoAddStaticChild - OK - 0xFFFFF800002C1FD0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFdoLockStaticChildListForIteration - OK - 0xFFFFF800002B6D90 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFdoRetrieveNextStaticChild - OK - 0xFFFFF800002B6B70 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFdoUnlockStaticChildListFromIteration - OK - 0xFFFFF800002B6C30 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFileObjectGetFileName - OK - 0xFFFFF800002FAA90 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFileObjectGetFlags - OK - 0xFFFFF800002FABA0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFileObjectGetDevice - OK - 0xFFFFF80000297330 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFileObjectWdmGetFileObject - OK - 0xFFFFF800002CAE8C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfInterruptCreate - OK - 0xFFFFF800002C15D0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfInterruptQueueDpcForIsr - OK - 0xFFFFF8000031DD84 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfInterruptSynchronize - OK - 0xFFFFF80000299F60 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfInterruptAcquireLock - OK - 0xFFFFF80000299C90 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfInterruptReleaseLock - OK - 0xFFFFF80000299DEC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfInterruptEnable - OK - 0xFFFFF8000031DBE8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfInterruptDisable - OK - 0xFFFFF8000031DAE4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfInterruptWdmGetInterrupt - OK - 0xFFFFF8000031E2F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfInterruptGetInfo - OK - 0xFFFFF800002C839C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfInterruptSetPolicy - OK - 0xFFFFF800002C8BA0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfInterruptGetDevice - OK - 0xFFFFF8000031DCF0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueueCreate - OK - 0xFFFFF8000029F70C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueueGetState - OK - 0xFFFFF800002C65B0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueueStart - OK - 0xFFFFF8000031A398 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueueStop - OK - 0xFFFFF8000031A454 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueueStopSynchronously - OK - 0xFFFFF8000031A6D8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueueGetDevice - OK - 0xFFFFF8000028EDE0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueueRetrieveNextRequest - OK - 0xFFFFF800002C1074 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueueRetrieveRequestByFileObject - OK - 0xFFFFF8000031A244 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueueFindRequest - OK - 0xFFFFF80000319CBC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueueRetrieveFoundRequest - OK - 0xFFFFF8000031A0F8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueueDrainSynchronously - OK - 0xFFFFF80000319BAC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueueDrain - OK - 0xFFFFF80000319AF8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueuePurgeSynchronously - OK - 0xFFFFF80000319F4C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueuePurge - OK - 0xFFFFF80000319E90 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueueReadyNotify - OK - 0xFFFFF8000031A05C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetCreate - OK - 0xFFFFF800002A6190 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetOpen - OK - 0xFFFFF800002A73D0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetCloseForQueryRemove - OK - 0xFFFFF800003099B0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetClose - OK - 0xFFFFF80000309860 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetStart - OK - 0xFFFFF80000309FD0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetStop - OK - 0xFFFFF8000030A04C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetGetState - OK - 0xFFFFF80000309B5C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetGetDevice - OK - 0xFFFFF800002B2444 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetQueryTargetProperty - OK - 0xFFFFF80000309D24 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetAllocAndQueryTargetProperty - OK - 0xFFFFF80000309650 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetQueryForInterface - OK - 0xFFFFF8000030A19C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetWdmGetTargetDeviceObject - OK - 0xFFFFF800002C0FE8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetWdmGetTargetPhysicalDevice - OK - 0xFFFFF8000030A524 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetWdmGetTargetFileObject - OK - 0xFFFFF8000030A428 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetWdmGetTargetFileHandle - OK - 0xFFFFF8000030A32C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetSendReadSynchronously - OK - 0xFFFFF80000309F50 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetFormatRequestForRead - OK - 0xFFFFF80000309AF4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetSendWriteSynchronously - OK - 0xFFFFF80000309F90 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetFormatRequestForWrite - OK - 0xFFFFF80000309B28 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetSendIoctlSynchronously - OK - 0xFFFFF800002B1664 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetFormatRequestForIoctl - OK - 0xFFFFF800002B802C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetSendInternalIoctlSynchronously - OK - 0xFFFFF80000309F00 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetFormatRequestForInternalIoctl - OK - 0xFFFFF800002C0E60 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetSendInternalIoctlOthersSynchronously - OK - 0xFFFFF800002C21F8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetFormatRequestForInternalIoctlOthers - OK - 0xFFFFF80000294AD0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfMemoryCreate - OK - 0xFFFFF800002B7070 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfMemoryCreatePreallocated - OK - 0xFFFFF800002C1E30 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfMemoryGetBuffer - OK - 0xFFFFF800002BEEF0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfMemoryAssignBuffer - OK - 0xFFFFF800002FB7F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfMemoryCopyToBuffer - OK - 0xFFFFF800002FA970 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfMemoryCopyFromBuffer - OK - 0xFFFFF800002FA850 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfLookasideListCreate - OK - 0xFFFFF800002FBA7C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfMemoryCreateFromLookaside - OK - 0xFFFFF800002FBE64 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceMiniportCreate - OK - 0xFFFFF800002FB4C0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDriverMiniportUnload - OK - 0xFFFFF800002FB724 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfObjectGetTypedContextWorker - OK - 0xFFFFF8000028D040 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfObjectAllocateContext - OK - 0xFFFFF800002C630C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfObjectContextGetObject - OK - 0xFFFFF8000029C050 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfObjectReferenceActual - OK - 0xFFFFF800002A5FF8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfObjectDereferenceActual - OK - 0xFFFFF800002A8814 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfObjectCreate - OK - 0xFFFFF800002A57F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfObjectDelete - OK - 0xFFFFF80000298774 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfObjectQuery - OK - 0xFFFFF800003010B0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoInitAllocate - OK - 0xFFFFF800002C1D5C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoInitSetEventCallbacks - OK - 0xFFFFF800002A4B78 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoInitAssignDeviceID - OK - 0xFFFFF800002A4990 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoInitAssignInstanceID - OK - 0xFFFFF800002A4A84 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoInitAddHardwareID - OK - 0xFFFFF800002A4C18 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoInitAddCompatibleID - OK - 0xFFFFF800002A59B0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoInitAddDeviceText - OK - 0xFFFFF800002C07C4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoInitSetDefaultLocale - OK - 0xFFFFF800002A5550 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoInitAssignRawDevice - OK - 0xFFFFF800002F57DC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoMarkMissing - OK - 0xFFFFF800002EFFC8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoRequestEject - OK - 0xFFFFF800002F0084 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoGetParent - OK - 0xFFFFF800002A6B38 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoRetrieveIdentificationDescription - OK - 0xFFFFF80000297AF0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoRetrieveAddressDescription - OK - 0xFFFFF800002F0184 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoUpdateAddressDescription - OK - 0xFFFFF800002F0208 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoAddEjectionRelationsPhysicalDevice - OK - 0xFFFFF800002EFF2C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoRemoveEjectionRelationsPhysicalDevice - OK - 0xFFFFF800002F0018 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoClearEjectionRelationsDevices - OK - 0xFFFFF800002EFF88 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceAddQueryInterface - OK - 0xFFFFF800002A3874 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryOpenKey - OK - 0xFFFFF800002BF714 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryCreateKey - OK - 0xFFFFF80000305488 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryClose - OK - 0xFFFFF800002A3B90 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryWdmGetHandle - OK - 0xFFFFF800002C3820 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryRemoveKey - OK - 0xFFFFF80000305BAC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryRemoveValue - OK - 0xFFFFF80000305CCC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryQueryValue - OK - 0xFFFFF800002C0CD4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryQueryMemory - OK - 0xFFFFF80000305820 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryQueryMultiString - OK - 0xFFFFF800002A79E0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryQueryUnicodeString - OK - 0xFFFFF800002C7E68 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryQueryString - OK - 0xFFFFF800002C09B0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryQueryULong - OK - 0xFFFFF800002BD0A8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryAssignValue - OK - 0xFFFFF800002A78F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryAssignMemory - OK - 0xFFFFF800003045C0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryAssignMultiString - OK - 0xFFFFF800003048E8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryAssignUnicodeString - OK - 0xFFFFF80000305140 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryAssignString - OK - 0xFFFFF80000304C70 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRegistryAssignULong - OK - 0xFFFFF80000304F08 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestCreate - OK - 0xFFFFF80000299778 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestCreateFromIrp - OK - 0xFFFFF800002C36F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestReuse - OK - 0xFFFFF800002948A0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestChangeTarget - OK - 0xFFFFF800002F75B0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestFormatRequestUsingCurrentType - OK - 0xFFFFF800002971D0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestWdmFormatUsingStackLocation - OK - 0xFFFFF800002B3158 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestSend - OK - 0xFFFFF80000293F00 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestGetStatus - OK - 0xFFFFF800002940D0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestMarkCancelable - OK - 0xFFFFF800002A6A90 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestUnmarkCancelable - OK - 0xFFFFF800002A7ED8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestIsCanceled - OK - 0xFFFFF800002982F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestCancelSentRequest - OK - 0xFFFFF800002B498C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestIsFrom32BitProcess - OK - 0xFFFFF800002983D4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestSetCompletionRoutine - OK - 0xFFFFF80000298370 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestGetCompletionParams - OK - 0xFFFFF800002F79D0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestAllocateTimer - OK - 0xFFFFF800002F7534 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestComplete - OK - 0xFFFFF8000029A2D8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestCompleteWithPriorityBoost - OK - 0xFFFFF800002F76B0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestCompleteWithInformation - OK - 0xFFFFF80000292F70 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestGetParameters - OK - 0xFFFFF80000294380 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestRetrieveInputMemory - OK - 0xFFFFF800002F81B8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestRetrieveOutputMemory - OK - 0xFFFFF800002F83E4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestRetrieveInputBuffer - OK - 0xFFFFF800002981F4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestRetrieveOutputBuffer - OK - 0xFFFFF800002974A0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestRetrieveInputWdmMdl - OK - 0xFFFFF800002F82E0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestRetrieveOutputWdmMdl - OK - 0xFFFFF800002F850C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestRetrieveUnsafeUserInputBuffer - OK - 0xFFFFF800002F861C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestRetrieveUnsafeUserOutputBuffer - OK - 0xFFFFF800002F8984 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestSetInformation - OK - 0xFFFFF8000029A390 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestGetInformation - OK - 0xFFFFF800002972A0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestGetFileObject - OK - 0xFFFFF80000296250 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestProbeAndLockUserBufferForRead - OK - 0xFFFFF800002F7C38 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestProbeAndLockUserBufferForWrite - OK - 0xFFFFF800002F7E68 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestGetRequestorMode - OK - 0xFFFFF80000294620 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestForwardToIoQueue - OK - 0xFFFFF800002C66A0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestGetIoQueue - OK - 0xFFFFF800002B3BAC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestRequeue - OK - 0xFFFFF800002F80A0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestStopAcknowledge - OK - 0xFFFFF800002B5B70 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestWdmGetIrp - OK - 0xFFFFF80000294150 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoResourceRequirementsListSetSlotNumber - OK - 0xFFFFF80000306BC4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoResourceRequirementsListSetInterfaceType - OK - 0xFFFFF80000306B28 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoResourceRequirementsListAppendIoResList - OK - 0xFFFFF80000306818 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoResourceRequirementsListInsertIoResList - OK - 0xFFFFF80000306824 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoResourceRequirementsListGetCount - OK - 0xFFFFF800002C2EA8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoResourceRequirementsListGetIoResList - OK - 0xFFFFF800002C2B48 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoResourceRequirementsListRemove - OK - 0xFFFFF80000306830 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoResourceRequirementsListRemoveByIoResList - OK - 0xFFFFF80000306938 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoResourceListCreate - OK - 0xFFFFF800003063F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoResourceListAppendDescriptor - OK - 0xFFFFF800003063E4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoResourceListInsertDescriptor - OK - 0xFFFFF800002C84E0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoResourceListUpdateDescriptor - OK - 0xFFFFF800002C81F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoResourceListGetCount - OK - 0xFFFFF800002C2DF0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoResourceListGetDescriptor - OK - 0xFFFFF800002C2BF4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoResourceListRemove - OK - 0xFFFFF80000306534 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoResourceListRemoveByDescriptor - OK - 0xFFFFF8000030664C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCmResourceListAppendDescriptor - OK - 0xFFFFF80000306108 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCmResourceListInsertDescriptor - OK - 0xFFFFF80000306114 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCmResourceListGetCount - OK - 0xFFFFF800002C2D70 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCmResourceListGetDescriptor - OK - 0xFFFFF800002C2CC0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCmResourceListRemove - OK - 0xFFFFF80000306120 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCmResourceListRemoveByDescriptor - OK - 0xFFFFF80000306228 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfStringCreate - OK - 0xFFFFF800002BFB80 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfStringGetUnicodeString - OK - 0xFFFFF800002BD1A4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfObjectAcquireLock - OK - 0xFFFFF80000300F94 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfObjectReleaseLock - OK - 0xFFFFF80000301124 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWaitLockCreate - OK - 0xFFFFF800002BCEC8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWaitLockAcquire - OK - 0xFFFFF80000297060 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWaitLockRelease - OK - 0xFFFFF80000297150 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfSpinLockCreate - OK - 0xFFFFF800002BF520 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfSpinLockAcquire - OK - 0xFFFFF80000299A20 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfSpinLockRelease - OK - 0xFFFFF80000299AAC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfTimerCreate - OK - 0xFFFFF800002BE9D0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfTimerStart - OK - 0xFFFFF800002B84B4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfTimerStop - OK - 0xFFFFF800002B675C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfTimerGetParentObject - OK - 0xFFFFF80000294560 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceCreate - OK - 0xFFFFF8000030CDC4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceRetrieveInformation - OK - 0xFFFFF8000030E550 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceGetDeviceDescriptor - OK - 0xFFFFF8000030DBAC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceRetrieveConfigDescriptor - OK - 0xFFFFF8000030E354 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceQueryString - OK - 0xFFFFF8000030DF6C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceAllocAndQueryString - OK - 0xFFFFF8000030CB70 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceFormatRequestForString - OK - 0xFFFFF8000030D5F8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceGetNumInterfaces - OK - 0xFFFFF8000030DDE8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceSelectConfig - OK - 0xFFFFF8000030E650 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceWdmGetConfigurationHandle - OK - 0xFFFFF8000030F29C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceRetrieveCurrentFrameNumber - OK - 0xFFFFF8000030E490 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceSendControlTransferSynchronously - OK - 0xFFFFF8000030EB6C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceFormatRequestForControlTransfer - OK - 0xFFFFF8000030D284 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceIsConnectedSynchronous - OK - 0xFFFFF8000030DE64 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceResetPortSynchronously - OK - 0xFFFFF8000030E24C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceCyclePortSynchronously - OK - 0xFFFFF8000030D17C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceFormatRequestForCyclePort - OK - 0xFFFFF8000030D4F8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceSendUrbSynchronously - OK - 0xFFFFF8000030EF1C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceFormatRequestForUrb - OK - 0xFFFFF8000030D8C0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetPipeGetInformation - OK - 0xFFFFF800003107E8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetPipeIsInEndpoint - OK - 0xFFFFF80000310910 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetPipeIsOutEndpoint - OK - 0xFFFFF80000310990 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetPipeGetType - OK - 0xFFFFF80000310890 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetPipeSetNoMaximumPacketSizeCheck - OK - 0xFFFFF80000311148 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetPipeWriteSynchronously - OK - 0xFFFFF80000311280 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetPipeFormatRequestForWrite - OK - 0xFFFFF80000310758 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetPipeReadSynchronously - OK - 0xFFFFF80000310A14 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetPipeFormatRequestForRead - OK - 0xFFFFF80000310268 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetPipeConfigContinuousReader - OK - 0xFFFFF8000030FE68 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetPipeAbortSynchronously - OK - 0xFFFFF8000030FB50 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetPipeFormatRequestForAbort - OK - 0xFFFFF800003100F8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetPipeResetSynchronously - OK - 0xFFFFF80000310AA8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetPipeFormatRequestForReset - OK - 0xFFFFF800003102F8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetPipeSendUrbSynchronously - OK - 0xFFFFF80000310DC8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetPipeFormatRequestForUrb - OK - 0xFFFFF80000310460 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbInterfaceGetInterfaceNumber - OK - 0xFFFFF8000030F6D0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbInterfaceGetNumEndpoints - OK - 0xFFFFF8000030F7C8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbInterfaceGetDescriptor - OK - 0xFFFFF8000030F4B8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbInterfaceSelectSetting - OK - 0xFFFFF8000030F8F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbInterfaceGetEndpointInformation - OK - 0xFFFFF8000030F594 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceGetInterface - OK - 0xFFFFF8000030DCE8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbInterfaceGetConfiguredSettingIndex - OK - 0xFFFFF8000030F43C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbInterfaceGetNumConfiguredPipes - OK - 0xFFFFF8000030F74C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbInterfaceGetConfiguredPipe - OK - 0xFFFFF8000030F318 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetPipeWdmGetPipeHandle - OK - 0xFFFFF80000311204 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfVerifierDbgBreakPoint - OK - 0xFFFFF800002FACCC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfVerifierKeBugCheck - OK - 0xFFFFF800002FACE4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWmiProviderCreate - OK - 0xFFFFF800002F2C8C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWmiProviderGetDevice - OK - 0xFFFFF800002F2E20 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWmiProviderIsEnabled - OK - 0xFFFFF800002F2F34 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWmiProviderGetTracingHandle - OK - 0xFFFFF800002F2EB8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWmiInstanceCreate - OK - 0xFFFFF800002BE0E0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWmiInstanceRegister - OK - 0xFFFFF800002F2C00 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWmiInstanceDeregister - OK - 0xFFFFF800002F29BC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWmiInstanceGetDevice - OK - 0xFFFFF800002B0740 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWmiInstanceGetProvider - OK - 0xFFFFF800002F2B6C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWmiInstanceFireEvent - OK - 0xFFFFF800002F2A40 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWorkItemCreate - OK - 0xFFFFF800002B7500 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWorkItemEnqueue - OK - 0xFFFFF80000294270 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWorkItemGetParentObject - OK - 0xFFFFF800002941F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfWorkItemFlush - OK - 0xFFFFF800002B5C98 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCommonBufferCreateWithConfig - OK - 0xFFFFF800002C3FB0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaEnablerGetFragmentLength - OK - 0xFFFFF800002EA898 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaEnablerWdmGetDmaAdapter - OK - 0xFFFFF800002C37B0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbInterfaceGetNumSettings - OK - 0xFFFFF8000030F874 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceRemoveDependentUsageDeviceObject - OK - 0xFFFFF800002F60A4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceGetSystemPowerAction - OK - 0xFFFFF800002B3528 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfInterruptSetExtendedPolicy - OK - 0xFFFFF8000031DFC0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueueAssignForwardProgressPolicy - OK - 0xFFFFF800002C2570 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoInitAssignContainerID - OK - 0xFFFFF800002F5588 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfPdoInitAllowForwardingRequestToParent - OK - 0xFFFFF800002C1D24 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestMarkCancelableEx - OK - 0xFFFFF800002B3B04 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestIsReserved - OK - 0xFFFFF800002F7BBC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfRequestForwardToParentDeviceIoQueue - OK - 0xFFFFF800002F77C8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCxDeviceInitAllocate - OK - 0xFFFFF800002F8C70 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCxDeviceInitAssignWdmIrpPreprocessCallback - OK - 0xFFFFF800002F8D7C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCxDeviceInitSetIoInCallerContextCallback - OK - 0xFFFFF800002F921C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCxDeviceInitSetRequestAttributes - OK - 0xFFFFF800002F92D4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCxDeviceInitSetFileObjectConfig - OK - 0xFFFFF800002F8FD0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceWdmDispatchIrp - OK - 0xFFFFF800002F63F4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceWdmDispatchIrpToIoQueue - OK - 0xFFFFF800002B3E08 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitSetRemoveLockOptions - OK - 0xFFFFF800002C215C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceConfigureWdmIrpDispatchCallback - OK - 0xFFFFF800002F5DB8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaEnablerConfigureSystemProfile - OK - 0xFFFFF800002EA6C4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionInitializeUsingOffset - OK - 0xFFFFF800002E974C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionGetTransferInfo - OK - 0xFFFFF800002E9434 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionSetChannelConfigurationCallback - OK - 0xFFFFF800002E9BC8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionSetTransferCompleteCallback - OK - 0xFFFFF800002E9FB4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionSetImmediateExecution - OK - 0xFFFFF800002E9DFC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionAllocateResources - OK - 0xFFFFF800002E8998 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionSetDeviceAddressOffset - OK - 0xFFFFF800002E9CF0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionFreeResources - OK - 0xFFFFF800002E90B0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionCancel - OK - 0xFFFFF800002E8BC8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionWdmGetTransferContext - OK - 0xFFFFF800002EA1EC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfInterruptQueueWorkItemForIsr - OK - 0xFFFFF8000031DE10 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfInterruptTryToAcquireLock - OK - 0xFFFFF8000031E150 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueueStopAndPurge - OK - 0xFFFFF8000031A50C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoQueueStopAndPurgeSynchronously - OK - 0xFFFFF8000031A5C4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfIoTargetPurge - OK - 0xFFFFF80000309BD8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceCreateWithParameters - OK - 0xFFFFF8000030D070 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceQueryUsbCapability - OK - 0xFFFFF8000030E180 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceCreateUrb - OK - 0xFFFFF8000030CF70 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfUsbTargetDeviceCreateIsochUrb - OK - 0xFFFFF8000030CE70 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceWdmAssignPowerFrameworkSettings - OK - 0xFFFFF800002F6224 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDmaTransactionStopSystemTransfer - OK - 0xFFFFF800002EA0DC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfCxVerifierKeBugCheck - OK - 0xFFFFF800002FAC30 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfInterruptReportActive - OK - 0xFFFFF8000031DEC0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfInterruptReportInactive - OK - 0xFFFFF8000031DF40 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitSetReleaseHardwareOrderOnFailure - OK - 0xFFFFF800002BFE84 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfGetTriageInfo - OK - 0xFFFFF800002BFEC0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceInitSetIoTypeEx - OK - 0xFFFFF800002F4F5C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceQueryPropertyEx - OK - 0xFFFFF800002F9F28 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceAllocAndQueryPropertyEx - OK - 0xFFFFF800002F9550 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfDeviceAssignProperty - OK - 0xFFFFF800002F97E0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFdoInitQueryPropertyEx - OK - 0xFFFFF800002F53F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WdfFdoInitAllocAndQueryPropertyEx - OK - 0xFFFFF800002F5014 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfChildListCreate - OK - 0xFFFFF8000034D090 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfChildListGetDevice - OK - 0xFFFFF8000034D0A8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfChildListRetrievePdo - OK - 0xFFFFF8000034D0C8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfChildListRetrieveAddressDescription - OK - 0xFFFFF8000034D0B8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfChildListBeginScan - OK - 0xFFFFF8000034D088 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfChildListEndScan - OK - 0xFFFFF8000034D0A0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfChildListBeginIteration - OK - 0xFFFFF8000034D080 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfChildListRetrieveNextDevice - OK - 0xFFFFF8000034D0C0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfChildListEndIteration - OK - 0xFFFFF8000034D098 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfChildListAddOrUpdateChildDescriptionAsPresent - OK - 0xFFFFF8000034D078 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfChildListUpdateChildDescriptionAsMissing - OK - 0xFFFFF8000034D0D8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfChildListUpdateAllChildDescriptionsAsPresent - OK - 0xFFFFF8000034D0D0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfChildListRequestChildEject - OK - 0xFFFFF8000034D0B0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCollectionCreate - OK - 0xFFFFF8000034D118 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCollectionGetCount - OK - 0xFFFFF8000034D120 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCollectionAdd - OK - 0xFFFFF8000034D110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCollectionRemove - OK - 0xFFFFF8000034D140 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCollectionRemoveItem - OK - 0xFFFFF8000034D148 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCollectionGetItem - OK - 0xFFFFF8000034D130 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCollectionGetFirstItem - OK - 0xFFFFF8000034D128 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCollectionGetLastItem - OK - 0xFFFFF8000034D138 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCommonBufferCreate - OK - 0xFFFFF8000034D150 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCommonBufferGetAlignedVirtualAddress - OK - 0xFFFFF8000034D168 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCommonBufferGetAlignedLogicalAddress - OK - 0xFFFFF8000034D160 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCommonBufferGetLength - OK - 0xFFFFF8000034D170 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfControlDeviceInitAllocate - OK - 0xFFFFF8000034D178 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfControlDeviceInitSetShutdownNotification - OK - 0xFFFFF8000034D180 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfControlFinishInitializing - OK - 0xFFFFF8000034D188 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceGetDeviceState - OK - 0xFFFFF8000034D2D8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceSetDeviceState - OK - 0xFFFFF8000034D430 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWdmDeviceGetWdfDeviceHandle - OK - 0xFFFFF8000034E04C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceWdmGetDeviceObject - OK - 0xFFFFF8000034D490 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceWdmGetAttachedDevice - OK - 0xFFFFF8000034D488 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceWdmGetPhysicalDevice - OK - 0xFFFFF8000034D498 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceWdmDispatchPreprocessedIrp - OK - 0xFFFFF8000034D480 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceAddDependentUsageDeviceObject - OK - 0xFFFFF8000034D1C0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceAddRemovalRelationsPhysicalDevice - OK - 0xFFFFF8000034D1D0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceRemoveRemovalRelationsPhysicalDevice - OK - 0xFFFFF8000034D3F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceClearRemovalRelationsDevices - OK - 0xFFFFF8000034D208 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceGetDriver - OK - 0xFFFFF8000034D2E0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceRetrieveDeviceName - OK - 0xFFFFF8000034D408 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceAssignMofResourceName - OK - 0xFFFFF8000034D1E8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceGetIoTarget - OK - 0xFFFFF8000034D2F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceGetDevicePnpState - OK - 0xFFFFF8000034D2C0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceGetDevicePowerState - OK - 0xFFFFF8000034D2D0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceGetDevicePowerPolicyState - OK - 0xFFFFF8000034D2C8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceAssignS0IdleSettings - OK - 0xFFFFF8000034D1F8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceAssignSxWakeSettings - OK - 0xFFFFF8000034D200 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceOpenRegistryKey - OK - 0xFFFFF8000034D3D0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceSetSpecialFileSupport - OK - 0xFFFFF8000034D450 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceSetCharacteristics - OK - 0xFFFFF8000034D420 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceGetCharacteristics - OK - 0xFFFFF8000034D2B0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceGetAlignmentRequirement - OK - 0xFFFFF8000034D2A8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceSetAlignmentRequirement - OK - 0xFFFFF8000034D410 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitFree - OK - 0xFFFFF8000034D320 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitSetPnpPowerEventCallbacks - OK - 0xFFFFF8000034D380 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitSetPowerPolicyEventCallbacks - OK - 0xFFFFF8000034D3A0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitSetPowerPolicyOwnership - OK - 0xFFFFF8000034D3A8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitRegisterPnpStateChangeCallback - OK - 0xFFFFF8000034D328 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitRegisterPowerStateChangeCallback - OK - 0xFFFFF8000034D338 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitRegisterPowerPolicyStateChangeCallback - OK - 0xFFFFF8000034D330 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitSetIoType - OK - 0xFFFFF8000034D370 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitSetExclusive - OK - 0xFFFFF8000034D358 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitSetPowerNotPageable - OK - 0xFFFFF8000034D390 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitSetPowerPageable - OK - 0xFFFFF8000034D398 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitSetPowerInrush - OK - 0xFFFFF8000034D388 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitSetDeviceType - OK - 0xFFFFF8000034D350 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitAssignName - OK - 0xFFFFF8000034D308 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitAssignSDDLString - OK - 0xFFFFF8000034D310 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitSetDeviceClass - OK - 0xFFFFF8000034D348 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitSetCharacteristics - OK - 0xFFFFF8000034D340 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitSetFileObjectConfig - OK - 0xFFFFF8000034D360 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitSetRequestAttributes - OK - 0xFFFFF8000034D3C0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitAssignWdmIrpPreprocessCallback - OK - 0xFFFFF8000034D318 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitSetIoInCallerContextCallback - OK - 0xFFFFF8000034D368 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceCreate - OK - 0xFFFFF8000034D220 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceSetStaticStopRemove - OK - 0xFFFFF8000034D458 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceCreateDeviceInterface - OK - 0xFFFFF8000034D290 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceSetDeviceInterfaceState - OK - 0xFFFFF8000034D428 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceRetrieveDeviceInterfaceString - OK - 0xFFFFF8000034D400 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceCreateSymbolicLink - OK - 0xFFFFF8000034D298 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceQueryProperty - OK - 0xFFFFF8000034D3D8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceAllocAndQueryProperty - OK - 0xFFFFF8000034D1D8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceSetPnpCapabilities - OK - 0xFFFFF8000034D440 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceSetPowerCapabilities - OK - 0xFFFFF8000034D448 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceSetBusInformationForChildren - OK - 0xFFFFF8000034D418 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceIndicateWakeStatus - OK - 0xFFFFF8000034D300 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceSetFailed - OK - 0xFFFFF8000034D438 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceStopIdle - OK - 0xFFFFF8000034D460 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceResumeIdle - OK - 0xFFFFF8000034D3F8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceGetFileObject - OK - 0xFFFFF8000034D2E8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceEnqueueRequest - OK - 0xFFFFF8000034D2A0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceGetDefaultQueue - OK - 0xFFFFF8000034D2B8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceConfigureRequestDispatching - OK - 0xFFFFF8000034D210 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaEnablerCreate - OK - 0xFFFFF8000034D4A8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaEnablerGetMaximumLength - OK - 0xFFFFF8000034D4B8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaEnablerGetMaximumScatterGatherElements - OK - 0xFFFFF8000034D4C0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaEnablerSetMaximumScatterGatherElements - OK - 0xFFFFF8000034D4C8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionCreate - OK - 0xFFFFF8000034D4E8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionInitialize - OK - 0xFFFFF8000034D540 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionInitializeUsingRequest - OK - 0xFFFFF8000034D550 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionExecute - OK - 0xFFFFF8000034D508 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionRelease - OK - 0xFFFFF8000034D558 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionDmaCompleted - OK - 0xFFFFF8000034D4F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionDmaCompletedWithLength - OK - 0xFFFFF8000034D500 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionDmaCompletedFinal - OK - 0xFFFFF8000034D4F8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionGetBytesTransferred - OK - 0xFFFFF8000034D518 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionSetMaximumLength - OK - 0xFFFFF8000034D578 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionGetRequest - OK - 0xFFFFF8000034D530 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionGetCurrentDmaTransferLength - OK - 0xFFFFF8000034D520 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionGetDevice - OK - 0xFFFFF8000034D528 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDpcCreate - OK - 0xFFFFF8000034D5A0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDpcEnqueue - OK - 0xFFFFF8000034D5A8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDpcCancel - OK - 0xFFFFF8000034D598 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDpcGetParentObject - OK - 0xFFFFF8000034D5B0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDpcWdmGetDpc - OK - 0xFFFFF8000034D5B8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDriverCreate - OK - 0xFFFFF8000034D5C0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDriverGetRegistryPath - OK - 0xFFFFF8000034D5C8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDriverWdmGetDriverObject - OK - 0xFFFFF8000034D5F8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDriverOpenParametersRegistryKey - OK - 0xFFFFF8000034D5E0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWdmDriverGetWdfDriverHandle - OK - 0xFFFFF8000034E054 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDriverRegisterTraceInfo - OK - 0xFFFFF8000034D5E8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDriverRetrieveVersionString - OK - 0xFFFFF8000034D5F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDriverIsVersionAvailable - OK - 0xFFFFF8000034D5D0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFdoInitWdmGetPhysicalDevice - OK - 0xFFFFF8000034D650 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFdoInitOpenRegistryKey - OK - 0xFFFFF8000034D620 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFdoInitQueryProperty - OK - 0xFFFFF8000034D628 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFdoInitAllocAndQueryProperty - OK - 0xFFFFF8000034D610 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFdoInitSetEventCallbacks - OK - 0xFFFFF8000034D640 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFdoInitSetFilter - OK - 0xFFFFF8000034D648 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFdoInitSetDefaultChildListConfig - OK - 0xFFFFF8000034D638 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFdoQueryForInterface - OK - 0xFFFFF8000034D660 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFdoGetDefaultChildList - OK - 0xFFFFF8000034D608 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFdoAddStaticChild - OK - 0xFFFFF8000034D600 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFdoLockStaticChildListForIteration - OK - 0xFFFFF8000034D658 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFdoRetrieveNextStaticChild - OK - 0xFFFFF8000034D67C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFdoUnlockStaticChildListFromIteration - OK - 0xFFFFF8000034D684 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFileObjectGetFileName - OK - 0xFFFFF8000034D694 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFileObjectGetFlags - OK - 0xFFFFF8000034D69C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFileObjectGetDevice - OK - 0xFFFFF8000034D68C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFileObjectWdmGetFileObject - OK - 0xFFFFF8000034D6A4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfInterruptCreate - OK - 0xFFFFF8000034D6BC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfInterruptQueueDpcForIsr - OK - 0xFFFFF8000034D6E4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfInterruptSynchronize - OK - 0xFFFFF8000034D71C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfInterruptAcquireLock - OK - 0xFFFFF8000034D6B4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfInterruptReleaseLock - OK - 0xFFFFF8000034D6F4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfInterruptEnable - OK - 0xFFFFF8000034D6CC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfInterruptDisable - OK - 0xFFFFF8000034D6C4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfInterruptWdmGetInterrupt - OK - 0xFFFFF8000034D72C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfInterruptGetInfo - OK - 0xFFFFF8000034D6DC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfInterruptSetPolicy - OK - 0xFFFFF8000034D714 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfInterruptGetDevice - OK - 0xFFFFF8000034D6D4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueueCreate - OK - 0xFFFFF8000034D73C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueueGetState - OK - 0xFFFFF8000034D7E8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueueStart - OK - 0xFFFFF8000034D820 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueueStop - OK - 0xFFFFF8000034D828 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueueStopSynchronously - OK - 0xFFFFF8000034D840 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueueGetDevice - OK - 0xFFFFF8000034D7E0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueueRetrieveNextRequest - OK - 0xFFFFF8000034D810 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueueRetrieveRequestByFileObject - OK - 0xFFFFF8000034D818 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueueFindRequest - OK - 0xFFFFF8000034D7D8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueueRetrieveFoundRequest - OK - 0xFFFFF8000034D808 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueueDrainSynchronously - OK - 0xFFFFF8000034D7D0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueueDrain - OK - 0xFFFFF8000034D7C8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueuePurgeSynchronously - OK - 0xFFFFF8000034D7F8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueuePurge - OK - 0xFFFFF8000034D7F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueueReadyNotify - OK - 0xFFFFF8000034D800 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetCreate - OK - 0xFFFFF8000034D8E0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetOpen - OK - 0xFFFFF8000034D9DC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetCloseForQueryRemove - OK - 0xFFFFF8000034D8D8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetClose - OK - 0xFFFFF8000034D8D0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetStart - OK - 0xFFFFF8000034DAE8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetStop - OK - 0xFFFFF8000034DAF0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetGetState - OK - 0xFFFFF8000034D9D4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetGetDevice - OK - 0xFFFFF8000034D9CC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetQueryTargetProperty - OK - 0xFFFFF8000034DA08 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetAllocAndQueryTargetProperty - OK - 0xFFFFF8000034D8C8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetQueryForInterface - OK - 0xFFFFF8000034D9EC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetWdmGetTargetDeviceObject - OK - 0xFFFFF8000034DAF8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetWdmGetTargetPhysicalDevice - OK - 0xFFFFF8000034DB10 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetWdmGetTargetFileObject - OK - 0xFFFFF8000034DB08 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetWdmGetTargetFileHandle - OK - 0xFFFFF8000034DB00 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetSendReadSynchronously - OK - 0xFFFFF8000034DAD8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetFormatRequestForRead - OK - 0xFFFFF8000034D9BC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetSendWriteSynchronously - OK - 0xFFFFF8000034DAE0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetFormatRequestForWrite - OK - 0xFFFFF8000034D9C4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetSendIoctlSynchronously - OK - 0xFFFFF8000034DA9C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetFormatRequestForIoctl - OK - 0xFFFFF8000034D980 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetSendInternalIoctlSynchronously - OK - 0xFFFFF8000034DA60 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetFormatRequestForInternalIoctl - OK - 0xFFFFF8000034D8E8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetSendInternalIoctlOthersSynchronously - OK - 0xFFFFF8000034DA10 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetFormatRequestForInternalIoctlOthers - OK - 0xFFFFF8000034D924 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfMemoryCreate - OK - 0xFFFFF8000034DB38 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfMemoryCreatePreallocated - OK - 0xFFFFF8000034DB48 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfMemoryGetBuffer - OK - 0xFFFFF8000034DB50 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfMemoryAssignBuffer - OK - 0xFFFFF8000034DB20 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfMemoryCopyToBuffer - OK - 0xFFFFF8000034DB30 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfMemoryCopyFromBuffer - OK - 0xFFFFF8000034DB28 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfLookasideListCreate - OK - 0xFFFFF8000034DB18 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfMemoryCreateFromLookaside - OK - 0xFFFFF8000034DB40 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceMiniportCreate - OK - 0xFFFFF8000034D3C8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDriverMiniportUnload - OK - 0xFFFFF8000034D5D8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfObjectGetTypedContextWorker - OK - 0xFFFFF8000034DB88 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfObjectAllocateContext - OK - 0xFFFFF8000034DB60 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfObjectContextGetObject - OK - 0xFFFFF8000034DB68 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfObjectReferenceActual - OK - 0xFFFFF8000034DB98 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfObjectDereferenceActual - OK - 0xFFFFF8000034DB80 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfObjectCreate - OK - 0xFFFFF8000034DB70 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfObjectDelete - OK - 0xFFFFF8000034DB78 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfObjectQuery - OK - 0xFFFFF8000034DB90 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoInitAllocate - OK - 0xFFFFF8000034DBD8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoInitSetEventCallbacks - OK - 0xFFFFF8000034DC10 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoInitAssignDeviceID - OK - 0xFFFFF8000034DBF0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoInitAssignInstanceID - OK - 0xFFFFF8000034DBF8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoInitAddHardwareID - OK - 0xFFFFF8000034DBD0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoInitAddCompatibleID - OK - 0xFFFFF8000034DBC0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoInitAddDeviceText - OK - 0xFFFFF8000034DBC8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoInitSetDefaultLocale - OK - 0xFFFFF8000034DC08 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoInitAssignRawDevice - OK - 0xFFFFF8000034DC00 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoMarkMissing - OK - 0xFFFFF8000034DC18 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoRequestEject - OK - 0xFFFFF8000034DC28 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoGetParent - OK - 0xFFFFF8000034DBB8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoRetrieveIdentificationDescription - OK - 0xFFFFF8000034DC38 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoRetrieveAddressDescription - OK - 0xFFFFF8000034DC30 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoUpdateAddressDescription - OK - 0xFFFFF8000034DC40 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoAddEjectionRelationsPhysicalDevice - OK - 0xFFFFF8000034DBA8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoRemoveEjectionRelationsPhysicalDevice - OK - 0xFFFFF8000034DC20 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoClearEjectionRelationsDevices - OK - 0xFFFFF8000034DBB0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceAddQueryInterface - OK - 0xFFFFF8000034D1C8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryOpenKey - OK - 0xFFFFF8000034DC88 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryCreateKey - OK - 0xFFFFF8000034DC80 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryClose - OK - 0xFFFFF8000034DC78 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryWdmGetHandle - OK - 0xFFFFF8000034DCD0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryRemoveKey - OK - 0xFFFFF8000034DCC0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryRemoveValue - OK - 0xFFFFF8000034DCC8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryQueryValue - OK - 0xFFFFF8000034DCB8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryQueryMemory - OK - 0xFFFFF8000034DC90 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryQueryMultiString - OK - 0xFFFFF8000034DC98 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryQueryUnicodeString - OK - 0xFFFFF8000034DCB0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryQueryString - OK - 0xFFFFF8000034DCA0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryQueryULong - OK - 0xFFFFF8000034DCA8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryAssignValue - OK - 0xFFFFF8000034DC70 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryAssignMemory - OK - 0xFFFFF8000034DC48 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryAssignMultiString - OK - 0xFFFFF8000034DC50 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryAssignUnicodeString - OK - 0xFFFFF8000034DC68 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryAssignString - OK - 0xFFFFF8000034DC58 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRegistryAssignULong - OK - 0xFFFFF8000034DC60 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestCreate - OK - 0xFFFFF8000034DD08 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestCreateFromIrp - OK - 0xFFFFF8000034DD10 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestReuse - OK - 0xFFFFF8000034DDE8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestChangeTarget - OK - 0xFFFFF8000034DCE8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestFormatRequestUsingCurrentType - OK - 0xFFFFF8000034DD18 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestWdmFormatUsingStackLocation - OK - 0xFFFFF8000034DE18 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestSend - OK - 0xFFFFF8000034DDF0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestGetStatus - OK - 0xFFFFF8000034DD60 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestMarkCancelable - OK - 0xFFFFF8000034DD80 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestUnmarkCancelable - OK - 0xFFFFF8000034DE10 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestIsCanceled - OK - 0xFFFFF8000034DD68 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestCancelSentRequest - OK - 0xFFFFF8000034DCE0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestIsFrom32BitProcess - OK - 0xFFFFF8000034DD70 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestSetCompletionRoutine - OK - 0xFFFFF8000034DDF8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestGetCompletionParams - OK - 0xFFFFF8000034DD30 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestAllocateTimer - OK - 0xFFFFF8000034DCD8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestComplete - OK - 0xFFFFF8000034DCF0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestCompleteWithPriorityBoost - OK - 0xFFFFF8000034DD00 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestCompleteWithInformation - OK - 0xFFFFF8000034DCF8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestGetParameters - OK - 0xFFFFF8000034DD50 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestRetrieveInputMemory - OK - 0xFFFFF8000034DDB0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestRetrieveOutputMemory - OK - 0xFFFFF8000034DDC8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestRetrieveInputBuffer - OK - 0xFFFFF8000034DDA8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestRetrieveOutputBuffer - OK - 0xFFFFF8000034DDC0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestRetrieveInputWdmMdl - OK - 0xFFFFF8000034DDB8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestRetrieveOutputWdmMdl - OK - 0xFFFFF8000034DDD0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestRetrieveUnsafeUserInputBuffer - OK - 0xFFFFF8000034DDD8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestRetrieveUnsafeUserOutputBuffer - OK - 0xFFFFF8000034DDE0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestSetInformation - OK - 0xFFFFF8000034DE00 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestGetInformation - OK - 0xFFFFF8000034DD40 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestGetFileObject - OK - 0xFFFFF8000034DD38 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestProbeAndLockUserBufferForRead - OK - 0xFFFFF8000034DD90 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestProbeAndLockUserBufferForWrite - OK - 0xFFFFF8000034DD98 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestGetRequestorMode - OK - 0xFFFFF8000034DD58 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestForwardToIoQueue - OK - 0xFFFFF8000034DD20 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestGetIoQueue - OK - 0xFFFFF8000034DD48 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestRequeue - OK - 0xFFFFF8000034DDA0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestStopAcknowledge - OK - 0xFFFFF8000034DE08 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestWdmGetIrp - OK - 0xFFFFF8000034DE20 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoResourceRequirementsListSetSlotNumber - OK - 0xFFFFF8000034D8C0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoResourceRequirementsListSetInterfaceType - OK - 0xFFFFF8000034D8B8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoResourceRequirementsListAppendIoResList - OK - 0xFFFFF8000034D888 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoResourceRequirementsListInsertIoResList - OK - 0xFFFFF8000034D8A0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoResourceRequirementsListGetCount - OK - 0xFFFFF8000034D890 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoResourceRequirementsListGetIoResList - OK - 0xFFFFF8000034D898 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoResourceRequirementsListRemove - OK - 0xFFFFF8000034D8A8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoResourceRequirementsListRemoveByIoResList - OK - 0xFFFFF8000034D8B0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoResourceListCreate - OK - 0xFFFFF8000034D850 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoResourceListAppendDescriptor - OK - 0xFFFFF8000034D848 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoResourceListInsertDescriptor - OK - 0xFFFFF8000034D868 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoResourceListUpdateDescriptor - OK - 0xFFFFF8000034D880 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoResourceListGetCount - OK - 0xFFFFF8000034D858 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoResourceListGetDescriptor - OK - 0xFFFFF8000034D860 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoResourceListRemove - OK - 0xFFFFF8000034D870 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoResourceListRemoveByDescriptor - OK - 0xFFFFF8000034D878 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCmResourceListAppendDescriptor - OK - 0xFFFFF8000034D0E0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCmResourceListInsertDescriptor - OK - 0xFFFFF8000034D0F8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCmResourceListGetCount - OK - 0xFFFFF8000034D0E8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCmResourceListGetDescriptor - OK - 0xFFFFF8000034D0F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCmResourceListRemove - OK - 0xFFFFF8000034D100 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCmResourceListRemoveByDescriptor - OK - 0xFFFFF8000034D108 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfStringCreate - OK - 0xFFFFF8000034DE40 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfStringGetUnicodeString - OK - 0xFFFFF8000034DE48 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfObjectAcquireLock - OK - 0xFFFFF8000034DB58 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfObjectReleaseLock - OK - 0xFFFFF8000034DBA0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWaitLockCreate - OK - 0xFFFFF8000034E03C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWaitLockAcquire - OK - 0xFFFFF8000034E034 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWaitLockRelease - OK - 0xFFFFF8000034E044 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfSpinLockCreate - OK - 0xFFFFF8000034DE30 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfSpinLockAcquire - OK - 0xFFFFF8000034DE28 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfSpinLockRelease - OK - 0xFFFFF8000034DE38 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfTimerCreate - OK - 0xFFFFF8000034DE50 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfTimerStart - OK - 0xFFFFF8000034DE60 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfTimerStop - OK - 0xFFFFF8000034DE68 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfTimerGetParentObject - OK - 0xFFFFF8000034DE58 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceCreate - OK - 0xFFFFF8000034DECC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceRetrieveInformation - OK - 0xFFFFF8000034DF74 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceGetDeviceDescriptor - OK - 0xFFFFF8000034DF20 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceRetrieveConfigDescriptor - OK - 0xFFFFF8000034DF64 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceQueryString - OK - 0xFFFFF8000034DF40 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceAllocAndQueryString - OK - 0xFFFFF8000034DEB8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceFormatRequestForString - OK - 0xFFFFF8000034DF04 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceGetNumInterfaces - OK - 0xFFFFF8000034DF30 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceSelectConfig - OK - 0xFFFFF8000034DF7C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceWdmGetConfigurationHandle - OK - 0xFFFFF8000034DF94 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceRetrieveCurrentFrameNumber - OK - 0xFFFFF8000034DF6C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceSendControlTransferSynchronously - OK - 0xFFFFF8000034DF84 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceFormatRequestForControlTransfer - OK - 0xFFFFF8000034DEF4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceIsConnectedSynchronous - OK - 0xFFFFF8000034DF38 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceResetPortSynchronously - OK - 0xFFFFF8000034DF5C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceCyclePortSynchronously - OK - 0xFFFFF8000034DEEC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceFormatRequestForCyclePort - OK - 0xFFFFF8000034DEFC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceSendUrbSynchronously - OK - 0xFFFFF8000034DF8C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceFormatRequestForUrb - OK - 0xFFFFF8000034DF18 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetPipeGetInformation - OK - 0xFFFFF8000034DFD4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetPipeIsInEndpoint - OK - 0xFFFFF8000034DFE4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetPipeIsOutEndpoint - OK - 0xFFFFF8000034DFEC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetPipeGetType - OK - 0xFFFFF8000034DFDC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetPipeSetNoMaximumPacketSizeCheck - OK - 0xFFFFF8000034E00C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetPipeWriteSynchronously - OK - 0xFFFFF8000034E01C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetPipeFormatRequestForWrite - OK - 0xFFFFF8000034DFCC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetPipeReadSynchronously - OK - 0xFFFFF8000034DFF4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetPipeFormatRequestForRead - OK - 0xFFFFF8000034DFB4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetPipeConfigContinuousReader - OK - 0xFFFFF8000034DFA4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetPipeAbortSynchronously - OK - 0xFFFFF8000034DF9C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetPipeFormatRequestForAbort - OK - 0xFFFFF8000034DFAC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetPipeResetSynchronously - OK - 0xFFFFF8000034DFFC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetPipeFormatRequestForReset - OK - 0xFFFFF8000034DFBC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetPipeSendUrbSynchronously - OK - 0xFFFFF8000034E004 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetPipeFormatRequestForUrb - OK - 0xFFFFF8000034DFC4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbInterfaceGetInterfaceNumber - OK - 0xFFFFF8000034DE90 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbInterfaceGetNumEndpoints - OK - 0xFFFFF8000034DEA0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbInterfaceGetDescriptor - OK - 0xFFFFF8000034DE80 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbInterfaceSelectSetting - OK - 0xFFFFF8000034DEB0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbInterfaceGetEndpointInformation - OK - 0xFFFFF8000034DE88 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceGetInterface - OK - 0xFFFFF8000034DF28 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbInterfaceGetConfiguredSettingIndex - OK - 0xFFFFF8000034DE78 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbInterfaceGetNumConfiguredPipes - OK - 0xFFFFF8000034DE98 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbInterfaceGetConfiguredPipe - OK - 0xFFFFF8000034DE70 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetPipeWdmGetPipeHandle - OK - 0xFFFFF8000034E014 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfVerifierDbgBreakPoint - OK - 0xFFFFF8000034E024 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfVerifierKeBugCheck - OK - 0xFFFFF8000034E02C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWmiProviderCreate - OK - 0xFFFFF8000034E08C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWmiProviderGetDevice - OK - 0xFFFFF8000034E094 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWmiProviderIsEnabled - OK - 0xFFFFF8000034E0A4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWmiProviderGetTracingHandle - OK - 0xFFFFF8000034E09C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWmiInstanceCreate - OK - 0xFFFFF8000034E05C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWmiInstanceRegister - OK - 0xFFFFF8000034E084 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWmiInstanceDeregister - OK - 0xFFFFF8000034E064 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWmiInstanceGetDevice - OK - 0xFFFFF8000034E074 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWmiInstanceGetProvider - OK - 0xFFFFF8000034E07C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWmiInstanceFireEvent - OK - 0xFFFFF8000034E06C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWorkItemCreate - OK - 0xFFFFF8000034E0AC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWorkItemEnqueue - OK - 0xFFFFF8000034E0B4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWorkItemGetParentObject - OK - 0xFFFFF8000034E0C4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfWorkItemFlush - OK - 0xFFFFF8000034E0BC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCommonBufferCreateWithConfig - OK - 0xFFFFF8000034D158 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaEnablerGetFragmentLength - OK - 0xFFFFF8000034D4B0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaEnablerWdmGetDmaAdapter - OK - 0xFFFFF8000034D4D0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbInterfaceGetNumSettings - OK - 0xFFFFF8000034DEA8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceRemoveDependentUsageDeviceObject - OK - 0xFFFFF8000034D3E8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceGetSystemPowerAction - OK - 0xFFFFF8000034D2F8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfInterruptSetExtendedPolicy - OK - 0xFFFFF8000034D70C - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueueAssignForwardProgressPolicy - OK - 0xFFFFF8000034D734 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoInitAssignContainerID - OK - 0xFFFFF8000034DBE8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfPdoInitAllowForwardingRequestToParent - OK - 0xFFFFF8000034DBE0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestMarkCancelableEx - OK - 0xFFFFF8000034DD88 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestIsReserved - OK - 0xFFFFF8000034DD78 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfRequestForwardToParentDeviceIoQueue - OK - 0xFFFFF8000034DD28 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCxDeviceInitAllocate - OK - 0xFFFFF8000034D190 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCxDeviceInitAssignWdmIrpPreprocessCallback - OK - 0xFFFFF8000034D198 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCxDeviceInitSetIoInCallerContextCallback - OK - 0xFFFFF8000034D1A8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCxDeviceInitSetRequestAttributes - OK - 0xFFFFF8000034D1B0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCxDeviceInitSetFileObjectConfig - OK - 0xFFFFF8000034D1A0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceWdmDispatchIrp - OK - 0xFFFFF8000034D470 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceWdmDispatchIrpToIoQueue - OK - 0xFFFFF8000034D478 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitSetRemoveLockOptions - OK - 0xFFFFF8000034D3B8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceConfigureWdmIrpDispatchCallback - OK - 0xFFFFF8000034D218 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaEnablerConfigureSystemProfile - OK - 0xFFFFF8000034D4A0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionInitializeUsingOffset - OK - 0xFFFFF8000034D548 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionGetTransferInfo - OK - 0xFFFFF8000034D538 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionSetChannelConfigurationCallback - OK - 0xFFFFF8000034D560 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionSetTransferCompleteCallback - OK - 0xFFFFF8000034D580 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionSetImmediateExecution - OK - 0xFFFFF8000034D570 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionAllocateResources - OK - 0xFFFFF8000034D4D8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionSetDeviceAddressOffset - OK - 0xFFFFF8000034D568 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionFreeResources - OK - 0xFFFFF8000034D510 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionCancel - OK - 0xFFFFF8000034D4E0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionWdmGetTransferContext - OK - 0xFFFFF8000034D590 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfInterruptQueueWorkItemForIsr - OK - 0xFFFFF8000034D6EC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfInterruptTryToAcquireLock - OK - 0xFFFFF8000034D724 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueueStopAndPurge - OK - 0xFFFFF8000034D830 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoQueueStopAndPurgeSynchronously - OK - 0xFFFFF8000034D838 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfIoTargetPurge - OK - 0xFFFFF8000034D9E4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceCreateWithParameters - OK - 0xFFFFF8000034DEE4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceQueryUsbCapability - OK - 0xFFFFF8000034DF54 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceCreateUrb - OK - 0xFFFFF8000034DEDC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfUsbTargetDeviceCreateIsochUrb - OK - 0xFFFFF8000034DED4 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceWdmAssignPowerFrameworkSettings - OK - 0xFFFFF8000034D468 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDmaTransactionStopSystemTransfer - OK - 0xFFFFF8000034D588 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfCxVerifierKeBugCheck - OK - 0xFFFFF8000034D1B8 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfInterruptReportActive - OK - 0xFFFFF8000034D6FC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfInterruptReportInactive - OK - 0xFFFFF8000034D704 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitSetReleaseHardwareOrderOnFailure - OK - 0xFFFFF8000034D3B0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfGetTriageInfo - OK - 0xFFFFF8000034D6AC - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceInitSetIoTypeEx - OK - 0xFFFFF8000034D378 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceQueryPropertyEx - OK - 0xFFFFF8000034D3E0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceAllocAndQueryPropertyEx - OK - 0xFFFFF8000034D1E0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfDeviceAssignProperty - OK - 0xFFFFF8000034D1F0 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFdoInitQueryPropertyEx - OK - 0xFFFFF8000034D630 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       VfWdfFdoInitAllocAndQueryPropertyEx - OK - 0xFFFFF8000034D618 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation

==========================================================================================

Filter

       [0xFFFFE00003C6E140]FilterUnload - 0xFFFFF80001864C04 - C:\Windows\system32\drivers\aswSP.sys
       [0xFFFFE00003C6E140]InstanceSetup - 0xFFFFF80001864C44 - C:\Windows\system32\drivers\aswSP.sys
       [0xFFFFE00003C6E140]IRP_MJ_CREATE PreFun - 0xFFFFF80001864E44 - C:\Windows\system32\drivers\aswSP.sys
       [0xFFFFE00003C6E140]IRP_MJ_CREATE PostFun - 0xFFFFF80001865080 - C:\Windows\system32\drivers\aswSP.sys
       [0xFFFFE00003C6E140]IRP_MJ_SET_INFORMATION PreFun - 0xFFFFF8000186518C - C:\Windows\system32\drivers\aswSP.sys
       [0xFFFFE00003C6E140]IRP_MJ_FILE_SYSTEM_CONTROL PreFun - 0xFFFFF80001865328 - C:\Windows\system32\drivers\aswSP.sys
       [0xFFFFE00005178430]InstanceSetup - 0xFFFFF80002DF41E8 - C:\Windows\system32\drivers\aswMonFlt.sys
       [0xFFFFE00005178430]InstanceQueryTeardown - 0xFFFFF80002DF41BC - C:\Windows\system32\drivers\aswMonFlt.sys
       [0xFFFFE00005178430]InstanceTeardownStart - 0xFFFFF80002DF41C8 - C:\Windows\system32\drivers\aswMonFlt.sys
       [0xFFFFE00005178430]IRP_MJ_CREATE PreFun - 0xFFFFF80002DF4F0C - C:\Windows\system32\drivers\aswMonFlt.sys
       [0xFFFFE00005178430]IRP_MJ_CREATE PostFun - 0xFFFFF80002DF509C - C:\Windows\system32\drivers\aswMonFlt.sys
       [0xFFFFE00005178430]IRP_MJ_WRITE PostFun - 0xFFFFF80002DDC058 - C:\Windows\system32\drivers\aswMonFlt.sys
       [0xFFFFE00005178430]IRP_MJ_CLEANUP PreFun - 0xFFFFF80002DF5ED4 - C:\Windows\system32\drivers\aswMonFlt.sys
       [0xFFFFE00005178430]IRP_MJ_CLEANUP PostFun - 0xFFFFF80002DDC128 - C:\Windows\system32\drivers\aswMonFlt.sys
       [0xFFFFE00005178430]IRP_MJ_CLOSE PostFun - 0xFFFFF80002DDC128 - C:\Windows\system32\drivers\aswMonFlt.sys
       [0xFFFFE00005178430]IRP_MJ_QUERY_INFORMATION PostFun - 0xFFFFF80002DDC26C - C:\Windows\system32\drivers\aswMonFlt.sys
       [0xFFFFE00005178430]IRP_MJ_SET_INFORMATION PreFun - 0xFFFFF80002DF6224 - C:\Windows\system32\drivers\aswMonFlt.sys
       [0xFFFFE00005178430]IRP_MJ_SET_INFORMATION PostFun - 0xFFFFF80002DF62B4 - C:\Windows\system32\drivers\aswMonFlt.sys
       [0xFFFFE00005178430]IRP_MJ_ACQUIRE_FOR_SECTION_SYNCHRONIZATION PostFun - 0xFFFFF80002DDC09C - C:\Windows\system32\drivers\aswMonFlt.sys
       [0xFFFFE00005178430]IRP_MJ_FILE_SYSTEM_CONTROL PreFun - 0xFFFFF80002DDB980 - C:\Windows\system32\drivers\aswMonFlt.sys
       [0xFFFFE00003E07C10]InstanceSetup - 0xFFFFF800014C7AF0 - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]InstanceQueryTeardown - 0xFFFFF800014C872C - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]InstanceTeardownStart - 0xFFFFF800014C8738 - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]InstanceTeardownComplete - 0xFFFFF800014C8744 - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]GenerateFileName - 0xFFFFF800014C88B0 - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]NormalizeNameComponent - 0xFFFFF800014C89D4 - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]IRP_MJ_CREATE PreFun - 0xFFFFF800014C8F14 - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]IRP_MJ_CREATE PostFun - 0xFFFFF800014CA3EC - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]IRP_MJ_NETWORK_QUERY_OPEN PreFun - 0xFFFFF800014CA8FC - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]IRP_MJ_WRITE PreFun - 0xFFFFF800014CA934 - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]IRP_MJ_DIRECTORY_CONTROL PreFun - 0xFFFFF800014CAB54 - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]IRP_MJ_CLEANUP PreFun - 0xFFFFF800014CBCA0 - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]IRP_MJ_CLEANUP PostFun - 0xFFFFF800014CC1A4 - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]IRP_MJ_QUERY_INFORMATION PostFun - 0xFFFFF800014CD93C - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]IRP_MJ_SET_INFORMATION PreFun - 0xFFFFF800014CC1EC - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]IRP_MJ_SET_INFORMATION PostFun - 0xFFFFF800014CCF24 - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]IRP_MJ_FILE_SYSTEM_CONTROL PreFun - 0xFFFFF800014CDAF8 - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]IRP_MJ_FILE_SYSTEM_CONTROL PostFun - 0xFFFFF800014CDB24 - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00003E07C10]IRP_MJ_QUERY_VOLUME_INFORMATION PreFun - 0xFFFFF800014CEC8C - C:\Windows\system32\drivers\aswSnx.sys
       [0xFFFFE00005181730]InstanceSetup - 0xFFFFF80002DC6678 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]GenerateFileName - 0xFFFFF80002DC6A20 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]NormalizeNameComponentEx - 0xFFFFF80002DCD008 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_VOLUME_DISMOUNT PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_VOLUME_MOUNT PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_MDL_WRITE_COMPLETE PreFun - 0xFFFFF80002DB7490 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_PREPARE_MDL_WRITE PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_MDL_READ_COMPLETE PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_MDL_READ PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_NETWORK_QUERY_OPEN PreFun - 0xFFFFF80002DC835C - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_FAST_IO_CHECK_IF_POSSIBLE PreFun - 0xFFFFF80002DB7490 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_RESERVED(-12) PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_RESERVED(-11) PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_RESERVED(-10) PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_RESERVED(-9) PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_RESERVED(-8) PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_RESERVED(-7) PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_RELEASE_FOR_CC_FLUSH PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_ACQUIRE_FOR_CC_FLUSH PreFun - 0xFFFFF80002DB7490 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_RELEASE_FOR_MOD_WRITE PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_ACQUIRE_FOR_MOD_WRITE PreFun - 0xFFFFF80002DB7490 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_RELEASE_FOR_SECTION_SYNCHRONIZATION PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_ACQUIRE_FOR_SECTION_SYNCHRONIZATION PreFun - 0xFFFFF80002DC6CC0 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_CREATE PreFun - 0xFFFFF80002DC3750 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_CREATE PostFun - 0xFFFFF80002DC1000 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_CREATE_NAMED_PIPE PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_CLOSE PreFun - 0xFFFFF80002DC6900 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_READ PreFun - 0xFFFFF80002DB7410 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_READ PostFun - 0xFFFFF80002DB8140 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_WRITE PreFun - 0xFFFFF80002DB7490 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_WRITE PostFun - 0xFFFFF80002DB8140 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_QUERY_INFORMATION PreFun - 0xFFFFF80002DC6800 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_QUERY_INFORMATION PostFun - 0xFFFFF80002DB80D8 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_SET_INFORMATION PreFun - 0xFFFFF80002DC6AF0 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_SET_INFORMATION PostFun - 0xFFFFF80002DB8188 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_QUERY_EA PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_SET_EA PreFun - 0xFFFFF80002DB7490 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_FLUSH_BUFFERS PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_QUERY_VOLUME_INFORMATION PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_SET_VOLUME_INFORMATION PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_DIRECTORY_CONTROL PreFun - 0xFFFFF80002DC1560 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_DIRECTORY_CONTROL PostFun - 0xFFFFF80002DB8004 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_FILE_SYSTEM_CONTROL PreFun - 0xFFFFF80002DC6CF0 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_FILE_SYSTEM_CONTROL PostFun - 0xFFFFF80002DCD88C - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_DEVICE_CONTROL PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_INTERNAL_DEVICE_CONTROL PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_SHUTDOWN PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_LOCK_CONTROL PreFun - 0xFFFFF80002DC6FCC - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_CLEANUP PreFun - 0xFFFFF80002DC69A0 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_CLEANUP PostFun - 0xFFFFF80002DC6FFC - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_CREATE_MAILSLOT PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_QUERY_SECURITY PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_SET_SECURITY PreFun - 0xFFFFF80002DB7490 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_POWER PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_SYSTEM_CONTROL PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_DEVICE_CHANGE PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_QUERY_QUOTA PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_SET_QUOTA PreFun - 0xFFFFF80002DB7450 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00005181730]IRP_MJ_PNP_POWER PreFun - 0xFFFFF80002DC7460 - C:\WINDOWS\system32\drivers\luafv.sys
       [0xFFFFE00003C64730]FilterUnload - 0xFFFFF80001E54740 - C:\WINDOWS\System32\drivers\npsvctrig.sys
       [0xFFFFE00003C64730]InstanceSetup - 0xFFFFF80001E54944 - C:\WINDOWS\System32\drivers\npsvctrig.sys
       [0xFFFFE00003C64730]InstanceTeardownStart - 0xFFFFF80001E54A8C - C:\WINDOWS\System32\drivers\npsvctrig.sys
       [0xFFFFE00003C64730]OldDriverUnload - 0xFFFFF80001E543B8 - C:\WINDOWS\System32\drivers\npsvctrig.sys
       [0xFFFFE00003C64730]IRP_MJ_CREATE PostFun - 0xFFFFF80001E54B68 - C:\WINDOWS\System32\drivers\npsvctrig.sys
       [0xFFFFE00003C64730]IRP_MJ_CREATE_NAMED_PIPE PostFun - 0xFFFFF80001E54CBC - C:\WINDOWS\System32\drivers\npsvctrig.sys
       [0xFFFFE00003C64730]IRP_MJ_FILE_SYSTEM_CONTROL PostFun - 0xFFFFF80001E50330 - C:\WINDOWS\System32\drivers\npsvctrig.sys
       [0xFFFFE000007DDB90]FilterUnload - 0xFFFFF800008861BC - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_CREATE PreFun - 0xFFFFF8000087EC80 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_CREATE PostFun - 0xFFFFF8000087E810 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_CLEANUP PreFun - 0xFFFFF8000087E6A0 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_CLEANUP PostFun - 0xFFFFF8000087E5B0 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_CLOSE PreFun - 0xFFFFF8000087E480 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_CLOSE PostFun - 0xFFFFF80000878F30 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_READ PreFun - 0xFFFFF80000877030 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_READ PostFun - 0xFFFFF800008775C0 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_WRITE PreFun - 0xFFFFF80000877030 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_WRITE PostFun - 0xFFFFF800008775C0 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_SET_INFORMATION PreFun - 0xFFFFF80000877250 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_SET_INFORMATION PostFun - 0xFFFFF80000877BFC - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_FILE_SYSTEM_CONTROL PreFun - 0xFFFFF8000087E6C0 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_FILE_SYSTEM_CONTROL PostFun - 0xFFFFF80000878190 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_FLUSH_BUFFERS PreFun - 0xFFFFF8000087E320 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_FLUSH_BUFFERS PostFun - 0xFFFFF80000878F30 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_DIRECTORY_CONTROL PreFun - 0xFFFFF8000087EE90 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_DIRECTORY_CONTROL PostFun - 0xFFFFF80000878F30 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_QUERY_INFORMATION PreFun - 0xFFFFF80000877530 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_QUERY_INFORMATION PostFun - 0xFFFFF80000878F30 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_PNP_POWER PreFun - 0xFFFFF80000882CCC - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_PNP_POWER PostFun - 0xFFFFF80000878514 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_MDL_READ PreFun - 0xFFFFF80000877F58 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_MDL_READ PostFun - 0xFFFFF80000878F30 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_MDL_WRITE_COMPLETE PreFun - 0xFFFFF80000877F58 - C:\WINDOWS\System32\drivers\fileinfo.sys
       [0xFFFFE000007DDB90]IRP_MJ_MDL_WRITE_COMPLETE PostFun - 0xFFFFF80000878F30 - C:\WINDOWS\System32\drivers\fileinfo.sys

==========================================================================================

File System

       Disk - 0xFFFFE000045D0860 - Fat - 0xFFFFE000045DF380 - \FileSystem\fastfat
       Disk - 0xFFFFE000011D6060 - ReFSRecognizer - 0xFFFFE000011D7060 - \FileSystem\Fs_Rec
       Disk - 0xFFFFE000011D73A0 - ExFatRecognizer - 0xFFFFE000011D7060 - \FileSystem\Fs_Rec
       Disk - 0xFFFFE000011D7A00 - UdfsDiskRecognizer - 0xFFFFE000011D7060 - \FileSystem\Fs_Rec
       Disk - 0xFFFFE000007DCE50 - Ntfs - 0xFFFFE000007DC060 - \FileSystem\Ntfs
       Disk - 0xFFFFE000007EA9C0 - RawDisk - 0xFFFFE000007EABD0 - \FileSystem\RAW
       Network - 0xFFFFE00002968C00 - Mup - 0xFFFFE000002667A0 - \FileSystem\Mup
       CdRom - 0xFFFFE000045D0650 - FatCdrom - 0xFFFFE000045DF380 - \FileSystem\fastfat
       CdRom - 0xFFFFE000011D7C20 - UdfsCdRomRecognizer - 0xFFFFE000011D7060 - \FileSystem\Fs_Rec
       CdRom - 0xFFFFE000011D7E40 - CdfsRecognizer - 0xFFFFE000011D7060 - \FileSystem\Fs_Rec
       CdRom - 0xFFFFE000007EA7B0 - RawCdRom - 0xFFFFE000007EABD0 - \FileSystem\RAW
       Tape - 0xFFFFE000007EA5A0 - RawTape - 0xFFFFE000007EABD0 - \FileSystem\RAW

==========================================================================================

Sfilter FileSystem Filter Callback

       \FileSystem\FltMgr - 0xFFFFE00000FE8A90 - PreAcquireForSectionSynchronization - 0xFFFFF8000081EDB0 - C:\WINDOWS\system32\drivers\fltmgr.sys
       \FileSystem\FltMgr - 0xFFFFE00000FE8A90 - PostAcquireForSectionSynchronization - 0xFFFFF8000081F1E8 - C:\WINDOWS\system32\drivers\fltmgr.sys
       \FileSystem\FltMgr - 0xFFFFE00000FE8A90 - PreReleaseForSectionSynchronization - 0xFFFFF8000081EDB0 - C:\WINDOWS\system32\drivers\fltmgr.sys
       \FileSystem\FltMgr - 0xFFFFE00000FE8A90 - PostReleaseForSectionSynchronization - 0xFFFFF8000081F1E8 - C:\WINDOWS\system32\drivers\fltmgr.sys
       \FileSystem\FltMgr - 0xFFFFE00000FE8A90 - PreAcquireForCcFlush - 0xFFFFF8000081EDB0 - C:\WINDOWS\system32\drivers\fltmgr.sys
       \FileSystem\FltMgr - 0xFFFFE00000FE8A90 - PostAcquireForCcFlush - 0xFFFFF8000081F1E8 - C:\WINDOWS\system32\drivers\fltmgr.sys
       \FileSystem\FltMgr - 0xFFFFE00000FE8A90 - PreReleaseForCcFlush - 0xFFFFF8000081EDB0 - C:\WINDOWS\system32\drivers\fltmgr.sys
       \FileSystem\FltMgr - 0xFFFFE00000FE8A90 - PostReleaseForCcFlush - 0xFFFFF8000081F1E8 - C:\WINDOWS\system32\drivers\fltmgr.sys
       \FileSystem\FltMgr - 0xFFFFE00000FE8A90 - PreAcquireForModifiedPageWriter - 0xFFFFF8000081EDB0 - C:\WINDOWS\system32\drivers\fltmgr.sys
       \FileSystem\FltMgr - 0xFFFFE00000FE8A90 - PostAcquireForModifiedPageWriter - 0xFFFFF8000081F1E8 - C:\WINDOWS\system32\drivers\fltmgr.sys
       \FileSystem\FltMgr - 0xFFFFE00000FE8A90 - PreReleaseForModifiedPageWriter - 0xFFFFF8000081EDB0 - C:\WINDOWS\system32\drivers\fltmgr.sys
       \FileSystem\FltMgr - 0xFFFFE00000FE8A90 - PostReleaseForModifiedPageWriter - 0xFFFFF8000081F1E8 - C:\WINDOWS\system32\drivers\fltmgr.sys

==========================================================================================

ClassInitData Callback

       Disk FdoData.ClassError - OK - 0xFFFFF800013E3E80 - C:\WINDOWS\System32\drivers\disk.sys - Microsoft Corporation
       Disk FdoData.ClassReadWriteVerification - OK - 0xFFFFF800013E3010 - C:\WINDOWS\System32\drivers\disk.sys - Microsoft Corporation
       Disk FdoData.ClassDeviceControl - OK - 0xFFFFF800013E37C0 - C:\WINDOWS\System32\drivers\disk.sys - Microsoft Corporation
       Disk FdoData.ClassShutdownFlush - OK - 0xFFFFF800013E30E0 - C:\WINDOWS\System32\drivers\disk.sys - Microsoft Corporation
       Disk FdoData.ClassInitDevice - OK - 0xFFFFF800013EEFD0 - C:\WINDOWS\System32\drivers\disk.sys - Microsoft Corporation
       Disk FdoData.ClassStartDevice - OK - 0xFFFFF800013EEDC4 - C:\WINDOWS\System32\drivers\disk.sys - Microsoft Corporation
       Disk FdoData.ClassPowerDevice - OK - 0xFFFFF8000140E090 - C:\WINDOWS\System32\drivers\CLASSPNP.SYS - Microsoft Corporation
       Disk FdoData.ClassStopDevice - OK - 0xFFFFF800013E4DE4 - C:\WINDOWS\System32\drivers\disk.sys - Microsoft Corporation
       Disk FdoData.ClassRemoveDevice - OK - 0xFFFFF800013F4E38 - C:\WINDOWS\System32\drivers\disk.sys - Microsoft Corporation
       Disk FdoData.ClassWmiInfo.ClassQueryWmiRegInfo - OK - 0xFFFFF800013EE9CC - C:\WINDOWS\System32\drivers\disk.sys - Microsoft Corporation
       Disk FdoData.ClassWmiInfo.ClassQueryWmiDataBlock - OK - 0xFFFFF800013F3E60 - C:\WINDOWS\System32\drivers\disk.sys - Microsoft Corporation
       Disk FdoData.ClassWmiInfo.ClassSetWmiDataBlock - OK - 0xFFFFF800013F410C - C:\WINDOWS\System32\drivers\disk.sys - Microsoft Corporation
       Disk FdoData.ClassWmiInfo.ClassSetWmiDataItem - OK - 0xFFFFF800013F42A8 - C:\WINDOWS\System32\drivers\disk.sys - Microsoft Corporation
       Disk FdoData.ClassWmiInfo.ClassExecuteWmiMethod - OK - 0xFFFFF800013F3948 - C:\WINDOWS\System32\drivers\disk.sys - Microsoft Corporation
       Disk FdoData.ClassWmiInfo.ClassWmiFunctionControl - OK - 0xFFFFF800013F47BC - C:\WINDOWS\System32\drivers\disk.sys - Microsoft Corporation
       Disk ClassAddDevice - OK - 0xFFFFF800013EF524 - C:\WINDOWS\System32\drivers\disk.sys - Microsoft Corporation
       Disk ClassUnload - OK - 0xFFFFF800013F33F0 - C:\WINDOWS\System32\drivers\disk.sys - Microsoft Corporation

==========================================================================================

Npfs Dispatch Fun

       IRP_MJ_CREATE - OK - 0xFFFFF80001BD4180 - C:\WINDOWS\System32\Drivers\Npfs.SYS - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF80001BD3D90 - C:\WINDOWS\System32\Drivers\Npfs.SYS - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF80001BD31F0 - C:\WINDOWS\System32\Drivers\Npfs.SYS - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF80001BD1FB0 - C:\WINDOWS\System32\Drivers\Npfs.SYS - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF80001BD2570 - C:\WINDOWS\System32\Drivers\Npfs.SYS - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF80001BD600C - C:\WINDOWS\System32\Drivers\Npfs.SYS - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF80001BD5E20 - C:\WINDOWS\System32\Drivers\Npfs.SYS - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF80001BD1000 - C:\WINDOWS\System32\Drivers\Npfs.SYS - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF80001BD9EB8 - C:\WINDOWS\System32\Drivers\Npfs.SYS - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF80001BD86E0 - C:\WINDOWS\System32\Drivers\Npfs.SYS - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF80001BD19B0 - C:\WINDOWS\System32\Drivers\Npfs.SYS - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF80001BD3430 - C:\WINDOWS\System32\Drivers\Npfs.SYS - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF80001BD67B8 - C:\WINDOWS\System32\Drivers\Npfs.SYS - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF80001BD61FC - C:\WINDOWS\System32\Drivers\Npfs.SYS - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation

==========================================================================================

Msfs Dispatch Fun

       IRP_MJ_CREATE - OK - 0xFFFFF80001C05000 - C:\WINDOWS\System32\Drivers\Msfs.SYS - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF80001C05340 - C:\WINDOWS\System32\Drivers\Msfs.SYS - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF80001C06660 - C:\WINDOWS\System32\Drivers\Msfs.SYS - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF80001C056E0 - C:\WINDOWS\System32\Drivers\Msfs.SYS - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF80001C08028 - C:\WINDOWS\System32\Drivers\Msfs.SYS - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF80001C06510 - C:\WINDOWS\System32\Drivers\Msfs.SYS - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF80001C089A4 - C:\WINDOWS\System32\Drivers\Msfs.SYS - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF80001C07A68 - C:\WINDOWS\System32\Drivers\Msfs.SYS - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF80001C083CC - C:\WINDOWS\System32\Drivers\Msfs.SYS - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF80001C05560 - C:\WINDOWS\System32\Drivers\Msfs.SYS - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF80001C05CF0 - C:\WINDOWS\System32\Drivers\Msfs.SYS - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF80001C06E60 - C:\WINDOWS\System32\Drivers\Msfs.SYS - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF80001C06AB0 - C:\WINDOWS\System32\Drivers\Msfs.SYS - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation

==========================================================================================

Usbport Dispatch Fun

       IRP_MJ_CREATE - OK - 0xFFFFF80002527F40 - C:\WINDOWS\System32\drivers\USBPORT.SYS - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF80002527F40 - C:\WINDOWS\System32\drivers\USBPORT.SYS - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF80002527F40 - C:\WINDOWS\System32\drivers\USBPORT.SYS - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF80002527F40 - C:\WINDOWS\System32\drivers\USBPORT.SYS - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF80002527F40 - C:\WINDOWS\System32\drivers\USBPORT.SYS - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF80002527F40 - C:\WINDOWS\System32\drivers\USBPORT.SYS - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF80002536A7C - C:\WINDOWS\System32\drivers\USBPORT.SYS - Microsoft Corporation

==========================================================================================

System Debug

       KiDebugRoutine OK - 0xFFFFF800E1D544CC - 0xFFFFF800E1D544CC - C:\WINDOWS\system32\ntoskrnl.exe

==========================================================================================

Object Hijack

       Nothing

==========================================================================================

Direct IO

       Nothing

==========================================================================================

GDT

       cpu[0] - Selector(0x0002) - Type(Code RE Ac)
       cpu[0] - Selector(0x0003) - Type(Data RW Ac)
       cpu[0] - Selector(0x0004) - Type(Code RE Ac)
       cpu[0] - Selector(0x0005) - Type(Data RW Ac)
       cpu[0] - Selector(0x0006) - Type(Code RE Ac)
       cpu[0] - Selector(0x0008) - Type(T5532 Busy)
       cpu[0] - Selector(0x000A) - Type(Data RW Ac)
       cpu[0] - Selector(0x000C) - Type(Code RE Ac)
       cpu[1] - Selector(0x0002) - Type(Code RE Ac)
       cpu[1] - Selector(0x0003) - Type(Data RW Ac)
       cpu[1] - Selector(0x0004) - Type(Code RE Ac)
       cpu[1] - Selector(0x0005) - Type(Data RW Ac)
       cpu[1] - Selector(0x0006) - Type(Code RE Ac)
       cpu[1] - Selector(0x0008) - Type(T5532 Busy)
       cpu[1] - Selector(0x000A) - Type(Data RW Ac)
       cpu[1] - Selector(0x000C) - Type(Code RE Ac)
       cpu[2] - Selector(0x0002) - Type(Code RE Ac)
       cpu[2] - Selector(0x0003) - Type(Data RW Ac)
       cpu[2] - Selector(0x0004) - Type(Code RE Ac)
       cpu[2] - Selector(0x0005) - Type(Data RW Ac)
       cpu[2] - Selector(0x0006) - Type(Code RE Ac)
       cpu[2] - Selector(0x0008) - Type(T5532 Busy)
       cpu[2] - Selector(0x000A) - Type(Data RW Ac)
       cpu[2] - Selector(0x000C) - Type(Code RE Ac)
       cpu[3] - Selector(0x0002) - Type(Code RE Ac)
       cpu[3] - Selector(0x0003) - Type(Data RW Ac)
       cpu[3] - Selector(0x0004) - Type(Code RE Ac)
       cpu[3] - Selector(0x0005) - Type(Data RW Ac)
       cpu[3] - Selector(0x0006) - Type(Code RE Ac)
       cpu[3] - Selector(0x0008) - Type(T5532 Busy)
       cpu[3] - Selector(0x000A) - Type(Data RW Ac)
       cpu[3] - Selector(0x000C) - Type(Code RE Ac)

==========================================================================================

SSDT

       NtWorkerFactoryWorkerReady - OK - 0xFFFFF800E1D77BF8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAcceptConnectPort - OK - 0xFFFFF800E2127C88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtMapUserPhysicalPagesScatter - OK - 0xFFFFF800E2271074 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtWaitForSingleObject - OK - 0xFFFFF800E20213C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCallbackReturn - OK - 0xFFFFF800E1DC9640 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtReadFile - OK - 0xFFFFF800E201E1C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeviceIoControlFile - OK - 0xFFFFF800E2023D24 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtWriteFile - OK - 0xFFFFF800E20A2C48 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRemoveIoCompletion - OK - 0xFFFFF800E20A691C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtReleaseSemaphore - OK - 0xFFFFF800E20A7B40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtReplyWaitReceivePort - OK - 0xFFFFF800E20EE398 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtReplyPort - OK - 0xFFFFF800E20ED098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationThread - OK - 0xFFFFF800E2018CB4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetEvent - OK - 0xFFFFF800E20A6F48 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtClose - OK - 0xFFFFF800E2026290 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryObject - OK - 0xFFFFF800E20A3D2C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationFile - OK - 0xFFFFF800E201EED0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenKey - OK - 0xFFFFF800E2018C9C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtEnumerateValueKey - OK - 0xFFFFF800E20A23F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtFindAtom - OK - 0xFFFFF800E209CE00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryDefaultLocale - OK - 0xFFFFF800E21187C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryKey - OK - 0xFFFFF800E2039770 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryValueKey - OK - 0xFFFFF800E203A1A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAllocateVirtualMemory - OK - 0xFFFFF800E202BEE0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationProcess - OK - 0xFFFFF800E20AC218 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtWaitForMultipleObjects32 - OK - 0xFFFFF800E20A60BC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtWriteFileGather - OK - 0xFFFFF800E210F978 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationProcess - OK - 0xFFFFF800E2067F88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateKey - OK - 0xFFFFF800E207C3F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtFreeVirtualMemory - OK - 0xFFFFF800E1CBB990 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtImpersonateClientOfPort - OK - 0xFFFFF800E2268238 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtReleaseMutant - OK - 0xFFFFF800E20A7008 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationToken - OK - 0xFFFFF800E203DFF0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRequestWaitReplyPort - OK - 0xFFFFF800E210E5F4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryVirtualMemory - OK - 0xFFFFF800E202EB90 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenThreadToken - OK - 0xFFFFF800E200C77C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationThread - OK - 0xFFFFF800E207AE40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenProcess - OK - 0xFFFFF800E20170E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationFile - OK - 0xFFFFF800E1CB7470 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtMapViewOfSection - OK - 0xFFFFF800E202E7D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAccessCheckAndAuditAlarm - OK - 0xFFFFF800E211EA48 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtUnmapViewOfSection - OK - 0xFFFFF800E211C678 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtReplyWaitReceivePortEx - OK - 0xFFFFF800E20EE3AC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtTerminateProcess - OK - 0xFFFFF800E206A150 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetEventBoostPriority - OK - 0xFFFFF800E22A84A4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtReadFileScatter - OK - 0xFFFFF800E210F2D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenThreadTokenEx - OK - 0xFFFFF800E200C794 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenProcessTokenEx - OK - 0xFFFFF800E2017908 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryPerformanceCounter - OK - 0xFFFFF800E20ECFA4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtEnumerateKey - OK - 0xFFFFF800E203C08C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenFile - OK - 0xFFFFF800E2018568 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDelayExecution - OK - 0xFFFFF800E20A7DD0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryDirectoryFile - OK - 0xFFFFF800E20E82C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySystemInformation - OK - 0xFFFFF800E20273E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenSection - OK - 0xFFFFF800E210C514 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryTimer - OK - 0xFFFFF800E22A8348 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtFsControlFile - OK - 0xFFFFF800E20939CC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtWriteVirtualMemory - OK - 0xFFFFF800E211D2F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCloseObjectAuditAlarm - OK - 0xFFFFF800E21162D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDuplicateObject - OK - 0xFFFFF800E20B4FA8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryAttributesFile - OK - 0xFFFFF800E20E69B8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtClearEvent - OK - 0xFFFFF800E20EF018 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtReadVirtualMemory - OK - 0xFFFFF800E2030954 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenEvent - OK - 0xFFFFF800E210E784 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAdjustPrivilegesToken - OK - 0xFFFFF800E20952D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDuplicateToken - OK - 0xFFFFF800E2004660 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtContinue - OK - 0xFFFFF800E1DC6320 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryDefaultUILanguage - OK - 0xFFFFF800E214A588 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueueApcThread - OK - 0xFFFFF800E211D024 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtYieldExecution - OK - 0xFFFFF800E1D29D6C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAddAtom - OK - 0xFFFFF800E22AFBEC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateEvent - OK - 0xFFFFF800E2018630 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryVolumeInformationFile - OK - 0xFFFFF800E2034FE0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateSection - OK - 0xFFFFF800E200D8CC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtFlushBuffersFile - OK - 0xFFFFF800E211A640 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtApphelpCacheControl - OK - 0xFFFFF800E2044230 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateProcessEx - OK - 0xFFFFF800E22810DC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateThread - OK - 0xFFFFF800E2281158 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtIsProcessInJob - OK - 0xFFFFF800E20EADD4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtProtectVirtualMemory - OK - 0xFFFFF800E202F838 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySection - OK - 0xFFFFF800E20AE2A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtResumeThread - OK - 0xFFFFF800E20F2D84 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtTerminateThread - OK - 0xFFFFF800E206B7AC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtReadRequestData - OK - 0xFFFFF800E2268314 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateFile - OK - 0xFFFFF800E2018C1C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryEvent - OK - 0xFFFFF800E2112970 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtWriteRequestData - OK - 0xFFFFF800E2268438 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenDirectoryObject - OK - 0xFFFFF800E210D474 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAccessCheckByTypeAndAuditAlarm - OK - 0xFFFFF800E20044BC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySystemTime - OK - 0xFFFFF800E22A5940 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtWaitForMultipleObjects - OK - 0xFFFFF800E20A6228 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationObject - OK - 0xFFFFF800E2110A58 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCancelIoFile - OK - 0xFFFFF800E2111040 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtTraceEvent - OK - 0xFFFFF800E1CD18E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtPowerInformation - OK - 0xFFFFF800E207F15C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetValueKey - OK - 0xFFFFF800E206509C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCancelTimer - OK - 0xFFFFF800E1D28C98 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetTimer - OK - 0xFFFFF800E1D0E75C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAccessCheck - OK - 0xFFFFF800E1CA2F6C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAccessCheckByType - OK - 0xFFFFF800E1D778C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAccessCheckByTypeResultList - OK - 0xFFFFF800E1E83870 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAccessCheckByTypeResultListAndAuditAlarm - OK - 0xFFFFF800E215C5E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAccessCheckByTypeResultListAndAuditAlarmByHandle - OK - 0xFFFFF800E2290ABC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAddAtomEx - OK - 0xFFFFF800E2115578 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAddBootEntry - OK - 0xFFFFF800E22ABD70 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAddDriverEntry - OK - 0xFFFFF800E22ABD90 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAdjustGroupsToken - OK - 0xFFFFF800E211D310 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAdjustTokenClaimsAndDeviceGroups - OK - 0xFFFFF800E2194168 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlertResumeThread - OK - 0xFFFFF800E2283224 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlertThread - OK - 0xFFFFF800E2132D1C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlertThreadByThreadId - OK - 0xFFFFF800E20FFB94 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAllocateLocallyUniqueId - OK - 0xFFFFF800E20F2E8C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAllocateReserveObject - OK - 0xFFFFF800E219215C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAllocateUserPhysicalPages - OK - 0xFFFFF800E226FE2C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAllocateUuids - OK - 0xFFFFF800E20FF624 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcAcceptConnectPort - OK - 0xFFFFF800E200079C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcCancelMessage - OK - 0xFFFFF800E20E939C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcConnectPort - OK - 0xFFFFF800E212277C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcConnectPortEx - OK - 0xFFFFF800E2123A34 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcCreatePort - OK - 0xFFFFF800E211F768 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcCreatePortSection - OK - 0xFFFFF800E211AA80 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcCreateResourceReserve - OK - 0xFFFFF800E210E8F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcCreateSectionView - OK - 0xFFFFF800E209A4CC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcCreateSecurityContext - OK - 0xFFFFF800E20AAE68 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcDeletePortSection - OK - 0xFFFFF800E211C840 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcDeleteResourceReserve - OK - 0xFFFFF800E2269344 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcDeleteSectionView - OK - 0xFFFFF800E2097F84 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcDeleteSecurityContext - OK - 0xFFFFF800E209A374 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcDisconnectPort - OK - 0xFFFFF800E20978AC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcImpersonateClientOfPort - OK - 0xFFFFF800E2017E88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcOpenSenderProcess - OK - 0xFFFFF800E211B010 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcOpenSenderThread - OK - 0xFFFFF800E208C868 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcQueryInformation - OK - 0xFFFFF800E21163C4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcQueryInformationMessage - OK - 0xFFFFF800E2113E64 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcRevokeSecurityContext - OK - 0xFFFFF800E2269568 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcSendWaitReceivePort - OK - 0xFFFFF800E2014A50 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcSetInformation - OK - 0xFFFFF800E20E9DE0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAreMappedFilesTheSame - OK - 0xFFFFF800E212CD6C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAssignProcessToJobObject - OK - 0xFFFFF800E20EAEB4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtAssociateWaitCompletionPacket - OK - 0xFFFFF800E1D09808 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCancelIoFileEx - OK - 0xFFFFF800E2111210 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCancelSynchronousIoFile - OK - 0xFFFFF800E213D804 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCancelTimer2 - OK - 0xFFFFF800E1D0AC64 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCancelWaitCompletionPacket - OK - 0xFFFFF800E1D08AE8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCommitComplete - OK - 0xFFFFF800E1C9B5CC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCommitEnlistment - OK - 0xFFFFF800E1C9B5D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCommitTransaction - OK - 0xFFFFF800E1C9B5DC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCompactKeys - OK - 0xFFFFF800E222AF00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCompareTokens - OK - 0xFFFFF800E1FFD1A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCompleteConnectPort - OK - 0xFFFFF800E21287AC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCompressKey - OK - 0xFFFFF800E222B118 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtConnectPort - OK - 0xFFFFF800E20ED18C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateDebugObject - OK - 0xFFFFF800E223E650 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateDirectoryObject - OK - 0xFFFFF800E2113034 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateDirectoryObjectEx - OK - 0xFFFFF800E211302C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateEnlistment - OK - 0xFFFFF800E1C9B5E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateEventPair - OK - 0xFFFFF800E2194168 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateIRTimer - OK - 0xFFFFF800E2193E68 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateIoCompletion - OK - 0xFFFFF800E209749C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateJobObject - OK - 0xFFFFF800E2127D30 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateJobSet - OK - 0xFFFFF800E2194344 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateKeyTransacted - OK - 0xFFFFF800E207C288 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateKeyedEvent - OK - 0xFFFFF800E2189FE8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateLowBoxToken - OK - 0xFFFFF800E1FFB3C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateMailslotFile - OK - 0xFFFFF800E214B190 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateMutant - OK - 0xFFFFF800E20738C4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateNamedPipeFile - OK - 0xFFFFF800E211EB14 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreatePagingFile - OK - 0xFFFFF800E21863E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreatePort - OK - 0xFFFFF800E2151374 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreatePrivateNamespace - OK - 0xFFFFF800E1FF6E88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateProcess - OK - 0xFFFFF800E228106C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateProfile - OK - 0xFFFFF800E22B135C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateProfileEx - OK - 0xFFFFF800E22B1430 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateResourceManager - OK - 0xFFFFF800E1C9B5EC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateSemaphore - OK - 0xFFFFF800E20B4CF0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateSymbolicLinkObject - OK - 0xFFFFF800E2125FA4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateThreadEx - OK - 0xFFFFF800E20B1EA0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateTimer - OK - 0xFFFFF800E20B672C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateTimer2 - OK - 0xFFFFF800E213B828 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateToken - OK - 0xFFFFF800E22914BC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateTokenEx - OK - 0xFFFFF800E2095B34 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateTransaction - OK - 0xFFFFF800E1C9B5F4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateTransactionManager - OK - 0xFFFFF800E1C9B5FC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateUserProcess - OK - 0xFFFFF800E20B05AC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateWaitCompletionPacket - OK - 0xFFFFF800E2110F44 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateWaitablePort - OK - 0xFFFFF800E2162100 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateWnfStateName - OK - 0xFFFFF800E20842EC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateWorkerFactory - OK - 0xFFFFF800E2097194 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDebugActiveProcess - OK - 0xFFFFF800E223E818 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDebugContinue - OK - 0xFFFFF800E223E9C4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeleteAtom - OK - 0xFFFFF800E2124190 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeleteBootEntry - OK - 0xFFFFF800E22ABDB0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeleteDriverEntry - OK - 0xFFFFF800E22ABFD0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeleteFile - OK - 0xFFFFF800E2161D34 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeleteKey - OK - 0xFFFFF800E205A1E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeleteObjectAuditAlarm - OK - 0xFFFFF800E213A92C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeletePrivateNamespace - OK - 0xFFFFF800E1FF6920 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeleteValueKey - OK - 0xFFFFF800E21145C4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeleteWnfStateData - OK - 0xFFFFF800E218F58C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeleteWnfStateName - OK - 0xFFFFF800E2087EBC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDisableLastKnownGood - OK - 0xFFFFF800E2162160 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDisplayString - OK - 0xFFFFF800E22A5F60 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtDrawText - OK - 0xFFFFF800E1EA5E04 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtEnableLastKnownGood - OK - 0xFFFFF800E2160CC0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtEnumerateBootEntries - OK - 0xFFFFF800E22AC1F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtEnumerateDriverEntries - OK - 0xFFFFF800E22AC814 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtEnumerateSystemEnvironmentValuesEx - OK - 0xFFFFF800E22ACD64 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtEnumerateTransactionObject - OK - 0xFFFFF800E1C9B604 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtExtendSection - OK - 0xFFFFF800E226D5DC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtFilterBootOption - OK - 0xFFFFF800E2291D04 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtFilterToken - OK - 0xFFFFF800E1FFA5FC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtFilterTokenEx - OK - 0xFFFFF800E2194168 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtFlushBuffersFileEx - OK - 0xFFFFF800E211A65C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtFlushInstallUILanguage - OK - 0xFFFFF800E219195C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtFlushInstructionCache - OK - 0xFFFFF800E21287AC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtFlushKey - OK - 0xFFFFF800E212C99C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtFlushProcessWriteBuffers - OK - 0xFFFFF800E1D0DD9C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtFlushVirtualMemory - OK - 0xFFFFF800E20F1CE0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtFlushWriteBuffer - OK - 0xFFFFF800E2271950 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtFreeUserPhysicalPages - OK - 0xFFFFF800E22705B4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtFreezeRegistry - OK - 0xFFFFF800E1E33F50 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtFreezeTransactions - OK - 0xFFFFF800E1C9B60C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetCachedSigningLevel - OK - 0xFFFFF800E213C68C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetCompleteWnfStateSubscription - OK - 0xFFFFF800E2084CEC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetContextThread - OK - 0xFFFFF800E20B6B70 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetCurrentProcessorNumber - OK - 0xFFFFF800E211B580 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetDevicePowerState - OK - 0xFFFFF800E227C188 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetMUIRegistryInfo - OK - 0xFFFFF800E2111380 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetNextProcess - OK - 0xFFFFF800E21542E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetNextThread - OK - 0xFFFFF800E2283C54 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetNlsSectionPtr - OK - 0xFFFFF800E2131B6C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetNotificationResourceManager - OK - 0xFFFFF800E1C9B614 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetWriteWatch - OK - 0xFFFFF800E1CB53F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtImpersonateAnonymousToken - OK - 0xFFFFF800E1FFD5F4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtImpersonateThread - OK - 0xFFFFF800E2112A84 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtInitializeNlsFiles - OK - 0xFFFFF800E2116850 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtInitializeRegistry - OK - 0xFFFFF800E2167B7C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtInitiatePowerAction - OK - 0xFFFFF800E2141AE4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtIsSystemResumeAutomatic - OK - 0xFFFFF800E2152F7C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtIsUILanguageComitted - OK - 0xFFFFF800E2135B30 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtListenPort - OK - 0xFFFFF800E21927F4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtLoadDriver - OK - 0xFFFFF800E2130A80 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtLoadKey - OK - 0xFFFFF800E2152954 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtLoadKey2 - OK - 0xFFFFF800E2168074 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtLoadKeyEx - OK - 0xFFFFF800E20F92C4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtLockFile - OK - 0xFFFFF800E1FFF234 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtLockProductActivationKeys - OK - 0xFFFFF800E215BDB0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtLockRegistryKey - OK - 0xFFFFF800E215E6F4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtLockVirtualMemory - OK - 0xFFFFF800E1D6E454 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtMakePermanentObject - OK - 0xFFFFF800E214922C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtMakeTemporaryObject - OK - 0xFFFFF800E212D558 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtMapCMFModule - OK - 0xFFFFF800E211174C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtMapUserPhysicalPages - OK - 0xFFFFF800E2270A78 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtModifyBootEntry - OK - 0xFFFFF800E22AD14C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtModifyDriverEntry - OK - 0xFFFFF800E22AD168 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtNotifyChangeDirectoryFile - OK - 0xFFFFF800E211CD14 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtNotifyChangeKey - OK - 0xFFFFF800E20F68F4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtNotifyChangeMultipleKeys - OK - 0xFFFFF800E20F695C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtNotifyChangeSession - OK - 0xFFFFF800E2135198 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenEnlistment - OK - 0xFFFFF800E1C9B61C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenEventPair - OK - 0xFFFFF800E2194168 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenIoCompletion - OK - 0xFFFFF800E2249E14 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenJobObject - OK - 0xFFFFF800E22834AC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenKeyEx - OK - 0xFFFFF800E201AB3C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenKeyTransacted - OK - 0xFFFFF800E222B298 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenKeyTransactedEx - OK - 0xFFFFF800E211ACA0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenKeyedEvent - OK - 0xFFFFF800E22B17D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenMutant - OK - 0xFFFFF800E210C594 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenObjectAuditAlarm - OK - 0xFFFFF800E21469A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenPrivateNamespace - OK - 0xFFFFF800E1FF72F4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenProcessToken - OK - 0xFFFFF800E20178FC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenResourceManager - OK - 0xFFFFF800E1C9B624 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenSemaphore - OK - 0xFFFFF800E2128708 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenSession - OK - 0xFFFFF800E21346BC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenSymbolicLinkObject - OK - 0xFFFFF800E2110160 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenThread - OK - 0xFFFFF800E208D5D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenTimer - OK - 0xFFFFF800E22A82A4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenTransaction - OK - 0xFFFFF800E1C9B62C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenTransactionManager - OK - 0xFFFFF800E1C9B634 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtPlugPlayControl - OK - 0xFFFFF800E2047314 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtPrePrepareComplete - OK - 0xFFFFF800E1C9B63C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtPrePrepareEnlistment - OK - 0xFFFFF800E1C9B644 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtPrepareComplete - OK - 0xFFFFF800E1C9B64C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtPrepareEnlistment - OK - 0xFFFFF800E1C9B654 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtPrivilegeCheck - OK - 0xFFFFF800E2094194 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtPrivilegeObjectAuditAlarm - OK - 0xFFFFF800E215E934 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtPrivilegedServiceAuditAlarm - OK - 0xFFFFF800E212D0CC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtPropagationComplete - OK - 0xFFFFF800E1C9B65C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtPropagationFailed - OK - 0xFFFFF800E1C9B664 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtPulseEvent - OK - 0xFFFFF800E207AAD0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryBootEntryOrder - OK - 0xFFFFF800E22AD184 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryBootOptions - OK - 0xFFFFF800E22AD484 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryDebugFilterState - OK - 0xFFFFF800E1D734EC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryDirectoryObject - OK - 0xFFFFF800E20ECA20 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryDriverEntryOrder - OK - 0xFFFFF800E22AD814 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryEaFile - OK - 0xFFFFF800E212D9C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryFullAttributesFile - OK - 0xFFFFF800E20E66CC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationAtom - OK - 0xFFFFF800E2115ECC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationEnlistment - OK - 0xFFFFF800E1C9B66C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationJobObject - OK - 0xFFFFF800E20D27A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationPort - OK - 0xFFFFF800E2268258 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationResourceManager - OK - 0xFFFFF800E1C9B674 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationTransaction - OK - 0xFFFFF800E1C9B67C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationTransactionManager - OK - 0xFFFFF800E1C9B684 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationWorkerFactory - OK - 0xFFFFF800E1EA7EE0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInstallUILanguage - OK - 0xFFFFF800E21313D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryIntervalProfile - OK - 0xFFFFF800E213DD2C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryIoCompletion - OK - 0xFFFFF800E215A1DC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryLicenseValue - OK - 0xFFFFF800E20DBEE0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryMultipleValueKey - OK - 0xFFFFF800E211E630 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryMutant - OK - 0xFFFFF800E22B0C6C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryOpenSubKeys - OK - 0xFFFFF800E222B490 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryOpenSubKeysEx - OK - 0xFFFFF800E21589C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryPortInformationProcess - OK - 0xFFFFF800E22815AC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryQuotaInformationFile - OK - 0xFFFFF800E224B20C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySecurityAttributesToken - OK - 0xFFFFF800E2044AAC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySecurityObject - OK - 0xFFFFF800E20670FC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySemaphore - OK - 0xFFFFF800E2139BCC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySymbolicLinkObject - OK - 0xFFFFF800E210D148 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySystemEnvironmentValue - OK - 0xFFFFF800E22ADC70 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySystemEnvironmentValueEx - OK - 0xFFFFF800E2167D28 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySystemInformationEx - OK - 0xFFFFF800E211AF34 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryTimerResolution - OK - 0xFFFFF800E212F6A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryWnfStateData - OK - 0xFFFFF800E2084864 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryWnfStateNameInformation - OK - 0xFFFFF800E2088304 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueueApcThreadEx - OK - 0xFFFFF800E211D04C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRaiseException - OK - 0xFFFFF800E1DC6560 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRaiseHardError - OK - 0xFFFFF800E22AF87C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtReadOnlyEnlistment - OK - 0xFFFFF800E1C9B68C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRecoverEnlistment - OK - 0xFFFFF800E1C9B694 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRecoverResourceManager - OK - 0xFFFFF800E1C9B69C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRecoverTransactionManager - OK - 0xFFFFF800E1C9B6A4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRegisterProtocolAddressInformation - OK - 0xFFFFF800E1C9B7EC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRegisterThreadTerminatePort - OK - 0xFFFFF800E21379D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtReleaseKeyedEvent - OK - 0xFFFFF800E2134058 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtReleaseWorkerFactoryWorker - OK - 0xFFFFF800E1D07DD0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRemoveIoCompletionEx - OK - 0xFFFFF800E211D1B4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRemoveProcessDebug - OK - 0xFFFFF800E223EC14 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRenameKey - OK - 0xFFFFF800E222B6D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRenameTransactionManager - OK - 0xFFFFF800E1C9B7F4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtReplaceKey - OK - 0xFFFFF800E222BCEC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtReplacePartitionUnit - OK - 0xFFFFF800E1EAC07C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtReplyWaitReplyPort - OK - 0xFFFFF800E2268398 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRequestPort - OK - 0xFFFFF800E211A998 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtResetEvent - OK - 0xFFFFF800E211DE68 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtResetWriteWatch - OK - 0xFFFFF800E1CB8A20 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRestoreKey - OK - 0xFFFFF800E222C1BC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtResumeProcess - OK - 0xFFFFF800E22832FC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRollbackComplete - OK - 0xFFFFF800E1C9B6AC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRollbackEnlistment - OK - 0xFFFFF800E1C9B6B4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRollbackTransaction - OK - 0xFFFFF800E1C9B6BC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtRollforwardTransactionManager - OK - 0xFFFFF800E1C9B7FC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSaveKey - OK - 0xFFFFF800E222C630 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSaveKeyEx - OK - 0xFFFFF800E222CA04 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSaveMergedKeys - OK - 0xFFFFF800E222CE40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSecureConnectPort - OK - 0xFFFFF800E20ED1D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSerializeBoot - OK - 0xFFFFF800E2191F3C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetBootEntryOrder - OK - 0xFFFFF800E22AE048 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetBootOptions - OK - 0xFFFFF800E22AE2D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetCachedSigningLevel - OK - 0xFFFFF800E2125D10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetContextThread - OK - 0xFFFFF800E2152A88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetDebugFilterState - OK - 0xFFFFF800E217E54C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetDefaultHardErrorPort - OK - 0xFFFFF800E21922A4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetDefaultLocale - OK - 0xFFFFF800E21603C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetDefaultUILanguage - OK - 0xFFFFF800E215F538 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetDriverEntryOrder - OK - 0xFFFFF800E22AE570 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetEaFile - OK - 0xFFFFF800E224AC98 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetHighEventPair - OK - 0xFFFFF800E2194168 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetHighWaitLowEventPair - OK - 0xFFFFF800E2194168 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetIRTimer - OK - 0xFFFFF800E1D81F6C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationDebugObject - OK - 0xFFFFF800E223ED00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationEnlistment - OK - 0xFFFFF800E1C9B6C4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationJobObject - OK - 0xFFFFF800E20CFB4C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationKey - OK - 0xFFFFF800E20A2000 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationResourceManager - OK - 0xFFFFF800E1C9B6CC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationToken - OK - 0xFFFFF800E20943C4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationTransaction - OK - 0xFFFFF800E1C9B6D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationTransactionManager - OK - 0xFFFFF800E1C9B804 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationVirtualMemory - OK - 0xFFFFF800E20906B4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationWorkerFactory - OK - 0xFFFFF800E1CB1BE0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetIntervalProfile - OK - 0xFFFFF800E213E6C4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetIoCompletion - OK - 0xFFFFF800E210F1B8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetIoCompletionEx - OK - 0xFFFFF800E2249F24 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetLdtEntries - OK - 0xFFFFF800E1DD2E38 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetLowEventPair - OK - 0xFFFFF800E2194168 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetLowWaitHighEventPair - OK - 0xFFFFF800E2194168 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetQuotaInformationFile - OK - 0xFFFFF800E224BAD0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetSecurityObject - OK - 0xFFFFF800E20026C4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetSystemEnvironmentValue - OK - 0xFFFFF800E22AE800 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetSystemEnvironmentValueEx - OK - 0xFFFFF800E22AEBD0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetSystemInformation - OK - 0xFFFFF800E208CC44 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetSystemPowerState - OK - 0xFFFFF800E1FDB4FC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetSystemTime - OK - 0xFFFFF800E213EA98 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetThreadExecutionState - OK - 0xFFFFF800E207CBC4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetTimer2 - OK - 0xFFFFF800E1D0AD24 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetTimerEx - OK - 0xFFFFF800E1D0E868 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetTimerResolution - OK - 0xFFFFF800E20D6AA0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetUuidSeed - OK - 0xFFFFF800E218B07C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetVolumeInformationFile - OK - 0xFFFFF800E214DEF8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetWnfProcessNotificationEvent - OK - 0xFFFFF800E20892FC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtShutdownSystem - OK - 0xFFFFF800E22A6104 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtShutdownWorkerFactory - OK - 0xFFFFF800E1D7F230 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSignalAndWaitForSingleObject - OK - 0xFFFFF800E1D81C58 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSinglePhaseReject - OK - 0xFFFFF800E1C9B80C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtStartProfile - OK - 0xFFFFF800E22B148C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtStopProfile - OK - 0xFFFFF800E22B16F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSubscribeWnfStateChange - OK - 0xFFFFF800E20854A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSuspendProcess - OK - 0xFFFFF800E2283364 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSuspendThread - OK - 0xFFFFF800E2140408 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtSystemDebugControl - OK - 0xFFFFF800E22B2E44 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtTerminateJobObject - OK - 0xFFFFF800E20EAAF4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtTestAlert - OK - 0xFFFFF800E20B68B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtThawRegistry - OK - 0xFFFFF800E1E33FA4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtThawTransactions - OK - 0xFFFFF800E1C9B6DC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtTraceControl - OK - 0xFFFFF800E206C2F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtTranslateFilePath - OK - 0xFFFFF800E22AEE3C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtUmsThreadYield - OK - 0xFFFFF800E2263FF0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtUnloadDriver - OK - 0xFFFFF800E224D8C4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtUnloadKey - OK - 0xFFFFF800E215A010 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtUnloadKey2 - OK - 0xFFFFF800E215EB8C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtUnloadKeyEx - OK - 0xFFFFF800E20F3BF8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtUnlockFile - OK - 0xFFFFF800E2119624 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtUnlockVirtualMemory - OK - 0xFFFFF800E1D44CE0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtUnmapViewOfSectionEx - OK - 0xFFFFF800E202A6D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtUnsubscribeWnfStateChange - OK - 0xFFFFF800E2084118 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtUpdateWnfStateData - OK - 0xFFFFF800E2085978 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtVdmControl - OK - 0xFFFFF800E2194168 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtWaitForAlertByThreadId - OK - 0xFFFFF800E20F34EC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtWaitForDebugEvent - OK - 0xFFFFF800E223EF00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtWaitForKeyedEvent - OK - 0xFFFFF800E21342DC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtWaitForWorkViaWorkerFactory - OK - 0xFFFFF800E1D1AA30 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtWaitHighEventPair - OK - 0xFFFFF800E2194168 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       NtWaitLowEventPair - OK - 0xFFFFF800E2194168 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation

==========================================================================================

Shadow SSDT

       NtUserYieldTask - OK - 0xFFFFF9600029A5A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetSensorPresence - OK - 0xFFFFF960001F9EF0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetThreadState - OK - 0xFFFFF9600003CAC0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserPeekMessage - OK - 0xFFFFF96000068110 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCallOneParam - OK - 0xFFFFF960000868F0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetKeyState - OK - 0xFFFFF96000168C28 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserInvalidateRect - OK - 0xFFFFF9600016A274 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCallNoParam - OK - 0xFFFFF96000086570 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetMessage - OK - 0xFFFFF9600008CFE0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserMessageCall - OK - 0xFFFFF9600006E2A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiBitBlt - OK - 0xFFFFF96000051E6C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetCharSet - OK - 0xFFFFF9600018B224 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetDC - OK - 0xFFFFF96000056008 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSelectBitmap - OK - 0xFFFFF96000069394 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserWaitMessage - OK - 0xFFFFF96000190624 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserTranslateMessage - OK - 0xFFFFF96000148374 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetProp - OK - 0xFFFFF96000168E30 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserPostMessage - OK - 0xFFFFF960000912C0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserQueryWindow - OK - 0xFFFFF960002975A4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserTranslateAccelerator - OK - 0xFFFFF9600019B0D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiFlush - OK - 0xFFFFF96000034E00 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRedrawWindow - OK - 0xFFFFF96000167430 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserWindowFromPoint - OK - 0xFFFFF9600013A530 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCallMsgFilter - OK - 0xFFFFF960001A4848 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserValidateTimerCallback - OK - 0xFFFFF9600003C960 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserBeginPaint - OK - 0xFFFFF9600016FD30 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetTimer - OK - 0xFFFFF9600006D2C4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserEndPaint - OK - 0xFFFFF9600016FC38 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetCursor - OK - 0xFFFFF96000149B98 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserKillTimer - OK - 0xFFFFF96000074D40 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserBuildHwndList - OK - 0xFFFFF96000167D84 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSelectPalette - OK - 0xFFFFF9600003C6F0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCallNextHookEx - OK - 0xFFFFF9600018A458 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserHideCaret - OK - 0xFFFFF9600013DABC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiIntersectClipRect - OK - 0xFFFFF960000C4EE0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCallHwndLock - OK - 0xFFFFF96000139728 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetProcessWindowStation - OK - 0xFFFFF9600006035C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDeleteObjectApp - OK - 0xFFFFF96000072EE0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowPos - OK - 0xFFFFF9600016F4B4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserShowCaret - OK - 0xFFFFF9600013DA40 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserEndDeferWindowPosEx - OK - 0xFFFFF960001A8F70 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCallHwndParamLock - OK - 0xFFFFF9600013AE0C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserVkKeyScanEx - OK - 0xFFFFF96000148B50 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetDIBitsToDeviceInternal - OK - 0xFFFFF9600003B930 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCallTwoParam - OK - 0xFFFFF96000130F40 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetRandomRgn - OK - 0xFFFFF9600016A420 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCopyAcceleratorTable - OK - 0xFFFFF960001991B0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserNotifyWinEvent - OK - 0xFFFFF9600016D1C0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiExtSelectClipRgn - OK - 0xFFFFF960000C5078 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserIsClipboardFormatAvailable - OK - 0xFFFFF960001E4200 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetScrollInfo - OK - 0xFFFFF96000039440 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiStretchBlt - OK - 0xFFFFF96000196450 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCreateCaret - OK - 0xFFFFF960001A9A14 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiRectVisible - OK - 0xFFFFF96000174828 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCombineRgn - OK - 0xFFFFF9600016A40C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDCObject - OK - 0xFFFFF9600003A5E0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDispatchMessage - OK - 0xFFFFF9600016F750 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterWindowMessage - OK - 0xFFFFF96000041010 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiExtTextOutW - OK - 0xFFFFF960000A18D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSelectFont - OK - 0xFFFFF960001563EC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiRestoreDC - OK - 0xFFFFF9600003A8DC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSaveDC - OK - 0xFFFFF9600003A884 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetForegroundWindow - OK - 0xFFFFF96000131184 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserShowScrollBar - OK - 0xFFFFF960001E80B0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserFindExistingCursorIcon - OK - 0xFFFFF96000050AE0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDCDword - OK - 0xFFFFF960000C90A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetRegionData - OK - 0xFFFFF9600016A8D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiLineTo - OK - 0xFFFFF960000A49FC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSystemParametersInfo - OK - 0xFFFFF960000543F0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetAppClipBox - OK - 0xFFFFF960000C7928 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetAsyncKeyState - OK - 0xFFFFF960001A275C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetCPD - OK - 0xFFFFF9600019E8A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRemoveProp - OK - 0xFFFFF960001694A4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDoPalette - OK - 0xFFFFF9600004CF54 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiPolyPolyDraw - OK - 0xFFFFF960000DAF80 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetCapture - OK - 0xFFFFF9600013A064 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserEnumDisplayMonitors - OK - 0xFFFFF96000142DB4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateCompatibleBitmap - OK - 0xFFFFF96000059D7C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetProp - OK - 0xFFFFF960001676D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetTextCharsetInfo - OK - 0xFFFFF9600018B22C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSBGetParms - OK - 0xFFFFF96000197148 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetIconInfo - OK - 0xFFFFF960000481F0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserExcludeUpdateRgn - OK - 0xFFFFF960001F77F4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetFocus - OK - 0xFFFFF96000139CC8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiExtGetObjectW - OK - 0xFFFFF960000431A4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetUpdateRect - OK - 0xFFFFF96000143CC0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateCompatibleDC - OK - 0xFFFFF96000062354 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetClipboardSequenceNumber - OK - 0xFFFFF960001F49E8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreatePen - OK - 0xFFFFF960000A1D48 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserShowWindow - OK - 0xFFFFF960000467C4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetKeyboardLayoutList - OK - 0xFFFFF960000EDF00 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiPatBlt - OK - 0xFFFFF96000190CA0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserMapVirtualKeyEx - OK - 0xFFFFF96000167320 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowLong - OK - 0xFFFFF960000392B0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiHfontCreate - OK - 0xFFFFF96000036070 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserMoveWindow - OK - 0xFFFFF96000143550 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserPostThreadMessage - OK - 0xFFFFF9600006CB84 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDrawIconEx - OK - 0xFFFFF96000195C54 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetSystemMenu - OK - 0xFFFFF96000059388 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDrawStream - OK - 0xFFFFF96000195B78 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserInternalGetWindowText - OK - 0xFFFFF9600019806C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetWindowDC - OK - 0xFFFFF96000168468 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiInvertRgn - OK - 0xFFFFF960001CDA8C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetRgnBox - OK - 0xFFFFF96000144C04 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetAndSetDCDword - OK - 0xFFFFF960000C70DC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiMaskBlt - OK - 0xFFFFF960001A567C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetWidthTable - OK - 0xFFFFF96000031700 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserScrollDC - OK - 0xFFFFF960001685C8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetObjectInformation - OK - 0xFFFFF96000067BB4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateBitmap - OK - 0xFFFFF96000067F9C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserFindWindowEx - OK - 0xFFFFF96000169590 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiPolyPatBlt - OK - 0xFFFFF960001751F0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserUnhookWindowsHookEx - OK - 0xFFFFF960000F0AF8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetNearestColor - OK - 0xFFFFF9600003230C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiTransformPoints - OK - 0xFFFFF9600019B558 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDCPoint - OK - 0xFFFFF960001A383C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateDIBBrush - OK - 0xFFFFF960001F80DC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetTextMetricsW - OK - 0xFFFFF9600002D5B0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCreateWindowEx - OK - 0xFFFFF96000064D20 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetParent - OK - 0xFFFFF960001AA560 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetKeyboardState - OK - 0xFFFFF96000149C00 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserToUnicodeEx - OK - 0xFFFFF960001992C4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetControlBrush - OK - 0xFFFFF9600013C73C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetClassName - OK - 0xFFFFF960000EBAB0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiAlphaBlend - OK - 0xFFFFF96000175620 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiOffsetRgn - OK - 0xFFFFF960001B073C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDefSetText - OK - 0xFFFFF960001A7D40 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetTextFaceW - OK - 0xFFFFF9600003363C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiStretchDIBitsInternal - OK - 0xFFFFF96000058EAC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSendInput - OK - 0xFFFFF9600014B948 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetThreadDesktop - OK - 0xFFFFF96000067F54 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateRectRgn - OK - 0xFFFFF96000037D38 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDIBitsInternal - OK - 0xFFFFF96000043AAC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetUpdateRgn - OK - 0xFFFFF960001465D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDeleteClientObj - OK - 0xFFFFF960000DB890 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetIconSize - OK - 0xFFFFF960000466D8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserFillWindow - OK - 0xFFFFF9600013CA40 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiExtCreateRegion - OK - 0xFFFFF960000C92A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiComputeXformCoefficients - OK - 0xFFFFF96000155720 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowsHookEx - OK - 0xFFFFF9600007B1EC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserNotifyProcessCreate - OK - 0xFFFFF96000065360 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiUnrealizeObject - OK - 0xFFFFF9600032DD14 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetTitleBarInfo - OK - 0xFFFFF96000166510 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiRectangle - OK - 0xFFFFF960001C9CE0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetThreadDesktop - OK - 0xFFFFF9600012ACC4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetDCEx - OK - 0xFFFFF960001A3C90 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetScrollBarInfo - OK - 0xFFFFF96000166250 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetTextExtent - OK - 0xFFFFF9600032D080 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowFNID - OK - 0xFFFFF960001A7190 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetLayout - OK - 0xFFFFF960000C77E0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCalcMenuBar - OK - 0xFFFFF96000197894 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserThunkedMenuItemInfo - OK - 0xFFFFF96000047B28 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiExcludeClipRect - OK - 0xFFFFF9600013C644 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateDIBSection - OK - 0xFFFFF960000975E0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDCforBitmap - OK - 0xFFFFF9600003A7E0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDestroyCursor - OK - 0xFFFFF96000098168 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDestroyWindow - OK - 0xFFFFF9600008D3F4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCallHwndParam - OK - 0xFFFFF960001A8BF4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateDIBitmapInternal - OK - 0xFFFFF9600007C1C0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserOpenWindowStation - OK - 0xFFFFF960000E8A30 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetCursorIconData - OK - 0xFFFFF9600004C9B8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCloseDesktop - OK - 0xFFFFF960000EFE94 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserOpenDesktop - OK - 0xFFFFF9600002736C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetProcessWindowStation - OK - 0xFFFFF960000EF7A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetAtomName - OK - 0xFFFFF9600006D140 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiExtCreatePen - OK - 0xFFFFF960000A7F08 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreatePaletteInternal - OK - 0xFFFFF960000EB918 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetBrushOrg - OK - 0xFFFFF960001F09AC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserBuildNameList - OK - 0xFFFFF960001A3340 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetPixel - OK - 0xFFFFF960001D8590 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterClassExWOW - OK - 0xFFFFF9600006B8EC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreatePatternBrushInternal - OK - 0xFFFFF96000141ACC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetAncestor - OK - 0xFFFFF9600013D640 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetOutlineTextMetricsInternalW - OK - 0xFFFFF9600018AD9C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetBitmapBits - OK - 0xFFFFF960001E4A60 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCloseWindowStation - OK - 0xFFFFF960000EF840 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetDoubleClickTime - OK - 0xFFFFF960000E8DD4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserEnableScrollBar - OK - 0xFFFFF960001E6638 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateSolidBrush - OK - 0xFFFFF96000064430 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetClassInfoEx - OK - 0xFFFFF9600014D4AC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateClientObj - OK - 0xFFFFF960000B73E8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserUnregisterClass - OK - 0xFFFFF96000092F60 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDeleteMenu - OK - 0xFFFFF96000052180 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiRectInRegion - OK - 0xFFFFF96000201290 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserScrollWindowEx - OK - 0xFFFFF960001E5DD0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetPixel - OK - 0xFFFFF9600014376C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetClassLong - OK - 0xFFFFF960001F8E20 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetMenuBarInfo - OK - 0xFFFFF960001644A4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetNearestPaletteIndex - OK - 0xFFFFF960001F58C0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetCharWidthW - OK - 0xFFFFF960001956BC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserInvalidateRgn - OK - 0xFFFFF960001A76C8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetClipboardOwner - OK - 0xFFFFF9600017B864 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowRgn - OK - 0xFFFFF9600013C860 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserBitBltSysBmp - OK - 0xFFFFF960001F2110 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetCharWidthInfo - OK - 0xFFFFF960001ADD84 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserValidateRect - OK - 0xFFFFF960001AFB48 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCloseClipboard - OK - 0xFFFFF960001E374C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserOpenClipboard - OK - 0xFFFFF960001EDE90 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetStockObject - OK - 0xFFFFF96000068C9C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetClipboardData - OK - 0xFFFFF960001E3B10 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserEnableMenuItem - OK - 0xFFFFF960001D321C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserAlterWindowStyle - OK - 0xFFFFF960001FB5BC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiFillRgn - OK - 0xFFFFF960001C573C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetWindowPlacement - OK - 0xFFFFF96000143F88 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiModifyWorldTransform - OK - 0xFFFFF960000C53F0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetFontData - OK - 0xFFFFF960001563F4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetOpenClipboardWindow - OK - 0xFFFFF960001FA278 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetThreadState - OK - 0xFFFFF960001B41FC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiOpenDCW - OK - 0xFFFFF960000E8BF0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserTrackMouseEvent - OK - 0xFFFFF9600019D704 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetTransform - OK - 0xFFFFF960000C5304 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDestroyMenu - OK - 0xFFFFF960001AD9BC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetBitmapBits - OK - 0xFFFFF9600014045C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserConsoleControl - OK - 0xFFFFF9600003692C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetActiveWindow - OK - 0xFFFFF96000039B78 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetInformationThread - OK - 0xFFFFF960000408A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowPlacement - OK - 0xFFFFF96000145510 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetControlColor - OK - 0xFFFFF96000293204 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetMetaRgn - OK - 0xFFFFF960000C7B78 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetMiterLimit - OK - 0xFFFFF960000C7E30 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetVirtualResolution - OK - 0xFFFFF960000C7274 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetRasterizerCaps - OK - 0xFFFFF9600032CFF4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowWord - OK - 0xFFFFF960001F7920 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetClipboardFormatName - OK - 0xFFFFF960001B2F40 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRealInternalGetMessage - OK - 0xFFFFF96000194844 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCreateLocalMemHandle - OK - 0xFFFFF960001F2FA0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserAttachThreadInput - OK - 0xFFFFF960001AD604 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateHalftonePalette - OK - 0xFFFFF960000EC460 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserPaintMenuBar - OK - 0xFFFFF960001CA228 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetKeyboardState - OK - 0xFFFFF960001A4084 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCombineTransform - OK - 0xFFFFF960000C7CE4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCreateAcceleratorTable - OK - 0xFFFFF960001AA988 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetCursorFrameInfo - OK - 0xFFFFF960001F22DC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetAltTabInfo - OK - 0xFFFFF96000292918 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetCaretBlinkTime - OK - 0xFFFFF96000037E4C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiQueryFontAssocInfo - OK - 0xFFFFF9600005FB7C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserProcessConnect - OK - 0xFFFFF960000610D4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserEnumDisplayDevices - OK - 0xFFFFF9600003D060 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserEmptyClipboard - OK - 0xFFFFF960001E3440 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetClipboardData - OK - 0xFFFFF960001E39E0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRemoveMenu - OK - 0xFFFFF960001A4634 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetBoundsRect - OK - 0xFFFFF9600019E4E0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetBitmapDimension - OK - 0xFFFFF9600032C530 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserConvertMemHandle - OK - 0xFFFFF960001E456C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDestroyAcceleratorTable - OK - 0xFFFFF960001B10B4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetGUIThreadInfo - OK - 0xFFFFF9600018B4F0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCloseFigure - OK - 0xFFFFF960000A9058 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowsHookAW - OK - 0xFFFFF960002994F0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetMenuDefaultItem - OK - 0xFFFFF960001A4710 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCheckMenuItem - OK - 0xFFFFF960001D3188 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetWinEventHook - OK - 0xFFFFF96000147678 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserUnhookWinEvent - OK - 0xFFFFF9600018A210 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserLockWindowUpdate - OK - 0xFFFFF96000295A30 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetSystemMenu - OK - 0xFFFFF960001D28F8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserThunkedMenuInfo - OK - 0xFFFFF960001F4020 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiBeginPath - OK - 0xFFFFF960000DAE80 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEndPath - OK - 0xFFFFF960000DAF20 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiFillPath - OK - 0xFFFFF96000099B78 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCallHwnd - OK - 0xFFFFF960001B23A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDdeInitialize - OK - 0xFFFFF960001AF74C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserModifyUserStartupInfoFlags - OK - 0xFFFFF960001FB4C0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCountClipboardFormats - OK - 0xFFFFF960001E35B0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiAddFontMemResourceEx - OK - 0xFFFFF960001F338C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEqualRgn - OK - 0xFFFFF960001AA26C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetSystemPaletteUse - OK - 0xFFFFF960001FB844 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiRemoveFontMemResourceEx - OK - 0xFFFFF9600032D970 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserEnumDisplaySettings - OK - 0xFFFFF96000155770 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserPaintDesktop - OK - 0xFFFFF96000296CF4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiExtEscape - OK - 0xFFFFF960000B0098 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetBitmapDimension - OK - 0xFFFFF9600032DB78 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetFontEnumeration - OK - 0xFFFFF96000333BB0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserChangeClipboardChain - OK - 0xFFFFF960001F84D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetClipboardViewer - OK - 0xFFFFF960001E3470 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserShowWindowAsync - OK - 0xFFFFF960002995D8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateColorSpace - OK - 0xFFFFF96000334684 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDeleteColorSpace - OK - 0xFFFFF96000334AB4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserActivateKeyboardLayout - OK - 0xFFFFF96000290FC8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtBindCompositionSurface - OK - 0xFFFFF9600019DA0C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtCompositionInputThread - OK - 0xFFFFF960001A80C0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtCreateCompositionInputSink - OK - 0xFFFFF960001F620C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtCreateCompositionSurfaceHandle - OK - 0xFFFFF960001A7870 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionAddCrossDeviceVisualChild - OK - 0xFFFFF960001A66F0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionAddVisualChild - OK - 0xFFFFF9600015B988 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionBeginFrame - OK - 0xFFFFF9600015AE80 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionCommitChannel - OK - 0xFFFFF9600015BF90 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionConfirmFrame - OK - 0xFFFFF96000163580 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionConnectPipe - OK - 0xFFFFF960002F2724 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionCreateAndBindSharedSection - OK - 0xFFFFF960001A8FF4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionCreateChannel - OK - 0xFFFFF96000134EC4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionCreateConnection - OK - 0xFFFFF9600020BC4C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionCreateDwmChannel - OK - 0xFFFFF9600020C148 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionCreateResource - OK - 0xFFFFF9600015C998 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionCurrentBatchId - OK - 0xFFFFF9600015D028 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionDestroyChannel - OK - 0xFFFFF960001348DC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionDestroyConnection - OK - 0xFFFFF960002F2730 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionDiscardFrame - OK - 0xFFFFF96000195054 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionDuplicateHandleToProcess - OK - 0xFFFFF960002F2738 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionDwmSyncFlush - OK - 0xFFFFF960002F28F4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionConnectPipe - OK - 0xFFFFF960002F2724 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionGetConnectionBatch - OK - 0xFFFFF96000132F90 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionGetDeletedResources - OK - 0xFFFFF9600019FF68 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionGetFrameLegacyTokens - OK - 0xFFFFF96000192C30 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionGetFrameStatistics - OK - 0xFFFFF96000161FB0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionGetFrameSurfaceUpdates - OK - 0xFFFFF96000170FD0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionOpenSharedResource - OK - 0xFFFFF9600019C8B0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionOpenSharedResourceHandle - OK - 0xFFFFF9600019C130 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionReferenceSharedResourceOnDwmChannel - OK - 0xFFFFF9600019C778 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionRegisterThumbnailVisual - OK - 0xFFFFF960001EF2B8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionReleaseAllResources - OK - 0xFFFFF96000134840 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionReleaseResource - OK - 0xFFFFF9600015C8C4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionRemoveCrossDeviceVisualChild - OK - 0xFFFFF96000133AFC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionRemoveVisualChild - OK - 0xFFFFF96000160FA0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionReplaceVisualChildren - OK - 0xFFFFF960002F290C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionRetireFrame - OK - 0xFFFFF96000162C68 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionSetChannelCommitCompletionEvent - OK - 0xFFFFF96000134250 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionSetDebugCounter - OK - 0xFFFFF960001B63EC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionSetResourceAnimationProperty - OK - 0xFFFFF960001A6A6C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionSetResourceBufferProperty - OK - 0xFFFFF9600015CAE0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionSetResourceDeletedNotificationTag - OK - 0xFFFFF960001612BC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionSetResourceFloatProperty - OK - 0xFFFFF9600015C860 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionSetResourceHandleProperty - OK - 0xFFFFF960001D5E38 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionSetResourceIntegerProperty - OK - 0xFFFFF9600015D1C4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionSetResourceReferenceArrayProperty - OK - 0xFFFFF9600015BC30 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionSetResourceReferenceProperty - OK - 0xFFFFF9600015D64C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionSignalGpuFence - OK - 0xFFFFF960001F86AC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionSubmitDWMBatch - OK - 0xFFFFF9600015D3E0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionSynchronize - OK - 0xFFFFF9600015A4D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionTelemetryAnimationScenarioBegin - OK - 0xFFFFF960001A7938 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionTelemetryAnimationScenarioReference - OK - 0xFFFFF960001AA7FC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionTelemetryAnimationScenarioUnreference - OK - 0xFFFFF960001AA670 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionTelemetrySetApplicationId - OK - 0xFFFFF960001B055C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionTelemetryTouchInteractionBegin - OK - 0xFFFFF960001ADB30 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionTelemetryTouchInteractionEnd - OK - 0xFFFFF960001AFD20 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionTelemetryTouchInteractionUpdate - OK - 0xFFFFF960001A38D8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDCompositionWaitForChannel - OK - 0xFFFFF960001B31B0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtDuplicateCompositionInputSink - OK - 0xFFFFF960001D68B0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiAbortDoc - OK - 0xFFFFF96000308120 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiAbortPath - OK - 0xFFFFF960003333B8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiAddEmbFontToDC - OK - 0xFFFFF9600030812C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiAddFontResourceW - OK - 0xFFFFF9600012F238 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiAddRemoteFontToDC - OK - 0xFFFFF9600031F088 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiAddRemoteMMInstanceToDC - OK - 0xFFFFF960003081DC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiAngleArc - OK - 0xFFFFF9600032C1A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiAnyLinkedFonts - OK - 0xFFFFF960001A9334 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiArcInternal - OK - 0xFFFFF96000335E50 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiBRUSHOBJ_DeleteRbrush - OK - 0xFFFFF96000336B40 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiBRUSHOBJ_hGetColorTransform - OK - 0xFFFFF96000336C18 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiBRUSHOBJ_pvAllocRbrush - OK - 0xFFFFF96000336C80 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiBRUSHOBJ_pvGetRbrush - OK - 0xFFFFF96000336CF8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiBRUSHOBJ_ulGetBrushColor - OK - 0xFFFFF960000D863C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiBeginGdiRendering - OK - 0xFFFFF960001467C4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCLIPOBJ_bEnum - OK - 0xFFFFF96000336D60 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCLIPOBJ_cEnumStart - OK - 0xFFFFF96000336E84 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCLIPOBJ_ppoGetPath - OK - 0xFFFFF96000336F60 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCancelDC - OK - 0xFFFFF9600032C230 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiChangeGhostFont - OK - 0xFFFFF9600032C298 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCheckBitmapBits - OK - 0xFFFFF96000334300 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiClearBitmapAttributes - OK - 0xFFFFF9600032C300 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiClearBrushAttributes - OK - 0xFFFFF9600032C30C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiColorCorrectPalette - OK - 0xFFFFF960003344E8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiConfigureOPMProtectedOutput - OK - 0xFFFFF9600033A3B0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiConvertMetafileRect - OK - 0xFFFFF96000323D80 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateBitmapFromDxSurface - OK - 0xFFFFF9600032C318 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateBitmapFromDxSurface2 - OK - 0xFFFFF960001A6CA4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateColorTransform - OK - 0xFFFFF96000334780 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateEllipticRgn - OK - 0xFFFFF960003166C4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateHatchBrushInternal - OK - 0xFFFFF960003318BC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateMetafileDC - OK - 0xFFFFF960001F2880 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateOPMProtectedOutputs - OK - 0xFFFFF960001EAD28 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateRoundRectRgn - OK - 0xFFFFF96000153600 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateServerMetaFile - OK - 0xFFFFF960001FB3B0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateSessionMappedDIBSection - OK - 0xFFFFF96000206D80 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDDCCIGetCapabilitiesString - OK - 0xFFFFF9600033BA30 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDDCCIGetCapabilitiesStringLength - OK - 0xFFFFF9600033BA4C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDDCCIGetTimingReport - OK - 0xFFFFF9600033BA98 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDDCCIGetVCPFeature - OK - 0xFFFFF9600033BAF4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDDCCISaveCurrentSettings - OK - 0xFFFFF9600033BBAC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDDCCISetVCPFeature - OK - 0xFFFFF9600033BC04 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdCreateFullscreenSprite - OK - 0xFFFFF96000303044 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIAcquireKeyedMutex - OK - 0xFFFFF960003004B8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIAcquireKeyedMutex2 - OK - 0xFFFFF960001FB89C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICacheHybridQueryValue - OK - 0xFFFFF960003004C0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICheckExclusiveOwnership - OK - 0xFFFFF960001E9D1C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICheckMonitorPowerState - OK - 0xFFFFF9600019FDC8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICheckMultiPlaneOverlaySupport - OK - 0xFFFFF960003004C8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICheckOcclusion - OK - 0xFFFFF960001B8BDC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICheckSharedResourceAccess - OK - 0xFFFFF960003004D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICheckVidPnExclusiveOwnership - OK - 0xFFFFF960001A5604 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICloseAdapter - OK - 0xFFFFF9600003CDC0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIConfigureSharedResource - OK - 0xFFFFF960001B39BC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICreateAllocation - OK - 0xFFFFF960001AB4EC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICreateContext - OK - 0xFFFFF960001B5FB8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICreateDCFromMemory - OK - 0xFFFFF96000141740 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICreateDevice - OK - 0xFFFFF960001B69EC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICreateKeyedMutex - OK - 0xFFFFF96000300520 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICreateKeyedMutex2 - OK - 0xFFFFF960001FB8AC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICreateOutputDupl - OK - 0xFFFFF96000300528 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICreateOverlay - OK - 0xFFFFF9600030060C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICreateSynchronizationObject - OK - 0xFFFFF960001AE650 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIDestroyAllocation - OK - 0xFFFFF960001ABE94 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIDestroyContext - OK - 0xFFFFF960001B69E4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIDestroyDCFromMemory - OK - 0xFFFFF960001429C0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIDestroyDevice - OK - 0xFFFFF960001B70D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIDestroyKeyedMutex - OK - 0xFFFFF960001FB810 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIDestroyOutputDupl - OK - 0xFFFFF96000300614 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIDestroyOverlay - OK - 0xFFFFF96000300620 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIDestroySynchronizationObject - OK - 0xFFFFF960001B0554 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIEnumAdapters - OK - 0xFFFFF960001B3328 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIEscape - OK - 0xFFFFF96000197350 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIFlipOverlay - OK - 0xFFFFF96000300628 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetCachedHybridQueryValue - OK - 0xFFFFF96000300630 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetContextInProcessSchedulingPriority - OK - 0xFFFFF96000300638 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetContextSchedulingPriority - OK - 0xFFFFF960001BA110 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetDeviceState - OK - 0xFFFFF96000192F80 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetDisplayModeList - OK - 0xFFFFF9600003CDCC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetMultisampleMethodList - OK - 0xFFFFF96000300640 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetOverlayState - OK - 0xFFFFF96000300648 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetPresentHistory - OK - 0xFFFFF96000300650 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetPresentQueueEvent - OK - 0xFFFFF9600030304C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetProcessSchedulingPriorityClass - OK - 0xFFFFF9600030065C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetRuntimeData - OK - 0xFFFFF96000300664 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetScanLine - OK - 0xFFFFF960001ECBDC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetSharedPrimaryHandle - OK - 0xFFFFF9600030066C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetSharedResourceAdapterLuid - OK - 0xFFFFF96000300674 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIInvalidateActiveVidPn - OK - 0xFFFFF9600030067C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDILock - OK - 0xFFFFF9600019FDF0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDINetDispGetNextChunkInfo - OK - 0xFFFFF96000300684 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDINetDispQueryMiracastDisplayDeviceStatus - OK - 0xFFFFF9600030068C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDINetDispQueryMiracastDisplayDeviceSupport - OK - 0xFFFFF96000300694 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDINetDispStartMiracastDisplayDevice - OK - 0xFFFFF9600030069C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDINetDispStopMiracastDisplayDevice - OK - 0xFFFFF960003006D8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOfferAllocations - OK - 0xFFFFF9600019FDE0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOpenAdapterFromDeviceName - OK - 0xFFFFF9600003CDD4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOpenAdapterFromHdc - OK - 0xFFFFF960001561D4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOpenAdapterFromLuid - OK - 0xFFFFF960001B8518 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOpenKeyedMutex - OK - 0xFFFFF96000300714 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOpenKeyedMutex2 - OK - 0xFFFFF960001FB8A4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOpenNtHandleFromName - OK - 0xFFFFF9600030071C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOpenResource - OK - 0xFFFFF960001B31A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOpenResourceFromNtHandle - OK - 0xFFFFF960001B3AE4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOpenSyncObjectFromNtHandle - OK - 0xFFFFF960001B9168 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOpenSynchronizationObject - OK - 0xFFFFF960001FB8B4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOutputDuplGetFrameInfo - OK - 0xFFFFF96000300724 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOutputDuplGetMetaData - OK - 0xFFFFF9600030072C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOutputDuplGetPointerShapeData - OK - 0xFFFFF96000300734 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOutputDuplPresent - OK - 0xFFFFF9600030073C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOutputDuplReleaseFrame - OK - 0xFFFFF96000300744 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIPinDirectFlipResources - OK - 0xFFFFF960001BA008 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIPollDisplayChildren - OK - 0xFFFFF96000203F30 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIPresent - OK - 0xFFFFF960001A3078 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIPresentMultiPlaneOverlay - OK - 0xFFFFF9600030074C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIQueryAdapterInfo - OK - 0xFFFFF9600003CDB8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIQueryAllocationResidency - OK - 0xFFFFF960001B8E88 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIQueryRemoteVidPnSourceFromGdiDisplayName - OK - 0xFFFFF960003030E4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIQueryResourceInfo - OK - 0xFFFFF960001B31A8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIQueryResourceInfoFromNtHandle - OK - 0xFFFFF960001B3AEC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIQueryStatistics - OK - 0xFFFFF96000300754 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIReclaimAllocations - OK - 0xFFFFF9600019EA68 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIReleaseKeyedMutex - OK - 0xFFFFF9600030075C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIReleaseKeyedMutex2 - OK - 0xFFFFF96000300764 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIReleaseProcessVidPnSourceOwners - OK - 0xFFFFF9600030076C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIRender - OK - 0xFFFFF960001A3C88 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetAllocationPriority - OK - 0xFFFFF96000300774 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetContextInProcessSchedulingPriority - OK - 0xFFFFF960001B8E80 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetContextSchedulingPriority - OK - 0xFFFFF960001B9610 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetDisplayMode - OK - 0xFFFFF9600018E3A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetDisplayPrivateDriverFormat - OK - 0xFFFFF9600030077C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetGammaRamp - OK - 0xFFFFF96000300794 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetProcessSchedulingPriorityClass - OK - 0xFFFFF9600020D260 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetQueuedLimit - OK - 0xFFFFF960001A9460 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetStereoEnabled - OK - 0xFFFFF9600030079C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetVidPnSourceOwner - OK - 0xFFFFF960001FB0F0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetVidPnSourceOwner1 - OK - 0xFFFFF960001B9694 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIShareObjects - OK - 0xFFFFF960001B12B4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISharedPrimaryLockNotification - OK - 0xFFFFF960003032B0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISharedPrimaryUnLockNotification - OK - 0xFFFFF9600030332C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISignalSynchronizationObject - OK - 0xFFFFF960001A7B20 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIUnlock - OK - 0xFFFFF9600019FDF8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIUnpinDirectFlipResources - OK - 0xFFFFF960001BA000 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIUpdateOverlay - OK - 0xFFFFF960003007A4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIWaitForIdle - OK - 0xFFFFF960003007AC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIWaitForSynchronizationObject - OK - 0xFFFFF960001A7490 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIWaitForVerticalBlankEvent - OK - 0xFFFFF960001A76C0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIWaitForVerticalBlankEvent2 - OK - 0xFFFFF960001A55FC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDestroyFullscreenSprite - OK - 0xFFFFF96000303368 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdNotifyFullscreenSpriteUpdate - OK - 0xFFFFF96000303370 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdQueryVisRgnUniqueness - OK - 0xFFFFF96000303378 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDdUnattachSurface - OK - 0xFFFFF96000303380 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDeleteColorTransform - OK - 0xFFFFF96000334AC0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDescribePixelFormat - OK - 0xFFFFF9600032C33C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDestroyOPMProtectedOutput - OK - 0xFFFFF960001EAC18 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       sub_FFFFF97FFF315EA4 - OK - 0xFFFFF9600033BC7C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDoBanding - OK - 0xFFFFF960000C7F2C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDrawEscape - OK - 0xFFFFF9600032C3D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDwmCreatedBitmapRemotingOutput - OK - 0xFFFFF9600032C514 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF960003033A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEllipse - OK - 0xFFFFF9600032F1E0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEnableEudc - OK - 0xFFFFF96000206790 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEndDoc - OK - 0xFFFFF960000E8474 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEndGdiRendering - OK - 0xFFFFF96000146954 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEndPage - OK - 0xFFFFF960003083CC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngAlphaBlend - OK - 0xFFFFF96000336FBC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngAssociateSurface - OK - 0xFFFFF960000ADB70 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngBitBlt - OK - 0xFFFFF960000C8AA0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngCheckAbort - OK - 0xFFFFF96000337230 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngComputeGlyphSet - OK - 0xFFFFF960003372B8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngCopyBits - OK - 0xFFFFF960000AA3E8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngCreateBitmap - OK - 0xFFFFF960000ADDC0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngCreateClip - OK - 0xFFFFF96000337380 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngCreateDeviceBitmap - OK - 0xFFFFF960003373CC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngCreateDeviceSurface - OK - 0xFFFFF960000AF320 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngCreatePalette - OK - 0xFFFFF960000AECB4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngDeleteClip - OK - 0xFFFFF9600033740C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngDeletePalette - OK - 0xFFFFF960000E8188 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngDeletePath - OK - 0xFFFFF96000337484 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngDeleteSurface - OK - 0xFFFFF960000E87DC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngEraseSurface - OK - 0xFFFFF96000337504 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngFillPath - OK - 0xFFFFF96000337664 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngGradientFill - OK - 0xFFFFF96000337860 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngLineTo - OK - 0xFFFFF96000337C18 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngLockSurface - OK - 0xFFFFF960000AF3B0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngMarkBandingSurface - OK - 0xFFFFF960000AE460 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngPaint - OK - 0xFFFFF96000337E28 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngPlgBlt - OK - 0xFFFFF96000337FB0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngStretchBlt - OK - 0xFFFFF960000CEA24 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngStretchBltROP - OK - 0xFFFFF960000D0EFC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngStrokeAndFillPath - OK - 0xFFFFF96000338330 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngStrokePath - OK - 0xFFFFF96000338610 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngTextOut - OK - 0xFFFFF960000D874C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngTransparentBlt - OK - 0xFFFFF960003388AC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEngUnlockSurface - OK - 0xFFFFF960000E8860 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEnumFonts - OK - 0xFFFFF96000036C9C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEnumObjects - OK - 0xFFFFF9600033E320 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiEudcLoadUnloadLink - OK - 0xFFFFF9600033DB3C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiExtFloodFill - OK - 0xFFFFF960001D79D8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiFONTOBJ_cGetAllGlyphHandles - OK - 0xFFFFF96000338AFC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiFONTOBJ_cGetGlyphs - OK - 0xFFFFF96000338BF8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiFONTOBJ_pQueryGlyphAttrs - OK - 0xFFFFF96000338E1C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiFONTOBJ_pfdg - OK - 0xFFFFF96000338F58 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiFONTOBJ_pifi - OK - 0xFFFFF960000D7EEC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiFONTOBJ_pvTrueTypeFontFile - OK - 0xFFFFF96000339094 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiFONTOBJ_pxoGetXform - OK - 0xFFFFF960000D8040 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiFONTOBJ_vGetInfo - OK - 0xFFFFF9600033919C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiFlattenPath - OK - 0xFFFFF9600033345C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiFontIsLinked - OK - 0xFFFFF960001AB250 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiForceUFIMapping - OK - 0xFFFFF960000D78B0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiFrameRgn - OK - 0xFFFFF96000151FA0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserInitTask - OK - 0xFFFFF96000210760 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetBoundsRect - OK - 0xFFFFF96000151CA0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetCOPPCompatibleOPMInformation - OK - 0xFFFFF9600033A4C8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetCertificate - OK - 0xFFFFF960001EAE60 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetCertificateSize - OK - 0xFFFFF960001EADA4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetCharABCWidthsW - OK - 0xFFFFF960001A5BAC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetCharacterPlacementW - OK - 0xFFFFF9600032C574 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetColorAdjustment - OK - 0xFFFFF9600032CB84 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetColorSpaceforBitmap - OK - 0xFFFFF96000332220 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetCurrentDpiInfo - OK - 0xFFFFF960001519C0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDeviceCaps - OK - 0xFFFFF960000EBA98 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDeviceCapsAll - OK - 0xFFFFF960000AF2A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDeviceGammaRamp - OK - 0xFFFFF96000334B44 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDeviceWidth - OK - 0xFFFFF9600032CBD4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDhpdev - OK - 0xFFFFF9600033929C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetETM - OK - 0xFFFFF960001F5510 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetEmbUFI - OK - 0xFFFFF9600032CC20 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetEmbedFonts - OK - 0xFFFFF9600032CD60 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetEudcTimeStampEx - OK - 0xFFFFF9600033DCE4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetFontFileData - OK - 0xFFFFF9600033F360 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetFontFileInfo - OK - 0xFFFFF960001A5D00 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetFontResourceInfoInternalW - OK - 0xFFFFF9600032CD90 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetFontUnicodeRanges - OK - 0xFFFFF960001357C8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetGlyphIndicesW - OK - 0xFFFFF96000039EF4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetGlyphIndicesWInternal - OK - 0xFFFFF9600003A0C0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetGlyphOutline - OK - 0xFFFFF960001E22C4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetKerningPairs - OK - 0xFFFFF960001DFDE4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetLinkedUFIs - OK - 0xFFFFF960001D5110 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetMiterLimit - OK - 0xFFFFF960001F6E94 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetMonitorID - OK - 0xFFFFF9600031E078 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetNumberOfPhysicalMonitors - OK - 0xFFFFF960001EABE0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetOPMInformation - OK - 0xFFFFF960001EBC48 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetOPMRandomNumber - OK - 0xFFFFF960001EAF7C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetObjectBitmapHandle - OK - 0xFFFFF9600032CFA0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetPath - OK - 0xFFFFF960003334EC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetPerBandInfo - OK - 0xFFFFF960000C8178 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetPhysicalMonitorDescription - OK - 0xFFFFF9600033BC84 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetPhysicalMonitors - OK - 0xFFFFF9600033BD90 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetRealizationInfo - OK - 0xFFFFF96000031F70 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetServerMetaFileBits - OK - 0xFFFFF9600033A540 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       ?GetModel@CTokenBase@@UEBA?AW4TokenModel - OK - 0xFFFFF960000664D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetStats - OK - 0xFFFFF9600033F790 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetStringBitmapW - OK - 0xFFFFF9600033DE30 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetSuggestedOPMProtectedOutputArraySize - OK - 0xFFFFF960001EACDC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetTextExtentExW - OK - 0xFFFFF9600012A570 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetUFI - OK - 0xFFFFF960001DED5C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGetUFIPathname - OK - 0xFFFFF9600032D200 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiGradientFill - OK - 0xFFFFF96000163288 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiHLSurfGetInformation - OK - 0xFFFFF96000159AD0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiHLSurfSetInformation - OK - 0xFFFFF9600019EA70 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiHT_Get8BPPFormatPalette - OK - 0xFFFFF960003392DC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiHT_Get8BPPMaskPalette - OK - 0xFFFFF9600009BA40 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiIcmBrushInfo - OK - 0xFFFFF96000334BCC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       ?NlsNullProc@@YAHPEAUtagKE@@_KK@Z - OK - 0xFFFFF9600006039C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiInitSpool - OK - 0xFFFFF96000318DFC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiMakeFontDir - OK - 0xFFFFF9600032D574 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiMakeInfoDC - OK - 0xFFFFF960001DF6E4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiMakeObjectUnXferable - OK - 0xFFFFF960001EA8E0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiMakeObjectXferable - OK - 0xFFFFF960001EA388 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiMirrorWindowOrg - OK - 0xFFFFF9600032D78C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiMonoBitmap - OK - 0xFFFFF960003318C4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiMoveTo - OK - 0xFFFFF9600032D7D4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiOffsetClipRgn - OK - 0xFFFFF960000C738C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiPATHOBJ_bEnum - OK - 0xFFFFF96000339380 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiPATHOBJ_bEnumClipLines - OK - 0xFFFFF96000339520 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiPATHOBJ_vEnumStart - OK - 0xFFFFF960003396E4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiPATHOBJ_vEnumStartClipLines - OK - 0xFFFFF96000339788 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiPATHOBJ_vGetBounds - OK - 0xFFFFF960003398F4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiPathToRegion - OK - 0xFFFFF96000333728 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiPlgBlt - OK - 0xFFFFF960001D97A4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiPolyDraw - OK - 0xFFFFF9600032D814 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiPolyTextOutW - OK - 0xFFFFF96000030D40 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiPtInRegion - OK - 0xFFFFF96000197D78 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiPtVisible - OK - 0xFFFFF96000316850 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiQueryFonts - OK - 0xFFFFF960000AEABC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiRemoveFontResourceW - OK - 0xFFFFF9600032D980 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiRemoveMergeFont - OK - 0xFFFFF9600030851C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiResetDC - OK - 0xFFFFF9600009AA60 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiResizePalette - OK - 0xFFFFF96000332C40 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiRoundRect - OK - 0xFFFFF960001CD0C8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSTROBJ_bEnum - OK - 0xFFFFF960003399A8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSTROBJ_bEnumPositionsOnly - OK - 0xFFFFF960003399B0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSTROBJ_bGetAdvanceWidths - OK - 0xFFFFF960003399BC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSTROBJ_dwGetCodePage - OK - 0xFFFFF96000339AD0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSTROBJ_vEnumStart - OK - 0xFFFFF96000339B38 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiScaleViewportExtEx - OK - 0xFFFFF96000323F30 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiScaleWindowExtEx - OK - 0xFFFFF9600032DB18 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSelectBrush - OK - 0xFFFFF9600032DB68 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSelectClipPath - OK - 0xFFFFF960000DB538 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSelectPen - OK - 0xFFFFF9600032DB70 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetBitmapAttributes - OK - 0xFFFFF96000206C18 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetBrushAttributes - OK - 0xFFFFF9600032DBC4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetColorAdjustment - OK - 0xFFFFF9600032DBD0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetColorSpace - OK - 0xFFFFF960001F72AC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetDeviceGammaRamp - OK - 0xFFFFF96000334F48 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetFontXform - OK - 0xFFFFF960000A6DE4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetIcmMode - OK - 0xFFFFF960000D73A8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetLinkedUFIs - OK - 0xFFFFF960000D7C1C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetMagicColors - OK - 0xFFFFF96000332EB0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetOPMSigningKeyAndSequenceNumbers - OK - 0xFFFFF960001EB038 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetPUMPDOBJ - OK - 0xFFFFF960000C5BB0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetPixelFormat - OK - 0xFFFFF9600033FB78 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetRectRgn - OK - 0xFFFFF9600032DD04 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetSizeDevice - OK - 0xFFFFF960000C7320 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetSystemPaletteUse - OK - 0xFFFFF9600032DD0C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetTextJustification - OK - 0xFFFFF960003317A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSetUMPDSandboxState - OK - 0xFFFFF960001FB648 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiStartDoc - OK - 0xFFFFF960000AD650 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiStartPage - OK - 0xFFFFF960000B74A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiStrokeAndFillPath - OK - 0xFFFFF96000333844 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiStrokePath - OK - 0xFFFFF9600033397C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiSwapBuffers - OK - 0xFFFFF9600033FD50 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiTransparentBlt - OK - 0xFFFFF960001E1ABC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiUMPDEngFreeUserMem - OK - 0xFFFFF96000339BA4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       ?GetModel@CTokenBase@@UEBA?AW4TokenModel@1@XZ - OK - 0xFFFFF960000664D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       ?NlsNullProc@@YAHPEAUtagKE@@_KK@Z - OK - 0xFFFFF9600006039C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiUpdateColors - OK - 0xFFFFF96000332EC0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiUpdateTransform - OK - 0xFFFFF96000324094 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiWidenPath - OK - 0xFFFFF96000333A8C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiXFORMOBJ_bApplyXform - OK - 0xFFFFF96000339C30 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiXFORMOBJ_iGetXform - OK - 0xFFFFF960000D809C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiXLATEOBJ_cGetPalette - OK - 0xFFFFF96000339DD0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiXLATEOBJ_hGetColorTransform - OK - 0xFFFFF96000339EC0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtGdiXLATEOBJ_iXlate - OK - 0xFFFFF96000339F28 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtNotifyPresentToCompositionSurface - OK - 0xFFFFF960002109D4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtOpenCompositionSurfaceDirtyRegion - OK - 0xFFFFF96000198D38 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtOpenCompositionSurfaceSectionInfo - OK - 0xFFFFF960002F3C54 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtOpenCompositionSurfaceSwapChainHandleInfo - OK - 0xFFFFF9600019866C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtQueryCompositionInputSink - OK - 0xFFFFF960001D600C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtQueryCompositionInputSinkLuid - OK - 0xFFFFF960001D6218 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtQueryCompositionSurfaceBinding - OK - 0xFFFFF960001982F8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtQueryCompositionSurfaceRenderingRealization - OK - 0xFFFFF96000198A24 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtQueryCompositionSurfaceStatistics - OK - 0xFFFFF960001707B0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtSetCompositionSurfaceBufferCompositionMode - OK - 0xFFFFF960001B28C0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtSetCompositionSurfaceIndependentFlipInfo - OK - 0xFFFFF960002F3DF8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtSetCompositionSurfaceOutOfFrameDirectFlipNotification - OK - 0xFFFFF960001B5854 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtSetCompositionSurfaceStatistics - OK - 0xFFFFF960001576D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtTokenManagerCreateCompositionTokenHandle - OK - 0xFFFFF96000162314 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtTokenManagerDeleteOutstandingDirectFlipTokens - OK - 0xFFFFF96000158B8C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtTokenManagerGetOutOfFrameDirectFlipSurfaceUpdates - OK - 0xFFFFF96000158E90 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtTokenManagerOpenEvent - OK - 0xFFFFF9600020CA6C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtTokenManagerOpenSection - OK - 0xFFFFF9600020CBB0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtTokenManagerThread - OK - 0xFFFFF960001AD120 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUnBindCompositionSurface - OK - 0xFFFFF960001981D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUpdateInputSinkTransforms - OK - 0xFFFFF960001D63C0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserAcquireIAMKey - OK - 0xFFFFF960001B7C2C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserAddClipboardFormatListener - OK - 0xFFFFF960001FA7D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserAssociateInputContext - OK - 0xFFFFF960001A9604 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserAutoPromoteMouseInPointer - OK - 0xFFFFF960001F0DA8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserAutoRotateScreen - OK - 0xFFFFF960001F9F58 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserBlockInput - OK - 0xFFFFF960001FAB50 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserBuildHimcList - OK - 0xFFFFF960001AC244 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserBuildPropList - OK - 0xFFFFF960001ABBF4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCalculatePopupWindowPosition - OK - 0xFFFFF9600029105C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCallHwndOpt - OK - 0xFFFFF960001B7A68 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCanBrokerForceForeground - OK - 0xFFFFF960001B1FB0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserChangeDisplaySettings - OK - 0xFFFFF9600018C270 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserChangeWindowMessageFilterEx - OK - 0xFFFFF9600013B3A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCheckAccessForIntegrityLevel - OK - 0xFFFFF96000291280 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCheckProcessForClipboardAccess - OK - 0xFFFFF960002913B4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCheckProcessSession - OK - 0xFFFFF960001AE7AC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCheckWindowThreadDesktop - OK - 0xFFFFF96000291494 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserChildWindowFromPointEx - OK - 0xFFFFF960001F12D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserClearForeground - OK - 0xFFFFF960002915C4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserClipCursor - OK - 0xFFFFF960001B4A70 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCompositionInputSinkLuidFromPoint - OK - 0xFFFFF96000291634 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCreateDCompositionHwndTarget - OK - 0xFFFFF9600019C00C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCreateDesktopEx - OK - 0xFFFFF960000F0778 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCreateInputContext - OK - 0xFFFFF960001E493C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCreateWindowStation - OK - 0xFFFFF960000EEC20 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserCtxDisplayIOCtl - OK - 0xFFFFF96000291740 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDeferWindowPosAndBand - OK - 0xFFFFF9600019AB10 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDelegateCapturePointers - OK - 0xFFFFF96000189300 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDelegateInput - OK - 0xFFFFF960001AE4BC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDestroyDCompositionHwndTarget - OK - 0xFFFFF9600019BD00 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDestroyInputContext - OK - 0xFFFFF960001F42B4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDisableImmersiveOwner - OK - 0xFFFFF960001325FC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDisableProcessWindowFiltering - OK - 0xFFFFF960001AC67C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDisableThreadIme - OK - 0xFFFFF960000EF8DC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDiscardPointerFrameMessages - OK - 0xFFFFF96000291860 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDisplayConfigGetDeviceInfo - OK - 0xFFFFF96000154870 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDisplayConfigSetDeviceInfo - OK - 0xFFFFF960002918E8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDoSoundConnect - OK - 0xFFFFF96000291AE0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDoSoundDisconnect - OK - 0xFFFFF96000291C1C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDragDetect - OK - 0xFFFFF96000291C74 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDragObject - OK - 0xFFFFF96000291CF0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDrawAnimatedRects - OK - 0xFFFFF96000291E3C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDrawCaption - OK - 0xFFFFF96000291F44 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDrawCaptionTemp - OK - 0xFFFFF96000292034 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDrawMenuBarTemp - OK - 0xFFFFF960002922B8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDwmGetRemoteSessionOcclusionEvent - OK - 0xFFFFF960002923E4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDwmGetRemoteSessionOcclusionState - OK - 0xFFFFF96000292474 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDwmStartRedirection - OK - 0xFFFFF9600020A490 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDwmStopRedirection - OK - 0xFFFFF960002924A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserDwmValidateWindow - OK - 0xFFFFF960001A4E60 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserEnableIAMAccess - OK - 0xFFFFF96000139AF0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserEnableMouseInPointer - OK - 0xFFFFF960001861F0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserEnableMouseInputForCursorSuppression - OK - 0xFFFFF960001B6AB4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserEnableTouchPad - OK - 0xFFFFF96000292528 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserEndMenu - OK - 0xFFFFF960001B6B44 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserEvent - OK - 0xFFFFF960002925C4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserFlashWindowEx - OK - 0xFFFFF960002926E4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserFrostCrashedWindow - OK - 0xFFFFF96000292804 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetAppImeLevel - OK - 0xFFFFF96000292CF0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetAutoRotationState - OK - 0xFFFFF960001B37CC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetCIMSSM - OK - 0xFFFFF96000292E10 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetCaretPos - OK - 0xFFFFF960001B42D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetClipCursor - OK - 0xFFFFF96000292EF8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetClipboardAccessToken - OK - 0xFFFFF96000293070 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetClipboardViewer - OK - 0xFFFFF9600029313C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetComboBoxInfo - OK - 0xFFFFF960001EA5FC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetCurrentInputMessageSource - OK - 0xFFFFF9600019FC30 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetCursorDims - OK - 0xFFFFF960001B1104 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetCursorInfo - OK - 0xFFFFF96000137A04 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetDesktopID - OK - 0xFFFFF960001A62C8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetDisplayAutoRotationPreferences - OK - 0xFFFFF960001B4510 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetDisplayAutoRotationPreferencesByProcessId - OK - 0xFFFFF960001F98DC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetDisplayConfigBufferSizes - OK - 0xFFFFF960001551B0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetDpiForMonitor - OK - 0xFFFFF960001516F0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetGestureConfig - OK - 0xFFFFF960001F8FA0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetGestureExtArgs - OK - 0xFFFFF960002932F8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetGestureInfo - OK - 0xFFFFF96000293420 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetGuiResources - OK - 0xFFFFF96000293590 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetHimetricScaleFactorFromPixelLocation - OK - 0xFFFFF96000293758 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetImeHotKey - OK - 0xFFFFF96000293974 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetImeInfoEx - OK - 0xFFFFF9600014B600 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetInputLocaleInfo - OK - 0xFFFFF96000293ABC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetInternalWindowPos - OK - 0xFFFFF96000293D0C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetKeyNameText - OK - 0xFFFFF96000293ED0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetKeyboardLayoutName - OK - 0xFFFFF960001B07E0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetLayeredWindowAttributes - OK - 0xFFFFF96000294030 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetListBoxInfo - OK - 0xFFFFF9600029414C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetMenuIndex - OK - 0xFFFFF960002941C0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetMenuItemRect - OK - 0xFFFFF960001F1D40 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetMouseMovePointsEx - OK - 0xFFFFF960002942D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetOwnerTransformedMonitorRect - OK - 0xFFFFF960001FA14C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetPhysicalDeviceRect - OK - 0xFFFFF96000294400 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetPointerCursorId - OK - 0xFFFFF960001F9DC4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetPointerDevice - OK - 0xFFFFF96000183770 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetPointerDeviceCursors - OK - 0xFFFFF96000183CF0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetPointerDeviceProperties - OK - 0xFFFFF960001834E8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetPointerDeviceRects - OK - 0xFFFFF9600017E19C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetPointerDevices - OK - 0xFFFFF960001827F0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetPointerInfoList - OK - 0xFFFFF9600014E78C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetPointerInputTransform - OK - 0xFFFFF960001E4F28 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetPointerType - OK - 0xFFFFF960001ABDB0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetPrecisionTouchPadConfiguration - OK - 0xFFFFF960001F4BB8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetPriorityClipboardFormat - OK - 0xFFFFF960002944EC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetProcessDpiAwareness - OK - 0xFFFFF960001675A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetProcessUIContextInformation - OK - 0xFFFFF9600005FEF0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetQueueEventStatus - OK - 0xFFFFF960001A7F30 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetRawInputBuffer - OK - 0xFFFFF96000294698 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetRawInputData - OK - 0xFFFFF960001A51AC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetRawInputDeviceInfo - OK - 0xFFFFF960001ABF0C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetRawInputDeviceList - OK - 0xFFFFF960002013D0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetRawPointerDeviceData - OK - 0xFFFFF96000184578 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetRegisteredRawInputDevices - OK - 0xFFFFF960002949A8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetTopLevelWindow - OK - 0xFFFFF96000294A18 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetTouchInputInfo - OK - 0xFFFFF96000294B10 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetTouchValidationStatus - OK - 0xFFFFF9600017B1D8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetUpdatedClipboardFormats - OK - 0xFFFFF96000294C44 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetWOWClass - OK - 0xFFFFF96000294DE0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetWindowBand - OK - 0xFFFFF9600013D310 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetWindowCompositionAttribute - OK - 0xFFFFF96000168114 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetWindowCompositionInfo - OK - 0xFFFFF96000294F40 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetWindowDisplayAffinity - OK - 0xFFFFF96000295170 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetWindowFeedbackSetting - OK - 0xFFFFF960001F6580 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetWindowMinimizeRect - OK - 0xFFFFF9600014727C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGetWindowRgnEx - OK - 0xFFFFF96000144AB0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserGhostWindowFromHungWindow - OK - 0xFFFFF96000149500 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserHandleDelegatedInput - OK - 0xFFFFF960001886C4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserHardErrorControl - OK - 0xFFFFF960002952F8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserHidePointerContactVisualization - OK - 0xFFFFF960001B5414 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserHiliteMenuItem - OK - 0xFFFFF960002953F0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserHungWindowFromGhostWindow - OK - 0xFFFFF96000201538 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserHwndQueryRedirectionInfo - OK - 0xFFFFF960001FEF20 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserHwndSetRedirectionInfo - OK - 0xFFFFF960001D929C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserImpersonateDdeClientWindow - OK - 0xFFFFF960002954EC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserInitTask - OK - 0xFFFFF96000210760 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserInitialize - OK - 0xFFFFF960000F5BB4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserInitializeClientPfnArrays - OK - 0xFFFFF9600010D4FC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserInitializeTouchInjection - OK - 0xFFFFF96000178090 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserInjectGesture - OK - 0xFFFFF96000295598 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserInjectTouchInput - OK - 0xFFFFF9600017C810 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserInternalClipCursor - OK - 0xFFFFF960001B0A78 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserInternalGetWindowIcon - OK - 0xFFFFF9600020F254 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserIsMouseInPointerEnabled - OK - 0xFFFFF96000295880 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserIsMouseInputEnabled - OK - 0xFFFFF96000295940 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserIsTopLevelWindow - OK - 0xFFFFF960001AC7F8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserIsTouchWindow - OK - 0xFFFFF960001FA620 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserLayoutCompleted - OK - 0xFFFFF96000146FA0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserLinkDpiCursor - OK - 0xFFFFF9600029597C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserLoadKeyboardLayoutEx - OK - 0xFFFFF96000125C20 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserLockWindowStation - OK - 0xFFFFF960001A31CC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserLockWorkStation - OK - 0xFFFFF96000132A9C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserLogicalToPerMonitorDPIPhysicalPoint - OK - 0xFFFFF960001F9A40 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserLogicalToPhysicalPoint - OK - 0xFFFFF960001678F0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserMNDragLeave - OK - 0xFFFFF96000295A88 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserMNDragOver - OK - 0xFFFFF96000295B08 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserMagControl - OK - 0xFFFFF96000295BD4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserMagGetContextInformation - OK - 0xFFFFF96000295C60 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserMagSetContextInformation - OK - 0xFFFFF96000296120 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserMenuItemFromPoint - OK - 0xFFFFF96000296A50 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserMinMaximize - OK - 0xFFFFF96000296BA0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserModifyWindowTouchCapability - OK - 0xFFFFF960001B6110 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserNotifyIMEStatus - OK - 0xFFFFF960001A5F88 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserOpenInputDesktop - OK - 0xFFFFF960001974A8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserOpenThreadDesktop - OK - 0xFFFFF96000296C70 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserPaintMonitor - OK - 0xFFFFF96000296D80 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserPerMonitorDPIPhysicalToLogicalPoint - OK - 0xFFFFF96000296E9C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserPhysicalToLogicalPoint - OK - 0xFFFFF9600019FE00 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserPrintWindow - OK - 0xFFFFF9600029712C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserPromoteMouseInPointer - OK - 0xFFFFF960002971E8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserPromotePointer - OK - 0xFFFFF960001ECF5C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserQueryBSDRWindow - OK - 0xFFFFF96000297250 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserQueryDisplayConfig - OK - 0xFFFFF9600014C748 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserQueryInformationThread - OK - 0xFFFFF96000297288 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserQueryInputContext - OK - 0xFFFFF96000149E44 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserQuerySendMessage - OK - 0xFFFFF9600029743C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRealChildWindowFromPoint - OK - 0xFFFFF96000297810 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRealWaitMessageEx - OK - 0xFFFFF960002978FC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterBSDRWindow - OK - 0xFFFFF96000297960 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterEdgy - OK - 0xFFFFF9600017A1A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterErrorReportingDialog - OK - 0xFFFFF96000297A3C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterHotKey - OK - 0xFFFFF9600019A5C0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterPointerDeviceNotifications - OK - 0xFFFFF960001B2FE4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterPointerInputTarget - OK - 0xFFFFF96000297B24 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterRawInputDevices - OK - 0xFFFFF9600017C420 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterServicesProcess - OK - 0xFFFFF96000297BFC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterSessionPort - OK - 0xFFFFF9600020D104 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterTasklist - OK - 0xFFFFF96000297EA4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterTouchHitTestingWindow - OK - 0xFFFFF960001848CC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterTouchPadCapable - OK - 0xFFFFF96000297F00 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterUserApiHook - OK - 0xFFFFF96000205550 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRemoteConnect - OK - 0xFFFFF96000205820 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRemoteRedrawRectangle - OK - 0xFFFFF96000297F6C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRemoteRedrawScreen - OK - 0xFFFFF96000297FF0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRemoteStopScreenUpdates - OK - 0xFFFFF9600029804C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserRemoveClipboardFormatListener - OK - 0xFFFFF960001FA888 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserReportInertia - OK - 0xFFFFF960001AEEFC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserResolveDesktopForWOW - OK - 0xFFFFF960002980A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSendEventMessage - OK - 0xFFFFF96000147464 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetActivationFilter - OK - 0xFFFFF960001AFDFC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetActiveProcess - OK - 0xFFFFF96000139620 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetAppImeLevel - OK - 0xFFFFF96000298240 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetAutoRotation - OK - 0xFFFFF960001FA58C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetBrokeredForeground - OK - 0xFFFFF960001B0DCC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetCalibrationData - OK - 0xFFFFF960002982DC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetChildWindowNoActivate - OK - 0xFFFFF960001B65E4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetClassWord - OK - 0xFFFFF96000298584 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetCursorContents - OK - 0xFFFFF960002985E8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetDisplayAutoRotationPreferences - OK - 0xFFFFF960001B11EC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetDisplayConfig - OK - 0xFFFFF96000298664 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetDisplayMapping - OK - 0xFFFFF96000298BD4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetFallbackForeground - OK - 0xFFFFF960001B0EDC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetGestureConfig - OK - 0xFFFFF960001930E8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetImeHotKey - OK - 0xFFFFF9600012BCCC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetImeInfoEx - OK - 0xFFFFF9600020C85C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetImeOwnerWindow - OK - 0xFFFFF9600013A190 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetImmersiveBackgroundWindow - OK - 0xFFFFF960001B8160 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetInternalWindowPos - OK - 0xFFFFF96000298D20 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetLayeredWindowAttributes - OK - 0xFFFFF960001AA330 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetMenu - OK - 0xFFFFF960001E823C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetMenuContextHelpId - OK - 0xFFFFF96000298E50 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetMenuFlagRtoL - OK - 0xFFFFF96000298EC0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetMirrorRendering - OK - 0xFFFFF96000298F10 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetObjectInformation - OK - 0xFFFFF96000298FC8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetPrecisionTouchPadConfiguration - OK - 0xFFFFF96000299110 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetProcessDpiAwareness - OK - 0xFFFFF9600005F8D4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetProcessRestrictionExemption - OK - 0xFFFFF96000299208 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetProcessUIAccessZorder - OK - 0xFFFFF96000299270 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetShellWindowEx - OK - 0xFFFFF96000199D5C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetSysColors - OK - 0xFFFFF960001B4F54 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetSystemCursor - OK - 0xFFFFF960002992BC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetSystemTimer - OK - 0xFFFFF96000299310 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetThreadInputBlocked - OK - 0xFFFFF9600019B6AC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetThreadLayoutHandles - OK - 0xFFFFF96000299394 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowBand - OK - 0xFFFFF9600019A944 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowCompositionAttribute - OK - 0xFFFFF9600013CD58 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowCompositionTransition - OK - 0xFFFFF960001A9828 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowDisplayAffinity - OK - 0xFFFFF96000299448 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowFeedbackSetting - OK - 0xFFFFF960001A6420 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowRgnEx - OK - 0xFFFFF960001F6F34 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowStationUser - OK - 0xFFFFF9600012E150 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserShowSystemCursor - OK - 0xFFFFF96000299570 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserShutdownBlockReasonCreate - OK - 0xFFFFF960001FAF4C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserShutdownBlockReasonQuery - OK - 0xFFFFF96000299690 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserShutdownReasonDestroy - OK - 0xFFFFF960001FB528 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSignalRedirectionStartComplete - OK - 0xFFFFF9600020CE4C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSlicerControl - OK - 0xFFFFF96000299910 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSoundSentry - OK - 0xFFFFF96000299DF0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSwitchDesktop - OK - 0xFFFFF96000121CC0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserTestForInteractiveUser - OK - 0xFFFFF96000299E20 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserTrackPopupMenuEx - OK - 0xFFFFF960001D26E0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserTransformPoint - OK - 0xFFFFF9600019AFA0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserTransformRect - OK - 0xFFFFF96000168014 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserUndelegateInput - OK - 0xFFFFF96000188590 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserUnloadKeyboardLayout - OK - 0xFFFFF96000299F60 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserUnlockWindowStation - OK - 0xFFFFF960001A32A0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserUnregisterHotKey - OK - 0xFFFFF9600019A4F0 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserUnregisterSessionPort - OK - 0xFFFFF96000299FB8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserUnregisterUserApiHook - OK - 0xFFFFF9600029A000 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserUpdateDefaultDesktopThumbnail - OK - 0xFFFFF9600029A040 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserUpdateInputContext - OK - 0xFFFFF960001A6B88 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserUpdateInstance - OK - 0xFFFFF9600029A184 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserUpdateLayeredWindow - OK - 0xFFFFF960001FFBF8 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserUpdatePerUserSystemParameters - OK - 0xFFFFF960001206A4 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserUpdateWindowInputSinkHints - OK - 0xFFFFF960001F5D90 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       ?NlsNullProc@@YAHPEAUtagKE@@_KK@Z - OK - 0xFFFFF9600006039C - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserUserHandleGrantAccess - OK - 0xFFFFF9600029A250 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserValidateHandleSecure - OK - 0xFFFFF960000ECB70 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserWaitAvailableMessageEx - OK - 0xFFFFF9600016F904 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserWaitForInputIdle - OK - 0xFFFFF960001B1B30 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserWaitForMsgAndEvent - OK - 0xFFFFF9600029A4DC - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserWaitForRedirectionStartComplete - OK - 0xFFFFF9600029A500 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserWindowFromPoint - OK - 0xFFFFF9600013A530 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtValidateCompositionSurfaceHandle - OK - 0xFFFFF96000199120 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetClassLongPtr - OK - 0xFFFFF96000200350 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowLongPtr - OK - 0xFFFFF96000066044 - C:\WINDOWS\System32\win32k.sys - Microsoft Corporation

==========================================================================================

FSD

       IRP_MJ_CREATE - OK - 0xFFFFF80002D8E75C - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF80002D8DC14 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF80002D7F9B4 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF80002D80644 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF80002D9A89C - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF80002D9A934 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF80002D97BF0 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF80002D97BF0 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF80002D9DF78 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF80002DA8B48 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF80002DA8BE0 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF80002D943A8 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF80002D9ED04 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF80002D930AC - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF80002DA5888 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF80002DA3048 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF80002D8CFE4 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF80002DA3FB4 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       FastIoCheckIfPossible[FastIo] - OK - 0xFFFFF80002D9A370 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       FastIoRead[FastIo] - OK - 0xFFFFF800E2242698 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       FastIoWrite[FastIo] - OK - 0xFFFFF800E22429C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       FastIoQueryBasicInfo[FastIo] - OK - 0xFFFFF80002D9A444 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       FastIoQueryStandardInfo[FastIo] - OK - 0xFFFFF80002D9A58C - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       FastIoLock[FastIo] - OK - 0xFFFFF80002DA30E0 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       FastIoUnlockSingle[FastIo] - OK - 0xFFFFF80002DA3264 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       FastIoUnlockAll[FastIo] - OK - 0xFFFFF80002DA339C - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       FastIoUnlockAllByKey[FastIo] - OK - 0xFFFFF80002DA34B0 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       FastIoQueryNetworkOpenInfo[FastIo] - OK - 0xFFFFF80002D9A6AC - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       MdlRead[FastIo] - OK - 0xFFFFF800E2243050 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       MdlReadComplete[FastIo] - OK - 0xFFFFF800E1D75CA0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PrepareMdlWrite[FastIo] - OK - 0xFFFFF800E224335C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       MdlWriteComplete[FastIo] - OK - 0xFFFFF800E2119608 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       AcquireForCcFlush[FastIo] - OK - 0xFFFFF80002DA5730 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       ReleaseForCcFlush[FastIo] - OK - 0xFFFFF80002DA57B0 - C:\WINDOWS\System32\Drivers\fastfat.SYS - Microsoft Corporation
       IRP_MJ_CREATE - OK - 0xFFFFF80000D10E90 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF80000D02BE0 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF80000C608E0 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF80000C5BBC0 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF80000D1A090 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF80000D2FE28 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF80000D1A090 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF80000D1A090 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF80000CE797C - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF80000D1C3B0 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF80000D1C3B0 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF80000D32740 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF80000D1C034 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF80000CEF0DC - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF80000DEE190 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF80000C4571C - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF80000D12120 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF80000D1C3B0 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF80000D1C3B0 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF80000D1A090 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF80000D1A090 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF80000D65A40 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       FastIoCheckIfPossible[FastIo] - OK - 0xFFFFF80000DD8280 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       FastIoRead[FastIo] - OK - 0xFFFFF80000CEA060 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       FastIoWrite[FastIo] - OK - 0xFFFFF80000D23490 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       FastIoQueryBasicInfo[FastIo] - OK - 0xFFFFF80000D2AED0 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       FastIoQueryStandardInfo[FastIo] - OK - 0xFFFFF80000D24550 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       FastIoLock[FastIo] - OK - 0xFFFFF80000CE251C - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       FastIoUnlockSingle[FastIo] - OK - 0xFFFFF80000CE281C - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       FastIoUnlockAll[FastIo] - OK - 0xFFFFF80000DD7538 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       FastIoUnlockAllByKey[FastIo] - OK - 0xFFFFF80000DD77C0 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       ReleaseFileForNtCreateSection[FastIo] - OK - 0xFFFFF80000C60688 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       FastIoQueryNetworkOpenInfo[FastIo] - OK - 0xFFFFF80000CE1BEC - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       AcquireForModWrite[FastIo] - OK - 0xFFFFF80000C65860 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       MdlRead[FastIo] - OK - 0xFFFFF80000CE5950 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       MdlReadComplete[FastIo] - OK - 0xFFFFF800E1D75CA0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PrepareMdlWrite[FastIo] - OK - 0xFFFFF80000CE5C20 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       MdlWriteComplete[FastIo] - OK - 0xFFFFF800E2119608 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       FastIoQueryOpen[FastIo] - OK - 0xFFFFF80000CEF878 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       ReleaseForModWrite[FastIo] - OK - 0xFFFFF80000C659A0 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       AcquireForCcFlush[FastIo] - OK - 0xFFFFF80000C630C4 - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation
       ReleaseForCcFlush[FastIo] - OK - 0xFFFFF80000C6307C - C:\WINDOWS\System32\Drivers\Ntfs.sys - Microsoft Corporation

==========================================================================================

Keyboard

       IRP_MJ_CREATE - OK - 0xFFFFF80002AF1100 - C:\WINDOWS\System32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF80002AF1D70 - C:\WINDOWS\System32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF80002AF2290 - C:\WINDOWS\System32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF80002AF4478 - C:\WINDOWS\System32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF80002AF9010 - C:\WINDOWS\System32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF80002AFB4C0 - C:\WINDOWS\System32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF80002AF1E90 - C:\WINDOWS\System32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF80002AF1650 - C:\WINDOWS\System32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF80002AF9B90 - C:\WINDOWS\System32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF80002AF1F10 - C:\WINDOWS\System32\drivers\kbdclass.sys - Microsoft Corporation

==========================================================================================

I8042prt

       IRP_MJ_CREATE - OK - 0xFFFFF80002A736B8 - C:\WINDOWS\System32\drivers\i8042prt.sys - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF80002A737B0 - C:\WINDOWS\System32\drivers\i8042prt.sys - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF80002A6AE4C - C:\WINDOWS\System32\drivers\i8042prt.sys - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF80002A79300 - C:\WINDOWS\System32\drivers\i8042prt.sys - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF80002A64CB0 - C:\WINDOWS\System32\drivers\i8042prt.sys - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF80002A728C0 - C:\WINDOWS\System32\drivers\i8042prt.sys - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF80002A73850 - C:\WINDOWS\System32\drivers\i8042prt.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF80002A73280 - C:\WINDOWS\System32\drivers\i8042prt.sys - Microsoft Corporation
       DriverStartIo - OK - 0xFFFFF80002A65D50 - C:\WINDOWS\System32\drivers\i8042prt.sys - Microsoft Corporation

==========================================================================================

Mouclass

       IRP_MJ_CREATE - OK - 0xFFFFF80002ADAB3C - C:\WINDOWS\System32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF80002ADAE8C - C:\WINDOWS\System32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF80002ADB4D8 - C:\WINDOWS\System32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF80002ADAA5C - C:\WINDOWS\System32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF80002AE1A24 - C:\WINDOWS\System32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF80002AE13E0 - C:\WINDOWS\System32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF80002ADA9BC - C:\WINDOWS\System32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF80002ADC940 - C:\WINDOWS\System32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF80002AE2DF8 - C:\WINDOWS\System32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF80002ADBF78 - C:\WINDOWS\System32\drivers\mouclass.sys - Microsoft Corporation

==========================================================================================

Partmgr

       IRP_MJ_CREATE - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF80000473010 - C:\WINDOWS\System32\drivers\partmgr.sys - Microsoft Corporation

==========================================================================================

Classpnp

       IRP_MJ_CREATE - OK - 0xFFFFF80001407160 - C:\WINDOWS\System32\drivers\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF80001407160 - C:\WINDOWS\System32\drivers\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF80001407160 - C:\WINDOWS\System32\drivers\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF80001407160 - C:\WINDOWS\System32\drivers\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF80001407160 - C:\WINDOWS\System32\drivers\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF80001407160 - C:\WINDOWS\System32\drivers\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF80001407160 - C:\WINDOWS\System32\drivers\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF80001407160 - C:\WINDOWS\System32\drivers\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF80001407160 - C:\WINDOWS\System32\drivers\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF80001407160 - C:\WINDOWS\System32\drivers\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF80001407160 - C:\WINDOWS\System32\drivers\CLASSPNP.SYS - Microsoft Corporation

==========================================================================================

Atapi

       Nothing

==========================================================================================

Acpi

       IRP_MJ_CREATE - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF800004CA020 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation

==========================================================================================

Scsi

       Nothing

==========================================================================================

Kernel Hook

       Inline - len(1) [ntoskrnl.exe] - [0xFFFFF800E1DC8E6C]->[-]
       Inline - len(2) [ntoskrnl.exe] - [0xFFFFF800E1DC8EE8]->[-]
       Inline - len(1) [ntoskrnl.exe] - [0xFFFFF800E1DC8F6C]->[-]
       Inline - len(1) [ntoskrnl.exe] - [0xFFFFF800E1DC912C]->[-]
       Inline - len(2) [ntoskrnl.exe] - [0xFFFFF800E1DC91A8]->[-]
       Inline - len(1) [ntoskrnl.exe] - [0xFFFFF800E1DC922E]->[-]
       Inline - len(32) [acpiex.sys] - [0xFFFFF80000374008]->[-]
       Inline - len(24) [acpiex.sys] - [0xFFFFF80000374030]->[-]
       Inline - len(32) [msisadrv.sys] - [0xFFFFF800005E5008]->[-]
       Inline - len(32) [vdrvroot.sys] - [0xFFFFF8000044B008]->[-]
       Inline - len(8) [pdc.sys] - [0xFFFFF8000045A008]->[-]
       Inline - len(8) [fvevol.sys] - [0xFFFFF80000732008]->[-]
       Inline - len(8) [intelpep.sys] - [0xFFFFF800013CD008]->[-]
       Inline - len(32) [intelpep.sys] - [0xFFFFF800013CD018]->[-]
       Inline - len(16) [crashdmp.sys] - [0xFFFFF800014AD008]->[-]
       Inline - len(48) [Null.SYS] - [0xFFFFF8000186F008]->[-]
       Inline - len(32) [dxgkrnl.sys] - [0xFFFFF80001C34008]->[-]
       Inline - len(8) [dxgkrnl.sys] - [0xFFFFF80001C34030]->[-]
       Inline - len(8) [dxgmms1.sys] - [0xFFFFF80001DB7008]->[-]
       Inline - len(40) [BasicDisplay.sys] - [0xFFFFF80001BBB008]->[-]
       Inline - len(16) [mssmbios.sys] - [0xFFFFF80001E5F008]->[-]
       Inline - len(40) [dfsc.sys] - [0xFFFFF80000FC3048]->[-]
       Inline - len(32) [CompositeBus.sys] - [0xFFFFF80001E6A008]->[-]
       Inline - len(32) [umbus.sys] - [0xFFFFF800015F1008]->[-]
       Inline - len(8) [USBXHCI.SYS] - [0xFFFFF800024A2008]->[-]
       Inline - len(32) [USBXHCI.SYS] - [0xFFFFF800024A2018]->[-]
       Inline - len(40) [ucx01000.sys] - [0xFFFFF800024DA008]->[-]
       Inline - len(24) [ucx01000.sys] - [0xFFFFF800024DA038]->[-]
       Inline - len(8) [USBPORT.SYS] - [0xFFFFF8000255D008]->[-]
       Inline - len(16) [USBPORT.SYS] - [0xFFFFF8000255D018]->[-]
       Inline - len(32) [vwifibus.sys] - [0xFFFFF80002A37008]->[-]
       Inline - len(16) [mouclass.sys] - [0xFFFFF80002ADE008]->[-]
       Inline - len(16) [mouclass.sys] - [0xFFFFF80002ADE020]->[-]
       Inline - len(48) [CmBatt.sys] - [0xFFFFF80002B42108]->[-]
       Inline - len(16) [CmBatt.sys] - [0xFFFFF80002B42140]->[-]
       Inline - len(16) [BATTC.SYS] - [0xFFFFF80002B4A008]->[-]
       Inline - len(8) [intelppm.sys] - [0xFFFFF80002B79008]->[-]
       Inline - len(32) [intelppm.sys] - [0xFFFFF80002B79018]->[-]
       Inline - len(24) [wmiacpi.sys] - [0xFFFFF80002B93008]->[-]
       Inline - len(16) [HIDPARSE.SYS] - [0xFFFFF80002BC7088]->[-]
       Inline - len(24) [NdisVirtualBus.sys] - [0xFFFFF8000265E008]->[-]
       Inline - len(32) [NdisVirtualBus.sys] - [0xFFFFF8000265E028]->[-]
       Inline - len(8) [usbhub.sys] - [0xFFFFF80002CA9008]->[-]
       Inline - len(40) [usbhub.sys] - [0xFFFFF80002CA9018]->[-]
       Inline - len(24) [usbhub.sys] - [0xFFFFF80002CA9048]->[-]
       Inline - len(8) [cdrom.sys] - [0xFFFFF80002CE7008]->[-]
       Inline - len(32) [cdrom.sys] - [0xFFFFF80002CE7018]->[-]
       Inline - len(24) [cdrom.sys] - [0xFFFFF80002CE7040]->[-]
       Inline - len(8) [drmk.sys] - [0xFFFFF80002E05008]->[-]
       Inline - len(16) [BTHUSB.sys] - [0xFFFFF80003378008]->[-]
       Inline - len(24) [BTHUSB.sys] - [0xFFFFF80003378020]->[-]
       Inline - len(48) [BTHUSB.sys] - [0xFFFFF80003378040]->[-]
       Inline - len(8) [bthport.sys] - [0xFFFFF800034C0008]->[-]
       Inline - len(16) [bthport.sys] - [0xFFFFF800034C0018]->[-]
       Inline - len(24) [bthport.sys] - [0xFFFFF800034C0030]->[-]
       Inline - len(8) [usbvideo.sys] - [0xFFFFF800035C0108]->[-]
       Inline - len(24) [usbvideo.sys] - [0xFFFFF800035C0118]->[-]
       Inline - len(31) [BthLEEnum.sys] - [0xFFFFF8000341A009]->[-]
       Inline - len(24) [BthLEEnum.sys] - [0xFFFFF8000341A030]->[-]
       Inline - len(48) [BthLEEnum.sys] - [0xFFFFF8000341A050]->[-]
       Inline - len(8) [rfcomm.sys] - [0xFFFFF800035ED008]->[-]
       Inline - len(24) [rfcomm.sys] - [0xFFFFF800035ED018]->[-]
       Inline - len(24) [BthEnum.sys] - [0xFFFFF80003389008]->[-]
       Inline - len(16) [kbdhid.sys] - [0xFFFFF800032AA048]->[-]
       Inline - len(24) [kbdhid.sys] - [0xFFFFF800032AA060]->[-]
       Inline - len(16) [mouhid.sys] - [0xFFFFF800032B8050]->[-]
       Inline - len(24) [mouhid.sys] - [0xFFFFF800032B8068]->[-]
       Inline - len(32) [monitor.sys] - [0xFFFFF80003265008]->[-]
       Inline - len(8) [monitor.sys] - [0xFFFFF80003265120]->[-]
       Inline - len(8) [lltdio.sys] - [0xFFFFF80002E84008]->[-]
       Inline - len(24) [lltdio.sys] - [0xFFFFF80002E840F0]->[-]
       Inline - len(8) [nwifi.sys] - [0xFFFFF8000372B1E8]->[-]
       Inline - len(8) [mrxsmb20.sys] - [0xFFFFF80003895008]->[-]
       Inline - len(16) [mrxsmb10.sys] - [0xFFFFF800037B2008]->[-]
       Inline - len(8) [Ndu.sys] - [0xFFFFF800039EE008]->[-]
       Inline - len(8) [peauth.sys] - [0xFFFFF8000360A008]->[-]
       Inline - len(24) [peauth.sys] - [0xFFFFF8000360A018]->[-]
       Inline - len(16) [peauth.sys] - [0xFFFFF8000360A038]->[-]
       Inline - len(8) [peauth.sys] - [0xFFFFF8000360A050]->[-]

==========================================================================================

PTE HOOK

       Nothing

==========================================================================================

Kernel Hook

       CmpCloseKeyObject - CmpKeyObjectType - OK - 0xFFFFF800E2026FE8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpDeleteKeyObject - CmpKeyObjectType - OK - 0xFFFFF800E2033FE0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpParseKey - CmpKeyObjectType - OK - 0xFFFFF800E20354C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpSecurityMethod - CmpKeyObjectType - OK - 0xFFFFF800E2066124 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpQueryKeyName - CmpKeyObjectType - OK - 0xFFFFF800E20A4C58 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IopCloseFile - IoFileObjectType - OK - 0xFFFFF800E2025D70 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IopDeleteFile - IoFileObjectType - OK - 0xFFFFF800E202600C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IopParseFile - IoFileObjectType - OK - 0xFFFFF800E210E1E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IopGetSetSecurityObject - IoFileObjectType - OK - 0xFFFFF800E2067298 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IopQueryName - IoFileObjectType - OK - 0xFFFFF800E20A1FC0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IopDeleteDriver - IoDriverObjectType - OK - 0xFFFFF800E214936C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - IoDriverObjectType - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IopDeleteDevice - IoDeviceObjectType - OK - 0xFFFFF800E20CB740 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IopParseDevice - IoDeviceObjectType - OK - 0xFFFFF800E2023D80 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IopGetSetSecurityObject - IoDeviceObjectType - OK - 0xFFFFF800E2067298 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IopCloseIoCompletion - IoCompletionObjectType - OK - 0xFFFFF800E207AAB0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IopDeleteIoCompletion - IoCompletionObjectType - OK - 0xFFFFF800E207AAA8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - IoCompletionObjectType - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PspJobClose - PsJobType - OK - 0xFFFFF800E20EA964 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PspJobDelete - PsJobType - OK - 0xFFFFF800E1D5FA9C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - PsJobType - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PspThreadOpen - PsThreadType - OK - 0xFFFFF800E20B1134 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PspThreadDelete - PsThreadType - OK - 0xFFFFF800E210E2BC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - PsThreadType - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PspProcessOpen - PsProcessType - OK - 0xFFFFF800E20B11F4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PspProcessClose - PsProcessType - OK - 0xFFFFF800E2110DF8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PspProcessDelete - PsProcessType - OK - 0xFFFFF800E206A950 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - PsProcessType - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       ObpCloseDirectoryObject - ObpDirectoryObjectType - OK - 0xFFFFF800E1FF69A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       ObpDeleteDirectoryObject - ObpDirectoryObjectType - OK - 0xFFFFF800E20BBAF4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - ObpDirectoryObjectType - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       ObpDeleteSymbolicLink - ObpSymbolicLinkObjectType - OK - 0xFFFFF800E2134D9C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       ObpParseSymbolicLink - ObpSymbolicLinkObjectType - OK - 0xFFFFF800E1FFD7B4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - ObpSymbolicLinkObjectType - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       MiSectionDelete - MmSectionObjectType - OK - 0xFFFFF800E202A64C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - MmSectionObjectType - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - ExEventObjectType - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       ExpDeleteMutant - ExMutantObjectType - OK - 0xFFFFF800E1D78004 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - ExMutantObjectType - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - ExSemaphoreObjectType - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SepTokenDeleteMethod - SeTokenObjectType - OK - 0xFFFFF800E2067D78 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - SeTokenObjectType - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       AlpcpOpenPort - AlpcPortObjectType - OK - 0xFFFFF800E21171F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       AlpcpClosePort - AlpcPortObjectType - OK - 0xFFFFF800E2098F20 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       AlpcpDeletePort - AlpcPortObjectType - OK - 0xFFFFF800E2097C10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - AlpcPortObjectType - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       OpenProcedure - TmTm - OK - 0xFFFFF800001B00E8 - C:\WINDOWS\System32\drivers\tm.sys - Microsoft Corporation
       CloseProcedure - TmTm - OK - 0xFFFFF800001B00EC - C:\WINDOWS\System32\drivers\tm.sys - Microsoft Corporation
       DeleteProcedure - TmTm - OK - 0xFFFFF800001B01FC - C:\WINDOWS\System32\drivers\tm.sys - Microsoft Corporation
       SeDefaultObjectMethod - TmTm - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       OpenProcedure - Desktop - OK - 0xFFFFF800E209BD24 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - Desktop - OK - 0xFFFFF800E209BC2C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - Desktop - OK - 0xFFFFF800E211EFB4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - Desktop - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       OkayToCloseProcedure - Desktop - OK - 0xFFFFF800E209BCA0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - DebugObject - OK - 0xFFFFF800E223CC78 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - DebugObject - OK - 0xFFFFF800E213AB04 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - DebugObject - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - TpWorkerFactory - OK - 0xFFFFF800E207AA90 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - TpWorkerFactory - OK - 0xFFFFF800E1D5FFF4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - TpWorkerFactory - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - Adapter - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       OpenProcedure - DxgkSharedResource - OK - 0xFFFFF80001CC0D10 - C:\WINDOWS\System32\drivers\dxgkrnl.sys - Microsoft Corporation
       DeleteProcedure - DxgkSharedResource - OK - 0xFFFFF80001C81EAC - C:\WINDOWS\System32\drivers\dxgkrnl.sys - Microsoft Corporation
       SeDefaultObjectMethod - DxgkSharedResource - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       OpenProcedure - PcwObject - OK - 0xFFFFF80000E5DF04 - C:\WINDOWS\System32\drivers\pcw.sys - Microsoft Corporation
       CloseProcedure - PcwObject - OK - 0xFFFFF80000E5DF10 - C:\WINDOWS\System32\drivers\pcw.sys - Microsoft Corporation
       DeleteProcedure - PcwObject - OK - 0xFFFFF80000E5DF30 - C:\WINDOWS\System32\drivers\pcw.sys - Microsoft Corporation
       SeDefaultObjectMethod - PcwObject - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - WmiGuid - OK - 0xFFFFF800E21250B4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - WmiGuid - OK - 0xFFFFF800E2133A74 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       OpenProcedure - EtwRegistration - OK - 0xFFFFF800E211ECF0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - EtwRegistration - OK - 0xFFFFF800E206C03C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - EtwRegistration - OK - 0xFFFFF800E206C078 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - EtwRegistration - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - Session - OK - 0xFFFFF800E2154970 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - Session - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - Timer - OK - 0xFFFFF800E1D03CE4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - Timer - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - IRTimer - OK - 0xFFFFF800E22A8294 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - IRTimer - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       OpenProcedure - DxgkSharedSyncObject - OK - 0xFFFFF80001CC0D10 - C:\WINDOWS\System32\drivers\dxgkrnl.sys - Microsoft Corporation
       DeleteProcedure - DxgkSharedSyncObject - OK - 0xFFFFF80001C979E8 - C:\WINDOWS\System32\drivers\dxgkrnl.sys - Microsoft Corporation
       SeDefaultObjectMethod - DxgkSharedSyncObject - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       OpenProcedure - WindowStation - OK - 0xFFFFF800E209BD24 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - WindowStation - OK - 0xFFFFF800E209BC2C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - WindowStation - OK - 0xFFFFF800E211EFB4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       ParseProcedure - WindowStation - OK - 0xFFFFF800E211ECFC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - WindowStation - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       OkayToCloseProcedure - WindowStation - OK - 0xFFFFF800E209BCA0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - Profile - OK - 0xFFFFF800E22B1308 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - Profile - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       OpenProcedure - EtwConsumer - OK - 0xFFFFF800E211ECF0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - EtwConsumer - OK - 0xFFFFF800E208B6F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - EtwConsumer - OK - 0xFFFFF800E21393F4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - EtwConsumer - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       OpenProcedure - Composition - OK - 0xFFFFF800E209BD24 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - Composition - OK - 0xFFFFF800E209BC2C - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - Composition - OK - 0xFFFFF800E211EFB4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - Composition - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       OkayToCloseProcedure - Composition - OK - 0xFFFFF800E209BCA0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - TmTx - OK - 0xFFFFF800001AA794 - C:\WINDOWS\System32\drivers\tm.sys - Microsoft Corporation
       DeleteProcedure - TmTx - OK - 0xFFFFF800001AA7B8 - C:\WINDOWS\System32\drivers\tm.sys - Microsoft Corporation
       SeDefaultObjectMethod - TmTx - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - FilterConnectionPort - OK - 0xFFFFF8000085FAD4 - C:\WINDOWS\system32\drivers\fltmgr.sys - Microsoft Corporation
       DeleteProcedure - FilterConnectionPort - OK - 0xFFFFF8000085FB48 - C:\WINDOWS\system32\drivers\fltmgr.sys - Microsoft Corporation
       SeDefaultObjectMethod - FilterConnectionPort - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - KeyedEvent - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - Callback - OK - 0xFFFFF800E22A59D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - Callback - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - WaitCompletionPacket - OK - 0xFFFFF800E1D095BC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - WaitCompletionPacket - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - UserApcReserve - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - Controller - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - IoCompletionReserve - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - TmEn - OK - 0xFFFFF800001A91C0 - C:\WINDOWS\System32\drivers\tm.sys - Microsoft Corporation
       DeleteProcedure - TmEn - OK - 0xFFFFF800001A91F8 - C:\WINDOWS\System32\drivers\tm.sys - Microsoft Corporation
       SeDefaultObjectMethod - TmEn - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - Type - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - FilterCommunicationPort - OK - 0xFFFFF800008511E8 - C:\WINDOWS\system32\drivers\fltmgr.sys - Microsoft Corporation
       DeleteProcedure - FilterCommunicationPort - OK - 0xFFFFF80000851304 - C:\WINDOWS\system32\drivers\fltmgr.sys - Microsoft Corporation
       SeDefaultObjectMethod - FilterCommunicationPort - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - PowerRequest - OK - 0xFFFFF800E207E040 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - PowerRequest - OK - 0xFFFFF800E207EC14 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - PowerRequest - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       OpenProcedure - TmRm - OK - 0xFFFFF800001ACCE8 - C:\WINDOWS\System32\drivers\tm.sys - Microsoft Corporation
       CloseProcedure - TmRm - OK - 0xFFFFF800001ACE2C - C:\WINDOWS\System32\drivers\tm.sys - Microsoft Corporation
       DeleteProcedure - TmRm - OK - 0xFFFFF800001AD16C - C:\WINDOWS\System32\drivers\tm.sys - Microsoft Corporation
       SeDefaultObjectMethod - TmRm - OK - 0xFFFFF800E200A098 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       PostOperation - Process - ObjectType_Callback - 0xFFFFF80001821574 - C:\Windows\system32\drivers\aswSP.sys - AVAST Software
       PreOperation - Process - ObjectType_Callback - 0xFFFFF800018214E8 - C:\Windows\system32\drivers\aswSP.sys - AVAST Software
       PostOperation - Process - ObjectType_Callback - 0xFFFFF800014C8738 - C:\Windows\system32\drivers\aswSnx.sys - AVAST Software
       PreOperation - Process - ObjectType_Callback - 0xFFFFF800014EE1AC - C:\Windows\system32\drivers\aswSnx.sys - AVAST Software
       PostOperation - Thread - ObjectType_Callback - 0xFFFFF80001821574 - C:\Windows\system32\drivers\aswSP.sys - AVAST Software
       PreOperation - Thread - ObjectType_Callback - 0xFFFFF800018214E8 - C:\Windows\system32\drivers\aswSP.sys - AVAST Software
       PostOperation - Thread - ObjectType_Callback - 0xFFFFF800014C8738 - C:\Windows\system32\drivers\aswSnx.sys - AVAST Software
       PreOperation - Thread - ObjectType_Callback - 0xFFFFF800014EE1AC - C:\Windows\system32\drivers\aswSnx.sys - AVAST Software
       GetCellRoutine - HHIVE - OK - 0xFFFFF800E2034C10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF800E2061138 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF800E20613E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF800E2057C88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF800E20FD7D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800E2034C10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF800E2061138 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF800E20613E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF800E2057C88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF800E20FD7D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800E2034C10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF800E2061138 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF800E20613E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF800E2057C88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF800E20FD7D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800E2034C10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF800E2061138 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF800E20613E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF800E2057C88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF800E20FD7D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800E2034C10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF800E2061138 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF800E20613E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF800E2057C88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF800E20FD7D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800E2034C10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF800E2061138 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF800E20613E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF800E2057C88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF800E20FD7D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800E2034C10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF800E2061138 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF800E20613E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF800E2057C88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF800E20FD7D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800E2034C10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF800E2061138 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF800E20613E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF800E2057C88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF800E20FD7D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800E2034C10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF800E2061138 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF800E20613E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF800E2057C88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF800E20FD7D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800E2034C10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF800E2061138 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF800E20613E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF800E2057C88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF800E20FD7D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800E2034C10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF800E2061138 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF800E20613E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF800E2057C88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF800E20FD7D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800E2034C10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF800E2061138 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF800E20613E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF800E2057C88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF800E20FD7D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800E2034C10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF800E2061138 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF800E20613E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF800E2057C88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF800E20FD7D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800E2034C10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF800E2061138 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF800E20613E4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF800E2057C88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF800E20FD7D4 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       - LLTDCallbackRspndr0047000006000(0xFFFFE0000540A1B0::0xFFFFE000051FD250) - Callback_Object - 0xFFFFF800037622A4 - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       - LLTDCallbackRspndr000600000b000(0xFFFFE000051BE8F0::0xFFFFE00004CBBCD0) - Callback_Object - 0xFFFFF800037622A4 - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       - ProcessorAdd(0xFFFFE000002BCFC0::0xFFFFE00000FBE390) - Callback_Object - 0xFFFFF80000509DEC - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       - ProcessorAdd(0xFFFFE000002BCFC0::0xFFFFE000011D1840) - Callback_Object - 0xFFFFF80000F367CC - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       - ProcessorAdd(0xFFFFE000002BCFC0::0xFFFFE000011D46D0) - Callback_Object - 0xFFFFF800011A3800 - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       - ProcessorAdd(0xFFFFE000002BCFC0::0xFFFFE00003B781A0) - Callback_Object - 0xFFFFF8000146E9D0 - C:\WINDOWS\System32\Drivers\aswVmm.sys - 
       - ProcessorAdd(0xFFFFE000002BCFC0::0xFFFFE00003D692B0) - Callback_Object - 0xFFFFF800E2279218 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       - ProcessorAdd(0xFFFFE000002BCFC0::0xFFFFE00005471810) - Callback_Object - 0xFFFFF8000393E388 - C:\WINDOWS\system32\drivers\HTTP.sys - Microsoft Corporation
       - ProcessorAdd(0xFFFFE000002BCFC0::0xFFFFE000057B1850) - Callback_Object - 0xFFFFF80003A09C74 - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE0000023A1E0) - Callback_Object - 0xFFFFF800E21511BC - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE0000039B230) - Callback_Object - 0xFFFFF800E2151890 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE000003C0800) - Callback_Object - 0xFFFFF800E1C11C80 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00000FAA130) - Callback_Object - 0xFFFFF800004CCDFC - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00000FAB1C0) - Callback_Object - 0xFFFFF800004FD670 - C:\WINDOWS\System32\drivers\ACPI.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE000007E5090) - Callback_Object - 0xFFFFF80000425000 - C:\WINDOWS\System32\drivers\pci.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00000377BA0) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00000FF72C0) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00000FEEB40) - Callback_Object - 0xFFFFF80000934C9C - C:\WINDOWS\System32\drivers\iaStorA.sys - Intel Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00002951ED0) - Callback_Object - 0xFFFFF800011393C4 - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003BFBF00) - Callback_Object - 0xFFFFF8000146E7A0 - C:\WINDOWS\System32\Drivers\aswVmm.sys - 
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003C4E9E0) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003EF0450) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003D0C4B0) - Callback_Object - 0xFFFFF80001C2F83C - C:\WINDOWS\System32\drivers\dxgkrnl.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003D0C0D0) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003EDB420) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003F5FEA0) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003F3B480) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003F58B00) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE000029CB360) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003F585A0) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003F355E0) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003FC0210) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003F414B0) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003FAB1F0) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE000029C44C0) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003FA5420) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003F7C1D0) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003F6A1C0) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003FC4050) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00003FCDE50) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE000040B00E0) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE000042D10E0) - Callback_Object - 0xFFFFF80002F6F318 - C:\WINDOWS\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00004345250) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00004380250) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00004579E40) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE00004505B10) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE0000459F480) - Callback_Object - 0xFFFFF800002B2110 - C:\WINDOWS\system32\drivers\Wdf01000.sys - Microsoft Corporation
       - PowerState(0xFFFFE0000023AA00::0xFFFFE000058A4470) - Callback_Object - 0xFFFFF80003A34C08 - C:\WINDOWS\system32\drivers\aswStm.sys - AVAST Software
       - aswKLib(0xFFFFE0000114A2B0::0xFFFFE00003DE8C10) - Callback_Object - 0xFFFFF800018364A0 - C:\Windows\system32\drivers\aswSP.sys - AVAST Software
       - DptfGfxCallbackObj(0xFFFFE00000241420::0xFFFFE00003FD8B70) - Callback_Object - 0xFFFFF800021741D0 - C:\WINDOWS\system32\DRIVERS\igdkmd64.sys - Intel Corporation
       - LLTDCallbackRspndr0047000000000(0xFFFFE00004C649D0::0xFFFFE00004C85010) - Callback_Object - 0xFFFFF800037622A4 - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       - LLTDCallbackRspndr0006000007000(0xFFFFE0000426ABC0::0xFFFFE00003FEC6E0) - Callback_Object - 0xFFFFF800037622A4 - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       - aswKLibInitialized(0xFFFFE00003E07990::0xFFFFE00003CE25D0) - Callback_Object - 0xFFFFF800015465FC - C:\Windows\system32\drivers\aswSnx.sys - AVAST Software

==========================================================================================

IDT

       Divide error - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCEC00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Debug - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCED00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCEEC0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Breakpoint - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCF240 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Overflow - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCF340 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Bounds check - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCF440 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Invalid opcode - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCF540 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Device not available - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCF780 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Double fault - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCF840 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Coprocessor segment overrun - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCF900 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Invalid TSS - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCF9C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Segment not present - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCFA80 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Stack segment fault - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCFBC0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       General protection - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCFD00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Page Fault - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCFE00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8328 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Floating-point error - cpu[0] - 0x02 - OK - 0xFFFFF800E1DD0180 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Alignment check - cpu[0] - 0x02 - OK - 0xFFFFF800E1DD0300 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Machine check - cpu[0] - 0x02 - OK - 0xFFFFF800E1DD0400 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SIMD floating point exception - cpu[0] - 0x02 - OK - 0xFFFFF800E1DD0A80 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8350 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8358 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8360 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8368 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8370 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8378 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8380 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8388 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8390 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8398 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC83A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCA960 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC83B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC83B8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC83C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC83C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC83D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC83D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC83E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC83E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC83F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[0] - 0x02 - OK - 0xFFFFF800E1DD0C40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiGetTickCount - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8400 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiCallbackReturn - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8408 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiSetLowWaitHighThread - cpu[0] - 0x02 - OK - 0xFFFFF800E1DD0D40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiDebugService - cpu[0] - 0x02 - OK - 0xFFFFF800E1DD0E40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiSystemService - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8420 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved for APIC - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCAC30 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiStartUnexpectedRange - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCAE60 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt1 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCB1C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt2 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCB510 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt3 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCB860 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt4 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCBBB0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt5 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8458 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt6 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8460 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt7 - cpu[0] - 0x02 - OK - 0xFFFFF800E1C5C790 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt8 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8470 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt9 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8478 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt10 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8480 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt11 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8488 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt12 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8490 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt13 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8498 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt14 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC84A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt15 - cpu[0] - 0x02 - OK - 0xFFFFF800E1C5C290 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt16 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC84B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt17 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC84B8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt18 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC84C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt19 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC84C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt20 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC84D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt21 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC84D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt22 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC84E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt23 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC84E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt24 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC84F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt25 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC84F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt26 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8500 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt27 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8508 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt28 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8510 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt29 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8518 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt30 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8520 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt31 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8528 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt32 - cpu[0] - 0x02 - OK - 0xFFFFF800E1C5C090 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt33 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8538 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt34 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8540 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt35 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8548 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt36 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8550 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt37 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8558 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt38 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8560 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt39 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8568 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt40 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8570 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt41 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8578 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt42 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8580 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt43 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8588 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt44 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8590 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt45 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8598 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt46 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC85A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt47 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC85A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt48 - cpu[0] - 0x02 - idt hook - 0xFFFFD00020B3C090 - unknown image - 
       KiUnexpectedInterrupt49 - cpu[0] - 0x02 - idt hook - 0xFFFFD00020B3C310 - unknown image - 
       KiUnexpectedInterrupt50 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC85C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt51 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC85C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt52 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC85D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt53 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC85D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt54 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC85E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt55 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC85E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt56 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC85F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt57 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC85F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt58 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8600 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt59 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8608 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt60 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8610 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt61 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8618 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt62 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8620 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt63 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8628 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt64 - cpu[0] - 0x02 - idt hook - 0xFFFFD00020B3C1D0 - unknown image - 
       KiUnexpectedInterrupt65 - cpu[0] - 0x02 - idt hook - 0xFFFFD000251A4E50 - unknown image - 
       KiUnexpectedInterrupt66 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8640 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt67 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8648 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt68 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8650 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt69 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8658 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt70 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8660 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt71 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8668 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt72 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8670 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt73 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8678 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt74 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8680 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt75 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8688 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt76 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8690 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt77 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8698 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt78 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC86A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt79 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC86A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt80 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC86B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt81 - cpu[0] - 0x02 - idt hook - 0xFFFFD00020B3CD10 - unknown image - 
       KiUnexpectedInterrupt82 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC86C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt83 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC86C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt84 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC86D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt85 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC86D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt86 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC86E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt87 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC86E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt88 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC86F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt89 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC86F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt90 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8700 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt91 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8708 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt92 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8710 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt93 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8718 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt94 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8720 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt95 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8728 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt96 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8730 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt97 - cpu[0] - 0x02 - idt hook - 0xFFFFD00020B3CA90 - unknown image - 
       KiUnexpectedInterrupt98 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8740 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt99 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8748 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt100 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8750 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt101 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8758 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt102 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8760 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt103 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8768 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt104 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8770 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt105 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8778 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt106 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8780 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt107 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8788 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt108 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8790 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt109 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8798 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt110 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC87A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt111 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC87A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt112 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC87B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt113 - cpu[0] - 0x02 - idt hook - 0xFFFFD00020B3C450 - unknown image - 
       KiUnexpectedInterrupt114 - cpu[0] - 0x02 - idt hook - 0xFFFFD00020B3C590 - unknown image - 
       KiUnexpectedInterrupt115 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC87C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt116 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC87D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt117 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC87D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt118 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC87E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt119 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC87E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt120 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC87F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt121 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC87F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt122 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8800 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt123 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8808 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt124 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8810 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt125 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8818 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt126 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8820 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt127 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8828 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt128 - cpu[0] - 0x02 - idt hook - 0xFFFFD00020B3CE50 - unknown image - 
       KiUnexpectedInterrupt129 - cpu[0] - 0x02 - idt hook - 0xFFFFD00020B3C6D0 - unknown image - 
       KiUnexpectedInterrupt130 - cpu[0] - 0x02 - idt hook - 0xFFFFD000251A4D10 - unknown image - 
       KiUnexpectedInterrupt131 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8848 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt132 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8850 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt133 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8858 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt134 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8860 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt135 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8868 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt136 - cpu[0] - 0x02 - idt hook - 0xFFFFD00020B3CBD0 - unknown image - 
       KiUnexpectedInterrupt137 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8878 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt138 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8880 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt139 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8888 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt140 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8890 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt141 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8898 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt142 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC88A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt143 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC88A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt144 - cpu[0] - 0x02 - OK - 0xFFFFF800E1C5C390 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt145 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC88B8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt146 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC88C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt147 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC88C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt148 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC88D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt149 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC88D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt150 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC88E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt151 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC88E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt152 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC88F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt153 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC88F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt154 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8900 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt155 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8908 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt156 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8910 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt157 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8918 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt158 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8920 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt159 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8928 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt160 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8930 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt161 - cpu[0] - 0x02 - idt hook - 0xFFFFE00000400390 - unknown image - 
       KiUnexpectedInterrupt162 - cpu[0] - 0x02 - idt hook - 0xFFFFE00000400290 - unknown image - 
       KiUnexpectedInterrupt163 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8948 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt164 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8950 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt165 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8958 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt166 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8960 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt167 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8968 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt168 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8970 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt169 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8978 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt170 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8980 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt171 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8988 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt172 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8990 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt173 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8998 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt174 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC89A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt175 - cpu[0] - 0x02 - OK - 0xFFFFF800E1C5C590 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt176 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC89B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt177 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DCBF00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt178 - cpu[0] - 0x02 - OK - 0xFFFFF800E1C5CF90 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt179 - cpu[0] - 0x02 - idt hook - 0xFFFFE00000400190 - unknown image - 
       KiUnexpectedInterrupt180 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC89D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt181 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC89D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt182 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC89E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt183 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC89E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt184 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC89F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt185 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC89F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt186 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt187 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A08 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt188 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt189 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A18 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt190 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A20 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt191 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A28 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt192 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A30 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt193 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A38 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt194 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt195 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A48 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt196 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A50 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt197 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A58 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt198 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A60 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt199 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A68 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt200 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A70 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt201 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A78 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt202 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A80 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt203 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt204 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A90 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt205 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8A98 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt206 - cpu[0] - 0x02 - idt hook - 0xFFFFE00000400090 - unknown image - 
       KiUnexpectedInterrupt207 - cpu[0] - 0x02 - OK - 0xFFFFF800E1DC8AA8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Divide error - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCEC00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Debug - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCED00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCEEC0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Breakpoint - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCF240 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Overflow - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCF340 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Bounds check - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCF440 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Invalid opcode - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCF540 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Device not available - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCF780 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Double fault - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCF840 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Coprocessor segment overrun - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCF900 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Invalid TSS - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCF9C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Segment not present - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCFA80 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Stack segment fault - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCFBC0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       General protection - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCFD00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Page Fault - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCFE00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8328 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Floating-point error - cpu[1] - 0x02 - OK - 0xFFFFF800E1DD0180 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Alignment check - cpu[1] - 0x02 - OK - 0xFFFFF800E1DD0300 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Machine check - cpu[1] - 0x02 - OK - 0xFFFFF800E1DD0400 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SIMD floating point exception - cpu[1] - 0x02 - OK - 0xFFFFF800E1DD0A80 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8350 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8358 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8360 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8368 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8370 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8378 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8380 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8388 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8390 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8398 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC83A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCA960 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC83B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC83B8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC83C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC83C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC83D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC83D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC83E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC83E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC83F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[1] - 0x02 - OK - 0xFFFFF800E1DD0C40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiGetTickCount - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8400 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiCallbackReturn - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8408 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiSetLowWaitHighThread - cpu[1] - 0x02 - OK - 0xFFFFF800E1DD0D40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiDebugService - cpu[1] - 0x02 - OK - 0xFFFFF800E1DD0E40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiSystemService - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8420 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved for APIC - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCAC30 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiStartUnexpectedRange - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCAE60 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt1 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCB1C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt2 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCB510 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt3 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCB860 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt4 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCBBB0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt5 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8458 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt6 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8460 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt7 - cpu[1] - 0x02 - OK - 0xFFFFF800E1C5C790 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt8 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8470 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt9 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8478 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt10 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8480 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt11 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8488 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt12 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8490 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt13 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8498 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt14 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC84A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt15 - cpu[1] - 0x02 - OK - 0xFFFFF800E1C5C290 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt16 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC84B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt17 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC84B8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt18 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC84C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt19 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC84C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt20 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC84D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt21 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC84D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt22 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC84E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt23 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC84E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt24 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC84F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt25 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC84F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt26 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8500 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt27 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8508 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt28 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8510 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt29 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8518 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt30 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8520 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt31 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8528 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt32 - cpu[1] - 0x02 - OK - 0xFFFFF800E1C5C090 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt33 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8538 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt34 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8540 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt35 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8548 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt36 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8550 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt37 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8558 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt38 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8560 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt39 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8568 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt40 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8570 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt41 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8578 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt42 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8580 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt43 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8588 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt44 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8590 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt45 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8598 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt46 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC85A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt47 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC85A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt48 - cpu[1] - 0x02 - idt hook - 0xFFFFD00020B3C090 - unknown image - 
       KiUnexpectedInterrupt49 - cpu[1] - 0x02 - idt hook - 0xFFFFD00020B3C310 - unknown image - 
       KiUnexpectedInterrupt50 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC85C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt51 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC85C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt52 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC85D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt53 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC85D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt54 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC85E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt55 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC85E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt56 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC85F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt57 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC85F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt58 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8600 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt59 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8608 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt60 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8610 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt61 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8618 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt62 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8620 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt63 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8628 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt64 - cpu[1] - 0x02 - idt hook - 0xFFFFD00020B3C1D0 - unknown image - 
       KiUnexpectedInterrupt65 - cpu[1] - 0x02 - idt hook - 0xFFFFD000251A4E50 - unknown image - 
       KiUnexpectedInterrupt66 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8640 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt67 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8648 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt68 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8650 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt69 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8658 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt70 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8660 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt71 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8668 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt72 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8670 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt73 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8678 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt74 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8680 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt75 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8688 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt76 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8690 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt77 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8698 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt78 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC86A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt79 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC86A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt80 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC86B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt81 - cpu[1] - 0x02 - idt hook - 0xFFFFD00020B3CD10 - unknown image - 
       KiUnexpectedInterrupt82 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC86C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt83 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC86C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt84 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC86D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt85 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC86D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt86 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC86E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt87 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC86E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt88 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC86F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt89 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC86F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt90 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8700 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt91 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8708 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt92 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8710 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt93 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8718 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt94 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8720 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt95 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8728 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt96 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8730 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt97 - cpu[1] - 0x02 - idt hook - 0xFFFFD00020B3CA90 - unknown image - 
       KiUnexpectedInterrupt98 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8740 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt99 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8748 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt100 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8750 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt101 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8758 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt102 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8760 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt103 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8768 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt104 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8770 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt105 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8778 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt106 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8780 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt107 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8788 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt108 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8790 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt109 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8798 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt110 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC87A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt111 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC87A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt112 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC87B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt113 - cpu[1] - 0x02 - idt hook - 0xFFFFD00020B3C450 - unknown image - 
       KiUnexpectedInterrupt114 - cpu[1] - 0x02 - idt hook - 0xFFFFD00020B3C590 - unknown image - 
       KiUnexpectedInterrupt115 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC87C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt116 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC87D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt117 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC87D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt118 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC87E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt119 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC87E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt120 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC87F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt121 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC87F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt122 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8800 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt123 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8808 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt124 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8810 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt125 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8818 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt126 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8820 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt127 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8828 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt128 - cpu[1] - 0x02 - idt hook - 0xFFFFD00020B3CE50 - unknown image - 
       KiUnexpectedInterrupt129 - cpu[1] - 0x02 - idt hook - 0xFFFFD00020B3C6D0 - unknown image - 
       KiUnexpectedInterrupt130 - cpu[1] - 0x02 - idt hook - 0xFFFFD000251A4D10 - unknown image - 
       KiUnexpectedInterrupt131 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8848 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt132 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8850 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt133 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8858 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt134 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8860 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt135 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8868 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt136 - cpu[1] - 0x02 - idt hook - 0xFFFFD00020B3CBD0 - unknown image - 
       KiUnexpectedInterrupt137 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8878 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt138 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8880 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt139 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8888 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt140 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8890 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt141 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8898 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt142 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC88A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt143 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC88A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt144 - cpu[1] - 0x02 - OK - 0xFFFFF800E1C5C390 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt145 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC88B8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt146 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC88C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt147 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC88C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt148 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC88D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt149 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC88D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt150 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC88E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt151 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC88E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt152 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC88F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt153 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC88F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt154 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8900 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt155 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8908 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt156 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8910 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt157 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8918 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt158 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8920 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt159 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8928 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt160 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8930 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt161 - cpu[1] - 0x02 - idt hook - 0xFFFFE00000400390 - unknown image - 
       KiUnexpectedInterrupt162 - cpu[1] - 0x02 - idt hook - 0xFFFFE00000400290 - unknown image - 
       KiUnexpectedInterrupt163 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8948 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt164 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8950 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt165 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8958 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt166 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8960 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt167 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8968 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt168 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8970 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt169 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8978 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt170 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8980 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt171 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8988 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt172 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8990 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt173 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8998 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt174 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC89A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt175 - cpu[1] - 0x02 - OK - 0xFFFFF800E1C5C590 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt176 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC89B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt177 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DCBF00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt178 - cpu[1] - 0x02 - OK - 0xFFFFF800E1C5CF90 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt179 - cpu[1] - 0x02 - idt hook - 0xFFFFE00000400190 - unknown image - 
       KiUnexpectedInterrupt180 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC89D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt181 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC89D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt182 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC89E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt183 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC89E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt184 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC89F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt185 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC89F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt186 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt187 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A08 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt188 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt189 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A18 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt190 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A20 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt191 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A28 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt192 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A30 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt193 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A38 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt194 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt195 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A48 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt196 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A50 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt197 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A58 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt198 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A60 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt199 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A68 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt200 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A70 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt201 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A78 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt202 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A80 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt203 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt204 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A90 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt205 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8A98 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt206 - cpu[1] - 0x02 - idt hook - 0xFFFFE00000400090 - unknown image - 
       KiUnexpectedInterrupt207 - cpu[1] - 0x02 - OK - 0xFFFFF800E1DC8AA8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Divide error - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCEC00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Debug - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCED00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCEEC0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Breakpoint - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCF240 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Overflow - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCF340 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Bounds check - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCF440 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Invalid opcode - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCF540 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Device not available - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCF780 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Double fault - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCF840 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Coprocessor segment overrun - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCF900 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Invalid TSS - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCF9C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Segment not present - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCFA80 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Stack segment fault - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCFBC0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       General protection - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCFD00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Page Fault - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCFE00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8328 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Floating-point error - cpu[2] - 0x02 - OK - 0xFFFFF800E1DD0180 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Alignment check - cpu[2] - 0x02 - OK - 0xFFFFF800E1DD0300 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Machine check - cpu[2] - 0x02 - OK - 0xFFFFF800E1DD0400 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SIMD floating point exception - cpu[2] - 0x02 - OK - 0xFFFFF800E1DD0A80 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8350 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8358 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8360 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8368 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8370 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8378 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8380 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8388 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8390 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8398 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC83A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCA960 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC83B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC83B8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC83C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC83C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC83D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC83D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC83E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC83E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC83F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[2] - 0x02 - OK - 0xFFFFF800E1DD0C40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiGetTickCount - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8400 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiCallbackReturn - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8408 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiSetLowWaitHighThread - cpu[2] - 0x02 - OK - 0xFFFFF800E1DD0D40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiDebugService - cpu[2] - 0x02 - OK - 0xFFFFF800E1DD0E40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiSystemService - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8420 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved for APIC - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCAC30 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiStartUnexpectedRange - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCAE60 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt1 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCB1C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt2 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCB510 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt3 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCB860 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt4 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCBBB0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt5 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8458 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt6 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8460 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt7 - cpu[2] - 0x02 - OK - 0xFFFFF800E1C5C790 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt8 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8470 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt9 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8478 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt10 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8480 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt11 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8488 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt12 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8490 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt13 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8498 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt14 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC84A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt15 - cpu[2] - 0x02 - OK - 0xFFFFF800E1C5C290 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt16 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC84B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt17 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC84B8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt18 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC84C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt19 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC84C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt20 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC84D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt21 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC84D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt22 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC84E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt23 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC84E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt24 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC84F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt25 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC84F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt26 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8500 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt27 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8508 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt28 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8510 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt29 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8518 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt30 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8520 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt31 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8528 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt32 - cpu[2] - 0x02 - OK - 0xFFFFF800E1C5C090 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt33 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8538 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt34 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8540 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt35 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8548 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt36 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8550 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt37 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8558 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt38 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8560 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt39 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8568 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt40 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8570 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt41 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8578 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt42 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8580 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt43 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8588 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt44 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8590 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt45 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8598 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt46 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC85A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt47 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC85A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt48 - cpu[2] - 0x02 - idt hook - 0xFFFFD00020B3C090 - unknown image - 
       KiUnexpectedInterrupt49 - cpu[2] - 0x02 - idt hook - 0xFFFFD00020B3C310 - unknown image - 
       KiUnexpectedInterrupt50 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC85C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt51 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC85C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt52 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC85D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt53 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC85D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt54 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC85E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt55 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC85E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt56 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC85F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt57 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC85F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt58 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8600 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt59 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8608 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt60 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8610 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt61 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8618 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt62 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8620 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt63 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8628 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt64 - cpu[2] - 0x02 - idt hook - 0xFFFFD00020B3C1D0 - unknown image - 
       KiUnexpectedInterrupt65 - cpu[2] - 0x02 - idt hook - 0xFFFFD000251A4E50 - unknown image - 
       KiUnexpectedInterrupt66 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8640 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt67 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8648 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt68 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8650 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt69 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8658 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt70 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8660 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt71 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8668 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt72 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8670 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt73 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8678 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt74 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8680 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt75 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8688 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt76 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8690 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt77 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8698 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt78 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC86A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt79 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC86A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt80 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC86B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt81 - cpu[2] - 0x02 - idt hook - 0xFFFFD00020B3CD10 - unknown image - 
       KiUnexpectedInterrupt82 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC86C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt83 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC86C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt84 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC86D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt85 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC86D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt86 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC86E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt87 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC86E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt88 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC86F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt89 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC86F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt90 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8700 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt91 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8708 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt92 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8710 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt93 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8718 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt94 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8720 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt95 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8728 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt96 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8730 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt97 - cpu[2] - 0x02 - idt hook - 0xFFFFD00020B3CA90 - unknown image - 
       KiUnexpectedInterrupt98 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8740 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt99 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8748 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt100 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8750 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt101 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8758 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt102 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8760 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt103 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8768 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt104 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8770 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt105 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8778 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt106 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8780 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt107 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8788 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt108 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8790 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt109 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8798 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt110 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC87A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt111 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC87A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt112 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC87B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt113 - cpu[2] - 0x02 - idt hook - 0xFFFFD00020B3C450 - unknown image - 
       KiUnexpectedInterrupt114 - cpu[2] - 0x02 - idt hook - 0xFFFFD00020B3C590 - unknown image - 
       KiUnexpectedInterrupt115 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC87C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt116 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC87D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt117 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC87D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt118 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC87E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt119 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC87E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt120 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC87F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt121 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC87F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt122 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8800 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt123 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8808 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt124 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8810 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt125 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8818 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt126 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8820 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt127 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8828 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt128 - cpu[2] - 0x02 - idt hook - 0xFFFFD00020B3CE50 - unknown image - 
       KiUnexpectedInterrupt129 - cpu[2] - 0x02 - idt hook - 0xFFFFD00020B3C6D0 - unknown image - 
       KiUnexpectedInterrupt130 - cpu[2] - 0x02 - idt hook - 0xFFFFD000251A4D10 - unknown image - 
       KiUnexpectedInterrupt131 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8848 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt132 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8850 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt133 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8858 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt134 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8860 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt135 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8868 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt136 - cpu[2] - 0x02 - idt hook - 0xFFFFD00020B3CBD0 - unknown image - 
       KiUnexpectedInterrupt137 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8878 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt138 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8880 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt139 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8888 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt140 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8890 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt141 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8898 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt142 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC88A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt143 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC88A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt144 - cpu[2] - 0x02 - OK - 0xFFFFF800E1C5C390 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt145 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC88B8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt146 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC88C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt147 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC88C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt148 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC88D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt149 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC88D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt150 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC88E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt151 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC88E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt152 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC88F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt153 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC88F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt154 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8900 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt155 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8908 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt156 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8910 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt157 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8918 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt158 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8920 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt159 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8928 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt160 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8930 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt161 - cpu[2] - 0x02 - idt hook - 0xFFFFE00000400390 - unknown image - 
       KiUnexpectedInterrupt162 - cpu[2] - 0x02 - idt hook - 0xFFFFE00000400290 - unknown image - 
       KiUnexpectedInterrupt163 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8948 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt164 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8950 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt165 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8958 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt166 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8960 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt167 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8968 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt168 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8970 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt169 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8978 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt170 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8980 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt171 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8988 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt172 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8990 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt173 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8998 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt174 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC89A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt175 - cpu[2] - 0x02 - OK - 0xFFFFF800E1C5C590 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt176 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC89B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt177 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DCBF00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt178 - cpu[2] - 0x02 - OK - 0xFFFFF800E1C5CF90 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt179 - cpu[2] - 0x02 - idt hook - 0xFFFFE00000400190 - unknown image - 
       KiUnexpectedInterrupt180 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC89D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt181 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC89D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt182 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC89E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt183 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC89E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt184 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC89F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt185 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC89F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt186 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt187 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A08 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt188 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt189 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A18 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt190 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A20 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt191 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A28 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt192 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A30 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt193 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A38 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt194 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt195 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A48 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt196 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A50 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt197 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A58 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt198 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A60 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt199 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A68 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt200 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A70 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt201 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A78 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt202 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A80 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt203 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt204 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A90 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt205 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8A98 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt206 - cpu[2] - 0x02 - idt hook - 0xFFFFE00000400090 - unknown image - 
       KiUnexpectedInterrupt207 - cpu[2] - 0x02 - OK - 0xFFFFF800E1DC8AA8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Divide error - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCEC00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Debug - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCED00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCEEC0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Breakpoint - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCF240 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Overflow - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCF340 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Bounds check - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCF440 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Invalid opcode - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCF540 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Device not available - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCF780 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Double fault - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCF840 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Coprocessor segment overrun - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCF900 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Invalid TSS - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCF9C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Segment not present - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCFA80 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Stack segment fault - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCFBC0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       General protection - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCFD00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Page Fault - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCFE00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8328 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Floating-point error - cpu[3] - 0x02 - OK - 0xFFFFF800E1DD0180 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Alignment check - cpu[3] - 0x02 - OK - 0xFFFFF800E1DD0300 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Machine check - cpu[3] - 0x02 - OK - 0xFFFFF800E1DD0400 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       SIMD floating point exception - cpu[3] - 0x02 - OK - 0xFFFFF800E1DD0A80 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8350 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8358 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8360 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8368 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8370 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8378 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8380 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8388 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8390 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8398 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC83A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCA960 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC83B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC83B8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC83C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC83C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC83D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC83D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC83E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC83E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC83F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - cpu[3] - 0x02 - OK - 0xFFFFF800E1DD0C40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiGetTickCount - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8400 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiCallbackReturn - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8408 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiSetLowWaitHighThread - cpu[3] - 0x02 - OK - 0xFFFFF800E1DD0D40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiDebugService - cpu[3] - 0x02 - OK - 0xFFFFF800E1DD0E40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiSystemService - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8420 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved for APIC - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCAC30 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiStartUnexpectedRange - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCAE60 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt1 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCB1C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt2 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCB510 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt3 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCB860 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt4 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCBBB0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt5 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8458 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt6 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8460 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt7 - cpu[3] - 0x02 - OK - 0xFFFFF800E1C5C790 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt8 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8470 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt9 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8478 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt10 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8480 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt11 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8488 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt12 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8490 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt13 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8498 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt14 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC84A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt15 - cpu[3] - 0x02 - OK - 0xFFFFF800E1C5C290 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt16 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC84B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt17 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC84B8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt18 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC84C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt19 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC84C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt20 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC84D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt21 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC84D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt22 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC84E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt23 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC84E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt24 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC84F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt25 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC84F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt26 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8500 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt27 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8508 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt28 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8510 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt29 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8518 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt30 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8520 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt31 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8528 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt32 - cpu[3] - 0x02 - OK - 0xFFFFF800E1C5C090 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt33 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8538 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt34 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8540 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt35 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8548 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt36 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8550 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt37 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8558 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt38 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8560 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt39 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8568 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt40 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8570 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt41 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8578 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt42 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8580 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt43 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8588 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt44 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8590 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt45 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8598 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt46 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC85A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt47 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC85A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt48 - cpu[3] - 0x02 - idt hook - 0xFFFFD00020B3C090 - unknown image - 
       KiUnexpectedInterrupt49 - cpu[3] - 0x02 - idt hook - 0xFFFFD00020B3C310 - unknown image - 
       KiUnexpectedInterrupt50 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC85C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt51 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC85C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt52 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC85D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt53 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC85D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt54 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC85E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt55 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC85E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt56 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC85F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt57 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC85F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt58 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8600 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt59 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8608 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt60 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8610 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt61 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8618 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt62 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8620 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt63 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8628 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt64 - cpu[3] - 0x02 - idt hook - 0xFFFFD00020B3C1D0 - unknown image - 
       KiUnexpectedInterrupt65 - cpu[3] - 0x02 - idt hook - 0xFFFFD000251A4E50 - unknown image - 
       KiUnexpectedInterrupt66 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8640 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt67 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8648 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt68 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8650 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt69 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8658 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt70 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8660 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt71 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8668 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt72 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8670 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt73 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8678 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt74 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8680 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt75 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8688 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt76 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8690 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt77 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8698 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt78 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC86A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt79 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC86A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt80 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC86B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt81 - cpu[3] - 0x02 - idt hook - 0xFFFFD00020B3CD10 - unknown image - 
       KiUnexpectedInterrupt82 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC86C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt83 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC86C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt84 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC86D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt85 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC86D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt86 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC86E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt87 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC86E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt88 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC86F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt89 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC86F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt90 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8700 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt91 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8708 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt92 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8710 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt93 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8718 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt94 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8720 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt95 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8728 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt96 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8730 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt97 - cpu[3] - 0x02 - idt hook - 0xFFFFD00020B3CA90 - unknown image - 
       KiUnexpectedInterrupt98 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8740 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt99 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8748 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt100 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8750 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt101 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8758 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt102 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8760 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt103 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8768 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt104 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8770 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt105 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8778 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt106 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8780 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt107 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8788 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt108 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8790 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt109 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8798 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt110 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC87A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt111 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC87A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt112 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC87B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt113 - cpu[3] - 0x02 - idt hook - 0xFFFFD00020B3C450 - unknown image - 
       KiUnexpectedInterrupt114 - cpu[3] - 0x02 - idt hook - 0xFFFFD00020B3C590 - unknown image - 
       KiUnexpectedInterrupt115 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC87C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt116 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC87D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt117 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC87D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt118 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC87E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt119 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC87E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt120 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC87F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt121 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC87F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt122 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8800 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt123 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8808 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt124 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8810 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt125 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8818 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt126 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8820 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt127 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8828 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt128 - cpu[3] - 0x02 - idt hook - 0xFFFFD00020B3CE50 - unknown image - 
       KiUnexpectedInterrupt129 - cpu[3] - 0x02 - idt hook - 0xFFFFD00020B3C6D0 - unknown image - 
       KiUnexpectedInterrupt130 - cpu[3] - 0x02 - idt hook - 0xFFFFD000251A4D10 - unknown image - 
       KiUnexpectedInterrupt131 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8848 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt132 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8850 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt133 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8858 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt134 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8860 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt135 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8868 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt136 - cpu[3] - 0x02 - idt hook - 0xFFFFD00020B3CBD0 - unknown image - 
       KiUnexpectedInterrupt137 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8878 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt138 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8880 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt139 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8888 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt140 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8890 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt141 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8898 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt142 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC88A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt143 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC88A8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt144 - cpu[3] - 0x02 - OK - 0xFFFFF800E1C5C390 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt145 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC88B8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt146 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC88C0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt147 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC88C8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt148 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC88D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt149 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC88D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt150 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC88E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt151 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC88E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt152 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC88F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt153 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC88F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt154 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8900 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt155 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8908 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt156 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8910 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt157 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8918 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt158 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8920 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt159 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8928 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt160 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8930 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt161 - cpu[3] - 0x02 - idt hook - 0xFFFFE00000400390 - unknown image - 
       KiUnexpectedInterrupt162 - cpu[3] - 0x02 - idt hook - 0xFFFFE00000400290 - unknown image - 
       KiUnexpectedInterrupt163 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8948 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt164 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8950 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt165 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8958 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt166 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8960 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt167 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8968 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt168 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8970 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt169 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8978 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt170 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8980 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt171 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8988 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt172 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8990 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt173 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8998 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt174 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC89A0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt175 - cpu[3] - 0x02 - OK - 0xFFFFF800E1C5C590 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt176 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC89B0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt177 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DCBF00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt178 - cpu[3] - 0x02 - OK - 0xFFFFF800E1C5CF90 - C:\WINDOWS\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt179 - cpu[3] - 0x02 - idt hook - 0xFFFFE00000400190 - unknown image - 
       KiUnexpectedInterrupt180 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC89D0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt181 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC89D8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt182 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC89E0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt183 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC89E8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt184 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC89F0 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt185 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC89F8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt186 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A00 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt187 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A08 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt188 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A10 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt189 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A18 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt190 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A20 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt191 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A28 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt192 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A30 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt193 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A38 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt194 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A40 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt195 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A48 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt196 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A50 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt197 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A58 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt198 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A60 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt199 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A68 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt200 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A70 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt201 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A78 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt202 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A80 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt203 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A88 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt204 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A90 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt205 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8A98 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt206 - cpu[3] - 0x02 - idt hook - 0xFFFFE00000400090 - unknown image - 
       KiUnexpectedInterrupt207 - cpu[3] - 0x02 - OK - 0xFFFFF800E1DC8AA8 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation

==========================================================================================

Message Hook

       TabTip32.exe - C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe - WH_CALLWNDPROC - TabTip32.exe
       PCHunter64.exe - C:\Users\J R\Desktop\PCHunter_free\PCHunter64.exe - WH_CBT - PCHunter64.exe
       TabTip32.exe - C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe - WH_SHELL - TabTip32.exe
       explorer.exe - C:\Windows\explorer.exe - WH_CALLWNDPROC - explorer.exe
       TabTip.exe - C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe - WH_MOUSE_LL - TabTip.exe
       TabTip.exe - C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe - WH_KEYBOARD_LL - TabTip.exe
       TabTip32.exe - C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe - WH_GETMESSAGE - TabTip32.exe
       PCHunter64.exe - C:\Users\J R\Desktop\PCHunter_free\PCHunter64.exe - WH_MSGFILTER - PCHunter64.exe
       InsOnWMI.exe - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe - WH_MSGFILTER - InsOnWMI.exe
       ATKOSD2.exe - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe - WH_MSGFILTER - ATKOSD2.exe
       ATKOSD2.exe - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe - WH_CBT - ATKOSD2.exe
       RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - WH_CBT - RAVCpl64.exe
       Dropbox.exe - C:\Users\J R\AppData\Roaming\Dropbox\bin\Dropbox.exe - WH_GETMESSAGE - Dropbox.exe
       TabTip.exe - C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe - WH_SHELL - TabTip.exe
       TabTip.exe - C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe - WH_GETMESSAGE - TabTip.exe
       TabTip.exe - C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe - WH_CALLWNDPROC - TabTip.exe
       RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - WH_MSGFILTER - RAVCpl64.exe
       RAVBg64.exe - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe - WH_MSGFILTER - RAVBg64.exe
       RAVBg64.exe - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe - WH_CBT - RAVBg64.exe
       RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - WH_MSGFILTER - RAVCpl64.exe
       RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - WH_MSGFILTER - RAVCpl64.exe
       RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - WH_MSGFILTER - RAVCpl64.exe
       RAVBg64.exe - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe - WH_MSGFILTER - RAVBg64.exe
       SetPoint.exe - C:\Program Files\Logitech\SetPointP\SetPoint.exe - WH_MSGFILTER - SetPoint.exe
       SetPoint.exe - C:\Program Files\Logitech\SetPointP\SetPoint.exe - WH_CBT - SetPoint.exe
       AsusTPCenter.exe - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe - WH_KEYBOARD_LL - AsusTPCenter.exe
       explorer.exe - C:\Windows\explorer.exe - WH_CALLWNDPROC - explorer.exe
       AvastUI.exe - C:\Program Files\AVAST Software\Avast\AvastUI.exe - WH_MSGFILTER - AvastUI.exe
       BtTray.exe - C:\Program Files (x86)\Bluetooth Suite\BtTray.exe - WH_CALLWNDPROC - BtTray.exe
       VivoBook.exe - C:\Program Files\ASUS\ASUS VivoBook\VivoBook.exe - WH_CALLWNDPROC - VivoBook.exe
       VivoBook.exe - C:\Program Files\ASUS\ASUS VivoBook\VivoBook.exe - WH_KEYBOARD_LL - VivoBook.exe
       AvastUI.exe - C:\Program Files\AVAST Software\Avast\AvastUI.exe - WH_CBT - AvastUI.exe
       LiveUpdate.exe - C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe - WH_CALLWNDPROC - LiveUpdate.exe
       explorer.exe - C:\Windows\explorer.exe - WH_GETMESSAGE - explorer.exe
       PCHunter64.exe - C:\Users\J R\Desktop\PCHunter_free\PCHunter64.exe - WH_CALLWNDPROCRET - PCHunter64.exe
       USBChargerPlus.exe - C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe - WH_MSGFILTER - USBChargerPlus.exe

==========================================================================================

Process Hook

      Image File Name[916 svchost.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[4448 UNS.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[928 SearchProtocolHost.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[3560 new_chrome.exe]Process Hook
             Iat - new_chrome.exe->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000640010
             inline - len(7) ntdll.dll->NtCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->NtMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->NtOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->NtOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->NtOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->NtOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->NtOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->NtOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->NtOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->NtQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->NtQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->NtSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->NtSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->NtUnmapViewOfSection - 0x00000000772BBE95->_
             inline - len(7) ntdll.dll->ZwCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->ZwMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->ZwOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->ZwOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->ZwOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->ZwOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->ZwOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->ZwOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->ZwOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->ZwQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->ZwQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->ZwSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->ZwSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->ZwUnmapViewOfSection - 0x00000000772BBE95->_
             Eat - KERNEL32.DLL->CreateNamedPipeW - 0x00000000755D2CB2->0x0000000100640010
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_
             Iat - chrome_child.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000640010
             Iat - pdf.dll->GDI32.dll:GetFontData - 0x000000007535F756->0x000000006CA64B07[C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll]
             Iat - ppGoogleNaClPluginChrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000640010

------------------------------------------------------------------------------------------

      Image File Name[1140 SearchIndexer.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[780 winlogon.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[724 svchost.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[376 dwm.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[736 csrss.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[420 smss.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[428 TabTip32.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[672 csrss.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[4380 Dropbox.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[656 svchost.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[3272 VivoBook.exe]Process Hook
             C:\Program Files\ASUS\ASUS VivoBook\VivoBook.exe - Hijack on Module File
             inline - len(1) KERNEL32.dll - 0x00007FFEAC1F977D->_
             inline - len(58) clr.dll - 0x00007FFEA39E12B8->_
             inline - len(10) clr.dll - 0x00007FFEA39E1320->_
             inline - len(10) clr.dll - 0x00007FFEA39E1340->_
             inline - len(10) clr.dll - 0x00007FFEA39E1370->_
             inline - len(1) clr.dll - 0x00007FFEA39E2358->_
             inline - len(1) clr.dll - 0x00007FFEA39E2395->_
             inline - len(1) clr.dll - 0x00007FFEA39E2410->_
             inline - len(1) clr.dll - 0x00007FFEA39E2473->_
             inline - len(1) clr.dll - 0x00007FFEA39E24C8->_
             inline - len(1) clr.dll - 0x00007FFEA39E2522->_
             inline - len(1) clr.dll - 0x00007FFEA39E26AF->_
             inline - len(1) clr.dll - 0x00007FFEA39E27B1->_
             inline - len(1) clr.dll - 0x00007FFEA39E2928->_
             inline - len(1) clr.dll - 0x00007FFEA39E2945->_
             inline - len(1) clr.dll - 0x00007FFEA39E2965->_
             inline - len(1) clr.dll - 0x00007FFEA39E4B50->_
             inline - len(1) clr.dll - 0x00007FFEA39E4B90->_
             inline - len(1) clr.dll - 0x00007FFEA39E4BC0->_
             inline - len(1) clr.dll - 0x00007FFEA39E4C00->_
             Iat - PresentationFramework.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x00000000005B131D
             inline - len(2) PresentationFramework.dll - 0x000000AECD331342->_
             Iat - WindowsBase.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000011E077
             inline - len(2) WindowsBase.dll - 0x000000AECCD2E09A->_
             Iat - System.Xaml.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000008F17B
             inline - len(2) System.Xaml.dll - 0x000000AEB3A9F19E->_
             Iat - System.ServiceProcess.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000001C3A1
             inline - len(2) System.ServiceProcess.dll - 0x000000AEB3B9C3C6->_
             Iat - System.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000319CA6
             inline - len(2) System.dll - 0x000000AECDDE9CCA->_
             Iat - System.Xml.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000028009A
             inline - len(2) System.Xml.dll - 0x000000AECFC000BE->_
             Iat - System.Configuration.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000059A70
             inline - len(2) System.Configuration.dll - 0x000000AECF5F9A92->_
             Iat - PresentationFramework.resources.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000003E760
             inline - len(2) PresentationFramework.resources.dll - 0x000000AECF6CE782->_
             Iat - UIAutomationTypes.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000017605
             inline - len(2) UIAutomationTypes.dll - 0x000000AECF74762A->_
             Iat - VivoBookResource.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000058CF50
             inline - len(2) VivoBookResource.dll - 0x000000AED08BCF72->_
             Iat - PresentationFramework.Aero2.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000003C020
             inline - len(2) PresentationFramework.Aero2.dll - 0x000000AECFEFC042->_
             Iat - UIAutomationProvider.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000000973C
             inline - len(2) UIAutomationProvider.dll - 0x000000AED2C9975E->_
             Iat - PresentationFramework-SystemXml.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x00000000000035E3
             inline - len(2) PresentationFramework-SystemXml.dll - 0x000000AEB3B63606->_
             Iat - PresentationCore.resources.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000001A620
             inline - len(2) PresentationCore.resources.dll - 0x000000AED1D1A642->_
             Iat - System.Runtime.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x00000000000043A4
             inline - len(2) System.Runtime.dll - 0x000000AED1D943C6->_
             Iat - FontLibrary.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000000BF30
             inline - len(2) FontLibrary.dll - 0x000000AED1C8BF52->_
             Iat - System.Xaml.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000008F17B
             inline - len(2) System.Xaml.dll - 0x000000AEB3B4F19E->_
             Iat - PresentationFramework.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x00000000005B131D
             inline - len(2) PresentationFramework.dll - 0x000000AECD921342->_
             Iat - WindowsBase.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000011E077
             inline - len(2) WindowsBase.dll - 0x000000AECDA7E09A->_
             Iat - System.ServiceProcess.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000001C3A1
             inline - len(2) System.ServiceProcess.dll - 0x000000AECDABC3C6->_
             Iat - System.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000319CA6
             inline - len(2) System.dll - 0x000000AECE139CCA->_
             Iat - System.Configuration.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000059A70
             inline - len(2) System.Configuration.dll - 0x000000AECF669A92->_
             Iat - PresentationFramework.resources.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000003E760
             inline - len(2) PresentationFramework.resources.dll - 0x000000AECF71E782->_
             Iat - UIAutomationTypes.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000017605
             inline - len(2) UIAutomationTypes.dll - 0x000000AECF76762A->_
             Iat - System.XML.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000028009A
             inline - len(2) System.XML.dll - 0x000000AECFEA00BE->_
             Iat - VivoBookResource.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000058CF50
             inline - len(2) VivoBookResource.dll - 0x000000AED0E5CF72->_
             Iat - PresentationFramework.Aero2.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000003C020
             inline - len(2) PresentationFramework.Aero2.dll - 0x000000AED1C2C042->_
             Iat - PresentationFramework-SystemXml.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x00000000000035E3
             inline - len(2) PresentationFramework-SystemXml.dll - 0x000000AED1C43606->_
             Iat - PresentationCore.resources.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000001A620
             inline - len(2) PresentationCore.resources.dll - 0x000000AED1D3A642->_
             Iat - FontLibrary.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000000BF30
             inline - len(2) FontLibrary.dll - 0x000000AED1D4BF52->_
             Iat - System.Runtime.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x00000000000043A4
             inline - len(2) System.Runtime.dll - 0x000000AED1E743C6->_
             Iat - UIAutomationProvider.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000000973C
             inline - len(2) UIAutomationProvider.dll - 0x000000AED2CD975E->_

------------------------------------------------------------------------------------------

      Image File Name[3464 QuickGesture64.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[4412 BtvStack.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[716 wininit.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[6016 explorer.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_
             inline - len(6) mscorwks.dll - 0x00007FFE9CCC1BD0->_
             inline - len(12) mscorwks.dll - 0x00007FFE9CF37CD0->_
             inline - len(2) mscorwks.dll - 0x00007FFE9CF37D50->_
             inline - len(46) mscorwks.dll - 0x00007FFE9CF38094->_
             inline - len(2) mscorwks.dll - 0x00007FFE9CF39598->_
             inline - len(2) mscorwks.dll - 0x00007FFE9CF395D4->_
             inline - len(2) mscorwks.dll - 0x00007FFE9CF39615->_
             inline - len(2) mscorwks.dll - 0x00007FFE9CF39690->_
             inline - len(2) mscorwks.dll - 0x00007FFE9CF396F3->_
             inline - len(2) mscorwks.dll - 0x00007FFE9CF39748->_
             inline - len(2) mscorwks.dll - 0x00007FFE9CF397A2->_
             inline - len(2) mscorwks.dll - 0x00007FFE9CF3993F->_
             inline - len(2) mscorwks.dll - 0x00007FFE9CF39A42->_
             inline - len(2) mscorwks.dll - 0x00007FFE9CF39BBA->_
             inline - len(2) mscorwks.dll - 0x00007FFE9CF39BD9->_
             inline - len(2) mscorwks.dll - 0x00007FFE9CF39BF5->_
             inline - len(9) mscorwks.dll - 0x00007FFE9CF3A7CC->_
             inline - len(2) mscorwks.dll - 0x00007FFE9CF3ADA0->_
             inline - len(2) mscorwks.dll - 0x00007FFE9CF3ADE0->_
             inline - len(2) mscorwks.dll - 0x00007FFE9CF3AE20->_
             inline - len(2) mscorwks.dll - 0x00007FFE9CF3AE60->_
             Iat - BatteryBar.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x00000000000096D0
             inline - len(2) BatteryBar.dll - 0x0000000004FA96F2->_
             Iat - System.Windows.Forms.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000047C460
             inline - len(2) System.Windows.Forms.dll - 0x000000001E77C482->_
             Iat - System.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x00000000002B8BD0
             inline - len(2) System.dll - 0x000000001EF58BF2->_
             Iat - System.Drawing.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000089200
             inline - len(2) System.Drawing.dll - 0x000000001F349222->_
             Iat - BatteryBar.Utilities.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000099730
             inline - len(2) BatteryBar.Utilities.dll - 0x000000001F599752->_
             Iat - Accessibility.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000003F90
             inline - len(2) Accessibility.dll - 0x0000000004483FB2->_
             Iat - System.Xml.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x00000000001D7B50
             inline - len(2) System.Xml.dll - 0x00000000047B7B72->_
             Iat - System.Configuration.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000005CCF0
             inline - len(2) System.Configuration.dll - 0x000000000455CD12->_
             Iat - mscorlib.resources.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000048A40
             inline - len(2) mscorlib.resources.dll - 0x000000001E2E8A62->_
             Iat - System.Management.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000005CD20
             inline - len(2) System.Management.dll - 0x000000001F9ECD42->_
             Iat - System.Web.Services.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x00000000000CB500
             inline - len(2) System.Web.Services.dll - 0x00000000210EB522->_
             Iat - System.resources.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000030D70
             inline - len(2) System.resources.dll - 0x000000001F8D0D92->_
             Iat - Accessibility.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000003F90
             inline - len(2) Accessibility.dll - 0x00000000044B3FB2->_
             Iat - System.configuration.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000005CCF0
             inline - len(2) System.configuration.dll - 0x000000000483CD12->_
             Iat - BatteryBar.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x00000000000096D0
             inline - len(2) BatteryBar.dll - 0x0000000004F896F2->_
             Iat - System.Windows.Forms.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000047C460
             inline - len(2) System.Windows.Forms.dll - 0x000000001EC4C482->_
             Iat - System.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x00000000002B8BD0
             inline - len(2) System.dll - 0x000000001F268BF2->_
             Iat - System.Drawing.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000089200
             inline - len(2) System.Drawing.dll - 0x000000001F3E9222->_
             Iat - BatteryBar.Utilities.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000099730
             inline - len(2) BatteryBar.Utilities.dll - 0x000000001F639752->_
             Iat - System.XML.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x00000000001D7B50
             inline - len(2) System.XML.dll - 0x000000001F817B72->_
             Iat - mscorlib.resources.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000048A40
             inline - len(2) mscorlib.resources.dll - 0x000000001F888A62->_
             Iat - System.Management.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000005CD20
             inline - len(2) System.Management.dll - 0x000000001FA5CD42->_
             Iat - System.Web.Services.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x00000000000CB500
             inline - len(2) System.Web.Services.dll - 0x00000000211BB522->_
             Iat - system.resources.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000030D70
             inline - len(2) system.resources.dll - 0x0000000022A10D92->_

------------------------------------------------------------------------------------------

      Image File Name[820 services.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[4360 BtTray.exe]Process Hook
             C:\Program Files (x86)\Bluetooth Suite\BtTray.exe - Hijack on Module File
             inline - len(1) KERNEL32.dll - 0x00007FFEAC1F977D->_
             inline - len(47) clr.dll - 0x00007FFEA39E12B3->_
             inline - len(10) clr.dll - 0x00007FFEA39E1320->_
             inline - len(10) clr.dll - 0x00007FFEA39E1340->_
             inline - len(10) clr.dll - 0x00007FFEA39E1370->_
             inline - len(1) clr.dll - 0x00007FFEA39E2358->_
             inline - len(1) clr.dll - 0x00007FFEA39E2395->_
             inline - len(1) clr.dll - 0x00007FFEA39E2410->_
             inline - len(1) clr.dll - 0x00007FFEA39E2473->_
             inline - len(1) clr.dll - 0x00007FFEA39E24C8->_
             inline - len(1) clr.dll - 0x00007FFEA39E2522->_
             inline - len(1) clr.dll - 0x00007FFEA39E26AF->_
             inline - len(1) clr.dll - 0x00007FFEA39E27B1->_
             inline - len(1) clr.dll - 0x00007FFEA39E2928->_
             inline - len(1) clr.dll - 0x00007FFEA39E2945->_
             inline - len(1) clr.dll - 0x00007FFEA39E2965->_
             inline - len(1) clr.dll - 0x00007FFEA39E4B50->_
             inline - len(1) clr.dll - 0x00007FFEA39E4B90->_
             inline - len(1) clr.dll - 0x00007FFEA39E4BC0->_
             inline - len(1) clr.dll - 0x00007FFEA39E4C00->_
             Iat - PresentationFramework.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x00000000005B131D
             inline - len(2) PresentationFramework.dll - 0x000000001C111342->_
             Iat - WindowsBase.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000011E077
             inline - len(2) WindowsBase.dll - 0x000000001BAFE09A->_
             Iat - System.Xaml.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000008F17B
             inline - len(2) System.Xaml.dll - 0x000000001C90F19E->_
             Iat - System.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000319CA6
             inline - len(2) System.dll - 0x000000001D319CCA->_
             Iat - System.Xml.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000028009A
             inline - len(2) System.Xml.dll - 0x000000001EA000BE->_
             Iat - System.Configuration.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000059A70
             inline - len(2) System.Configuration.dll - 0x000000001B8C9A92->_
             Iat - UIAutomationTypes.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000017605
             inline - len(2) UIAutomationTypes.dll - 0x000000001E42762A->_
             Iat - PresentationFramework.resources.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000003E760
             inline - len(2) PresentationFramework.resources.dll - 0x000000001E52E782->_
             Iat - System.Windows.Forms.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000480318
             inline - len(2) System.Windows.Forms.dll - 0x000000001F5A033A->_
             Iat - System.Runtime.Remoting.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000004FEFB
             inline - len(2) System.Runtime.Remoting.dll - 0x000000001FAAFF1E->_
             Iat - PresentationFramework.Aero2.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000003C020
             inline - len(2) PresentationFramework.Aero2.dll - 0x000000002211C042->_
             Iat - UIAutomationProvider.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000000973C
             inline - len(2) UIAutomationProvider.dll - 0x0000000022FF975E->_
             Iat - System.Runtime.Serialization.Formatters.Soap.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000001DF8C
             inline - len(2) System.Runtime.Serialization.Formatters.Soap.dll - 0x0000000025F7DFAE->_
             C:\WINDOWS\Microsoft.Net\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll - Hijack on Module File
             Iat - PresentationFramework.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x00000000005B131D
             inline - len(2) PresentationFramework.dll - 0x000000001C701342->_
             Iat - WindowsBase.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000011E077
             inline - len(2) WindowsBase.dll - 0x000000001C85E09A->_
             Iat - System.Xaml.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000008F17B
             inline - len(2) System.Xaml.dll - 0x000000001C9AF19E->_
             Iat - System.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000319CA6
             inline - len(2) System.dll - 0x000000001D669CCA->_
             Iat - UIAutomationTypes.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000017605
             inline - len(2) UIAutomationTypes.dll - 0x000000001E44762A->_
             Iat - System.Configuration.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000059A70
             inline - len(2) System.Configuration.dll - 0x000000001E4D9A92->_
             Iat - System.XML.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000028009A
             inline - len(2) System.XML.dll - 0x000000001ECA00BE->_
             Iat - PresentationFramework.resources.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000003E760
             inline - len(2) PresentationFramework.resources.dll - 0x000000001ECFE782->_
             Iat - System.Windows.Forms.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000480318
             inline - len(2) System.Windows.Forms.dll - 0x000000001FA4033A->_
             Iat - System.Runtime.Remoting.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000004FEFB
             inline - len(2) System.Runtime.Remoting.dll - 0x000000001FB0FF1E->_
             Iat - ContactsApi.dll->MSVCR90.dll:_onexit - 0x000000005F7A537C->0x000000000005BF3A
             Iat - ContactsApi.dll->MSVCR90.dll:sscanf_s - 0x000000005F763BD4->0x000000000005C008
             Iat - ContactsApi.dll->MSVCR90.dll:wcsstr - 0x000000005F769340->0x000000000005BFFE
             Iat - ContactsApi.dll->MSVCR90.dll:wcschr - 0x000000005F768C08->0x000000000005BFF4
             Iat - ContactsApi.dll->MSVCR90.dll:__FrameUnwindFilter - 0x000000005F793324->0x000000000005C044
             Iat - ContactsApi.dll->MSVCR90.dll:malloc - 0x000000005F79CB2C->0x000000000005C05A
             Iat - ContactsApi.dll->MSVCR90.dll:__CxxFrameHandler3 - 0x000000005F794FB4->0x000000000005C064
             Iat - ContactsApi.dll->MSVCR90.dll:wcscpy_s - 0x000000005F768C6C->0x000000000005C02E
             Iat - ContactsApi.dll->MSVCR90.dll:_CxxThrowException - 0x000000005F795444->0x000000000005C07A
             Iat - ContactsApi.dll->MSVCR90.dll:memset - 0x000000005F76E580->0x000000000005C090
             Iat - ContactsApi.dll->MSVCR90.dll:__crt_debugger_hook - 0x000000005F7A9F64->0x000000000005C09A
             Iat - ContactsApi.dll->MSVCR90.dll:_lock - 0x000000005F752964->0x000000000005BF32
             Iat - ContactsApi.dll->MSVCR90.dll:__dllonexit - 0x000000005F7A54A8->0x000000000005BF24
             Iat - ContactsApi.dll->MSVCR90.dll:_unlock - 0x000000005F752854->0x000000000005BF1A
             Iat - ContactsApi.dll->MSVCR90.dll:__clean_type_info_names_internal - 0x000000005F793138->0x000000000005BEF6
             Iat - ContactsApi.dll->MSVCR90.dll:?_type_info_dtor_internal_method@type_info@@QEAAXXZ - 0x000000005F792C2C->0x000000000005BEC0
             Iat - ContactsApi.dll->MSVCR90.dll:?terminate@@YAXXZ - 0x000000005F792668->0x000000000005BEAC
             Iat - ContactsApi.dll->MSVCR90.dll:__CppXcptFilter - 0x000000005F7A5904->0x000000000005BE8E
             Iat - ContactsApi.dll->MSVCR90.dll:__C_specific_handler - 0x000000005F7A5588->0x000000000005BE76
             Iat - ContactsApi.dll->MSVCR90.dll:_amsg_exit - 0x000000005F7517BC->0x000000000005BE68
             Iat - ContactsApi.dll->MSVCR90.dll:_decode_pointer - 0x000000005F7531B0->0x000000000005BE56
             Iat - ContactsApi.dll->MSVCR90.dll:_encoded_null - 0x000000005F7531A0->0x000000000005BE46
             Iat - ContactsApi.dll->MSVCR90.dll:free - 0x000000005F79CAA0->0x000000000005BE3E
             Iat - ContactsApi.dll->MSVCR90.dll:_initterm_e - 0x000000005F7518A8->0x000000000005BE30
             Iat - ContactsApi.dll->MSVCR90.dll:_initterm - 0x000000005F75186C->0x000000000005BE24
             Iat - ContactsApi.dll->MSVCR90.dll:_malloc_crt - 0x000000005F79C7FC->0x000000000005BE16
             Iat - ContactsApi.dll->MSVCR90.dll:_encode_pointer - 0x000000005F753190->0x000000000005BE04
             Iat - ContactsApi.dll->MSVCR90.dll:??3@YAXPEAX@Z - 0x000000005F79CD08->0x000000000005BDF4
             Iat - ContactsApi.dll->MSVCR90.dll:swprintf_s - 0x000000005F763EA4->0x000000000005C020
             Iat - ContactsApi.dll->MSVCR90.dll:strcpy_s - 0x000000005F76867C->0x000000000005C014
             Iat - ContactsApi.dll->MSVCR90.dll:_cexit - 0x000000005F751C04->0x000000000005C03A
             Iat - ContactsApi.dll->KERNEL32.dll:GetLastError - 0x00007FFEAC1E1480->0x000000000005C0C6
             Iat - ContactsApi.dll->KERNEL32.dll:GetVersionExW - 0x00007FFEAC1E3408->0x000000000005C0EC
             Iat - ContactsApi.dll->KERNEL32.dll:GetLocaleInfoW - 0x00007FFEAC1E3458->0x000000000005C0FC
             Iat - ContactsApi.dll->KERNEL32.dll:WideCharToMultiByte - 0x00007FFEAC1E19E0->0x000000000005C0B0
             Iat - ContactsApi.dll->KERNEL32.dll:FileTimeToSystemTime - 0x00007FFEAC1E3BC8->0x000000000005C10E
             Iat - ContactsApi.dll->KERNEL32.dll:FileTimeToLocalFileTime - 0x00007FFEAC1E3BD4->0x000000000005C126
             Iat - ContactsApi.dll->KERNEL32.dll:SystemTimeToFileTime - 0x00007FFEAC1E19B4->0x000000000005C140
             Iat - ContactsApi.dll->KERNEL32.dll:LocalFileTimeToFileTime - 0x00007FFEAC1F376C->0x000000000005C158
             Iat - ContactsApi.dll->KERNEL32.dll:lstrlenA - 0x00007FFEAC1E182C->0x000000000005C172
             Iat - ContactsApi.dll->KERNEL32.dll:LocalFree - 0x00007FFEAC1E1E00->0x000000000005C17E
             Iat - ContactsApi.dll->KERNEL32.dll:lstrlenW - 0x00007FFEAC1E1590->0x000000000005C18A
             Iat - ContactsApi.dll->KERNEL32.dll:TerminateProcess - 0x00007FFEAC1E30B0->0x000000000005C196
             Iat - ContactsApi.dll->KERNEL32.dll:GetCurrentProcess - 0x00007FFEAC1E1DF0->0x000000000005C1AA
             Iat - ContactsApi.dll->KERNEL32.dll:UnhandledExceptionFilter - 0x00007FFEAC2BDB6C->0x000000000005C1BE
             Iat - ContactsApi.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00007FFEAC1E31D8->0x000000000005C1DA
             Iat - ContactsApi.dll->KERNEL32.dll:IsDebuggerPresent - 0x00007FFEAC1E34EC->0x000000000005C1F8
             Iat - ContactsApi.dll->KERNEL32.dll:RtlVirtualUnwind - 0x00007FFEAC1EC9B0->0x000000000005C20C
             Iat - ContactsApi.dll->KERNEL32.dll:RtlLookupFunctionEntry - 0x00007FFEAC1FBBFC->0x000000000005C220
             Iat - ContactsApi.dll->KERNEL32.dll:RtlCaptureContext - 0x00007FFEAC1EC9EC->0x000000000005C23A
             Iat - ContactsApi.dll->KERNEL32.dll:MultiByteToWideChar - 0x00007FFEAC1E19C4->0x000000000005C0D6
             Iat - ContactsApi.dll->KERNEL32.dll:Sleep - 0x00007FFEAC1E1020->0x000000000005BF44
             Iat - ContactsApi.dll->KERNEL32.dll:DisableThreadLibraryCalls - 0x00007FFEAC1E1B58->0x000000000005BF4C
             Iat - ContactsApi.dll->KERNEL32.dll:QueryPerformanceCounter - 0x00007FFEAC1E1354->0x000000000005BF68
             Iat - ContactsApi.dll->KERNEL32.dll:GetTickCount - 0x00007FFEAC1E1010->0x000000000005BF82
             Iat - ContactsApi.dll->KERNEL32.dll:GetCurrentThreadId - 0x00007FFEAC1E1320->0x000000000005BF92
             Iat - ContactsApi.dll->KERNEL32.dll:GetCurrentProcessId - 0x00007FFEAC1E1560->0x000000000005BFA8
             Iat - ContactsApi.dll->KERNEL32.dll:GetSystemTimeAsFileTime - 0x00007FFEAC1E18A8->0x000000000005BFBE
             Iat - ContactsApi.dll->OLEAUT32.dll:[Ordinal:201] - 0x00007FFEAE711010->0x80000000000000C9
             Iat - ContactsApi.dll->OLEAUT32.dll:[Ordinal:185] - 0x00007FFEAE71F830->0x80000000000000B9
             Iat - ContactsApi.dll->OLEAUT32.dll:[Ordinal:184] - 0x00007FFEAE71F400->0x80000000000000B8
             Iat - ContactsApi.dll->OLEAUT32.dll:[Ordinal:10] - 0x00007FFEAE711D60->0x800000000000000A
             Iat - ContactsApi.dll->OLEAUT32.dll:[Ordinal:149] - 0x00007FFEAE7119B0->0x8000000000000095
             Iat - ContactsApi.dll->OLEAUT32.dll:[Ordinal:2] - 0x00007FFEAE711610->0x8000000000000002
             Iat - ContactsApi.dll->OLEAUT32.dll:[Ordinal:8] - 0x00007FFEAE711840->0x8000000000000008
             Iat - ContactsApi.dll->OLEAUT32.dll:[Ordinal:200] - 0x00007FFEAE71101C->0x80000000000000C8
             Iat - ContactsApi.dll->OLEAUT32.dll:[Ordinal:9] - 0x00007FFEAE711740->0x8000000000000009
             Iat - ContactsApi.dll->OLEAUT32.dll:[Ordinal:6] - 0x00007FFEAE7113E0->0x8000000000000006
             Iat - ContactsApi.dll->OLEAUT32.dll:[Ordinal:12] - 0x00007FFEAE711E8C->0x800000000000000C
             Iat - ContactsApi.dll->OLEAUT32.dll:[Ordinal:150] - 0x00007FFEAE711EB0->0x8000000000000096
             Iat - ContactsApi.dll->OLEAUT32.dll:[Ordinal:202] - 0x00007FFEAE7155AC->0x80000000000000CA
             Iat - ContactsApi.dll->msvcm90.dll:?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXPE$ - 0x000000005E481090->0x000000000005C34A
             Iat - ContactsApi.dll->msvcm90.dll:?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAX - 0x000000005E481110->0x000000000005C3A6
             Iat - ContactsApi.dll->msvcm90.dll:?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAV - 0x000000005E481070->0x000000000005C3EA
             Iat - ContactsApi.dll->msvcm90.dll:?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAV - 0x000000005E481050->0x000000000005C2F6
             Iat - ContactsApi.dll->msvcm90.dll:?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAX - 0x000000005E481230->0x000000000005C298
             Iat - ContactsApi.dll->msvcm90.dll:?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6AJP - 0x000000005E4810F0->0x000000000005C24E
             Iat - ContactsApi.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000005C45C
             Iat - PresentationFramework.Aero2.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000003C020
             inline - len(2) PresentationFramework.Aero2.dll - 0x000000002216C042->_
             Iat - UIAutomationProvider.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000000973C
             inline - len(2) UIAutomationProvider.dll - 0x000000002314975E->_
             Iat - System.Runtime.Serialization.Formatters.Soap.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000001DF8C
             inline - len(2) System.Runtime.Serialization.Formatters.Soap.dll - 0x0000000025FFDFAE->_
             C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll - Hijack on Module File

------------------------------------------------------------------------------------------

      Image File Name[1592 svchost.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[840 lsass.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[5820 SearchFilterHost.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[940 svchost.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[4376 AvastUI.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[4504 PCHunter64.exe]Process Hook
             Iat - PCHunter64.exe->USER32.dll:SetWindowsHookExW - 0x00007FFEAE100090->0x00007FFEAA84B1E0[C:\WINDOWS\system32\apphelp.dll]
             Iat - PCHunter64.exe->USER32.dll:CallNextHookEx - 0x00007FFEAE0F3B50->0x00007FFEAA842294[C:\WINDOWS\system32\apphelp.dll]
             Iat - PCHunter64.exe->USER32.dll:EnumWindows - 0x00007FFEAE113A00->0x00007FFEAA84D030[C:\WINDOWS\system32\apphelp.dll]
             Iat - PCHunter64.exe->USER32.dll:GetWindowThreadProcessId - 0x00007FFEAE0F3F40->0x00007FFEAA84B12C[C:\WINDOWS\system32\apphelp.dll]
             Iat - PCHunter64.exe->USER32.dll:IsWindowVisible - 0x00007FFEAE0F5570->0x00007FFEAA84D01C[C:\WINDOWS\system32\apphelp.dll]
             Iat - PCHunter64.exe->USER32.dll:MessageBoxW - 0x00007FFEAE173478->0x00007FFEAA881468[C:\WINDOWS\system32\apphelp.dll]
             Iat - KERNEL32.DLL->ntdll.dll:NtSetValueKey - 0x00007FFEAE916B70->0x00007FFEAA84D044[C:\WINDOWS\system32\apphelp.dll]
             Iat - KERNEL32.DLL->ntdll.dll:NtSetInformationFile - 0x00007FFEAE9167E0->0x00007FFEAA842358[C:\WINDOWS\system32\apphelp.dll]
             Iat - KERNEL32.DLL->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_
             Iat - KERNELBASE.dll->ntdll.dll:NtSetInformationFile - 0x00007FFEAE9167E0->0x00007FFEAA842358[C:\WINDOWS\system32\apphelp.dll]
             Iat - KERNELBASE.dll->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - KERNELBASE.dll->ntdll.dll:NtSetValueKey - 0x00007FFEAE916B70->0x00007FFEAA84D044[C:\WINDOWS\system32\apphelp.dll]
             Iat - USER32.dll->ntdll.dll:NtSetValueKey - 0x00007FFEAE916B70->0x00007FFEAA84D044[C:\WINDOWS\system32\apphelp.dll]
             Iat - COMDLG32.dll->USER32.dll:SetWindowsHookExW - 0x00007FFEAE100090->0x00007FFEAA84B1E0[C:\WINDOWS\system32\apphelp.dll]
             Iat - COMDLG32.dll->USER32.dll:CallNextHookEx - 0x00007FFEAE0F3B50->0x00007FFEAA842294[C:\WINDOWS\system32\apphelp.dll]
             Iat - ADVAPI32.dll->ntdll.dll:NtSetValueKey - 0x00007FFEAE916B70->0x00007FFEAA84D044[C:\WINDOWS\system32\apphelp.dll]
             Iat - ADVAPI32.dll->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - SHELL32.dll->USER32.dll:CallNextHookEx - 0x00007FFEAE0F3B50->0x00007FFEAA842294[C:\WINDOWS\system32\apphelp.dll]
             Iat - SHELL32.dll->USER32.dll:SetWindowsHookExW - 0x00007FFEAE100090->0x00007FFEAA84B1E0[C:\WINDOWS\system32\apphelp.dll]
             Iat - SHELL32.dll->ntdll.dll:NtSetInformationFile - 0x00007FFEAE9167E0->0x00007FFEAA842358[C:\WINDOWS\system32\apphelp.dll]
             Iat - SHELL32.dll->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - ole32.dll->ntdll.dll:NtSetInformationFile - 0x00007FFEAE9167E0->0x00007FFEAA842358[C:\WINDOWS\system32\apphelp.dll]
             Iat - ole32.dll->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - ole32.dll->USER32.dll:GetWindowThreadProcessId - 0x00007FFEAE0F3F40->0x00007FFEAA84B12C[C:\WINDOWS\system32\apphelp.dll]
             Iat - ole32.dll->USER32.dll:MessageBoxW - 0x00007FFEAE173478->0x00007FFEAA881468[C:\WINDOWS\system32\apphelp.dll]
             Iat - ole32.dll->USER32.dll:CallNextHookEx - 0x00007FFEAE0F3B50->0x00007FFEAA842294[C:\WINDOWS\system32\apphelp.dll]
             Iat - ole32.dll->USER32.dll:SetWindowsHookExW - 0x00007FFEAE100090->0x00007FFEAA84B1E0[C:\WINDOWS\system32\apphelp.dll]
             Iat - IPHLPAPI.DLL->ntdll.dll:ZwCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - IPHLPAPI.DLL->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - NETAPI32.dll->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - WS2_32.dll->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - WININET.dll->ntdll.dll:NtSetInformationFile - 0x00007FFEAE9167E0->0x00007FFEAA842358[C:\WINDOWS\system32\apphelp.dll]
             Iat - OLEACC.dll->USER32.dll:SetWindowsHookExW - 0x00007FFEAE100090->0x00007FFEAA84B1E0[C:\WINDOWS\system32\apphelp.dll]
             Iat - RPCRT4.dll->ntdll.dll:NtSetInformationFile - 0x00007FFEAE9167E0->0x00007FFEAA842358[C:\WINDOWS\system32\apphelp.dll]
             Iat - netutils.dll->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - srvcli.dll->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - wkscli.dll->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - MSCTF.dll->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - cfgmgr32.dll->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - DEVOBJ.dll->ntdll.dll:NtSetValueKey - 0x00007FFEAE916B70->0x00007FFEAA84D044[C:\WINDOWS\system32\apphelp.dll]
             Iat - DEVOBJ.dll->ntdll.dll:NtSetInformationFile - 0x00007FFEAE9167E0->0x00007FFEAA842358[C:\WINDOWS\system32\apphelp.dll]
             Iat - SHCORE.DLL->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - uxtheme.dll->USER32.dll:CallNextHookEx - 0x00007FFEAE0F3B50->0x00007FFEAA842294[C:\WINDOWS\system32\apphelp.dll]
             Iat - uxtheme.dll->USER32.dll:SetWindowsHookExW - 0x00007FFEAE100090->0x00007FFEAA84B1E0[C:\WINDOWS\system32\apphelp.dll]
             Iat - tiptsf.dll->USER32.dll:IsWindowVisible - 0x00007FFEAE0F5570->0x00007FFEAA84D01C[C:\WINDOWS\system32\apphelp.dll]
             Iat - tiptsf.dll->USER32.dll:CallNextHookEx - 0x00007FFEAE0F3B50->0x00007FFEAA842294[C:\WINDOWS\system32\apphelp.dll]
             Iat - tiptsf.dll->USER32.dll:SetWindowsHookExW - 0x00007FFEAE100090->0x00007FFEAA84B1E0[C:\WINDOWS\system32\apphelp.dll]
             Iat - tiptsf.dll->USER32.dll:GetWindowThreadProcessId - 0x00007FFEAE0F3F40->0x00007FFEAA84B12C[C:\WINDOWS\system32\apphelp.dll]
             Iat - comctl32.DLL[WinSxs]->USER32.dll:SetWindowsHookExW - 0x00007FFEAE100090->0x00007FFEAA84B1E0[C:\WINDOWS\system32\apphelp.dll]
             Iat - comctl32.DLL[WinSxs]->USER32.dll:CallNextHookEx - 0x00007FFEAE0F3B50->0x00007FFEAA842294[C:\WINDOWS\system32\apphelp.dll]
             Iat - dhcpcsvc.DLL->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - mswsock.dll->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - mswsock.dll->ntdll.dll:NtSetInformationFile - 0x00007FFEAE9167E0->0x00007FFEAA842358[C:\WINDOWS\system32\apphelp.dll]
             Iat - DNSAPI.dll->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - rasadhlp.dll->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]
             Iat - fwpuclnt.dll->ntdll.dll:NtCreateFile - 0x00007FFEAE916AC0->0x00007FFEAA842D70[C:\WINDOWS\system32\apphelp.dll]

------------------------------------------------------------------------------------------

      Image File Name[952 svchost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[964 svchost.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[4528 SetPoint.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[3292 new_chrome.exe]Process Hook
             Iat - new_chrome.exe->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000170010
             inline - len(7) ntdll.dll->NtCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->NtMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->NtOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->NtOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->NtOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->NtOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->NtOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->NtOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->NtOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->NtQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->NtQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->NtSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->NtSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->NtUnmapViewOfSection - 0x00000000772BBE95->_
             inline - len(7) ntdll.dll->ZwCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->ZwMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->ZwOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->ZwOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->ZwOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->ZwOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->ZwOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->ZwOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->ZwOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->ZwQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->ZwQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->ZwSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->ZwSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->ZwUnmapViewOfSection - 0x00000000772BBE95->_
             Eat - KERNEL32.DLL->CreateNamedPipeW - 0x00000000755D2CB2->0x0000000100170010
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_
             Iat - chrome_child.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000170010
             Iat - pdf.dll->GDI32.dll:GetFontData - 0x000000007535F756->0x000000006CA64B07[C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll]
             Iat - ppGoogleNaClPluginChrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000170010

------------------------------------------------------------------------------------------

      Image File Name[2008 AsusTPLoader.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[1076 ASUSWakeupService.exe]Process Hook
             Iat - ASUSWakeupService.exe->mscoree.dll:_CorExeMain - 0x00007FFEA44FE990->0x000000000000A000
             inline - len(1) ASUSWakeupService.exe - 0x0000000000B0A022->_
             inline - len(1) KERNEL32.dll - 0x00007FFEAC1F977D->_
             inline - len(47) clr.dll - 0x00007FFEA39E12B3->_
             inline - len(10) clr.dll - 0x00007FFEA39E1320->_
             inline - len(10) clr.dll - 0x00007FFEA39E1340->_
             inline - len(10) clr.dll - 0x00007FFEA39E1370->_
             inline - len(1) clr.dll - 0x00007FFEA39E2358->_
             inline - len(1) clr.dll - 0x00007FFEA39E2395->_
             inline - len(1) clr.dll - 0x00007FFEA39E2410->_
             inline - len(1) clr.dll - 0x00007FFEA39E2473->_
             inline - len(1) clr.dll - 0x00007FFEA39E24C8->_
             inline - len(1) clr.dll - 0x00007FFEA39E2522->_
             inline - len(1) clr.dll - 0x00007FFEA39E26AF->_
             inline - len(1) clr.dll - 0x00007FFEA39E27B1->_
             inline - len(1) clr.dll - 0x00007FFEA39E2928->_
             inline - len(1) clr.dll - 0x00007FFEA39E2945->_
             inline - len(1) clr.dll - 0x00007FFEA39E2965->_
             inline - len(1) clr.dll - 0x00007FFEA39E4B50->_
             inline - len(1) clr.dll - 0x00007FFEA39E4B90->_
             inline - len(1) clr.dll - 0x00007FFEA39E4BC0->_
             inline - len(1) clr.dll - 0x00007FFEA39E4C00->_
             Iat - System.ServiceProcess.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000001C3A1
             inline - len(2) System.ServiceProcess.dll - 0x0000000000DDC3C6->_
             Iat - System.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000319CA6
             inline - len(2) System.dll - 0x000000001A0F9CCA->_
             Iat - System.ServiceProcess.resources.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000008DE0
             inline - len(2) System.ServiceProcess.resources.dll - 0x0000000001388E02->_
             Iat - System.resources.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000003A7C0
             inline - len(2) System.resources.dll - 0x000000001B20A7E2->_
             Iat - System.ServiceProcess.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000001C3A1
             inline - len(2) System.ServiceProcess.dll - 0x0000000000FDC3C6->_
             Iat - System.ServiceProcess.resources.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000008DE0
             inline - len(2) System.ServiceProcess.resources.dll - 0x0000000001438E02->_
             Iat - System.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x0000000000319CA6
             inline - len(2) System.dll - 0x000000001A449CCA->_
             Iat - System.resources.dll->mscoree.dll:_CorDllMain - 0x00007FFEA4501190->0x000000000003A7C0
             inline - len(2) System.resources.dll - 0x000000001B24A7E2->_

------------------------------------------------------------------------------------------

      Image File Name[1344 AvastSvc.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[1048 svchost.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[2028 svchost.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[4752 LiveUpdate.exe]Process Hook
             Iat - LiveUpdate.exe->mscoree.dll:_CorExeMain - 0x000000007084BB40->0x0000000000121E00
             inline - len(1) LiveUpdate.exe - 0x00000000006C1E22->_
             inline - len(1) KERNEL32.dll - 0x00000000755D8B48->_
             inline - len(7) clr.dll - 0x0000000060741B38->_
             inline - len(7) clr.dll - 0x0000000060741B48->_
             inline - len(7) clr.dll - 0x0000000060741B5C->_
             inline - len(34) clr.dll - 0x0000000060741B70->_
             inline - len(34) clr.dll - 0x0000000060741BA0->_
             inline - len(34) clr.dll - 0x0000000060741BD0->_
             inline - len(34) clr.dll - 0x0000000060741C00->_
             inline - len(34) clr.dll - 0x0000000060741C30->_
             inline - len(34) clr.dll - 0x0000000060741C60->_
             inline - len(4) clr.dll - 0x0000000060741F44->_
             Iat - System.Xaml.dll->mscoree.dll:_CorDllMain - 0x000000007084E050->0x000000000008F17B
             inline - len(2) System.Xaml.dll - 0x0000000004B8F19E->_
             Iat - WindowsBase.dll->mscoree.dll:_CorDllMain - 0x000000007084E050->0x000000000011E077
             inline - len(2) WindowsBase.dll - 0x0000000004D5E09A->_
             Iat - System.Drawing.dll->mscoree.dll:_CorDllMain - 0x000000007084E050->0x0000000000089D1A
             inline - len(2) System.Drawing.dll - 0x0000000004EF9D3E->_
             Iat - PresentationFramework.dll->mscoree.dll:_CorDllMain - 0x000000007084E050->0x00000000005B131D[C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe]
             inline - len(2) PresentationFramework.dll - 0x00000000056A1342->_
             Iat - PresentationCore.dll->mscoree.dll:_CorDllMain - 0x000000007084E050->0x00000000002F2148
             inline - len(2) PresentationCore.dll - 0x00000000059D216A->_
             Iat - UIAutomationTypes.dll->mscoree.dll:_CorDllMain - 0x000000007084E050->0x0000000000017605
             inline - len(2) UIAutomationTypes.dll - 0x0000000005B1762A->_
             Iat - System.Windows.Forms.dll->mscoree.dll:_CorDllMain - 0x000000007084E050->0x0000000000480318
             inline - len(2) System.Windows.Forms.dll - 0x000000000600033A->_
             Iat - System.dll->mscoree.dll:_CorDllMain - 0x000000007084E050->0x0000000000319CA6
             inline - len(2) System.dll - 0x0000000006339CCA->_
             Iat - System.Configuration.dll->mscoree.dll:_CorDllMain - 0x000000007084E050->0x0000000000059A70
             inline - len(2) System.Configuration.dll - 0x0000000008DC9A92->_
             Iat - System.XML.dll->mscoree.dll:_CorDllMain - 0x000000007084E050->0x000000000028009A
             inline - len(2) System.XML.dll - 0x00000000092900BE->_
             Iat - PresentationFramework.Aero2.dll->mscoree.dll:_CorDllMain - 0x000000007084E050->0x000000000003C020
             inline - len(2) PresentationFramework.Aero2.dll - 0x00000000097BC042->_
             Iat - UIAutomationProvider.dll->mscoree.dll:_CorDllMain - 0x000000007084E050->0x000000000000973C
             inline - len(2) UIAutomationProvider.dll - 0x000000000985975E->_
             Iat - PresentationFramework.resources.dll->mscoree.dll:_CorDllMain - 0x000000007084E050->0x000000000003E760
             inline - len(2) PresentationFramework.resources.dll - 0x00000000098BE782->_
             Iat - PresentationFramework-SystemXml.dll->mscoree.dll:_CorDllMain - 0x000000007084E050->0x00000000000035E3
             inline - len(2) PresentationFramework-SystemXml.dll - 0x00000000098D3606->_
             Iat - PresentationCore.resources.dll->mscoree.dll:_CorDllMain - 0x000000007084E050->0x000000000001A620
             inline - len(2) PresentationCore.resources.dll - 0x000000000A02A642->_

------------------------------------------------------------------------------------------

      Image File Name[1172 svchost.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[3040 TabTip.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[1256 AsLdrSrv.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[3208 new_chrome.exe]Process Hook
             Iat - new_chrome.exe->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x00000000006D0010
             inline - len(7) ntdll.dll->NtCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->NtMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->NtOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->NtOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->NtOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->NtOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->NtOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->NtOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->NtOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->NtQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->NtQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->NtSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->NtSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->NtUnmapViewOfSection - 0x00000000772BBE95->_
             inline - len(7) ntdll.dll->ZwCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->ZwMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->ZwOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->ZwOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->ZwOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->ZwOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->ZwOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->ZwOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->ZwOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->ZwQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->ZwQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->ZwSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->ZwSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->ZwUnmapViewOfSection - 0x00000000772BBE95->_
             Eat - KERNEL32.DLL->CreateNamedPipeW - 0x00000000755D2CB2->0x00000001006D0010
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_
             Iat - chrome_child.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x00000000006D0010
             Iat - pdf.dll->GDI32.dll:GetFontData - 0x000000007535F756->0x000000006CA64B07[C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll]
             Iat - ppGoogleNaClPluginChrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x00000000006D0010

------------------------------------------------------------------------------------------

      Image File Name[1324 GFNEXSrv.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[1568 spoolsv.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[1368 ATKOSD2.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[1372 svchost.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[5624 AsusTPCenter.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[1612 svchost.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[1708 602updsvc.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[1724 armsvc.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[1740 InsOnSrv.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[1756 AdminService.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[4080 QuickGesture.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[2148 wmpnetwk.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[1780 Ath_CoexAgent.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[1812 DptfParticipantProcessorService.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[1832 dasHost.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[1848 DptfPolicyConfigTDPService.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[2508 AsusTPHelper.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[4564 new_chrome.exe]Process Hook
             Iat - new_chrome.exe->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x00000000008C0010
             inline - len(7) ntdll.dll->NtCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->NtMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->NtOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->NtOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->NtOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->NtOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->NtOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->NtOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->NtOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->NtQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->NtQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->NtSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->NtSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->NtUnmapViewOfSection - 0x00000000772BBE95->_
             inline - len(7) ntdll.dll->ZwCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->ZwMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->ZwOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->ZwOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->ZwOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->ZwOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->ZwOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->ZwOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->ZwOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->ZwQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->ZwQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->ZwSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->ZwSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->ZwUnmapViewOfSection - 0x00000000772BBE95->_
             Eat - KERNEL32.DLL->CreateNamedPipeW - 0x00000000755D2CB2->0x00000001008C0010
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_
             Iat - chrome_child.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x00000000008C0010
             Iat - pdf.dll->GDI32.dll:GetFontData - 0x000000007535F756->0x000000006CA64B07[C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll]
             Iat - ppGoogleNaClPluginChrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x00000000008C0010

------------------------------------------------------------------------------------------

      Image File Name[1888 HeciServer.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[1912 Jhi_service.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[1952 HelperService.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[1992 ConversionService.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[3708 new_chrome.exe]Process Hook
             Iat - new_chrome.exe->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000420010
             inline - len(7) ntdll.dll->NtCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->NtMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->NtOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->NtOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->NtOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->NtOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->NtOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->NtOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->NtOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->NtQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->NtQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->NtSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->NtSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->NtUnmapViewOfSection - 0x00000000772BBE95->_
             inline - len(7) ntdll.dll->ZwCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->ZwMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->ZwOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->ZwOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->ZwOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->ZwOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->ZwOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->ZwOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->ZwOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->ZwQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->ZwQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->ZwSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->ZwSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->ZwUnmapViewOfSection - 0x00000000772BBE95->_
             Eat - KERNEL32.DLL->CreateNamedPipeW - 0x00000000755D2CB2->0x0000000100420010
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_
             Iat - chrome_child.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000420010

------------------------------------------------------------------------------------------

      Image File Name[4896 new_chrome.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[3496 LMS.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[2268 KBFiltr.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[6140 WmiPrvSE.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[2644 new_chrome.exe]Process Hook
             Iat - new_chrome.exe->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000AF0010
             inline - len(7) ntdll.dll->NtCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->NtMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->NtOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->NtOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->NtOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->NtOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->NtOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->NtOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->NtOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->NtQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->NtQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->NtSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->NtSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->NtUnmapViewOfSection - 0x00000000772BBE95->_
             inline - len(7) ntdll.dll->ZwCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->ZwMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->ZwOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->ZwOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->ZwOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->ZwOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->ZwOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->ZwOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->ZwOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->ZwQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->ZwQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->ZwSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->ZwSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->ZwUnmapViewOfSection - 0x00000000772BBE95->_
             Eat - KERNEL32.DLL->CreateNamedPipeW - 0x00000000755D2CB2->0x0000000100AF0010
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_
             Iat - chrome_child.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000AF0010

------------------------------------------------------------------------------------------

      Image File Name[2860 svchost.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[2880 new_chrome.exe]Process Hook
             Iat - new_chrome.exe->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000AD0010
             inline - len(7) ntdll.dll->NtCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->NtMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->NtOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->NtOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->NtOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->NtOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->NtOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->NtOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->NtOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->NtQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->NtQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->NtSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->NtSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->NtUnmapViewOfSection - 0x00000000772BBE95->_
             inline - len(7) ntdll.dll->ZwCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->ZwMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->ZwOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->ZwOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->ZwOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->ZwOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->ZwOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->ZwOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->ZwOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->ZwQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->ZwQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->ZwSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->ZwSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->ZwUnmapViewOfSection - 0x00000000772BBE95->_
             Eat - KERNEL32.DLL->CreateNamedPipeW - 0x00000000755D2CB2->0x0000000100AD0010
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_
             Iat - chrome_child.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000AD0010
             Iat - pdf.dll->GDI32.dll:GetFontData - 0x000000007535F756->0x000000006CA64B07[C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll]
             Iat - ppGoogleNaClPluginChrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000AD0010

------------------------------------------------------------------------------------------

      Image File Name[3484 IntelMeFWService.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[3420 DMedia.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[3624 WmiPrvSE.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[3676 dllhost.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[3768 HControl.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[3792 InsOnWMI.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[3832 taskhostex.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[3904 taskeng.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[3928 AsPatchTouchPanel64.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[4068 USBChargerPlus.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[4144 igfxtray.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[4160 igfxpers.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[4228 igfxsrvc.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[4272 RAVCpl64.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[4320 RAVBg64.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[4536 jusched.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_

------------------------------------------------------------------------------------------

      Image File Name[4508 ActivateDesktop.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[4816 KHALMNPR.exe]Process Hook
             inline - len(1) KERNEL32.DLL - 0x00007FFEAC1F977D->_

------------------------------------------------------------------------------------------

      Image File Name[5200 new_chrome.exe]Process Hook
             Iat - new_chrome.exe->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000290010
             inline - len(7) ntdll.dll->NtCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->NtMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->NtOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->NtOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->NtOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->NtOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->NtOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->NtOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->NtOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->NtQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->NtQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->NtSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->NtSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->NtUnmapViewOfSection - 0x00000000772BBE95->_
             inline - len(7) ntdll.dll->ZwCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->ZwMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->ZwOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->ZwOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->ZwOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->ZwOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->ZwOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->ZwOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->ZwOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->ZwQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->ZwQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->ZwSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->ZwSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->ZwUnmapViewOfSection - 0x00000000772BBE95->_
             Eat - KERNEL32.DLL->CreateNamedPipeW - 0x00000000755D2CB2->0x0000000100290010
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_
             Iat - chrome_child.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000290010
             Iat - pdf.dll->GDI32.dll:GetFontData - 0x000000007535F756->0x000000006CA64B07[C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll]
             Iat - ppGoogleNaClPluginChrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000290010

------------------------------------------------------------------------------------------

      Image File Name[5212 new_chrome.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[5472 new_chrome.exe]Process Hook
             Iat - new_chrome.exe->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000CD0010
             inline - len(7) ntdll.dll->NtCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->NtMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->NtOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->NtOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->NtOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->NtOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->NtOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->NtOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->NtOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->NtQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->NtQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->NtSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->NtSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->NtUnmapViewOfSection - 0x00000000772BBE95->_
             inline - len(7) ntdll.dll->ZwCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->ZwMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->ZwOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->ZwOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->ZwOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->ZwOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->ZwOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->ZwOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->ZwOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->ZwQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->ZwQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->ZwSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->ZwSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->ZwUnmapViewOfSection - 0x00000000772BBE95->_
             Eat - KERNEL32.DLL->CreateNamedPipeW - 0x00000000755D2CB2->0x0000000100CD0010
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_
             Iat - chrome_child.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000CD0010
             Iat - pdf.dll->GDI32.dll:GetFontData - 0x000000007535F756->0x000000006CA64B07[C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll]
             Iat - ppGoogleNaClPluginChrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000CD0010

------------------------------------------------------------------------------------------

      Image File Name[5684 new_chrome.exe]Process Hook
             Iat - new_chrome.exe->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000670010
             inline - len(7) ntdll.dll->NtCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->NtMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->NtOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->NtOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->NtOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->NtOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->NtOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->NtOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->NtOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->NtQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->NtQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->NtSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->NtSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->NtUnmapViewOfSection - 0x00000000772BBE95->_
             inline - len(7) ntdll.dll->ZwCreateFile - 0x00000000772BC145->_
             inline - len(7) ntdll.dll->ZwMapViewOfSection - 0x00000000772BBE75->_
             inline - len(7) ntdll.dll->ZwOpenFile - 0x00000000772BBF25->_
             inline - len(7) ntdll.dll->ZwOpenProcess - 0x00000000772BBE55->_
             inline - len(7) ntdll.dll->ZwOpenProcessToken - 0x00000000772BCCE5->_
             inline - len(7) ntdll.dll->ZwOpenProcessTokenEx - 0x00000000772BBEF5->_
             inline - len(7) ntdll.dll->ZwOpenThread - 0x00000000772BCD35->_
             inline - len(7) ntdll.dll->ZwOpenThreadToken - 0x00000000772BBE35->_
             inline - len(7) ntdll.dll->ZwOpenThreadTokenEx - 0x00000000772BBEE5->_
             inline - len(7) ntdll.dll->ZwQueryAttributesFile - 0x00000000772BBFC5->_
             inline - len(7) ntdll.dll->ZwQueryFullAttributesFile - 0x00000000772BCE85->_
             inline - len(7) ntdll.dll->ZwSetInformationFile - 0x00000000772BBE65->_
             inline - len(7) ntdll.dll->ZwSetInformationThread - 0x00000000772BBCC5->_
             inline - len(7) ntdll.dll->ZwUnmapViewOfSection - 0x00000000772BBE95->_
             Eat - KERNEL32.DLL->CreateNamedPipeW - 0x00000000755D2CB2->0x0000000100670010
             inline - len(1) KERNEL32.DLL - 0x00000000755D8B48->_
             Iat - chrome_child.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000670010
             Iat - pdf.dll->GDI32.dll:GetFontData - 0x000000007535F756->0x000000006CA64B07[C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\chrome_child.dll]
             Iat - ppGoogleNaClPluginChrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000755D2CB2->0x0000000000670010

==========================================================================================

KernelCallbackTable

      Image File Name[4 System]KernelCallbackTable

------------------------------------------------------------------------------------------

      Image File Name[916 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSTEM32\user32.dll

------------------------------------------------------------------------------------------

      Image File Name[4448 UNS.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4752 LiveUpdate.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[940 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll

------------------------------------------------------------------------------------------

      Image File Name[3560 new_chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1140 SearchIndexer.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[780 winlogon.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[724 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll

------------------------------------------------------------------------------------------

      Image File Name[376 dwm.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[736 csrss.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[420 smss.exe]KernelCallbackTable

------------------------------------------------------------------------------------------

      Image File Name[428 TabTip32.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[672 csrss.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4380 Dropbox.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3708 new_chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[656 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll

------------------------------------------------------------------------------------------

      Image File Name[3272 VivoBook.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3464 QuickGesture64.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[652 taskhost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll

------------------------------------------------------------------------------------------

      Image File Name[4412 BtvStack.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[716 wininit.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[6016 explorer.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[820 services.exe]KernelCallbackTable

------------------------------------------------------------------------------------------

      Image File Name[4360 BtTray.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1592 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll

------------------------------------------------------------------------------------------

      Image File Name[840 lsass.exe]KernelCallbackTable

------------------------------------------------------------------------------------------

      Image File Name[4376 AvastUI.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2768 new_chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[5448 new_chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[964 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4528 SetPoint.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3292 new_chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1076 ASUSWakeupService.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1344 AvastSvc.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1048 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll

------------------------------------------------------------------------------------------

      Image File Name[2028 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4896 new_chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2952 new_chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1172 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll

------------------------------------------------------------------------------------------

      Image File Name[3040 TabTip.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[5652 new_chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1256 AsLdrSrv.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3208 new_chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1324 GFNEXSrv.exe]KernelCallbackTable

------------------------------------------------------------------------------------------

      Image File Name[1568 spoolsv.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1368 ATKOSD2.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1372 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[5624 AsusTPCenter.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1612 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll

------------------------------------------------------------------------------------------

      Image File Name[1708 602updsvc.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1724 armsvc.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1740 InsOnSrv.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1756 AdminService.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4080 QuickGesture.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2148 wmpnetwk.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1780 Ath_CoexAgent.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1812 DptfParticipantProcessorService.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1832 dasHost.exe]KernelCallbackTable

------------------------------------------------------------------------------------------

      Image File Name[1848 DptfPolicyConfigTDPService.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2508 AsusTPHelper.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4564 new_chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1888 HeciServer.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1912 Jhi_service.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2008 AsusTPLoader.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1952 HelperService.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1992 ConversionService.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2268 KBFiltr.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2644 new_chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3496 LMS.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2860 svchost.exe]KernelCallbackTable

------------------------------------------------------------------------------------------

      Image File Name[2880 new_chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[5304 audiodg.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll

------------------------------------------------------------------------------------------

      Image File Name[3484 IntelMeFWService.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3420 DMedia.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4504 PCHunter64.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3624 WmiPrvSE.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll

------------------------------------------------------------------------------------------

      Image File Name[3676 dllhost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll

------------------------------------------------------------------------------------------

      Image File Name[3768 HControl.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3792 InsOnWMI.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3832 taskhostex.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSTEM32\user32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSTEM32\user32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\SYSTEM32\user32.dll

------------------------------------------------------------------------------------------

      Image File Name[3928 AsPatchTouchPanel64.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4068 USBChargerPlus.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4144 igfxtray.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4160 igfxpers.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4228 igfxsrvc.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4272 RAVCpl64.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4320 RAVBg64.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4536 jusched.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4508 ActivateDesktop.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4816 KHALMNPR.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\system32\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\system32\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\system32\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\system32\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\system32\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\system32\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\system32\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\system32\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\system32\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\system32\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\system32\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\system32\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\system32\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\system32\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\system32\USER32.dll
             xxxClientCallDefaultInputHandler - apfn hook - C:\WINDOWS\system32\USER32.dll
             fnEMPTY - apfn hook - C:\WINDOWS\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[5200 new_chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[5472 new_chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[5684 new_chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnNCDESTROY - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTDRAG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINSTRINGNULL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTSTRING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnPOUTLPINT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnSENTDDEMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINDWORD - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkINLPRECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDelegateThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnKEYBOARDCORRECTIONCALLOUT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDitThread - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientEnableMMCSS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientUpdateDpi - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientExpandStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCopyImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientEventCallback - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFindMnemChar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientFreeLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEFlags - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetDDEHookData - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetListboxString - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetMessageMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadImage - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLibrary - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadMenu - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPSMTextOut - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientExtTextOutW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCharToWchar - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientAddFontResourceW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientThreadSetup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientDeliverUserApc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientCallWinEventProc - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmLoadLayout - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientImmProcessKey - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnIMECONTROL - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadStringW - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientLoadOLE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\WINDOWS\SYSwow64\USER32.dll
             ClientPrinterThunk - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCH - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnGESTURE - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnTOUCHHITTESTING - OK - C:\WINDOWS\SYSwow64\USER32.dll
             xxxClientCallDefaultInputHandler - OK - C:\WINDOWS\SYSwow64\USER32.dll
             fnEMPTY - OK - C:\WINDOWS\SYSwow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[0 Idle]KernelCallbackTable

==========================================================================================

Port

       Tcp 0.0.0.0 : 135 - 0.0.0.0 : 0 - LISTENING - 964 - C:\Windows\System32\svchost.exe
       Tcp 192.168.1.103 : 139 - 0.0.0.0 : 0 - LISTENING - 4 - System
       Tcp 0.0.0.0 : 554 - 0.0.0.0 : 0 - LISTENING - 2148 - C:\Program Files\Windows Media Player\wmpnetwk.exe
       Tcp 127.0.0.1 : 6543 - 0.0.0.0 : 0 - LISTENING - 4412 - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
       Tcp 127.0.0.1 : 6543 - 127.0.0.1 : 49225 - ESTABLISHED - 4412 - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
       Tcp 127.0.0.1 : 6544 - 0.0.0.0 : 0 - LISTENING - 4360 - C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
       Tcp 127.0.0.1 : 12025 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 127.0.0.1 : 12110 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 127.0.0.1 : 12119 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 127.0.0.1 : 12143 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 127.0.0.1 : 12465 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 127.0.0.1 : 12563 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 127.0.0.1 : 12993 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 127.0.0.1 : 12995 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 0.0.0.0 : 17500 - 0.0.0.0 : 0 - LISTENING - 4380 - C:\Users\J R\AppData\Roaming\Dropbox\bin\Dropbox.exe
       Tcp 127.0.0.1 : 19872 - 127.0.0.1 : 58294 - ESTABLISHED - 4380 - C:\Users\J R\AppData\Roaming\Dropbox\bin\Dropbox.exe
       Tcp 127.0.0.1 : 27275 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 0.0.0.0 : 49152 - 0.0.0.0 : 0 - LISTENING - 716 - C:\Windows\System32\wininit.exe
       Tcp 0.0.0.0 : 49153 - 0.0.0.0 : 0 - LISTENING - 656 - C:\Windows\System32\svchost.exe
       Tcp 0.0.0.0 : 49154 - 0.0.0.0 : 0 - LISTENING - 724 - C:\Windows\System32\svchost.exe
       Tcp 0.0.0.0 : 49155 - 0.0.0.0 : 0 - LISTENING - 1568 - C:\Windows\System32\spoolsv.exe
       Tcp 0.0.0.0 : 49158 - 0.0.0.0 : 0 - LISTENING - 840 - C:\Windows\System32\lsass.exe
       Tcp 0.0.0.0 : 49162 - 0.0.0.0 : 0 - LISTENING - 820 - C:\Windows\System32\services.exe
       Tcp 192.168.1.103 : 49170 - 77.234.42.52 : 80 - ESTABLISHED - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 127.0.0.1 : 49225 - 127.0.0.1 : 6543 - ESTABLISHED - 4360 - C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
       Tcp 192.168.1.103 : 49229 - 173.194.70.125 : 5222 - ESTABLISHED - 4896 - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe
       Tcp 192.168.1.103 : 49530 - 89.221.217.13 : 1935 - ESTABLISHED - 4896 - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe
       Tcp 192.168.1.103 : 49546 - 199.16.156.52 : 443 - TIME_WAIT - 0 - 
       Tcp 192.168.1.103 : 49549 - 89.221.217.13 : 1935 - TIME_WAIT - 0 - 
       Tcp 192.168.1.103 : 50479 - 69.171.235.16 : 443 - ESTABLISHED - 4896 - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe
       Tcp 127.0.0.1 : 52001 - 0.0.0.0 : 0 - LISTENING - 4412 - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
       Tcp 127.0.0.1 : 52001 - 127.0.0.1 : 58276 - ESTABLISHED - 4412 - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
       Tcp 127.0.0.1 : 52001 - 127.0.0.1 : 58277 - ESTABLISHED - 4412 - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
       Tcp 127.0.0.1 : 52001 - 127.0.0.1 : 58278 - ESTABLISHED - 4412 - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
       Tcp 127.0.0.1 : 52001 - 127.0.0.1 : 58279 - ESTABLISHED - 4412 - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
       Tcp 192.168.1.103 : 52766 - 212.47.2.210 : 80 - TIME_WAIT - 0 - 
       Tcp 192.168.1.103 : 52767 - 212.47.2.210 : 80 - TIME_WAIT - 0 - 
       Tcp 192.168.1.103 : 52768 - 212.47.2.210 : 80 - ESTABLISHED - 4896 - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe
       Tcp 192.168.1.103 : 52769 - 212.47.2.210 : 80 - TIME_WAIT - 0 - 
       Tcp 192.168.1.103 : 52770 - 212.47.2.210 : 80 - TIME_WAIT - 0 - 
       Tcp 192.168.1.103 : 52771 - 212.47.2.210 : 80 - TIME_WAIT - 0 - 
       Tcp 192.168.1.103 : 52773 - 212.47.2.212 : 80 - TIME_WAIT - 0 - 
       Tcp 192.168.1.103 : 52774 - 212.47.2.212 : 80 - TIME_WAIT - 0 - 
       Tcp 192.168.1.103 : 52776 - 212.47.2.209 : 80 - TIME_WAIT - 0 - 
       Tcp 192.168.1.103 : 52780 - 212.47.2.223 : 80 - TIME_WAIT - 0 - 
       Tcp 192.168.1.103 : 52781 - 212.47.2.223 : 80 - TIME_WAIT - 0 - 
       Tcp 192.168.1.103 : 52806 - 212.47.2.212 : 80 - TIME_WAIT - 0 - 
       Tcp 192.168.1.103 : 52889 - 212.47.2.223 : 80 - TIME_WAIT - 0 - 
       Tcp 192.168.1.103 : 52890 - 212.47.2.223 : 80 - TIME_WAIT - 0 - 
       Tcp 192.168.1.103 : 55307 - 108.160.162.102 : 80 - ESTABLISHED - 4380 - C:\Users\J R\AppData\Roaming\Dropbox\bin\Dropbox.exe
       Tcp 127.0.0.1 : 58276 - 127.0.0.1 : 52001 - ESTABLISHED - 4412 - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
       Tcp 127.0.0.1 : 58277 - 127.0.0.1 : 52001 - ESTABLISHED - 4412 - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
       Tcp 127.0.0.1 : 58278 - 127.0.0.1 : 52001 - ESTABLISHED - 4412 - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
       Tcp 127.0.0.1 : 58279 - 127.0.0.1 : 52001 - ESTABLISHED - 4412 - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
       Tcp 127.0.0.1 : 58294 - 127.0.0.1 : 19872 - ESTABLISHED - 4380 - C:\Users\J R\AppData\Roaming\Dropbox\bin\Dropbox.exe
       Tcp 127.0.0.1 : 59243 - 0.0.0.0 : 0 - LISTENING - 4528 - C:\Program Files\Logitech\SetPointP\SetPoint.exe
       Tcp 192.168.1.103 : 62690 - 173.194.116.245 : 443 - ESTABLISHED - 4896 - C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe
       Tcp 0.0.0.0 : 135 - 0.0.0.0 : 0 - LISTENING - 964 - C:\Windows\System32\svchost.exe
       Tcp 0.0.0.0 : 445 - 0.0.0.0 : 0 - LISTENING - 4 - System
       Tcp 0.0.0.0 : 554 - 0.0.0.0 : 0 - LISTENING - 2148 - C:\Program Files\Windows Media Player\wmpnetwk.exe
       Tcp 0.0.0.0 : 2869 - 0.0.0.0 : 0 - LISTENING - 4 - System
       Tcp 0.0.0.0 : 3587 - 0.0.0.0 : 0 - LISTENING - 1372 - C:\Windows\System32\svchost.exe
       Tcp 0.0.0.0 : 5357 - 0.0.0.0 : 0 - LISTENING - 4 - System
       Tcp 0.0.0.0 : 10243 - 0.0.0.0 : 0 - LISTENING - 4 - System
       Tcp 0.0.0.0 : 12025 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 0.0.0.0 : 12110 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 0.0.0.0 : 12119 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 0.0.0.0 : 12143 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 0.0.0.0 : 12465 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 0.0.0.0 : 12563 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 0.0.0.0 : 12993 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 0.0.0.0 : 12995 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 0.0.0.0 : 27275 - 0.0.0.0 : 0 - LISTENING - 1344 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
       Tcp 0.0.0.0 : 49152 - 0.0.0.0 : 0 - LISTENING - 716 - C:\Windows\System32\wininit.exe
       Tcp 0.0.0.0 : 49153 - 0.0.0.0 : 0 - LISTENING - 656 - C:\Windows\System32\svchost.exe
       Tcp 0.0.0.0 : 49154 - 0.0.0.0 : 0 - LISTENING - 724 - C:\Windows\System32\svchost.exe
       Tcp 0.0.0.0 : 49155 - 0.0.0.0 : 0 - LISTENING - 1568 - C:\Windows\System32\spoolsv.exe
       Tcp 0.0.0.0 : 49156 - 0.0.0.0 : 0 - LISTENING - 1912 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
       Tcp 0.0.0.0 : 49158 - 0.0.0.0 : 0 - LISTENING - 840 - C:\Windows\System32\lsass.exe
       Tcp 0.0.0.0 : 49162 - 0.0.0.0 : 0 - LISTENING - 820 - C:\Windows\System32\services.exe
       Udp 192.168.1.103 : 137 - * : * - 4 - System
       Udp 192.168.1.103 : 138 - * : * - 4 - System
       Udp 127.0.0.1 : 1900 - * : * - 1592 - C:\Windows\System32\svchost.exe
       Udp 192.168.1.103 : 1900 - * : * - 1592 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 3544 - * : * - 724 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 3702 - * : * - 940 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 3702 - * : * - 940 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 3702 - * : * - 1592 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 3702 - * : * - 1592 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 5004 - * : * - 2148 - C:\Program Files\Windows Media Player\wmpnetwk.exe
       Udp 0.0.0.0 : 5005 - * : * - 2148 - C:\Program Files\Windows Media Player\wmpnetwk.exe
       Udp 0.0.0.0 : 5355 - * : * - 1172 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 17500 - * : * - 4380 - C:\Users\J R\AppData\Roaming\Dropbox\bin\Dropbox.exe
       Udp 0.0.0.0 : 49793 - * : * - 940 - C:\Windows\System32\svchost.exe
       Udp 192.168.1.103 : 59850 - * : * - 724 - C:\Windows\System32\svchost.exe
       Udp 192.168.1.103 : 61367 - * : * - 1592 - C:\Windows\System32\svchost.exe
       Udp 127.0.0.1 : 61368 - * : * - 1592 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 63890 - * : * - 1592 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 1900 - * : * - 1592 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 1900 - * : * - 1592 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 3540 - * : * - 1372 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 3702 - * : * - 940 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 3702 - * : * - 1592 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 3702 - * : * - 1592 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 3702 - * : * - 940 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 5004 - * : * - 2148 - C:\Program Files\Windows Media Player\wmpnetwk.exe
       Udp 0.0.0.0 : 5005 - * : * - 2148 - C:\Program Files\Windows Media Player\wmpnetwk.exe
       Udp 0.0.0.0 : 5355 - * : * - 1172 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 49794 - * : * - 940 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 61365 - * : * - 1592 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 61366 - * : * - 1592 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 63891 - * : * - 1592 - C:\Windows\System32\svchost.exe

==========================================================================================

Tcpip

       IRP_MJ_CREATE - OK - 0xFFFFF800011509F4 - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF800011509F4 - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF80001076FB8 - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF800011509F4 - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF800011509F4 - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation

==========================================================================================

Nsiproxy

       IRP_MJ_CREATE - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF80001E42D10 - C:\WINDOWS\system32\drivers\nsiproxy.sys - Microsoft Corporation

==========================================================================================

Tdx

       IRP_MJ_CREATE - OK - 0xFFFFF80001BE31E0 - C:\WINDOWS\system32\DRIVERS\tdx.sys - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF80001BE1A90 - C:\WINDOWS\system32\DRIVERS\tdx.sys - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF80001BE2CC0 - C:\WINDOWS\system32\DRIVERS\tdx.sys - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF80001BE0B80 - C:\WINDOWS\system32\DRIVERS\tdx.sys - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF80001BE18F8 - C:\WINDOWS\system32\DRIVERS\tdx.sys - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF80001BE85B4 - C:\WINDOWS\system32\DRIVERS\tdx.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF800E1D71904 - C:\WINDOWS\system32\ntoskrnl.exe - Microsoft Corporation

==========================================================================================

Ndis Handler

       0xFFFFE00005161400 - NdisProtocolBlock - 0xFFFFF8000375F2E0 - StatusHandler - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE00005161400 - NdisProtocolBlock - 0xFFFFF8000375FA00 - PnPEventHandler - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE00005161400 - NdisProtocolBlock - 0xFFFFF80003760520 - BindAdapterHandlerEx - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE00005161400 - NdisProtocolBlock - 0xFFFFF80003762630 - UnbindAdapterHandlerEx - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE00005161400 - NdisProtocolBlock - 0xFFFFF800037625B8 - OpenAdapterCompleteHandlerEx - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE00005161400 - NdisProtocolBlock - 0xFFFFF80003762594 - CloseAdapterCompleteHandlerEx - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE00005161400 - NdisProtocolBlock - 0xFFFFF8000375F5B4 - ReceiveNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE00005161400 - NdisProtocolBlock - 0xFFFFF800037625CC - SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE00005161400 - NdisProtocolBlock - 0xFFFFF80003760000 - OidRequestCompleteHandler - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE000053F8C10 - NdisOpenBlock - 0xFFFFF80000ECD314 - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053F8C10 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053F8C10 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053F8C10 - NdisOpenBlock - 0xFFFFF80000ECD3B0 - SendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053F8C10 - NdisOpenBlock - 0xFFFFF80000ECD280 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053F8C10 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053F8C10 - NdisOpenBlock - 0xFFFFF8000375F2E0 - StatusHandler - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE000053F8C10 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053F8C10 - NdisOpenBlock - 0xFFFFF800037625CC - ProtSendNetBufferListsComplete - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE000053F8C10 - NdisOpenBlock - 0xFFFFF8000375F5B4 - ReceiveNetBufferLists - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE000053F8C10 - NdisOpenBlock - 0xFFFFF80003778544 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE000053F8C10 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053F8C10 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053F8C10 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000426AC10 - NdisOpenBlock - 0xFFFFF80000EC3B3C - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000426AC10 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000426AC10 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000426AC10 - NdisOpenBlock - 0xFFFFF80000ECDCD8 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000426AC10 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000426AC10 - NdisOpenBlock - 0xFFFFF8000375F2E0 - StatusHandler - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE0000426AC10 - NdisOpenBlock - 0xFFFFF80002901F24 - CancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE0000426AC10 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000426AC10 - NdisOpenBlock - 0xFFFFF800037625CC - ProtSendNetBufferListsComplete - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE0000426AC10 - NdisOpenBlock - 0xFFFFF8000375F5B4 - ReceiveNetBufferLists - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE0000426AC10 - NdisOpenBlock - 0xFFFFF80002901F24 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE0000426AC10 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000426AC10 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000426AC10 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BBC10 - NdisOpenBlock - 0xFFFFF80000ECD314 - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BBC10 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BBC10 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BBC10 - NdisOpenBlock - 0xFFFFF80000ECD3B0 - SendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BBC10 - NdisOpenBlock - 0xFFFFF80000ECD280 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BBC10 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BBC10 - NdisOpenBlock - 0xFFFFF8000375F2E0 - StatusHandler - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE000051BBC10 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BBC10 - NdisOpenBlock - 0xFFFFF800037625CC - ProtSendNetBufferListsComplete - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE000051BBC10 - NdisOpenBlock - 0xFFFFF8000375F5B4 - ReceiveNetBufferLists - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE000051BBC10 - NdisOpenBlock - 0xFFFFF80003399398 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE000051BBC10 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BBC10 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BBC10 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BF010 - NdisOpenBlock - 0xFFFFF80000ECD314 - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BF010 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BF010 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BF010 - NdisOpenBlock - 0xFFFFF80000ECD3B0 - SendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BF010 - NdisOpenBlock - 0xFFFFF80000ECD280 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BF010 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BF010 - NdisOpenBlock - 0xFFFFF8000375F2E0 - StatusHandler - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE000051BF010 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BF010 - NdisOpenBlock - 0xFFFFF800037625CC - ProtSendNetBufferListsComplete - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE000051BF010 - NdisOpenBlock - 0xFFFFF8000375F5B4 - ReceiveNetBufferLists - C:\WINDOWS\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFE000051BF010 - NdisOpenBlock - 0xFFFFF80002A472F0 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE000051BF010 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BF010 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051BF010 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CAAC10 - NdisProtocolBlock - 0xFFFFF8000374C1BC - StatusHandler - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE00004CAAC10 - NdisProtocolBlock - 0xFFFFF8000374B744 - PnPEventHandler - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE00004CAAC10 - NdisProtocolBlock - 0xFFFFF8000374B4E0 - BindAdapterHandlerEx - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE00004CAAC10 - NdisProtocolBlock - 0xFFFFF8000374B694 - UnbindAdapterHandlerEx - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE00004CAAC10 - NdisProtocolBlock - 0xFFFFF8000374B660 - OpenAdapterCompleteHandlerEx - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE00004CAAC10 - NdisProtocolBlock - 0xFFFFF8000374B714 - CloseAdapterCompleteHandlerEx - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE00004CAAC10 - NdisProtocolBlock - 0xFFFFF8000374CEE4 - ReceiveNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE00004CAAC10 - NdisProtocolBlock - 0xFFFFF8000374DF44 - SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE00004CAAC10 - NdisProtocolBlock - 0xFFFFF8000374C0F0 - OidRequestCompleteHandler - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE000053E7C10 - NdisOpenBlock - 0xFFFFF80000ECD314 - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053E7C10 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053E7C10 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053E7C10 - NdisOpenBlock - 0xFFFFF80000ECD3B0 - SendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053E7C10 - NdisOpenBlock - 0xFFFFF80000ECD280 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053E7C10 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053E7C10 - NdisOpenBlock - 0xFFFFF8000374C1BC - StatusHandler - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE000053E7C10 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053E7C10 - NdisOpenBlock - 0xFFFFF8000374DF44 - ProtSendNetBufferListsComplete - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE000053E7C10 - NdisOpenBlock - 0xFFFFF8000374CEE4 - ReceiveNetBufferLists - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE000053E7C10 - NdisOpenBlock - 0xFFFFF80003778544 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE000053E7C10 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053E7C10 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053E7C10 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CBDC10 - NdisOpenBlock - 0xFFFFF80000ECD314 - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CBDC10 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CBDC10 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CBDC10 - NdisOpenBlock - 0xFFFFF80000ECD3B0 - SendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CBDC10 - NdisOpenBlock - 0xFFFFF80000ECD280 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CBDC10 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CBDC10 - NdisOpenBlock - 0xFFFFF8000374C1BC - StatusHandler - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE00004CBDC10 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CBDC10 - NdisOpenBlock - 0xFFFFF8000374DF44 - ProtSendNetBufferListsComplete - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE00004CBDC10 - NdisOpenBlock - 0xFFFFF8000374CEE4 - ReceiveNetBufferLists - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE00004CBDC10 - NdisOpenBlock - 0xFFFFF80002A472F0 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00004CBDC10 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CBDC10 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CBDC10 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C3C10 - NdisOpenBlock - 0xFFFFF80000EC3B3C - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C3C10 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C3C10 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C3C10 - NdisOpenBlock - 0xFFFFF80000ECDCD8 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C3C10 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C3C10 - NdisOpenBlock - 0xFFFFF8000374C1BC - StatusHandler - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE000051C3C10 - NdisOpenBlock - 0xFFFFF80002901F24 - CancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE000051C3C10 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C3C10 - NdisOpenBlock - 0xFFFFF8000374DF44 - ProtSendNetBufferListsComplete - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE000051C3C10 - NdisOpenBlock - 0xFFFFF8000374CEE4 - ReceiveNetBufferLists - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE000051C3C10 - NdisOpenBlock - 0xFFFFF80002901F24 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE000051C3C10 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C3C10 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C3C10 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C16D0 - NdisOpenBlock - 0xFFFFF80000ECD314 - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C16D0 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C16D0 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C16D0 - NdisOpenBlock - 0xFFFFF80000ECD3B0 - SendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C16D0 - NdisOpenBlock - 0xFFFFF80000ECD280 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C16D0 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C16D0 - NdisOpenBlock - 0xFFFFF8000374C1BC - StatusHandler - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE000051C16D0 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C16D0 - NdisOpenBlock - 0xFFFFF8000374DF44 - ProtSendNetBufferListsComplete - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE000051C16D0 - NdisOpenBlock - 0xFFFFF8000374CEE4 - ReceiveNetBufferLists - C:\WINDOWS\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFE000051C16D0 - NdisOpenBlock - 0xFFFFF80003399398 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE000051C16D0 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C16D0 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051C16D0 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB8C10 - NdisProtocolBlock - 0xFFFFF80002E7C7E0 - StatusHandler - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE00004CB8C10 - NdisProtocolBlock - 0xFFFFF80002E7C0CC - PnPEventHandler - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE00004CB8C10 - NdisProtocolBlock - 0xFFFFF80002E7BC28 - BindAdapterHandlerEx - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE00004CB8C10 - NdisProtocolBlock - 0xFFFFF80002E7C880 - UnbindAdapterHandlerEx - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE00004CB8C10 - NdisProtocolBlock - 0xFFFFF80002E7C0B8 - OpenAdapterCompleteHandlerEx - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE00004CB8C10 - NdisProtocolBlock - 0xFFFFF80002E7C064 - CloseAdapterCompleteHandlerEx - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE00004CB8C10 - NdisProtocolBlock - 0xFFFFF80002E7C23C - ReceiveNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE00004CB8C10 - NdisProtocolBlock - 0xFFFFF80002E7C638 - SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE00004CB8C10 - NdisProtocolBlock - 0xFFFFF80002E82530 - OidRequestCompleteHandler - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE0000540F010 - NdisOpenBlock - 0xFFFFF80000ECD314 - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000540F010 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000540F010 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000540F010 - NdisOpenBlock - 0xFFFFF80000ECD3B0 - SendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000540F010 - NdisOpenBlock - 0xFFFFF80000ECD280 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000540F010 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000540F010 - NdisOpenBlock - 0xFFFFF80002E7C7E0 - StatusHandler - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE0000540F010 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000540F010 - NdisOpenBlock - 0xFFFFF80002E7C638 - ProtSendNetBufferListsComplete - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE0000540F010 - NdisOpenBlock - 0xFFFFF80002E7C23C - ReceiveNetBufferLists - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE0000540F010 - NdisOpenBlock - 0xFFFFF80003778544 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE0000540F010 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000540F010 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000540F010 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004C65940 - NdisOpenBlock - 0xFFFFF80000EC3B3C - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004C65940 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004C65940 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004C65940 - NdisOpenBlock - 0xFFFFF80000ECDCD8 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004C65940 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004C65940 - NdisOpenBlock - 0xFFFFF80002E7C7E0 - StatusHandler - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE00004C65940 - NdisOpenBlock - 0xFFFFF80002901F24 - CancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00004C65940 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004C65940 - NdisOpenBlock - 0xFFFFF80002E7C638 - ProtSendNetBufferListsComplete - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE00004C65940 - NdisOpenBlock - 0xFFFFF80002E7C23C - ReceiveNetBufferLists - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE00004C65940 - NdisOpenBlock - 0xFFFFF80002901F24 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00004C65940 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004C65940 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004C65940 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB56A0 - NdisOpenBlock - 0xFFFFF80000ECD314 - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB56A0 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB56A0 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB56A0 - NdisOpenBlock - 0xFFFFF80000ECD3B0 - SendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB56A0 - NdisOpenBlock - 0xFFFFF80000ECD280 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB56A0 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB56A0 - NdisOpenBlock - 0xFFFFF80002E7C7E0 - StatusHandler - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE00004CB56A0 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB56A0 - NdisOpenBlock - 0xFFFFF80002E7C638 - ProtSendNetBufferListsComplete - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE00004CB56A0 - NdisOpenBlock - 0xFFFFF80002E7C23C - ReceiveNetBufferLists - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE00004CB56A0 - NdisOpenBlock - 0xFFFFF80003399398 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE00004CB56A0 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB56A0 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB56A0 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB5010 - NdisOpenBlock - 0xFFFFF80000ECD314 - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB5010 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB5010 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB5010 - NdisOpenBlock - 0xFFFFF80000ECD3B0 - SendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB5010 - NdisOpenBlock - 0xFFFFF80000ECD280 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB5010 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB5010 - NdisOpenBlock - 0xFFFFF80002E7C7E0 - StatusHandler - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE00004CB5010 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB5010 - NdisOpenBlock - 0xFFFFF80002E7C638 - ProtSendNetBufferListsComplete - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE00004CB5010 - NdisOpenBlock - 0xFFFFF80002E7C23C - ReceiveNetBufferLists - C:\WINDOWS\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFE00004CB5010 - NdisOpenBlock - 0xFFFFF80002A472F0 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00004CB5010 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB5010 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB5010 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00002960C00 - NdisProtocolBlock - 0xFFFFF800011138C4 - StatusHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002960C00 - NdisProtocolBlock - 0xFFFFF8000110CB3C - PnPEventHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002960C00 - NdisProtocolBlock - 0xFFFFF800011FA4E0 - InitiateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002960C00 - NdisProtocolBlock - 0xFFFFF800011FA9AC - TerminateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002960C00 - NdisProtocolBlock - 0xFFFFF800011FAABC - UpdateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002960C00 - NdisProtocolBlock - 0xFFFFF800011FA5B8 - InvalidateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002960C00 - NdisProtocolBlock - 0xFFFFF800011FA65C - QueryOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002960C00 - NdisProtocolBlock - 0xFFFFF8000110D9F8 - BindAdapterHandlerEx - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002960C00 - NdisProtocolBlock - 0xFFFFF80001106BC0 - UnbindAdapterHandlerEx - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002960C00 - NdisProtocolBlock - 0xFFFFF800011FCA70 - OpenAdapterCompleteHandlerEx - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002960C00 - NdisProtocolBlock - 0xFFFFF80001105F44 - CloseAdapterCompleteHandlerEx - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002960C00 - NdisProtocolBlock - 0xFFFFF800010A7EA0 - ReceiveNetBufferListsHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002960C00 - NdisProtocolBlock - 0xFFFFF800010D5560 - SendNetBufferListsCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002960C00 - NdisProtocolBlock - 0xFFFFF800010BCCD0 - OidRequestCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002960C00 - NdisProtocolBlock - 0xFFFFF800010BCCD0 - DirectOidRequestCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF80000EC3B3C - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF80000ECDCD8 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF800011138C4 - StatusHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF80003A05A20 - CancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF800011FA4E0 - InitiateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF800011FA9AC - TerminateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF800011FAABC - UpdateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF800011FA5B8 - InvalidateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF800011FA65C - QueryOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadSendCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF800011FA7B0 - TcpOffloadReceiveCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadDisconnectCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadForwardCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF800011B7834 - TcpOffloadEventHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF800011FA6A0 - TcpOffloadReceiveIndicateHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF800010D5560 - ProtSendNetBufferListsComplete - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF800010A7EA0 - ReceiveNetBufferLists - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF80003A05A20 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059B95B0 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF80000ECD314 - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF80000ECD3B0 - SendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF80000ECD280 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF800011138C4 - StatusHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF800011FA4E0 - InitiateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF800011FA9AC - TerminateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF800011FAABC - UpdateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF800011FA5B8 - InvalidateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF800011FA65C - QueryOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadSendCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF800011FA7B0 - TcpOffloadReceiveCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadDisconnectCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadForwardCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF800011B7834 - TcpOffloadEventHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF800011FA6A0 - TcpOffloadReceiveIndicateHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF800010D5560 - ProtSendNetBufferListsComplete - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF800010A7EA0 - ReceiveNetBufferLists - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF80003A05A20 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000587E010 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00002976010 - NdisProtocolBlock - 0xFFFFF800011138C4 - StatusHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002976010 - NdisProtocolBlock - 0xFFFFF800011467B0 - PnPEventHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002976010 - NdisProtocolBlock - 0xFFFFF800011FA4E0 - InitiateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002976010 - NdisProtocolBlock - 0xFFFFF800011FA9AC - TerminateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002976010 - NdisProtocolBlock - 0xFFFFF800011FAABC - UpdateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002976010 - NdisProtocolBlock - 0xFFFFF800011FA5B8 - InvalidateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002976010 - NdisProtocolBlock - 0xFFFFF800011FA65C - QueryOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002976010 - NdisProtocolBlock - 0xFFFFF8000110D9F8 - BindAdapterHandlerEx - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002976010 - NdisProtocolBlock - 0xFFFFF80001106BC0 - UnbindAdapterHandlerEx - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002976010 - NdisProtocolBlock - 0xFFFFF800011FCA70 - OpenAdapterCompleteHandlerEx - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002976010 - NdisProtocolBlock - 0xFFFFF80001105F44 - CloseAdapterCompleteHandlerEx - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002976010 - NdisProtocolBlock - 0xFFFFF800010A7EA0 - ReceiveNetBufferListsHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002976010 - NdisProtocolBlock - 0xFFFFF800010D5560 - SendNetBufferListsCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002976010 - NdisProtocolBlock - 0xFFFFF800010BCCD0 - OidRequestCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00002976010 - NdisProtocolBlock - 0xFFFFF800010BCCD0 - DirectOidRequestCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F620 - NdisProtocolBlock - 0xFFFFF800011138C4 - StatusHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F620 - NdisProtocolBlock - 0xFFFFF8000110C250 - PnPEventHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F620 - NdisProtocolBlock - 0xFFFFF800011FA4E0 - InitiateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F620 - NdisProtocolBlock - 0xFFFFF800011FA9AC - TerminateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F620 - NdisProtocolBlock - 0xFFFFF800011FAABC - UpdateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F620 - NdisProtocolBlock - 0xFFFFF800011FA5B8 - InvalidateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F620 - NdisProtocolBlock - 0xFFFFF800011FA65C - QueryOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F620 - NdisProtocolBlock - 0xFFFFF8000110D9F8 - BindAdapterHandlerEx - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F620 - NdisProtocolBlock - 0xFFFFF80001106BC0 - UnbindAdapterHandlerEx - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F620 - NdisProtocolBlock - 0xFFFFF800011FCA70 - OpenAdapterCompleteHandlerEx - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F620 - NdisProtocolBlock - 0xFFFFF80001105F44 - CloseAdapterCompleteHandlerEx - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F620 - NdisProtocolBlock - 0xFFFFF800010A7EA0 - ReceiveNetBufferListsHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F620 - NdisProtocolBlock - 0xFFFFF800010D5560 - SendNetBufferListsCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F620 - NdisProtocolBlock - 0xFFFFF800010BCCD0 - OidRequestCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F620 - NdisProtocolBlock - 0xFFFFF800010BCCD0 - DirectOidRequestCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF80000ECD314 - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF80000ECD3B0 - SendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF80000ECD280 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF800011138C4 - StatusHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF800011FA4E0 - InitiateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF800011FA9AC - TerminateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF800011FAABC - UpdateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF800011FA5B8 - InvalidateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF800011FA65C - QueryOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadSendCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF800011FA7B0 - TcpOffloadReceiveCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadDisconnectCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadForwardCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF800011B7834 - TcpOffloadEventHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF800011FA6A0 - TcpOffloadReceiveIndicateHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF800010D5560 - ProtSendNetBufferListsComplete - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF800010A7EA0 - ReceiveNetBufferLists - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF80003778544 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000538A850 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF80000EC3B3C - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF80000ECDCD8 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF800011138C4 - StatusHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF80002901F24 - CancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF800011FA4E0 - InitiateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF800011FA9AC - TerminateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF800011FAABC - UpdateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF800011FA5B8 - InvalidateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF800011FA65C - QueryOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadSendCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF800011FA7B0 - TcpOffloadReceiveCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadDisconnectCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadForwardCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF800011B7834 - TcpOffloadEventHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF800011FA6A0 - TcpOffloadReceiveIndicateHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF800010D5560 - ProtSendNetBufferListsComplete - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF800010A7EA0 - ReceiveNetBufferLists - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF80002901F24 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB0C10 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF80000ECD314 - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF80000ECD3B0 - SendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF80000ECD280 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF800011138C4 - StatusHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF800011FA4E0 - InitiateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF800011FA9AC - TerminateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF800011FAABC - UpdateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF800011FA5B8 - InvalidateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF800011FA65C - QueryOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadSendCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF800011FA7B0 - TcpOffloadReceiveCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadDisconnectCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadForwardCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF800011B7834 - TcpOffloadEventHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF800011FA6A0 - TcpOffloadReceiveIndicateHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF800010D5560 - ProtSendNetBufferListsComplete - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF800010A7EA0 - ReceiveNetBufferLists - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF80003399398 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045CB010 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF80000ECD314 - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF80000ECD3B0 - SendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF80000ECD280 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF800011138C4 - StatusHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF800011FA4E0 - InitiateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF800011FA9AC - TerminateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF800011FAABC - UpdateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF800011FA5B8 - InvalidateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF800011FA65C - QueryOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadSendCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF800011FA7B0 - TcpOffloadReceiveCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadDisconnectCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadForwardCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF800011B7834 - TcpOffloadEventHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF800011FA6A0 - TcpOffloadReceiveIndicateHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF800010D5560 - ProtSendNetBufferListsComplete - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF800010A7EA0 - ReceiveNetBufferLists - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF80002A472F0 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000115A610 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000026F010 - NdisProtocolBlock - 0xFFFFF800011138C4 - StatusHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F010 - NdisProtocolBlock - 0xFFFFF800011392F8 - PnPEventHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F010 - NdisProtocolBlock - 0xFFFFF800011FA4E0 - InitiateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F010 - NdisProtocolBlock - 0xFFFFF800011FA9AC - TerminateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F010 - NdisProtocolBlock - 0xFFFFF800011FAABC - UpdateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F010 - NdisProtocolBlock - 0xFFFFF800011FA5B8 - InvalidateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F010 - NdisProtocolBlock - 0xFFFFF800011FA65C - QueryOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F010 - NdisProtocolBlock - 0xFFFFF8000110D9F8 - BindAdapterHandlerEx - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F010 - NdisProtocolBlock - 0xFFFFF80001106BC0 - UnbindAdapterHandlerEx - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F010 - NdisProtocolBlock - 0xFFFFF800011FCA70 - OpenAdapterCompleteHandlerEx - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F010 - NdisProtocolBlock - 0xFFFFF80001105F44 - CloseAdapterCompleteHandlerEx - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F010 - NdisProtocolBlock - 0xFFFFF800010A7EA0 - ReceiveNetBufferListsHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F010 - NdisProtocolBlock - 0xFFFFF800010D5560 - SendNetBufferListsCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F010 - NdisProtocolBlock - 0xFFFFF800010BCCD0 - OidRequestCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000026F010 - NdisProtocolBlock - 0xFFFFF800010BCCD0 - DirectOidRequestCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF80000ECD314 - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF80000ECD3B0 - SendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF80000ECD280 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF800011138C4 - StatusHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF800011FA4E0 - InitiateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF800011FA9AC - TerminateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF800011FAABC - UpdateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF800011FA5B8 - InvalidateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF800011FA65C - QueryOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadSendCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF800011FA7B0 - TcpOffloadReceiveCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadDisconnectCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadForwardCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF800011B7834 - TcpOffloadEventHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF800011FA6A0 - TcpOffloadReceiveIndicateHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF800010D5560 - ProtSendNetBufferListsComplete - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF800010A7EA0 - ReceiveNetBufferLists - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF80003778544 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00005391C10 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF80000EC3B3C - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF80000ECDCD8 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF800011138C4 - StatusHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF80002901F24 - CancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF800011FA4E0 - InitiateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF800011FA9AC - TerminateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF800011FAABC - UpdateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF800011FA5B8 - InvalidateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF800011FA65C - QueryOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadSendCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF800011FA7B0 - TcpOffloadReceiveCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadDisconnectCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadForwardCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF800011B7834 - TcpOffloadEventHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF800011FA6A0 - TcpOffloadReceiveIndicateHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF800010D5560 - ProtSendNetBufferListsComplete - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF800010A7EA0 - ReceiveNetBufferLists - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF80002901F24 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CAD8A0 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF80000ECD314 - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF80000ECD3B0 - SendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF80000ECD280 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF800011138C4 - StatusHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF800011FA4E0 - InitiateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF800011FA9AC - TerminateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF800011FAABC - UpdateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF800011FA5B8 - InvalidateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF800011FA65C - QueryOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadSendCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF800011FA7B0 - TcpOffloadReceiveCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadDisconnectCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadForwardCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF800011B7834 - TcpOffloadEventHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF800011FA6A0 - TcpOffloadReceiveIndicateHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF800010D5560 - ProtSendNetBufferListsComplete - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF800010A7EA0 - ReceiveNetBufferLists - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF80003399398 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045F5C10 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF80000ECD314 - (Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF80000EC4E10 - TransferDataHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF80000E9EE00 - ReceiveCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF80000ECD3B0 - SendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF80000ECD280 - ResetHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF80000EB564C - RequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF800011138C4 - StatusHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF800011FA4E0 - InitiateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF800011FA9AC - TerminateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF800011FAABC - UpdateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF800011FA5B8 - InvalidateOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF800011FA65C - QueryOffloadCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadSendCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF800011FA7B0 - TcpOffloadReceiveCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadDisconnectCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF800011FA260 - TcpOffloadForwardCompleteHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF800011B7834 - TcpOffloadEventHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF800011FA6A0 - TcpOffloadReceiveIndicateHandler - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF80000E7AFF0 - OidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF800010D5560 - ProtSendNetBufferListsComplete - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF800010A7EA0 - ReceiveNetBufferLists - C:\WINDOWS\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF80002A472F0 - SavedCancelSendPacketsHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF80000EC3B3C - Saved(Wan)SendHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF80000E7B244 - OidRequestCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000445F750 - NdisOpenBlock - 0xFFFFF80000E86030 - DirectOidRequestHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E86F8 - SetOptionsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E9B24 - SetFilterModuleOptionsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E8714 - AttachHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E90A8 - DetachHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E8E30 - RestartHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E8C80 - PauseHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E9960 - SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E2ECC - SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E9A3C - CancelSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E2BD8 - ReceiveNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E9A34 - ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E967C - OidRequestHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E03A4 - OidRequestCompleteHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E97C0 - CancelOidRequestHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E97C4 - DevicePnPEventNotifyHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E97D0 - NetPnPEventHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E36B4 - StatusHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E95B4 - DirectOidRequestHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB86B0 - NdisFilterDriverBlock - 0xFFFFF800036E9614 - DirectOidRequestCompleteHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE000051CA010 - NdisFilterBlock - 0xFFFFF80001353890 - NextSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE000051CA010 - NdisFilterBlock - 0xFFFFF80001F210C0 - NextSendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE000051CA010 - NdisFilterBlock - 0xFFFFF80000E825D0 - NextIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051CA010 - NdisFilterBlock - 0xFFFFF80001353530 - NextReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE000051CA010 - NdisFilterBlock - 0xFFFFF80000EC22A8 - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051CA010 - NdisFilterBlock - 0xFFFFF800036E9960 - Characteristics.SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE000051CA010 - NdisFilterBlock - 0xFFFFF800036E2ECC - Characteristics.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE000051CA010 - NdisFilterBlock - 0xFFFFF800036E9A3C - Characteristics.CancelSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE000051CA010 - NdisFilterBlock - 0xFFFFF800036E2BD8 - Characteristics.ReceiveNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE000051CA010 - NdisFilterBlock - 0xFFFFF800036E9A34 - Characteristics.ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE000051CA010 - NdisFilterBlock - 0xFFFFF80000E9EAA0 - FilterSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051CA010 - NdisFilterBlock - 0xFFFFF80000EC71FC - FilterIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051CA010 - NdisFilterBlock - 0xFFFFF80000EC74A4 - FilterCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB6C70 - NdisFilterBlock - 0xFFFFF80001F501CC - NextSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00004CB6C70 - NdisFilterBlock - 0xFFFFF80001F210C0 - NextSendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00004CB6C70 - NdisFilterBlock - 0xFFFFF80000E825D0 - NextIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB6C70 - NdisFilterBlock - 0xFFFFF80001F5038C - NextReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00004CB6C70 - NdisFilterBlock - 0xFFFFF80001F50658 - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00004CB6C70 - NdisFilterBlock - 0xFFFFF800036E9960 - Characteristics.SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB6C70 - NdisFilterBlock - 0xFFFFF800036E2ECC - Characteristics.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB6C70 - NdisFilterBlock - 0xFFFFF800036E9A3C - Characteristics.CancelSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB6C70 - NdisFilterBlock - 0xFFFFF800036E2BD8 - Characteristics.ReceiveNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB6C70 - NdisFilterBlock - 0xFFFFF800036E9A34 - Characteristics.ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB6C70 - NdisFilterBlock - 0xFFFFF80000E9EAA0 - FilterSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB6C70 - NdisFilterBlock - 0xFFFFF80000E82960 - FilterIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB6C70 - NdisFilterBlock - 0xFFFFF80000EC74A4 - FilterCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F4DBF4 - AttachHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F4E078 - DetachHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F4E440 - RestartHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F4E300 - PauseHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F501CC - SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F4FC94 - SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F50658 - CancelSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F5044C - ReceiveNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F5038C - ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F4E9EC - OidRequestHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F4F06C - OidRequestCompleteHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F4EB8C - CancelOidRequestHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F4FAD4 - DevicePnPEventNotifyHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F4FC00 - NetPnPEventHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F4F850 - StatusHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F4F418 - DirectOidRequestHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F4F7B0 - DirectOidRequestCompleteHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00003C332B0 - NdisFilterDriverBlock - 0xFFFFF80001F4F4B0 - CancelDirectOidRequestHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00004CB4560 - NdisFilterBlock - 0xFFFFF80001353890 - NextSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00004CB4560 - NdisFilterBlock - 0xFFFFF800036E2ECC - NextSendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB4560 - NdisFilterBlock - 0xFFFFF800036E2BD8 - NextIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB4560 - NdisFilterBlock - 0xFFFFF80001353530 - NextReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00004CB4560 - NdisFilterBlock - 0xFFFFF80000EC22A8 - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB4560 - NdisFilterBlock - 0xFFFFF80001F501CC - Characteristics.SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00004CB4560 - NdisFilterBlock - 0xFFFFF80001F4FC94 - Characteristics.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00004CB4560 - NdisFilterBlock - 0xFFFFF80001F50658 - Characteristics.CancelSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00004CB4560 - NdisFilterBlock - 0xFFFFF80001F5044C - Characteristics.ReceiveNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00004CB4560 - NdisFilterBlock - 0xFFFFF80001F5038C - Characteristics.ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00004CB4560 - NdisFilterBlock - 0xFFFFF80000E9EAA0 - FilterSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB4560 - NdisFilterBlock - 0xFFFFF80000E82960 - FilterIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB4560 - NdisFilterBlock - 0xFFFFF80000EC74A4 - FilterCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00003E04010 - NdisFilterDriverBlock - 0xFFFFF80001F280C4 - SetOptionsHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00003E04010 - NdisFilterDriverBlock - 0xFFFFF80001F27680 - SetFilterModuleOptionsHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00003E04010 - NdisFilterDriverBlock - 0xFFFFF80001F27A88 - AttachHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00003E04010 - NdisFilterDriverBlock - 0xFFFFF80001F2D5D4 - DetachHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00003E04010 - NdisFilterDriverBlock - 0xFFFFF80001F36040 - RestartHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00003E04010 - NdisFilterDriverBlock - 0xFFFFF80001F27730 - PauseHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00003E04010 - NdisFilterDriverBlock - 0xFFFFF80001F217F4 - OidRequestHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00003E04010 - NdisFilterDriverBlock - 0xFFFFF80001F21880 - OidRequestCompleteHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00003E04010 - NdisFilterDriverBlock - 0xFFFFF80001F36024 - DevicePnPEventNotifyHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00003E04010 - NdisFilterDriverBlock - 0xFFFFF80001F36010 - NetPnPEventHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00003E04010 - NdisFilterDriverBlock - 0xFFFFF80001F24650 - StatusHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE000053DFC70 - NdisFilterBlock - 0xFFFFF800036E9960 - NextSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE000053DFC70 - NdisFilterBlock - 0xFFFFF80000E78080 - NextSendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053DFC70 - NdisFilterBlock - 0xFFFFF80000E825D0 - NextIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053DFC70 - NdisFilterBlock - 0xFFFFF800036E9A34 - NextReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE000053DFC70 - NdisFilterBlock - 0xFFFFF800036E9A3C - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE000053DFC70 - NdisFilterBlock - 0xFFFFF80001F20010 - Characteristics.SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE000053DFC70 - NdisFilterBlock - 0xFFFFF80001F210C0 - Characteristics.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE000053DFC70 - NdisFilterBlock - 0xFFFFF80001F2D5C0 - Characteristics.CancelSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE000053DFC70 - NdisFilterBlock - 0xFFFFF80000EC7270 - FilterSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053DFC70 - NdisFilterBlock - 0xFFFFF80000EC71FC - FilterIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053DFC70 - NdisFilterBlock - 0xFFFFF80000E9EE00 - FilterCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB7670 - NdisFilterBlock - 0xFFFFF800036E9960 - NextSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB7670 - NdisFilterBlock - 0xFFFFF80000E78080 - NextSendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB7670 - NdisFilterBlock - 0xFFFFF80000E825D0 - NextIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB7670 - NdisFilterBlock - 0xFFFFF800036E9A34 - NextReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB7670 - NdisFilterBlock - 0xFFFFF800036E9A3C - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CB7670 - NdisFilterBlock - 0xFFFFF80001F20010 - Characteristics.SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00004CB7670 - NdisFilterBlock - 0xFFFFF80001F210C0 - Characteristics.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00004CB7670 - NdisFilterBlock - 0xFFFFF80001F2D5C0 - Characteristics.CancelSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00004CB7670 - NdisFilterBlock - 0xFFFFF80000E9EAA0 - FilterSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB7670 - NdisFilterBlock - 0xFFFFF80000E82960 - FilterIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CB7670 - NdisFilterBlock - 0xFFFFF80000EC74A4 - FilterCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00003FD8640 - NdisFilterBlock - 0xFFFFF80001353890 - NextSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00003FD8640 - NdisFilterBlock - 0xFFFFF80000E78080 - NextSendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00003FD8640 - NdisFilterBlock - 0xFFFFF80000E825D0 - NextIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00003FD8640 - NdisFilterBlock - 0xFFFFF80001353530 - NextReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00003FD8640 - NdisFilterBlock - 0xFFFFF80000EC22A8 - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00003FD8640 - NdisFilterBlock - 0xFFFFF80001F20010 - Characteristics.SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00003FD8640 - NdisFilterBlock - 0xFFFFF80001F210C0 - Characteristics.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00003FD8640 - NdisFilterBlock - 0xFFFFF80001F2D5C0 - Characteristics.CancelSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00003FD8640 - NdisFilterBlock - 0xFFFFF80000EC7270 - FilterSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00003FD8640 - NdisFilterBlock - 0xFFFFF80000EC71FC - FilterIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00003FD8640 - NdisFilterBlock - 0xFFFFF80000E9EE00 - FilterCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00000269770 - NdisFilterDriverBlock - 0xFFFFF800013635A0 - SetFilterModuleOptionsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00000269770 - NdisFilterDriverBlock - 0xFFFFF80001361890 - AttachHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00000269770 - NdisFilterDriverBlock - 0xFFFFF80001361E98 - DetachHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00000269770 - NdisFilterDriverBlock - 0xFFFFF8000136300C - RestartHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00000269770 - NdisFilterDriverBlock - 0xFFFFF80001362DDC - PauseHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00000269770 - NdisFilterDriverBlock - 0xFFFFF800013628FC - OidRequestHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00000269770 - NdisFilterDriverBlock - 0xFFFFF80001362A40 - OidRequestCompleteHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00000269770 - NdisFilterDriverBlock - 0xFFFFF80001357E00 - CancelOidRequestHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00000269770 - NdisFilterDriverBlock - 0xFFFFF800013628B8 - NetPnPEventHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00000269770 - NdisFilterDriverBlock - 0xFFFFF80001353A40 - StatusHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000038D710 - NdisFilterDriverBlock - 0xFFFFF80001353B70 - SetFilterModuleOptionsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000038D710 - NdisFilterDriverBlock - 0xFFFFF800013542D0 - AttachHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000038D710 - NdisFilterDriverBlock - 0xFFFFF80001357E90 - DetachHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000038D710 - NdisFilterDriverBlock - 0xFFFFF80001353C90 - RestartHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000038D710 - NdisFilterDriverBlock - 0xFFFFF80001353D60 - PauseHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000038D710 - NdisFilterDriverBlock - 0xFFFFF80001353890 - SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000038D710 - NdisFilterDriverBlock - 0xFFFFF80001353770 - SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000038D710 - NdisFilterDriverBlock - 0xFFFFF80001353340 - ReceiveNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000038D710 - NdisFilterDriverBlock - 0xFFFFF80001353530 - ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000038D710 - NdisFilterDriverBlock - 0xFFFFF80001353144 - OidRequestHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000038D710 - NdisFilterDriverBlock - 0xFFFFF80001353010 - OidRequestCompleteHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000038D710 - NdisFilterDriverBlock - 0xFFFFF80001357E00 - CancelOidRequestHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000038D710 - NdisFilterDriverBlock - 0xFFFFF80001353A40 - StatusHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE000051CB0A0 - NdisFilterBlock - 0xFFFFF80000E7F8C0 - NextSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051CB0A0 - NdisFilterBlock - 0xFFFFF800036E2ECC - NextSendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE000051CB0A0 - NdisFilterBlock - 0xFFFFF800036E2BD8 - NextIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE000051CB0A0 - NdisFilterBlock - 0xFFFFF800037786D8 - NextReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE000051CB0A0 - NdisFilterBlock - 0xFFFFF80000EC22A8 - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051CB0A0 - NdisFilterBlock - 0xFFFFF80001353890 - Characteristics.SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE000051CB0A0 - NdisFilterBlock - 0xFFFFF80001353770 - Characteristics.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE000051CB0A0 - NdisFilterBlock - 0xFFFFF80001353340 - Characteristics.ReceiveNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE000051CB0A0 - NdisFilterBlock - 0xFFFFF80001353530 - Characteristics.ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE000051CB0A0 - NdisFilterBlock - 0xFFFFF80000E9EAA0 - FilterSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051CB0A0 - NdisFilterBlock - 0xFFFFF80000E82960 - FilterIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000051CB0A0 - NdisFilterBlock - 0xFFFFF80000EC74A4 - FilterCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CBCC70 - NdisFilterBlock - 0xFFFFF80000E7F8C0 - NextSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CBCC70 - NdisFilterBlock - 0xFFFFF80001F4FC94 - NextSendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00004CBCC70 - NdisFilterBlock - 0xFFFFF80001F5044C - NextIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFE00004CBCC70 - NdisFilterBlock - 0xFFFFF80000E82D70 - NextReturnNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CBCC70 - NdisFilterBlock - 0xFFFFF80000EC22A8 - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CBCC70 - NdisFilterBlock - 0xFFFFF80001353890 - Characteristics.SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00004CBCC70 - NdisFilterBlock - 0xFFFFF80001353770 - Characteristics.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00004CBCC70 - NdisFilterBlock - 0xFFFFF80001353340 - Characteristics.ReceiveNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00004CBCC70 - NdisFilterBlock - 0xFFFFF80001353530 - Characteristics.ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00004CBCC70 - NdisFilterBlock - 0xFFFFF80000E9EAA0 - FilterSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CBCC70 - NdisFilterBlock - 0xFFFFF80000E82960 - FilterIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CBCC70 - NdisFilterBlock - 0xFFFFF80000EC74A4 - FilterCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000115BC70 - NdisFilterBlock - 0xFFFFF80000E7F8C0 - NextSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000115BC70 - NdisFilterBlock - 0xFFFFF80001F210C0 - NextSendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE0000115BC70 - NdisFilterBlock - 0xFFFFF80000E825D0 - NextIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000115BC70 - NdisFilterBlock - 0xFFFFF80000E82D70 - NextReturnNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000115BC70 - NdisFilterBlock - 0xFFFFF80000EC22A8 - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000115BC70 - NdisFilterBlock - 0xFFFFF80001353890 - Characteristics.SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000115BC70 - NdisFilterBlock - 0xFFFFF80001353770 - Characteristics.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000115BC70 - NdisFilterBlock - 0xFFFFF80001353340 - Characteristics.ReceiveNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000115BC70 - NdisFilterBlock - 0xFFFFF80001353530 - Characteristics.ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000115BC70 - NdisFilterBlock - 0xFFFFF80000EC7270 - FilterSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000115BC70 - NdisFilterBlock - 0xFFFFF80000EC71FC - FilterIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000115BC70 - NdisFilterBlock - 0xFFFFF80000E9EE00 - FilterCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00002975A40 - NdisFilterDriverBlock - 0xFFFFF80001353C00 - SetFilterModuleOptionsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00002975A40 - NdisFilterDriverBlock - 0xFFFFF8000135405C - AttachHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00002975A40 - NdisFilterDriverBlock - 0xFFFFF800013575BC - DetachHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00002975A40 - NdisFilterDriverBlock - 0xFFFFF80001353CE4 - RestartHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00002975A40 - NdisFilterDriverBlock - 0xFFFFF80001353D60 - PauseHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00002975A40 - NdisFilterDriverBlock - 0xFFFFF80001353A40 - StatusHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE000053DD7E0 - NdisFilterBlock - 0xFFFFF80001F20010 - NextSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE000053DD7E0 - NdisFilterBlock - 0xFFFFF80000E78080 - NextSendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053DD7E0 - NdisFilterBlock - 0xFFFFF80000E825D0 - NextIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053DD7E0 - NdisFilterBlock - 0xFFFFF800036E9A34 - NextReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE000053DD7E0 - NdisFilterBlock - 0xFFFFF80001F2D5C0 - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE000053DD7E0 - NdisFilterBlock - 0xFFFFF80000EC7270 - FilterSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053DD7E0 - NdisFilterBlock - 0xFFFFF80000EC71FC - FilterIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000053DD7E0 - NdisFilterBlock - 0xFFFFF80000E9EE00 - FilterCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CAFA50 - NdisFilterBlock - 0xFFFFF80001F20010 - NextSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00004CAFA50 - NdisFilterBlock - 0xFFFFF80000E78080 - NextSendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CAFA50 - NdisFilterBlock - 0xFFFFF80000E825D0 - NextIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CAFA50 - NdisFilterBlock - 0xFFFFF800036E9A34 - NextReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE00004CAFA50 - NdisFilterBlock - 0xFFFFF80001F2D5C0 - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00004CAFA50 - NdisFilterBlock - 0xFFFFF80000E9EAA0 - FilterSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CAFA50 - NdisFilterBlock - 0xFFFFF80000E82960 - FilterIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00004CAFA50 - NdisFilterBlock - 0xFFFFF80000EC74A4 - FilterCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00003FD7C70 - NdisFilterBlock - 0xFFFFF80001F20010 - NextSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00003FD7C70 - NdisFilterBlock - 0xFFFFF80000E78080 - NextSendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00003FD7C70 - NdisFilterBlock - 0xFFFFF80000E825D0 - NextIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00003FD7C70 - NdisFilterBlock - 0xFFFFF80001353530 - NextReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00003FD7C70 - NdisFilterBlock - 0xFFFFF80001F2D5C0 - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE00003FD7C70 - NdisFilterBlock - 0xFFFFF80000EC7270 - FilterSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00003FD7C70 - NdisFilterBlock - 0xFFFFF80000EC71FC - FilterIndicateReceiveNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00003FD7C70 - NdisFilterBlock - 0xFFFFF80000E9EE00 - FilterCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000588BBA0 - NdisMiniDriverBlock - 0xFFFFF80003A038A4 - InitializeHandlerEx - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE0000588BBA0 - NdisMiniDriverBlock - 0xFFFFF80003A0F9D0 - HaltHandlerEx - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE0000588BBA0 - NdisMiniDriverBlock - 0xFFFFF80003A237E8 - MiniportDriverCharacteristics.UnloadHandler - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE0000588BBA0 - NdisMiniDriverBlock - 0xFFFFF80003A05AA4 - PauseHandler - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE0000588BBA0 - NdisMiniDriverBlock - 0xFFFFF80003A02F80 - RestartHandler - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE0000588BBA0 - NdisMiniDriverBlock - 0xFFFFF80003A01264 - OidRequestHandler - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE0000588BBA0 - NdisMiniDriverBlock - 0xFFFFF80003A01D50 - SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE0000588BBA0 - NdisMiniDriverBlock - 0xFFFFF80003A02610 - ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE0000588BBA0 - NdisMiniDriverBlock - 0xFFFFF80003A05A20 - CancelSendHandler - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE0000588BBA0 - NdisMiniDriverBlock - 0xFFFFF80003A06164 - CheckForHangHandlerEx - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE0000588BBA0 - NdisMiniDriverBlock - 0xFFFFF80003A23000 - DevicePnPEventNotifyHandler - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE0000588BBA0 - NdisMiniDriverBlock - 0xFFFFF80003A0FAD8 - ShutdownHandlerEx - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE0000588BBA0 - NdisMiniDriverBlock - 0xFFFFF80003A0F944 - CancelOidRequestHandler - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE00005393520 - NdisMiniDriverBlock - 0xFFFFF8000378057C - InitializeHandlerEx - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE00005393520 - NdisMiniDriverBlock - 0xFFFFF8000377783C - HaltHandlerEx - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE00005393520 - NdisMiniDriverBlock - 0xFFFFF800037804BC - MiniportDriverCharacteristics.UnloadHandler - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE00005393520 - NdisMiniDriverBlock - 0xFFFFF80003777988 - PauseHandler - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE00005393520 - NdisMiniDriverBlock - 0xFFFFF80003777A38 - RestartHandler - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE00005393520 - NdisMiniDriverBlock - 0xFFFFF80003777CF8 - OidRequestHandler - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE00005393520 - NdisMiniDriverBlock - 0xFFFFF800037783FC - SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE00005393520 - NdisMiniDriverBlock - 0xFFFFF800037786D8 - ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE00005393520 - NdisMiniDriverBlock - 0xFFFFF80003778544 - CancelSendHandler - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE00005393520 - NdisMiniDriverBlock - 0xFFFFF80003777B7C - DevicePnPEventNotifyHandler - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE00005393520 - NdisMiniDriverBlock - 0xFFFFF80003777B14 - ShutdownHandlerEx - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE00005393520 - NdisMiniDriverBlock - 0xFFFFF80003777F60 - CancelOidRequestHandler - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE00004A6CBA0 - NdisMiniDriverBlock - 0xFFFFF80003397890 - InitializeHandlerEx - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE00004A6CBA0 - NdisMiniDriverBlock - 0xFFFFF80003397D88 - HaltHandlerEx - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE00004A6CBA0 - NdisMiniDriverBlock - 0xFFFFF8000339751C - MiniportDriverCharacteristics.UnloadHandler - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE00004A6CBA0 - NdisMiniDriverBlock - 0xFFFFF80003397E94 - PauseHandler - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE00004A6CBA0 - NdisMiniDriverBlock - 0xFFFFF80003397FBC - RestartHandler - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE00004A6CBA0 - NdisMiniDriverBlock - 0xFFFFF800033990A8 - OidRequestHandler - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE00004A6CBA0 - NdisMiniDriverBlock - 0xFFFFF800033991A4 - SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE00004A6CBA0 - NdisMiniDriverBlock - 0xFFFFF80003399320 - ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE00004A6CBA0 - NdisMiniDriverBlock - 0xFFFFF80003399398 - CancelSendHandler - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE00004A6CBA0 - NdisMiniDriverBlock - 0xFFFFF8000339939C - CheckForHangHandlerEx - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE00004A6CBA0 - NdisMiniDriverBlock - 0xFFFFF80003399430 - ResetHandlerEx - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE00004A6CBA0 - NdisMiniDriverBlock - 0xFFFFF800033980B0 - DevicePnPEventNotifyHandler - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE00004A6CBA0 - NdisMiniDriverBlock - 0xFFFFF80003399398 - ShutdownHandlerEx - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE00004A6CBA0 - NdisMiniDriverBlock - 0xFFFFF80003399398 - CancelOidRequestHandler - C:\WINDOWS\system32\DRIVERS\bthpan.sys - Microsoft Corporation
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A51118 - AddDeviceHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A5141C - RemoveDeviceHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A511E4 - FilterResourceRequirementsHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A417AC - SetOptionsHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A4157C - InitializeHandlerEx - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A41478 - HaltHandlerEx - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A41898 - MiniportDriverCharacteristics.UnloadHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A435C8 - PauseHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A442C0 - RestartHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A43538 - OidRequestHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A473F4 - SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A48BD0 - ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A472F0 - CancelSendHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A43130 - CheckForHangHandlerEx - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A44220 - ResetHandlerEx - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A43638 - DevicePnPEventNotifyHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A4181C - ShutdownHandlerEx - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F5E7C0 - NdisMiniDriverBlock - 0xFFFFF80002A425F0 - CancelOidRequestHandler - C:\WINDOWS\system32\DRIVERS\L1C63x64.sys - Qualcomm Atheros Co., Ltd.
       0xFFFFE00003F627D0 - NdisMiniDriverBlock - 0xFFFFF800028E02E0 - SetOptionsHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00003F627D0 - NdisMiniDriverBlock - 0xFFFFF800028DE834 - InitializeHandlerEx - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00003F627D0 - NdisMiniDriverBlock - 0xFFFFF800028DE584 - HaltHandlerEx - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00003F627D0 - NdisMiniDriverBlock - 0xFFFFF800028DDD9C - MiniportDriverCharacteristics.UnloadHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00003F627D0 - NdisMiniDriverBlock - 0xFFFFF800028DF340 - PauseHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00003F627D0 - NdisMiniDriverBlock - 0xFFFFF800028DFE8C - RestartHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00003F627D0 - NdisMiniDriverBlock - 0xFFFFF800028DFBA4 - OidRequestHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00003F627D0 - NdisMiniDriverBlock - 0xFFFFF800029021EC - SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00003F627D0 - NdisMiniDriverBlock - 0xFFFFF800028FF558 - ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00003F627D0 - NdisMiniDriverBlock - 0xFFFFF80002901F24 - CancelSendHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00003F627D0 - NdisMiniDriverBlock - 0xFFFFF800028DE0E8 - CheckForHangHandlerEx - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00003F627D0 - NdisMiniDriverBlock - 0xFFFFF800028DFD08 - ResetHandlerEx - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00003F627D0 - NdisMiniDriverBlock - 0xFFFFF800028DE314 - DevicePnPEventNotifyHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00003F627D0 - NdisMiniDriverBlock - 0xFFFFF800028DDEEC - ShutdownHandlerEx - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE00003F627D0 - NdisMiniDriverBlock - 0xFFFFF800026B3E6C - CancelOidRequestHandler - C:\WINDOWS\system32\DRIVERS\athw8x.sys - Qualcomm Atheros Communications, Inc.
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000ED16A0 - PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000EC3E08 - SendCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000EC1A70 - SendResourcesHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000ECC60C - ResetCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000ED02DC - EthRxIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000ED06FC - EthRxCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000ECC1AC - StatusHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000E9EE00 - StatusCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000EC1B40 - TDCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000EB3F88 - QueryCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000EB4034 - SetCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000EC521C - WanSendCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000ECC7E4 - WanRcvHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000ECC8CC - WanRcvCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000ED16A0 - SavedPacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000ECA2A0 - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000E7F8C0 - NextSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000E7F8C0 - SavedNextSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000E774D0 - SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000EC4A14 - NextSendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000EC4A14 - FinalSendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000ED5C94 - TopIndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000ED5C94 - TopIndicateLoopbackNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000ED16A0 - Ndis5PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000ED6DBC - SynchronousReturnPacketHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000EC22A8 - NoFilter.CancelSend(Packets)Handler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000E78080 - NoFilter.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000E825D0 - NoFilter.IndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80003A02610 - NoFilter.ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000E7F8C0 - NoFilter.SendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000EC22A8 - Next.CancelSend(Packets)Handler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000E78080 - Next.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000E825D0 - Next.IndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000E825D0 - Next.SaveIndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80003A02610 - Next.ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE000059541A0 - NdisMiniportBlock - 0xFFFFF80000ED16A0 - TopNdis5PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000ED1568 - PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000EC3E08 - SendCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000EC1A70 - SendResourcesHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000ECC60C - ResetCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000ED02DC - EthRxIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000ED06FC - EthRxCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000ECC1AC - StatusHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000E9EE00 - StatusCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000EC1B40 - TDCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000EB3F88 - QueryCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000EB4034 - SetCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000EC521C - WanSendCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000ECC7E4 - WanRcvHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000ECC8CC - WanRcvCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000ED16A0 - SavedPacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000E9EE00 - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000E83C54 - NextSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000E7F8C0 - SavedNextSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000E774D0 - SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000EC4A14 - NextSendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000EC4A14 - FinalSendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000ED5C94 - TopIndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000ED5C94 - TopIndicateLoopbackNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000ED16A0 - Ndis5PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000ED6DBC - SynchronousReturnPacketHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000EC22A8 - NoFilter.CancelSend(Packets)Handler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000E78080 - NoFilter.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000E825D0 - NoFilter.IndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80003A02610 - NoFilter.ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000E7F8C0 - NoFilter.SendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000EC22A8 - Next.CancelSend(Packets)Handler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000E78080 - Next.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000E825D0 - Next.IndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000E825D0 - Next.SaveIndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80003A02610 - Next.ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFE000056D71A0 - NdisMiniportBlock - 0xFFFFF80000ED16A0 - TopNdis5PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000ED16A0 - PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000EC3E08 - SendCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000EC1A70 - SendResourcesHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000ECC60C - ResetCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000ED02DC - EthRxIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000ED06FC - EthRxCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000ECC1AC - StatusHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000E9EE00 - StatusCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000EC1B40 - TDCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000EB3F88 - QueryCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000EB4034 - SetCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000EC521C - WanSendCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000ECC7E4 - WanRcvHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000ECC8CC - WanRcvCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000ED16A0 - SavedPacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000E9EE00 - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000E83C54 - NextSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000EC8D10 - SavedNextSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000E774D0 - SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000EC4A14 - NextSendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000EC4A14 - FinalSendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000ED5C94 - TopIndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000ED5C94 - TopIndicateLoopbackNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000ED16A0 - Ndis5PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000ED6DBC - SynchronousReturnPacketHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000EC22A8 - NoFilter.CancelSend(Packets)Handler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000E78080 - NoFilter.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000E825D0 - NoFilter.IndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF800037786D8 - NoFilter.ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\vwifimp.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000E7F8C0 - NoFilter.SendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80001F2D5C0 - Next.CancelSend(Packets)Handler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80001353770 - Next.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80001353340 - Next.IndicateNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000E825D0 - Next.SaveIndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF800036E9A34 - Next.ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80001F20010 - Next.SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE000050641A0 - NdisMiniportBlock - 0xFFFFF80000ED0938 - TopNdis5PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000ED1568 - PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000EC3E08 - SendCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000EC1A70 - SendResourcesHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000ECC60C - ResetCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000ED02DC - EthRxIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000ED06FC - EthRxCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000ECC1AC - StatusHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000E9EE00 - StatusCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000EC1B40 - TDCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000EB3F88 - QueryCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000EB4034 - SetCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000EC521C - WanSendCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000ECC7E4 - WanRcvHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000ECC8CC - WanRcvCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000ED0938 - SavedPacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000E9EE00 - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000E83C54 - NextSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000E7F8C0 - SavedNextSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000E774D0 - SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000EC4A14 - NextSendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000EC4A14 - FinalSendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000ED6378 - TopIndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000ED5C94 - TopIndicateLoopbackNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000ED0938 - Ndis5PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000ED6DBC - SynchronousReturnPacketHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000EC22A8 - NoFilter.CancelSend(Packets)Handler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000E78080 - NoFilter.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000E825D0 - NoFilter.IndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000E82D70 - NoFilter.ReturnNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000E7F8C0 - NoFilter.SendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000EC22A8 - Next.CancelSend(Packets)Handler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000E78080 - Next.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000E825D0 - Next.IndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000E825D0 - Next.SaveIndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000E82D70 - Next.ReturnNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000045EC1A0 - NdisMiniportBlock - 0xFFFFF80000ED0938 - TopNdis5PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000ED1568 - PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000EC3E08 - SendCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000EC1A70 - SendResourcesHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000ECC60C - ResetCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000ED02DC - EthRxIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000ED06FC - EthRxCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000ECC1AC - StatusHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000E9EE00 - StatusCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000EC1B40 - TDCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000EB3F88 - QueryCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000EB4034 - SetCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000EC521C - WanSendCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000ECC7E4 - WanRcvHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000ECC8CC - WanRcvCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000ED0938 - SavedPacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000E9EE00 - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000E83C54 - NextSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000EC8D10 - SavedNextSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000E774D0 - SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000EC4A14 - NextSendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000EC4A14 - FinalSendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000ED5C94 - TopIndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000ED5C94 - TopIndicateLoopbackNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000ED0938 - Ndis5PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000ED6DBC - SynchronousReturnPacketHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000EC22A8 - NoFilter.CancelSend(Packets)Handler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000E78080 - NoFilter.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000E825D0 - NoFilter.IndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000E82D70 - NoFilter.ReturnNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000E7F8C0 - NoFilter.SendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80001F2D5C0 - Next.CancelSend(Packets)Handler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80001353770 - Next.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80001353340 - Next.IndicateNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000E825D0 - Next.SaveIndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80001353530 - Next.ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80001F20010 - Next.SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE0000295C1A0 - NdisMiniportBlock - 0xFFFFF80000ED0938 - TopNdis5PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000ED16A0 - PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000EC3E08 - SendCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000EC1A70 - SendResourcesHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000ECC60C - ResetCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000ED02DC - EthRxIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000ED06FC - EthRxCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000ECC1AC - StatusHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000E9EE00 - StatusCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000EC1B40 - TDCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000EB3F88 - QueryCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000EB4034 - SetCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000EC521C - WanSendCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000ECC7E4 - WanRcvHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000ECC8CC - WanRcvCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000ED16A0 - SavedPacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000ECA2A0 - NextCancelSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000EC8D10 - NextSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000EC8D10 - SavedNextSendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000E774D0 - SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000EC4A14 - NextSendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000EC4A14 - FinalSendPacketsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000ED5C94 - TopIndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000ED5C94 - TopIndicateLoopbackNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000ED16A0 - Ndis5PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000ED6DBC - SynchronousReturnPacketHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000EC22A8 - NoFilter.CancelSend(Packets)Handler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000E78080 - NoFilter.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000E825D0 - NoFilter.IndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000E82D70 - NoFilter.ReturnNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000E7F8C0 - NoFilter.SendNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80001F2D5C0 - Next.CancelSend(Packets)Handler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80001353770 - Next.SendNetBufferListsCompleteHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80001353340 - Next.IndicateNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000E825D0 - Next.SaveIndicateNetBufferListsHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF800036E9A34 - Next.ReturnNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80001F20010 - Next.SendNetBufferListsHandler - C:\WINDOWS\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFE000029C71A0 - NdisMiniportBlock - 0xFFFFF80000ED0938 - TopNdis5PacketIndicateHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE00002985FA8 - NdisIfProviderBlock - 0xFFFFF80001355CFC - QueryObjectHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE00002985FA8 - NdisIfProviderBlock - 0xFFFFF80001355CFC - SetObjectHandler - C:\WINDOWS\system32\DRIVERS\wfplwfs.sys - Microsoft Corporation
       0xFFFFE000011D1938 - NdisIfProviderBlock - 0xFFFFF80000F03D50 - QueryObjectHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000011D1938 - NdisIfProviderBlock - 0xFFFFF80000F23078 - SetObjectHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000011D19A8 - NdisIfProviderBlock - 0xFFFFF80000F0281C - QueryObjectHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFE000011D19A8 - NdisIfProviderBlock - 0xFFFFF80000F23078 - SetObjectHandler - C:\WINDOWS\system32\drivers\ndis.sys - Microsoft Corporation

==========================================================================================

IE Plugin

       Browser Helper Objects - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll - AVAST Software - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5}
       Browser Helper Objects - CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll - Qualcomm Atheros Commnucations - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}
       Browser Helper Objects - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll - AVAST Software - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
       Browser Helper Objects - Logitech SetPoint - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll - Logitech, Inc. - {AF949550-9094-4807-95EC-D1C317803333}
       Browser Helper Objects(Wow64) - PDF Architect Helper - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll - pdfforge GmbH - {3A2D5EBA-F86D-4BD3-A177-019765996711}
       Browser Helper Objects(Wow64) - Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll - Microsoft Corporation - {72853161-30C5-4D22-B7F9-0BBC1D38A37E}
       Browser Helper Objects(Wow64) - Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll - Oracle Corporation - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
       Browser Helper Objects(Wow64) - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll - AVAST Software - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
       Browser Helper Objects(Wow64) - Logitech SetPoint - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll - Logitech, Inc. - {AF949550-9094-4807-95EC-D1C317803333}
       Browser Helper Objects(Wow64) - Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll - Oracle Corporation - {DBC80044-A445-435b-BC74-9C25C1C588A9}
       Browser Extensions -  -  -  - {7815BE26-237D-41A8-A98F-F7BD75F71086}
       Browser Extensions(Wow64) - Odeslat do aplikace OneNote -  -  - {2670000A-7350-4f3c-8081-5663EE0C6C49}
       Browser Extensions(Wow64) - Research -  -  - {92780B25-18CC-41C8-B9BE-3C9C571A8263}
       ToolBar -  - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll - AVAST Software - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5}
       ToolBar - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll - AVAST Software - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}
       ToolBar(Wow64) -  - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll - pdfforge GmbH - {25A3A431-30BB-47C8-AD6A-E1063801134F}
       ToolBar(Wow64) - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll - AVAST Software - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}
       URLSearchHooks - Microsoft Url Search Hook - C:\Windows\System32\ieframe.dll - Microsoft Corporation - {CFBFAE00-17A6-11D0-99CB-00C04FD64497}
       ActiveX -  -  -  - {18DF081C-E8AD-4283-A596-FA578C2EBDC3}
       ActiveX -  -  -  - {25A3A431-30BB-47C8-AD6A-E1063801134F}
       ActiveX -  -  -  - {3A2D5EBA-F86D-4BD3-A177-019765996711}
       ActiveX -  -  -  - {72853161-30C5-4D22-B7F9-0BBC1D38A37E}
       ActiveX -  -  -  - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
       ActiveX - Microsoft Web Browser - C:\Windows\System32\ieframe.dll - Microsoft Corporation - {8856F961-340A-11D0-A96B-00C04FD705A2}
       ActiveX - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll - AVAST Software - {8E5E2654-AD2D-48BF-AC2D-D17F00898D06}
       ActiveX - Logitech SetPoint - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll - Logitech, Inc. - {AF949550-9094-4807-95EC-D1C317803333}
       ActiveX -  -  -  - {C442AC41-9200-4770-8CC0-7CDB4F245C55}
       ActiveX - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll - AVAST Software - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}
       ActiveX - Shockwave Flash Object - C:\Windows\System32\Macromed\Flash\Flash.ocx - Adobe Systems, Inc. - {D27CDB6E-AE6D-11CF-96B8-444553540000}
       ActiveX -  -  -  - {DBC80044-A445-435B-BC74-9C25C1C588A9}

==========================================================================================

IE Shell

       E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

==========================================================================================

Spi

       @%SystemRoot%\System32\mswsock.dll,-60100 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
       @%SystemRoot%\System32\mswsock.dll,-60101 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
       @%SystemRoot%\System32\mswsock.dll,-60102 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
       @%SystemRoot%\System32\mswsock.dll,-60200 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {F9EAB0C0-26D4-11D0-BBBF-00AA006C34E4}
       @%SystemRoot%\System32\mswsock.dll,-60201 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {F9EAB0C0-26D4-11D0-BBBF-00AA006C34E4}
       @%SystemRoot%\System32\mswsock.dll,-60202 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {F9EAB0C0-26D4-11D0-BBBF-00AA006C34E4}
       @%SystemRoot%\System32\wshqos.dll,-100 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {9D60A9E0-337A-11D0-BD88-0000C082E69A}
       @%SystemRoot%\System32\wshqos.dll,-101 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {9D60A9E0-337A-11D0-BD88-0000C082E69A}
       @%SystemRoot%\System32\wshqos.dll,-102 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {9D60A9E0-337A-11D0-BD88-0000C082E69A}
       @%SystemRoot%\System32\wshqos.dll,-103 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {9D60A9E0-337A-11D0-BD88-0000C082E69A}
       MSAFD RfComm [Bluetooth] - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {9FC48064-7298-43E4-B7BD-181F2089792A}
       @%SystemRoot%\system32\napinsp.dll,-1000 - C:\Windows\System32\NapiNSP.dll - Microsoft Corporation
       @%SystemRoot%\system32\pnrpnsp.dll,-1000 - C:\Windows\System32\pnrpnsp.dll - Microsoft Corporation
       @%SystemRoot%\system32\pnrpnsp.dll,-1001 - C:\Windows\System32\pnrpnsp.dll - Microsoft Corporation
       @%SystemRoot%\system32\nlasvc.dll,-1000 - C:\Windows\System32\nlaapi.dll - Microsoft Corporation
       @%SystemRoot%\system32\wshtcpip.dll,-60103 - C:\Windows\System32\mswsock.dll - Microsoft Corporation
       @%SystemRoot%\System32\winrnr.dll,-1000 - C:\Windows\System32\winrnr.dll - Microsoft Corporation
       Obor nzv Bluetooth - C:\Windows\System32\wshbth.dll - Microsoft Corporation

==========================================================================================

Hosts File

       


==========================================================================================

Startup

       IgfxTray - C:\Windows\System32\igfxtray.exe - Intel Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Run IgfxTray]
       Persistence - C:\Windows\System32\igfxpers.exe - Intel Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Persistence]
       RTHDVCPL - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor - [\Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RTHDVCPL]
       RtHDVBg - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe - Realtek Semiconductor - [\Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RtHDVBg]
       BtTray - C:\Program Files (x86)\Bluetooth Suite\BtTray.exe - Qualcomm Atheros - [\Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Run BtTray]
       BtvStack - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe - Qualcomm Atheros Commnucations - [\Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Run BtvStack]
       Logitech Download Assistant - C:\Windows\System32\LogiLDA.DLL - Logitech, Inc. - [\Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Logitech Download Assistant]
       EvtMgr6 - C:\Program Files\Logitech\SetPointP\SetPoint.exe - Logitech, Inc. - [\Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Run EvtMgr6]
       AdobeAAMUpdater-1.0 - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe - Adobe Systems Incorporated - [\Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeAAMUpdater-1.0]
       ASUSPRP - C:\Program Files (x86)\ASUS\APRP\aprp.exe - ASUSTek Computer Inc. - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run ASUSPRP]
       ASUSWebStorage - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.10.123\AsusWSPanel.exe - ASUS Cloud Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run ASUSWebStorage]
       AvastUI.exe - C:\Program Files\AVAST Software\Avast\AvastUI.exe - AVAST Software - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run AvastUI.exe]
       SunJavaUpdateSched - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe - Oracle Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run SunJavaUpdateSched]
       GrooveMonitor - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run GrooveMonitor]
       Adobe ARM - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe - Adobe Systems Incorporated - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run Adobe ARM]
       SwitchBoard - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe - Adobe Systems Incorporated - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run SwitchBoard]
       AdobeCS6ServiceManager - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe - Adobe Systems Incorporated - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run AdobeCS6ServiceManager]
       DAEMON Tools Lite - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe - Disc Soft Ltd - [\REGISTRY\USER\S-1-5-21-2316643553-1202322727-324119559-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run DAEMON Tools Lite]
       ShowBatteryBar - C:\Program Files\BatteryBar\ShowBatteryBar.exe -  - [\REGISTRY\USER\S-1-5-21-2316643553-1202322727-324119559-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ShowBatteryBar]
       AdobeBridge -  -  - [\REGISTRY\USER\S-1-5-21-2316643553-1202322727-324119559-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeBridge]
       Dropbox.lnk - C:\Users\J R\AppData\Roaming\Dropbox\bin\Dropbox.exe - Dropbox, Inc. - [C:\Users\J R\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk]
       wdmaud.drv - C:\WINDOWS\system32\wdmaud.drv - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32 aux]
       wdmaud.drv - C:\WINDOWS\system32\wdmaud.drv - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32 aux]
       Shell - explorer.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Shell]
       Userinit - C:\Windows\system32\userinit.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Userinit]
       Shell - explorer.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon Shell]
       Userinit - userinit.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon Userinit]
       igfxcui - C:\WINDOWS\system32\igfxdev.dll - Intel Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui DllName]
       LBTWlgn - c:\program files\common files\Logishrd\bluetooth\LBTWLgn.dll - Logitech, Inc. - [\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn DllName]
       Local Port - C:\WINDOWS\system32\localspl.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Monitors Local Port]
       Microsoft Shared Fax Monitor - C:\WINDOWS\system32\FXSMON.DLL - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Monitors Microsoft Shared Fax Monitor]
       pdfcmon - C:\WINDOWS\system32\pdfcmon.dll - pdfforge GmbH - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Monitors pdfcmon]
       Software602 XPS port monitor - C:\WINDOWS\system32\602localmon.dll - Windows (R) Win 7 DDK provider - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Monitors Software602 XPS port monitor]
       Standard TCP/IP Port - C:\WINDOWS\system32\tcpmon.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Monitors Standard TCP/IP Port]
       USB Monitor - C:\WINDOWS\system32\usbmon.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Monitors USB Monitor]
       WSD Port - C:\WINDOWS\system32\WSDMon.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Monitors WSD Port]
       Internet Print Provider - C:\WINDOWS\system32\inetpp.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Providers Internet Print Provider]
       LanMan Print Services - C:\WINDOWS\system32\win32spl.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Providers LanMan Print Services]
       rpcrt4 - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs rpcrt4]
       combase - C:\Windows\System32\combase.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs combase]
       gdiplus - C:\Windows\System32\GdiPlus.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs gdiplus]
       IMAGEHLP - C:\Windows\System32\imagehlp.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs IMAGEHLP]
       MSVCRT - C:\Windows\System32\msvcrt.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs MSVCRT]
       SHLWAPI - C:\Windows\System32\shlwapi.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs SHLWAPI]
       COMDLG32 - C:\Windows\System32\comdlg32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs COMDLG32]
       NORMALIZ - C:\Windows\System32\normaliz.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs NORMALIZ]
       PSAPI - C:\Windows\System32\psapi.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs PSAPI]
       WLDAP32 - C:\Windows\System32\Wldap32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs WLDAP32]
       ole32 - C:\Windows\System32\ole32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs ole32]
       DllDirectory32 - C:\WINDOWS\system32\ -  - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs DllDirectory32]
       IMM32 - C:\Windows\System32\imm32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs IMM32]
       _Wow64cpu - C:\Windows\System32\wow64cpu.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs _Wow64cpu]
       MSCTF - C:\Windows\System32\msctf.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs MSCTF]
       _Wow64win - C:\Windows\System32\wow64win.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs _Wow64win]
       OLEAUT32 - C:\Windows\System32\oleaut32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs OLEAUT32]
       LPK - C:\Windows\System32\lpk.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs LPK]
       clbcatq - C:\Windows\System32\clbcatq.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs clbcatq]
       WS2_32 - C:\Windows\System32\ws2_32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs WS2_32]
       SHELL32 - C:\Windows\System32\shell32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs SHELL32]
       gdi32 - C:\Windows\System32\gdi32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs gdi32]
       _Wow64 - C:\Windows\System32\wow64.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs _Wow64]
       DifxApi - C:\Windows\System32\difxapi.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs DifxApi]
       Setupapi - C:\Windows\System32\setupapi.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs Setupapi]
       kernel32 - C:\Windows\System32\kernel32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs kernel32]
       advapi32 - C:\Windows\System32\advapi32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs advapi32]
       user32 - C:\Windows\System32\user32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs user32]
       NSI - C:\Windows\System32\nsi.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs NSI]
       sechost - C:\Windows\System32\sechost.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs sechost]
       BtvAppExt.dll(Atheros) - C:\Program Files (x86)\Bluetooth Suite\BtvAppExt.dll - Qualcomm Atheros Commnucations - [\Registry\Machine\SOFTWARE\Classes\*\shellex\ContextMenuHandlers Atheros]
       ashShA64.dll(avast) - C:\Program Files\AVAST Software\Avast\ashShA64.dll - AVAST Software - [\Registry\Machine\SOFTWARE\Classes\*\shellex\ContextMenuHandlers avast]
       syncui.dll(BriefcaseMenu) - C:\Windows\System32\syncui.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\*\shellex\ContextMenuHandlers BriefcaseMenu]
       shell32.dll(Open With) - C:\Windows\System32\shell32.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\*\shellex\ContextMenuHandlers Open With]
       shell32.dll(Open With EncryptionMenu) - C:\Windows\System32\shell32.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\*\shellex\ContextMenuHandlers Open With EncryptionMenu]
       CtxSign64.dll(PDFConv) - C:\Program Files (x86)\Software602\602XML\Xmlcore\CtxSign64.dll - Software602 - [\Registry\Machine\SOFTWARE\Classes\*\shellex\ContextMenuHandlers PDFConv]
       ntshrui.dll(Sharing) - C:\Windows\System32\ntshrui.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\*\shellex\ContextMenuHandlers Sharing]
       RarExt.dll(WinRAR) - C:\Program Files\WinRAR\RarExt.dll - Alexander Roshal - [\Registry\Machine\SOFTWARE\Classes\*\shellex\ContextMenuHandlers WinRAR]
       WorkfoldersShell.dll(WorkFolders) - C:\Windows\System32\WorkfoldersShell.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\*\shellex\ContextMenuHandlers WorkFolders]
       ashShA64.dll(00avast) - C:\Program Files\AVAST Software\Avast\ashShA64.dll - AVAST Software - [\Registry\Machine\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers 00avast]
       mscoree.dll(BackupContextMenuExtension) - C:\WINDOWS\system32\mscoree.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers BackupContextMenuExtension]
       shell32.dll(CopyAsPathMenu) - C:\Windows\System32\shell32.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers CopyAsPathMenu]
       ShellContextExt.dll(FTShellContext) - C:\Program Files (x86)\Bluetooth Suite\ShellContextExt.dll - Qualcomm Atheros Commnucations - [\Registry\Machine\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers FTShellContext]
       shell32.dll(SendTo) - C:\Windows\System32\shell32.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers SendTo]
       ashShA64.dll(avast) - C:\Program Files\AVAST Software\Avast\ashShA64.dll - AVAST Software - [\Registry\Machine\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers avast]
       syncui.dll(BriefcaseMenu) - C:\Windows\System32\syncui.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers BriefcaseMenu]
       shell32.dll(Library Location) - C:\Windows\System32\shell32.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers Library Location]
       shell32.dll(PintoStartScreen) - C:\Windows\System32\shell32.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers PintoStartScreen]
       RarExt.dll(WinRAR) - C:\Program Files\WinRAR\RarExt.dll - Alexander Roshal - [\Registry\Machine\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers WinRAR]
       Microsoft Windows Media Player(>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}) - C:\Windows\System32\unregmp2.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Active Setup\Installed Components >{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
       Themes Setup({2C7339CF-2B09-4501-B3F3-F3508C9228ED}) - UserInstall -  - [\Registry\Machine\SOFTWARE\Microsoft\Active Setup\Installed Components {2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
       Microsoft Windows({44BBA840-CC51-11CF-AAFA-00AA00B6015C}) - C:\Program Files\Windows Mail\WinMail.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Active Setup\Installed Components {44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
       Microsoft Windows Media Player({6BF52A52-394A-11d3-B153-00C04F79FAA6}) - C:\Windows\System32\unregmp2.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Active Setup\Installed Components {6BF52A52-394A-11d3-B153-00C04F79FAA6}]
       Windows Desktop Update({89820200-ECBD-11cf-8B85-00AA005B4340}) - U -  - [\Registry\Machine\SOFTWARE\Microsoft\Active Setup\Installed Components {89820200-ECBD-11cf-8B85-00AA005B4340}]
       Web Platform Customizations({89820200-ECBD-11cf-8B85-00AA005B4383}) - C:\Windows\System32\ie4uinit.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Active Setup\Installed Components {89820200-ECBD-11cf-8B85-00AA005B4383}]
       ({89B4C1CD-B018-4511-B0A1-5476DBF70820}) - C:\Windows\System32\mscories.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Active Setup\Installed Components {89B4C1CD-B018-4511-B0A1-5476DBF70820}]
       Microsoft Windows Media Player(>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}) - C:\Windows\System32\unregmp2.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components >{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
       Microsoft Windows({44BBA840-CC51-11CF-AAFA-00AA00B6015C}) - C:\Program Files\Windows Mail\WinMail.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components {44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
       Microsoft Windows Media Player({6BF52A52-394A-11d3-B153-00C04F79FAA6}) - C:\Windows\System32\unregmp2.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components {6BF52A52-394A-11d3-B153-00C04F79FAA6}]
       ({89B4C1CD-B018-4511-B0A1-5476DBF70820}) - C:\Windows\SysWOW64\mscories.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components {89B4C1CD-B018-4511-B0A1-5476DBF70820}]
       Google Chrome({8A69D345-D564-463c-AFF1-A69D9E530F96}) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\Installer\chrmstp.exe - Google Inc. - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components {8A69D345-D564-463c-AFF1-A69D9E530F96}]

==========================================================================================

Service

       602XML Updater - Started - Automatic - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe - Software602 a.s. -  - 
       AdobeARMservice - Started - Automatic - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" - Adobe Systems Incorporated -  - 
       AdobeFlashPlayerUpdateSvc - Stopped - Manual - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe - Adobe Systems Incorporated -  - 
       AeLookupSvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       ALG - Stopped - Manual - C:\Windows\System32\alg.exe - Microsoft Corporation -  - 
       AppIDSvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceNetworkRestricted - Microsoft Corporation -  - 
       Appinfo - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       AppReadiness - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k AppReadiness - Microsoft Corporation -  - 
       AppXSvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k wsappx - Microsoft Corporation -  - 
       ASLDRService - Started - Automatic - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe - ASUSTek Computer Inc. -  - 
       ASUS InstantOn - Started - Automatic - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe - ASUS -  - 
       AtherosSvc - Started - Automatic - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe - Qualcomm Atheros Commnucations -  - 
       ATKGFNEXSrv - Started - Automatic - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe - ASUS -  - 
       AudioEndpointBuilder - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       Audiosrv - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceNetworkRestricted - Microsoft Corporation -  - 
       avast! Antivirus - Started - Automatic - "C:\Program Files\AVAST Software\Avast\AvastSvc.exe" - AVAST Software -  - 
       AxInstSV - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k AxInstSVGroup - Microsoft Corporation -  - 
       BDESVC - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       BFE - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceNoNetwork - Microsoft Corporation -  - 
       BITS - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       BrokerInfrastructure - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k DcomLaunch - Microsoft Corporation -  - 
       Browser - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       bthserv - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       CertPropSvc - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       COMSysApp - Stopped - Manual - C:\WINDOWS\syswow64\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} - Microsoft Corporation -  - 
       cphs - Stopped - Manual - C:\Windows\SysWOW64\IntelCpHeciSvc.exe - Intel Corporation -  - 
       CryptSvc - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       DcomLaunch - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k DcomLaunch - Microsoft Corporation -  - 
       defragsvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k defragsvc - Microsoft Corporation -  - 
       DeviceAssociationService - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       DeviceInstall - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k DcomLaunch - Microsoft Corporation -  - 
       Dhcp - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceNetworkRestricted - Microsoft Corporation -  - 
       Dnscache - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       dot3svc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       DPS - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceNoNetwork - Microsoft Corporation -  - 
       DptfParticipantProcessorService - Started - Automatic - C:\Windows\System32\DptfParticipantProcessorService.exe - Intel Corporation -  - 
       DptfPolicyConfigTDPService - Started - Automatic - C:\Windows\System32\DptfPolicyConfigTDPService.exe - Intel Corporation -  - 
       DsmSvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       Eaphost - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       EFS - Stopped - Manual - C:\Windows\System32\lsass.exe - Microsoft Corporation -  - 
       EventLog - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceNetworkRestricted - Microsoft Corporation -  - 
       EventSystem - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       Fax - Stopped - Manual - C:\Windows\System32\FXSSVC.exe - Microsoft Corporation -  - 
       fdPHost - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       FDResPub - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       fhsvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       FontCache - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       FontCache3.0.0.0 - Stopped - Manual - C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe - Microsoft Corporation -  - 
       gpsvc - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       gupdate - Stopped - Automatic - "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc - Google Inc. -  - 
       gupdatem - Stopped - Manual - "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc - Google Inc. -  - 
       hidserv - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       hkmsvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       HomeGroupListener - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       HomeGroupProvider - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceNetworkRestricted - Microsoft Corporation -  - 
       IEEtwCollectorService - Stopped - Manual - C:\WINDOWS\syswow64\IEEtwCollector.exe /V - File not found -  - 
       IKEEXT - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       Intel(R) Capability Licensing Service Interface - Started - Automatic - "C:\Program Files\Intel\iCLS Client\HeciServer.exe" - Intel(R) Corporation -  - 
       Intel(R) ME Service - Started - Automatic - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe - Intel Corporation -  - 
       iphlpsvc - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k NetSvcs - Microsoft Corporation -  - 
       jhi_service - Started - Automatic - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe - Intel Corporation -  - 
       KeyIso - Started - Manual - C:\Windows\System32\lsass.exe - Microsoft Corporation -  - 
       KtmRm - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k NetworkServiceAndNoImpersonation - Microsoft Corporation -  - 
       LanmanServer - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       LanmanWorkstation - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       LBTServ - Stopped - Manual - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe - Logitech, Inc. -  - 
       lfsvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       lltdsvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       lmhosts - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceNetworkRestricted - Microsoft Corporation -  - 
       LMS - Started - Automatic - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe - Intel Corporation -  - 
       LSM - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k DcomLaunch - Microsoft Corporation -  - 
       Microsoft Office Groove Audit Service - Stopped - Manual - "C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe" - Microsoft Corporation -  - 
       MMCSS - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       MpsSvc - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceNoNetwork - Microsoft Corporation -  - 
       MSDTC - Stopped - Manual - C:\Windows\System32\msdtc.exe - Microsoft Corporation -  - 
       MSiSCSI - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       msiserver - Stopped - Manual - C:\WINDOWS\syswow64\msiexec.exe /V - Microsoft Corporation -  - 
       napagent - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       NcaSvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k NetSvcs - Microsoft Corporation -  - 
       NcbService - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       NcdAutoSetup - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceNoNetwork - Microsoft Corporation -  - 
       Netlogon - Stopped - Manual - C:\Windows\System32\lsass.exe - Microsoft Corporation -  - 
       Netman - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       netprofm - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       NetTcpPortSharing - Stopped - Disabled - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe - Microsoft Corporation -  - 
       NlaSvc - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       nsi - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       odserv - Stopped - Manual - "C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE" - Microsoft Corporation -  - 
       ose - Stopped - Manual - "C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE" - Microsoft Corporation -  - 
       p2pimsvc - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServicePeerNet - Microsoft Corporation -  - 
       p2psvc - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServicePeerNet - Microsoft Corporation -  - 
       PcaSvc - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       PDF Architect Helper Service - Started - Automatic - "C:\Program Files (x86)\PDF Architect\HelperService.exe" - pdfforge GmbH -  - 
       PDF Architect Service - Started - Automatic - "C:\Program Files (x86)\PDF Architect\ConversionService.exe" - pdfforge GmbH -  - 
       PerfHost - Stopped - Manual - C:\Windows\SysWOW64\perfhost.exe - Microsoft Corporation -  - 
       pla - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceNoNetwork - Microsoft Corporation -  - 
       PlugPlay - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k DcomLaunch - Microsoft Corporation -  - 
       PNRPAutoReg - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServicePeerNet - Microsoft Corporation -  - 
       PNRPsvc - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServicePeerNet - Microsoft Corporation -  - 
       PolicyAgent - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k NetworkServiceNetworkRestricted - Microsoft Corporation -  - 
       Power - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k DcomLaunch - Microsoft Corporation -  - 
       PrintNotify - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k print - Microsoft Corporation -  - 
       ProfSvc - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       QWAVE - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       RasAuto - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       RasMan - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       RemoteAccess - Stopped - Disabled - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       RemoteRegistry - Stopped - Disabled - C:\WINDOWS\syswow64\svchost.exe -k localService - Microsoft Corporation -  - 
       RpcEptMapper - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k RPCSS - Microsoft Corporation -  - 
       RpcLocator - Stopped - Manual - C:\Windows\System32\Locator.exe - Microsoft Corporation -  - 
       RpcSs - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k rpcss - Microsoft Corporation -  - 
       SamSs - Started - Automatic - C:\Windows\System32\lsass.exe - Microsoft Corporation -  - 
       SCardSvr - Stopped - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       ScDeviceEnum - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       Schedule - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       SCPolicySvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       seclogon - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       SENS - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       SensrSvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       SessionEnv - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       SharedAccess - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       ShellHWDetection - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       smphost - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k smphost - Microsoft Corporation -  - 
       SNMPTRAP - Stopped - Manual - C:\Windows\System32\snmptrap.exe - Microsoft Corporation -  - 
       Spooler - Started - Automatic - C:\Windows\System32\spoolsv.exe - Microsoft Corporation -  - 
       sppsvc - Stopped - Automatic - C:\Windows\System32\sppsvc.exe - Microsoft Corporation -  - 
       SSDPSRV - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       SstpSvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       stisvc - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k imgsvc - Microsoft Corporation -  - 
       StorSvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       svsvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       SwitchBoard - Stopped - Manual - "C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" - Adobe Systems Incorporated -  - 
       swprv - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k swprv - Microsoft Corporation -  - 
       SysMain - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       SystemEventsBroker - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k DcomLaunch - Microsoft Corporation -  - 
       TabletInputService - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       TapiSrv - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       TermService - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       Themes - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       THREADORDER - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       TimeBroker - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       TrkWks - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       TrustedInstaller - Stopped - Manual - C:\Windows\servicing\TrustedInstaller.exe - Microsoft Corporation -  - 
       UI0Detect - Stopped - Manual - C:\Windows\System32\UI0Detect.exe - Microsoft Corporation -  - 
       UmRdpService - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       UNS - Started - Automatic - "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe" - Intel Corporation -  - 
       upnphost - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       VaultSvc - Stopped - Manual - C:\Windows\System32\lsass.exe - Microsoft Corporation -  - 
       vds - Stopped - Manual - C:\Windows\System32\vds.exe - Microsoft Corporation -  - 
       vmicguestinterface - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       vmicheartbeat - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k ICService - Microsoft Corporation -  - 
       vmickvpexchange - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       vmicrdv - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k ICService - Microsoft Corporation -  - 
       vmicshutdown - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       vmictimesync - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceNetworkRestricted - Microsoft Corporation -  - 
       vmicvss - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       VSS - Stopped - Manual - C:\Windows\System32\VSSVC.exe - Microsoft Corporation -  - 
       W32Time - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       WakeupService - Started - Automatic - C:\Program Files\ASUS\ASUS VivoBook\ASUSWakeupService.exe - ASUSTek Computer Inc. -  - 
       wbengine - Stopped - Manual - "C:\WINDOWS\system32\wbengine.exe" - Microsoft Corporation -  - 
       WbioSrvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k WbioSvcGroup - Microsoft Corporation -  - 
       Wcmsvc - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceNetworkRestricted - Microsoft Corporation -  - 
       wcncsvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       WcsPlugInService - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k wcssvc - Microsoft Corporation -  - 
       WdiServiceHost - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       WdiSystemHost - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       WdNisSvc - Stopped - Manual - "C:\Program Files\Windows Defender\NisSrv.exe" - Microsoft Corporation -  - 
       WebClient - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       Wecsvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       WEPHOSTSVC - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k WepHostSvcGroup - Microsoft Corporation -  - 
       wercplsupport - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       WerSvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k WerSvcGroup - Microsoft Corporation -  - 
       WiaRpc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       WinDefend - Stopped - Manual - "C:\Program Files\Windows Defender\MsMpEng.exe" - Microsoft Corporation -  - 
       WinHttpAutoProxySvc - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       Winmgmt - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       WinRM - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       WlanSvc - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       wlidsvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       wmiApSrv - Stopped - Manual - C:\Windows\System32\wbem\WmiApSrv.exe - Microsoft Corporation -  - 
       WMPNetworkSvc - Started - Automatic - "C:\Program Files\Windows Media Player\wmpnetwk.exe" - Microsoft Corporation -  - 
       workfolderssvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       WPCSvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceNetworkRestricted - Microsoft Corporation -  - 
       WPDBusEnum - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       wscsvc - Started - Automatic - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceNetworkRestricted - Microsoft Corporation -  - 
       WSearch - Started - Automatic - C:\WINDOWS\syswow64\SearchIndexer.exe /Embedding - Microsoft Corporation -  - 
       WSService - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k wsappx - Microsoft Corporation -  - 
       wuauserv - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       wudfsvc - Started - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       WwanSvc - Stopped - Manual - C:\WINDOWS\syswow64\svchost.exe -k LocalServiceNoNetwork - Microsoft Corporation -  - 
       ZAtheros Bt and Wlan Coex Agent - Started - Automatic - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe - Atheros -  - 

==========================================================================================

Schedule Task

       PolicyConverter - \Microsoft\Windows\AppID\PolicyConverter - C:\Windows\System32\appidpolicyconverter.exe - Pevede zsady zsad omezen softwaru z formtu XML do binrnho formtu. - Disable - Microsoft Corporation
       VerifiedPublisherCertStoreCheck - \Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - C:\Windows\System32\appidcertstorecheck.exe - Vyhled v mezipamti certifikt AppID neplatn a odvolan certifikty. - Disable - Microsoft Corporation
       AitAgent - \Microsoft\Windows\Application Experience\AitAgent - aitagent - Pihlste-li se do programu Zlepovn softwaru a slueb na zklad zkuenost uivatel, shromauje a odesl informace o telemetrii aplikace. - Enable - 
       ProgramDataUpdater - \Microsoft\Windows\Application Experience\ProgramDataUpdater - C:\Windows\System32\rundll32.exe - Pihlste-li se do programu Zlepovn softwaru a slueb na zklad zkuenost uivatel, shromauje informace o telemetrii programu. - Enable - Microsoft Corporation
       StartupAppTask - \Microsoft\Windows\Application Experience\StartupAppTask - C:\Windows\System32\rundll32.exe - Kontroluje poloky pi sputn a zobraz uivateli upozornn v ppad, e existuje pli mnoho poloek pi sputn. - Enable - Microsoft Corporation
       CleanupTemporaryState - \Microsoft\Windows\ApplicationData\CleanupTemporaryState - C:\Windows\System32\rundll32.exe - Cleans up each package's unused temporary files. - Enable - Microsoft Corporation
       Pre-staged app cleanup - \Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - C:\Windows\System32\rundll32.exe -  - Disable - Microsoft Corporation
       Proxy - \Microsoft\Windows\Autochk\Proxy - C:\Windows\System32\rundll32.exe - Tato loha shromauje a odesl data autochk SQM, pokud se uivatel explicitn pihlsil do programu Zlepovn softwaru a slueb na zklad zkuenost uivatel. - Enable - Microsoft Corporation
       UninstallDeviceTask - \Microsoft\Windows\Bluetooth\UninstallDeviceTask - C:\WINDOWS\system32\BthUdTask.exe - Odinstaluje zazen Plug and Play pidruen k zadanmu ID sluby Bluetooth. - Enable - Microsoft Corporation
       Consolidator - \Microsoft\Windows\Customer Experience Improvement Program\Consolidator - C:\Windows\System32\wsqmcons.exe - Pokud uivatel souhlasil, e se zastn programu Zlepovn softwaru a slueb na zklad zkuenost uivatel, shromauje tato loha data o nvtvnosti webu a odesl je spolenosti Microsoft. - Enable - Microsoft Corporation
       Uploader - \Microsoft\Windows\Customer Experience Improvement Program\Uploader - C:\Windows\System32\wsqmcons.exe - Tato loha odele daje o systmu Windows na zklad spoluprce uivatele s programem Zlepovn softwaru a slueb na zklad zkuenost uivatel. - Enable - Microsoft Corporation
       ScheduledDefrag - \Microsoft\Windows\Defrag\ScheduledDefrag - C:\Windows\System32\Defrag.exe - Tato loha optimalizuje lokln pamov jednotky. - Enable - Microsoft Corp.
       Microsoft-Windows-DiskDiagnosticDataCollector - \Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - C:\Windows\System32\rundll32.exe - Program Diagnostika disk pedv spolenosti Microsoft zprvy s obecnmi informacemi o discch a systmu uivatel, kte se astn programu Zlepovn softwaru a slueb na zklad zkuenost uivatel. - Disable - Microsoft Corporation
       Microsoft-Windows-DiskDiagnosticResolver - \Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - C:\Windows\System32\DFDWiz.exe - Vydavatel udlost Microsoft-Windows-DiskDiagnosticResolver upozorn uivatele na chyby hlen pevnmi disky, kter podporuj standard SMART (Self Monitoring and Reporting Technology). Tato loha je po rozpoznn chyby SMART sputna slubou DPS (Diagnostic Policy Service) automaticky. - Disable - Microsoft Corporation
       Notifications - \Microsoft\Windows\Location\Notifications - C:\Windows\System32\LocationNotifications.exe - Aktivity tkajc se pozice - Enable - Microsoft Corporation
       MNO Metadata Parser - \Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - C:\Windows\System32\MbaeParserTask.exe - Mobile Broadband Account Experience Metadata Parser - Enable - Microsoft Corporation
       Lpksetup - \Microsoft\Windows\MUI\Lpksetup - C:\Windows\System32\lpksetup.exe -  - Enable - Microsoft Corporation
       LPRemove - \Microsoft\Windows\MUI\LPRemove - C:\Windows\System32\lpremove.exe - Launch language cleanup tool - Enable - Microsoft Corporation
       Mcbuilder - \Microsoft\Windows\MUI\Mcbuilder - C:\Windows\System32\mcbuilder.exe -  - Enable - Microsoft Corporation
       GatherNetworkInfo - \Microsoft\Windows\NetTrace\GatherNetworkInfo - C:\Windows\System32\gatherNetworkInfo.vbs - Network information collector - Enable - 
       Sysprep Generalize Drivers - \Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - C:\Windows\System32\drvinst.exe - Zobecnnm stavu ovlada pipravte systm tak, aby byl spustiteln v libovoln hardwarov konfiguraci. - Enable - Microsoft Corporation
       RemoteAssistanceTask - \Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - C:\Windows\System32\raserver.exe - Vyhled zsady skupiny tkajc se programu Vzdlen pomoc. - Enable - Microsoft Corporation
       MRT_HB - \Microsoft\Windows\RemovalTools\MRT_HB - C:\Windows\System32\MRT.exe -  - Enable - Microsoft Corporation
       FamilySafetyMonitor - \Microsoft\Windows\Shell\FamilySafetyMonitor - C:\Windows\System32\WpcMon.exe - Inicializuje monitorovn a vymhn pravidel Zabezpeen rodiny. - Enable - Microsoft Corporation
       SpaceAgentTask - \Microsoft\Windows\SpacePort\SpaceAgentTask - C:\Windows\System32\SpaceAgent.exe - Nastaven prostor loi - Enable - Microsoft Corporation
       WsSwapAssessmentTask - \Microsoft\Windows\Sysmain\WsSwapAssessmentTask - C:\Windows\System32\rundll32.exe - loha drby vyhodnocen zmny pracovn sady - Enable - Microsoft Corporation
       SR - \Microsoft\Windows\SystemRestore\SR - C:\Windows\System32\SrTasks.exe - Tato loha vytvo bn body ochrany systmu. - Enable - Microsoft Corporation
       SynchronizeTime - \Microsoft\Windows\Time Synchronization\SynchronizeTime - C:\Windows\System32\sc.exe - Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. - Enable - Microsoft Corporation
       SynchronizeTimeZone - \Microsoft\Windows\Time Zone\SynchronizeTimeZone - C:\Windows\System32\tzsync.exe - Aktualizuje informace o asovch psmech. Pokud je tato loha zastavena, nemus bt mstn as pro nkter asov psma pesn. - Enable - Microsoft Corporation
       UPnPHostConfig - \Microsoft\Windows\UPnP\UPnPHostConfig - C:\WINDOWS\system32\sc.exe - Nastavit automatick sputn sluby UPnPHost - Enable - Microsoft Corporation
       Windows Defender Cache Maintenance - \Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance - C:\Program Files\Windows Defender\MpCmdRun.exe - loha pravideln drby - Enable - Microsoft Corporation
       Windows Defender Cleanup - \Microsoft\Windows\Windows Defender\Windows Defender Cleanup - C:\Program Files\Windows Defender\MpCmdRun.exe - loha pravidelnho itn - Enable - Microsoft Corporation
       Windows Defender Scheduled Scan - \Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan - C:\Program Files\Windows Defender\MpCmdRun.exe - loha pravideln kontroly - Enable - Microsoft Corporation
       Windows Defender Verification - \Microsoft\Windows\Windows Defender\Windows Defender Verification - C:\Program Files\Windows Defender\MpCmdRun.exe - loha pravidelnho ovovn - Enable - Microsoft Corporation
       QueueReporting - \Microsoft\Windows\Windows Error Reporting\QueueReporting - C:\Windows\System32\wermgr.exe - loha sluby Zasln zprv o chybch systmu Windows pro zpracovn zprv ve front - Enable - Microsoft Corporation
       BfeOnServiceStartTypeChange - \Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - C:\Windows\System32\rundll32.exe - Tato loha uprav typ spoutn slueb spoutnch brnou firewall, kdy je typ spoutn sluby BFE (Base Filtering Engine) zakzn. - Enable - Microsoft Corporation
       UpdateLibrary - \Microsoft\Windows\Windows Media Sharing\UpdateLibrary - C:\Program Files\Windows Media Player\wmpnscfg.exe - Tato loha aktualizuje seznam sloek v mezipamti a oprvnn zabezpeen pro vechny nov soubory ve sdlen knihovn mdi uivatele. - Enable - Microsoft Corporation
       ConfigNotification - \Microsoft\Windows\WindowsBackup\ConfigNotification - C:\Windows\System32\sdclt.exe - Tato naplnovan loha upozoruje uivatele, e program Windows Zlohovn nebyl nakonfigurovn. - Enable - Microsoft Corporation
       Scheduled Start - \Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\Windows\System32\sc.exe - Tato loha slou ke sputn sluby Windows Update, kdy je teba k proveden plnovanch operac, jako je kontrola. - Enable - Microsoft Corporation
       Automatic-Workplace-Join - \Microsoft\Windows\Workplace Join\Automatic-Workplace-Join - C:\Windows\System32\AutoWorkplace.exe - Pracovn plocha se pipoj k tomuto potai, pokud je pota ji pipojen k domn sluby Active Directory. - Disable - Microsoft Corporation
       License Validation - \Microsoft\Windows\WS\License Validation - C:\WINDOWS\system32\rundll32.exe - loha oven licence Windows Store - Enable - Microsoft Corporation
       WSRefreshBannedAppsListTask - \Microsoft\Windows\WS\WSRefreshBannedAppsListTask - C:\WINDOWS\system32\rundll32.exe - loha ve Store pro aktualizaci seznamu zakzanch aplikac - Enable - Microsoft Corporation
       SqmUpload_S-1-5-21-2316643553-1202322727-324119559-1001 - \WPD\SqmUpload_S-1-5-21-2316643553-1202322727-324119559-1001 - C:\Windows\System32\rundll32.exe - Tato loha odele na server data programu Zlepovn softwaru a slueb na zklad zkuenost uivatel pro penosn zazen. - Enable - Microsoft Corporation
       Adobe Flash Player Updater - \Adobe Flash Player Updater - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe - Tato loha udruje instalaci pehrvae Adobe Flash Player v aktualizovanm stavu s pouitm nejnovjch rozen a oprav zabezpeen. Pi zakzn nebo odebrn tto lohy nebude moci pehrva Adobe Flash Player pout automatick zabezpeen potae pomoc nejnovjch oprav zabezpeen. - Enable - Adobe Systems Incorporated
       ASUS Live Update - \ASUS Live Update - C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe -  - Enable - ASUSTeK Computer Inc.
       ASUS Patch for Touch Panel - \ASUS Patch for Touch Panel - C:\ProgramData\AsTouchPanel\AsPatchTouchPanel64.exe -  - Enable - ASUSTek Computer INC.
       ASUS Touchpad Launcher (x64) - \ASUS Touchpad Launcher (x64) - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe - ASUS Touchpad Launcher (x64) - Enable - AsusTek
       ASUS USB Charger Plus - \ASUS USB Charger Plus - C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe -  - Enable - ASUSTek Computer Inc.
       ASUS VivoBook - \ASUS VivoBook - C:\Program Files\ASUS\ASUS VivoBook\VivoBook.exe -  - Enable - ASUSTeK Computer Inc.
       avast! Emergency Update - \avast! Emergency Update - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe -  - Enable - AVAST Software
       GoogleUpdateTaskMachineCore - \GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe - Udruje software Google aktualizovan. Je-li tato loha zakzna nebo zastavena, nebude v software Google udrovn v aktualizovanm stavu. To znamen, e nemus bt opravena zjitn slab msta v zabezpeen a urit funkce nemus fungovat. Pokud tuto lohu dn software Google nepouv, sama se odinstaluje. - Enable - Google Inc.
       GoogleUpdateTaskMachineUA - \GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe - Udruje software Google aktualizovan. Je-li tato loha zakzna nebo zastavena, nebude v software Google udrovn v aktualizovanm stavu. To znamen, e nemus bt opravena zjitn slab msta v zabezpeen a urit funkce nemus fungovat. Pokud tuto lohu dn software Google nepouv, sama se odinstaluje. - Enable - Google Inc.
       User_Feed_Synchronization-{3C7C2A09-7C19-47FE-887B-652C33BC90BA} - \User_Feed_Synchronization-{3C7C2A09-7C19-47FE-887B-652C33BC90BA} - C:\Windows\System32\msfeedssync.exe - Aktualizace zastaralch systmovch informanch kanl - Enable - Microsoft Corporation

==========================================================================================

File Association

       .bat - "%1" %* - HKEY_CLASSES_ROOT\.bat
       .cmd - "%1" %* - HKEY_CLASSES_ROOT\.cmd
       .com - "%1" %* - HKEY_CLASSES_ROOT\.com
       .exe - "%1" %* - HKEY_CLASSES_ROOT\.exe
       .scr - "%1" /S - HKEY_CLASSES_ROOT\.scr
       .txt - %SystemRoot%\system32\NOTEPAD.EXE %1 - HKEY_CLASSES_ROOT\.txt
       .ini - %SystemRoot%\system32\NOTEPAD.EXE %1 - HKEY_CLASSES_ROOT\.ini
       .pif - "%1" %* - HKEY_CLASSES_ROOT\.pif
       .reg - regedit.exe "%1" - HKEY_CLASSES_ROOT\.reg
       .inf - %SystemRoot%\system32\NOTEPAD.EXE %1 - HKEY_CLASSES_ROOT\.inf
       .hlp - %SystemRoot%\winhlp32.exe %1 - HKEY_CLASSES_ROOT\.hlp
       .chm - "%SystemRoot%\hh.exe" %1 - HKEY_CLASSES_ROOT\.chm
       .vbs - "%SystemRoot%\System32\WScript.exe" "%1" %* - HKEY_CLASSES_ROOT\.vbs
       .js - C:\Windows\System32\WScript.exe "%1" %* - HKEY_CLASSES_ROOT\.js
       .lnk - lnkfile - HKEY_CLASSES_ROOT\.lnk
       batfile - "%1" %* - HKEY_CLASSES_ROOT\batfile\Shell\Open\Command
       cmdfile - "%1" %* - HKEY_CLASSES_ROOT\cmdfile\Shell\Open\Command
       comfile - "%1" %* - HKEY_CLASSES_ROOT\comfile\Shell\Open\Command
       exefile - "%1" %* - HKEY_CLASSES_ROOT\exefile\Shell\Open\Command
       scrfile - "%1" /S - HKEY_CLASSES_ROOT\scrfile\Shell\Open\Command
       txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1 - HKEY_CLASSES_ROOT\txtfile\Shell\Open\Command
       inifile - %SystemRoot%\system32\NOTEPAD.EXE %1 - HKEY_CLASSES_ROOT\inifile\Shell\Open\Command
       piffile - "%1" %* - HKEY_CLASSES_ROOT\piffile\Shell\Open\Command
       regfile - regedit.exe "%1" - HKEY_CLASSES_ROOT\regfile\Shell\Open\Command
       inffile - %SystemRoot%\system32\NOTEPAD.EXE %1 - HKEY_CLASSES_ROOT\inffile\Shell\Open\Command
       hlpfile - %SystemRoot%\winhlp32.exe %1 - HKEY_CLASSES_ROOT\hlpfile\Shell\Open\Command
       chm.file - "%SystemRoot%\hh.exe" %1 - HKEY_CLASSES_ROOT\chm.file\Shell\Open\Command
       vbsfile - "%SystemRoot%\System32\WScript.exe" "%1" %* - HKEY_CLASSES_ROOT\vbsfile\Shell\Open\Command
       jsfile - C:\Windows\System32\WScript.exe "%1" %* - HKEY_CLASSES_ROOT\jsfile\Shell\Open\Command
       HKCU .exe Progid - "%1" %* - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithProgids
       HKCU .txt Progid - %SystemRoot%\system32\NOTEPAD.EXE %1 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.txt\OpenWithProgids
       HKCU .ini Progid - %SystemRoot%\system32\NOTEPAD.EXE %1 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ini\OpenWithProgids
       HKCU .vbs Progid - "%SystemRoot%\System32\WScript.exe" "%1" %* - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vbs\OpenWithProgids
       HKCU .lnk Progid -  - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lnk\OpenWithProgids

==========================================================================================

IFEO

       Nothing

==========================================================================================

IME/CTF

       Ime: Czech -  -  - C:\WINDOWS\system32\KBDCZ.DLL - Microsoft Corporation
       Ime: US -  -  - C:\WINDOWS\system32\KBDUS.DLL - Microsoft Corporation

==========================================================================================

Firewall Rule

       vm-monitoring-icmpv6 - v2.0|Action=Allow|Active=FALSE|Dir=In|Protocol=58|Name=@vmicres.dll,-703|Desc=@vmicres.dll,-704|EmbedCtxt=@vmicres.dll,-700| - Enabled - 
       vm-monitoring-rpc --> C:\Windows\System32\svchost.exe - v2.0|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=RPC|App=%SystemRoot%\system32\svchost.exe|Svc=Schedule|Name=@vmicres.dll,-707|Desc=@vmicres.dll,-708|EmbedCtxt=@vmicres.dll,-700| - Enabled - Microsoft Corporation
       vm-monitoring-icmpv4 - v2.0|Action=Allow|Active=FALSE|Dir=In|Protocol=1|Name=@vmicres.dll,-701|Desc=@vmicres.dll,-702|EmbedCtxt=@vmicres.dll,-700| - Enabled - 
       vm-monitoring-dcom --> C:\Windows\System32\svchost.exe - v2.0|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=135|App=%SystemRoot%\system32\svchost.exe|Svc=RpcSs|Name=@vmicres.dll,-709|Desc=@vmicres.dll,-710|EmbedCtxt=@vmicres.dll,-700| - Enabled - Microsoft Corporation
       vm-monitoring-nb-session - v2.0|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=139|Name=@vmicres.dll,-705|Desc=@vmicres.dll,-706|EmbedCtxt=@vmicres.dll,-700| - Enabled - 
       WMP-In-UDP-x86 --> C:\Program Files (x86)\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Public|App=%ProgramFiles(x86)%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31023|Desc=@FirewallAPI.dll,-31006|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       WMP-Out-UDP-x86 --> C:\Program Files (x86)\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Public|App=%ProgramFiles(x86)%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31024|Desc=@FirewallAPI.dll,-31010|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       WMP-Out-TCP-x86 --> C:\Program Files (x86)\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Public|App=%ProgramFiles(x86)%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31025|Desc=@FirewallAPI.dll,-31014|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       WMP-In-UDP --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Public|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31003|Desc=@FirewallAPI.dll,-31006|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       WMP-Out-UDP --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Public|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31007|Desc=@FirewallAPI.dll,-31010|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       WMP-Out-TCP --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Public|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31011|Desc=@FirewallAPI.dll,-31014|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       SNMPTRAP-In-UDP --> C:\Windows\System32\snmptrap.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|Profile=Public|LPort=162|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\snmptrap.exe|Svc=SNMPTRAP|Name=@snmptrap.exe,-7|Desc=@snmptrap.exe,-8|EmbedCtxt=@snmptrap.exe,-3| - Enabled - Microsoft Corporation
       SNMPTRAP-In-UDP-NoScope --> C:\Windows\System32\snmptrap.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=162|App=%SystemRoot%\system32\snmptrap.exe|Svc=SNMPTRAP|Name=@snmptrap.exe,-7|Desc=@snmptrap.exe,-8|EmbedCtxt=@snmptrap.exe,-3| - Enabled - Microsoft Corporation
       Wininit-Shutdown-In-Rule-TCP-RPC --> C:\Windows\System32\wininit.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=RPC|App=%systemroot%\system32\wininit.exe|Name=@firewallapi.dll,-36753|Desc=@firewallapi.dll,-36754|EmbedCtxt=@firewallapi.dll,-36751| - Enabled - Microsoft Corporation
       Wininit-Shutdown-In-Rule-TCP-RPC-EPMapper --> C:\Windows\System32\wininit.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=RPC-EPMap|App=%systemroot%\system32\wininit.exe|Name=@firewallapi.dll,-36755|Desc=@firewallapi.dll,-36756|EmbedCtxt=@firewallapi.dll,-36751| - Enabled - Microsoft Corporation
       PNRPMNRS-PNRP-In-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=3540|App=%SystemRoot%\system32\svchost.exe|Svc=PNRPSvc|Name=@FirewallAPI.dll,-34003|Desc=@FirewallAPI.dll,-34004|EmbedCtxt=@FirewallAPI.dll,-34002|Edge=TRUE|Defer=App| - Enabled - Microsoft Corporation
       PNRPMNRS-PNRP-Out-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=3540|App=%SystemRoot%\system32\svchost.exe|Svc=PNRPSvc|Name=@FirewallAPI.dll,-34005|Desc=@FirewallAPI.dll,-34006|EmbedCtxt=@FirewallAPI.dll,-34002| - Enabled - Microsoft Corporation
       PNRPMNRS-SSDPSrv-In-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-34007|Desc=@FirewallAPI.dll,-34008|EmbedCtxt=@FirewallAPI.dll,-34002| - Enabled - Microsoft Corporation
       PNRPMNRS-SSDPSrv-Out-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-34009|Desc=@FirewallAPI.dll,-34010|EmbedCtxt=@FirewallAPI.dll,-34002| - Enabled - Microsoft Corporation
       MsiScsi-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Svc=Msiscsi|Name=@FirewallAPI.dll,-29003|Desc=@FirewallAPI.dll,-29006|EmbedCtxt=@FirewallAPI.dll,-29002| - Enabled - Microsoft Corporation
       MsiScsi-Out-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Svc=Msiscsi|Name=@FirewallAPI.dll,-29007|Desc=@FirewallAPI.dll,-29010|EmbedCtxt=@FirewallAPI.dll,-29002| - Enabled - Microsoft Corporation
       MsiScsi-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Msiscsi|Name=@FirewallAPI.dll,-29003|Desc=@FirewallAPI.dll,-29006|EmbedCtxt=@FirewallAPI.dll,-29002| - Enabled - Microsoft Corporation
       MsiScsi-Out-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Msiscsi|Name=@FirewallAPI.dll,-29007|Desc=@FirewallAPI.dll,-29010|EmbedCtxt=@FirewallAPI.dll,-29002| - Enabled - Microsoft Corporation
       ProximityUxHost-Sharing-In-TCP-NoScope --> C:\Windows\System32\proximityuxhost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|App=%SystemRoot%\system32\proximityuxhost.exe|Name=@FirewallAPI.dll,-36252|Desc=@FirewallAPI.dll,-36253|EmbedCtxt=@FirewallAPI.dll,-36251|TTK=ProxSharing| - Enabled - Microsoft Corporation
       ProximityUxHost-Sharing-Out-TCP-NoScope --> C:\Windows\System32\proximityuxhost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|App=%SystemRoot%\system32\proximityuxhost.exe|Name=@FirewallAPI.dll,-36254|Desc=@FirewallAPI.dll,-36255|EmbedCtxt=@FirewallAPI.dll,-36251|TTK=ProxSharing| - Enabled - Microsoft Corporation
       NETDIS-UPnPHost-In-TCP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=2869|App=System|Name=@FirewallAPI.dll,-32761|Desc=@FirewallAPI.dll,-32764|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-UPnPHost-Out-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=2869|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32765|Desc=@FirewallAPI.dll,-32768|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-NB_Name-In-UDP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=137|App=System|Name=@FirewallAPI.dll,-32769|Desc=@FirewallAPI.dll,-32772|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Name-Out-UDP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=137|App=System|Name=@FirewallAPI.dll,-32773|Desc=@FirewallAPI.dll,-32776|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Datagram-In-UDP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=138|App=System|Name=@FirewallAPI.dll,-32777|Desc=@FirewallAPI.dll,-32780|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Datagram-Out-UDP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=138|App=System|Name=@FirewallAPI.dll,-32781|Desc=@FirewallAPI.dll,-32784|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-WSDEVNTS-In-TCP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5358|App=System|Name=@FirewallAPI.dll,-32813|Desc=@FirewallAPI.dll,-32814|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-WSDEVNTS-Out-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=5358|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32815|Desc=@FirewallAPI.dll,-32816|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-WSDEVNT-In-TCP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5357|App=System|Name=@FirewallAPI.dll,-32817|Desc=@FirewallAPI.dll,-32818|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-WSDEVNT-Out-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=5357|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32819|Desc=@FirewallAPI.dll,-32820|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-SSDPSrv-In-UDP-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32753|Desc=@FirewallAPI.dll,-32756|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-SSDPSrv-Out-UDP-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Private|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32757|Desc=@FirewallAPI.dll,-32760|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-UPnPHost-In-TCP-Active --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32761|Desc=@FirewallAPI.dll,-32764|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-UPnPHost-Out-TCP-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|RPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32765|Desc=@FirewallAPI.dll,-32768|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-UPnP-Out-TCP-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|RPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=upnphost|Name=@FirewallAPI.dll,-32821|Desc=@FirewallAPI.dll,-32822|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-NB_Name-In-UDP-Active --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|LPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32769|Desc=@FirewallAPI.dll,-32772|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Name-Out-UDP-Active --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Private|RPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32773|Desc=@FirewallAPI.dll,-32776|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Datagram-In-UDP-Active --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|LPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32777|Desc=@FirewallAPI.dll,-32780|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Datagram-Out-UDP-Active --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Private|RPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32781|Desc=@FirewallAPI.dll,-32784|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-FDPHOST-In-UDP-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32785|Desc=@FirewallAPI.dll,-32788|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-DAS-In-UDP-Active --> C:\Windows\System32\dasHost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\dashost.exe|Name=@FirewallAPI.dll,-32825|Desc=@FirewallAPI.dll,-32826|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-FDPHOST-Out-UDP-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Private|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32789|Desc=@FirewallAPI.dll,-32792|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-LLMNR-In-UDP-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-32801|Desc=@FirewallAPI.dll,-32804|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-LLMNR-Out-UDP-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Private|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-32805|Desc=@FirewallAPI.dll,-32808|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-FDRESPUB-WSD-In-UDP-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdrespub|Name=@FirewallAPI.dll,-32809|Desc=@FirewallAPI.dll,-32810|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-FDRESPUB-WSD-Out-UDP-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Private|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdrespub|Name=@FirewallAPI.dll,-32811|Desc=@FirewallAPI.dll,-32812|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-WSDEVNTS-In-TCP-Active --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|LPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32813|Desc=@FirewallAPI.dll,-32814|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-WSDEVNTS-Out-TCP-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|RPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32815|Desc=@FirewallAPI.dll,-32816|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-WSDEVNT-In-TCP-Active --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|LPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32817|Desc=@FirewallAPI.dll,-32818|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-WSDEVNT-Out-TCP-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|RPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32819|Desc=@FirewallAPI.dll,-32820|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-SSDPSrv-In-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32753|Desc=@FirewallAPI.dll,-32756|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-SSDPSrv-Out-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32757|Desc=@FirewallAPI.dll,-32760|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-UPnP-Out-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=upnphost|Name=@FirewallAPI.dll,-32821|Desc=@FirewallAPI.dll,-32822|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-UPnPHost-In-TCP --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32761|Desc=@FirewallAPI.dll,-32764|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-UPnPHost-Out-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32765|Desc=@FirewallAPI.dll,-32768|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-NB_Name-In-UDP --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32769|Desc=@FirewallAPI.dll,-32772|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Name-Out-UDP --> System - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32773|Desc=@FirewallAPI.dll,-32776|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Datagram-In-UDP --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32777|Desc=@FirewallAPI.dll,-32780|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Datagram-Out-UDP --> System - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32781|Desc=@FirewallAPI.dll,-32784|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-FDPHOST-In-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32785|Desc=@FirewallAPI.dll,-32788|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-DAS-In-UDP --> C:\Windows\System32\dasHost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\dashost.exe|Name=@FirewallAPI.dll,-32825|Desc=@FirewallAPI.dll,-32826|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-FDPHOST-Out-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32789|Desc=@FirewallAPI.dll,-32792|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-LLMNR-In-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-32801|Desc=@FirewallAPI.dll,-32804|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-LLMNR-Out-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-32805|Desc=@FirewallAPI.dll,-32808|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-FDRESPUB-WSD-In-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdrespub|Name=@FirewallAPI.dll,-32809|Desc=@FirewallAPI.dll,-32810|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-FDRESPUB-WSD-Out-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdrespub|Name=@FirewallAPI.dll,-32811|Desc=@FirewallAPI.dll,-32812|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-WSDEVNTS-In-TCP --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32813|Desc=@FirewallAPI.dll,-32814|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-WSDEVNTS-Out-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32815|Desc=@FirewallAPI.dll,-32816|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-WSDEVNT-In-TCP --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32817|Desc=@FirewallAPI.dll,-32818|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-WSDEVNT-Out-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32819|Desc=@FirewallAPI.dll,-32820|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       EventForwarder-In-TCP --> C:\Windows\System32\NetEvtFwdr.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=RPC|App=%SystemRoot%\system32\NetEvtFwdr.exe|Name=@FirewallAPI.dll,-36802|Desc=@FirewallAPI.dll,-36803|EmbedCtxt=@FirewallAPI.dll,-36801| - Enabled - Microsoft Corporation
       EventForwarder-RPCSS-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-36804|Desc=@FirewallAPI.dll,-36805|EmbedCtxt=@FirewallAPI.dll,-36801| - Enabled - Microsoft Corporation
       RemoteFwAdmin-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\svchost.exe|Svc=policyagent|Name=@FirewallAPI.dll,-30003|Desc=@FirewallAPI.dll,-30006|EmbedCtxt=@FirewallAPI.dll,-30002| - Enabled - Microsoft Corporation
       RemoteFwAdmin-RPCSS-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-30007|Desc=@FirewallAPI.dll,-30010|EmbedCtxt=@FirewallAPI.dll,-30002| - Enabled - Microsoft Corporation
       RemoteFwAdmin-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=policyagent|Name=@FirewallAPI.dll,-30003|Desc=@FirewallAPI.dll,-30006|EmbedCtxt=@FirewallAPI.dll,-30002| - Enabled - Microsoft Corporation
       RemoteFwAdmin-RPCSS-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-30007|Desc=@FirewallAPI.dll,-30010|EmbedCtxt=@FirewallAPI.dll,-30002| - Enabled - Microsoft Corporation
       TPMVSCMGR-RPCSS-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%SystemRoot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-36502|Desc=@FirewallAPI.dll,-36503|EmbedCtxt=@FirewallAPI.dll,-36501| - Enabled - Microsoft Corporation
       TPMVSCMGR-Server-In-TCP-NoScope --> C:\Windows\System32\RmtTpmVscMgrSvr.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\RmtTpmVscMgrSvr.exe|Name=@FirewallAPI.dll,-36504|Desc=@FirewallAPI.dll,-36505|EmbedCtxt=@FirewallAPI.dll,-36501| - Enabled - Microsoft Corporation
       TPMVSCMGR-Server-Out-TCP-NoScope --> C:\Windows\System32\RmtTpmVscMgrSvr.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\RmtTpmVscMgrSvr.exe|Name=@FirewallAPI.dll,-36506|Desc=@FirewallAPI.dll,-36507|EmbedCtxt=@FirewallAPI.dll,-36501| - Enabled - Microsoft Corporation
       TPMVSCMGR-RPCSS-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=135|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-36502|Desc=@FirewallAPI.dll,-36503|EmbedCtxt=@FirewallAPI.dll,-36501| - Enabled - Microsoft Corporation
       TPMVSCMGR-Server-In-TCP --> C:\Windows\System32\RmtTpmVscMgrSvr.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\RmtTpmVscMgrSvr.exe|Name=@FirewallAPI.dll,-36504|Desc=@FirewallAPI.dll,-36505|EmbedCtxt=@FirewallAPI.dll,-36501| - Enabled - Microsoft Corporation
       TPMVSCMGR-Server-Out-TCP --> C:\Windows\System32\RmtTpmVscMgrSvr.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\RmtTpmVscMgrSvr.exe|Name=@FirewallAPI.dll,-36506|Desc=@FirewallAPI.dll,-36507|EmbedCtxt=@FirewallAPI.dll,-36501| - Enabled - Microsoft Corporation
       Netlogon-NamedPipe-In --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=445|App=System|Name=@netlogon.dll,-1003|Desc=@netlogon.dll,-1006|EmbedCtxt=@netlogon.dll,-1010| - Enabled - 
       Netlogon-TCP-RPC-In --> C:\Windows\System32\lsass.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=RPC|App=%SystemRoot%\System32\lsass.exe|Name=@netlogon.dll,-1008|Desc=@netlogon.dll,-1009|EmbedCtxt=@netlogon.dll,-1010| - Enabled - Microsoft Corporation
       Collab-P2PHost-In-TCP --> C:\WINDOWS\system32\p2phost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|App=%SystemRoot%\system32\p2phost.exe|Name=@FirewallAPI.dll,-32003|Desc=@FirewallAPI.dll,-32006|EmbedCtxt=@FirewallAPI.dll,-32002|Edge=TRUE|Defer=App| - Enabled - File not found
       Collab-P2PHost-Out-TCP --> C:\WINDOWS\system32\p2phost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|App=%SystemRoot%\system32\p2phost.exe|Name=@FirewallAPI.dll,-32007|Desc=@FirewallAPI.dll,-32010|EmbedCtxt=@FirewallAPI.dll,-32002| - Enabled - File not found
       Collab-P2PHost-WSD-In-UDP --> C:\WINDOWS\system32\p2phost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\p2phost.exe|Name=@FirewallAPI.dll,-32011|Desc=@FirewallAPI.dll,-32014|EmbedCtxt=@FirewallAPI.dll,-32002| - Enabled - File not found
       Collab-P2PHost-WSD-Out-UDP --> C:\WINDOWS\system32\p2phost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\p2phost.exe|Name=@FirewallAPI.dll,-32015|Desc=@FirewallAPI.dll,-32018|EmbedCtxt=@FirewallAPI.dll,-32002| - Enabled - File not found
       Collab-PNRP-In-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=3540|App=%SystemRoot%\system32\svchost.exe|Svc=PNRPSvc|Name=@FirewallAPI.dll,-32019|Desc=@FirewallAPI.dll,-32022|EmbedCtxt=@FirewallAPI.dll,-32002|Edge=TRUE|Defer=App| - Enabled - Microsoft Corporation
       Collab-PNRP-Out-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=3540|App=%SystemRoot%\system32\svchost.exe|Svc=PNRPSvc|Name=@FirewallAPI.dll,-32023|Desc=@FirewallAPI.dll,-32026|EmbedCtxt=@FirewallAPI.dll,-32002| - Enabled - Microsoft Corporation
       Collab-PNRP-SSDPSrv-In-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32027|Desc=@FirewallAPI.dll,-32030|EmbedCtxt=@FirewallAPI.dll,-32002| - Enabled - Microsoft Corporation
       Collab-PNRP-SSDPSrv-Out-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32031|Desc=@FirewallAPI.dll,-32034|EmbedCtxt=@FirewallAPI.dll,-32002| - Enabled - Microsoft Corporation
       WirelessDisplay-In-TCP --> C:\Windows\System32\WUDFHost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|Profile=Public|App=%systemroot%\system32\WUDFHost.exe|Name=@wifidisplay.dll,-10200|Desc=@wifidisplay.dll,-10201|LUAuth=O:LSD:(A;;CC;;;S-1-5-84-0-0-0-0-0)|EmbedCtxt=@wifidisplay.dll,-100|TTK2_22=WFDDisplay| - Enabled - Microsoft Corporation
       WirelessDisplay-Out-TCP --> C:\Windows\System32\WUDFHost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|App=%systemroot%\system32\WUDFHost.exe|Name=@wifidisplay.dll,-10202|Desc=@wifidisplay.dll,-10203|LUAuth=O:LSD:(A;;CC;;;S-1-5-84-0-0-0-0-0)|EmbedCtxt=@wifidisplay.dll,-100|TTK2_22=WFDDisplay| - Enabled - Microsoft Corporation
       WirelessDisplay-Out-UDP --> C:\Windows\System32\WUDFHost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|Profile=Public|App=%systemroot%\system32\WUDFHost.exe|Name=@wifidisplay.dll,-10204|Desc=@wifidisplay.dll,-10205|LUAuth=O:LSD:(A;;CC;;;S-1-5-84-0-0-0-0-0)|EmbedCtxt=@wifidisplay.dll,-100|TTK2_22=WFDDisplay| - Enabled - Microsoft Corporation
       WMI-RPCSS-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%SystemRoot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-34252|Desc=@FirewallAPI.dll,-34253|EmbedCtxt=@FirewallAPI.dll,-34251| - Enabled - Microsoft Corporation
       WMI-WINMGMT-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Svc=winmgmt|Name=@FirewallAPI.dll,-34254|Desc=@FirewallAPI.dll,-34255|EmbedCtxt=@FirewallAPI.dll,-34251| - Enabled - Microsoft Corporation
       WMI-WINMGMT-Out-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Svc=winmgmt|Name=@FirewallAPI.dll,-34258|Desc=@FirewallAPI.dll,-34259|EmbedCtxt=@FirewallAPI.dll,-34251| - Enabled - Microsoft Corporation
       WMI-ASYNC-In-TCP-NoScope --> C:\Windows\System32\wbem\unsecapp.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%systemroot%\system32\wbem\unsecapp.exe|Name=@FirewallAPI.dll,-34256|Desc=@FirewallAPI.dll,-34257|EmbedCtxt=@FirewallAPI.dll,-34251| - Enabled - Microsoft Corporation
       WMI-RPCSS-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=135|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-34252|Desc=@FirewallAPI.dll,-34253|EmbedCtxt=@FirewallAPI.dll,-34251| - Enabled - Microsoft Corporation
       WMI-WINMGMT-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=winmgmt|Name=@FirewallAPI.dll,-34254|Desc=@FirewallAPI.dll,-34255|EmbedCtxt=@FirewallAPI.dll,-34251| - Enabled - Microsoft Corporation
       WMI-WINMGMT-Out-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=winmgmt|Name=@FirewallAPI.dll,-34258|Desc=@FirewallAPI.dll,-34259|EmbedCtxt=@FirewallAPI.dll,-34251| - Enabled - Microsoft Corporation
       WMI-ASYNC-In-TCP --> C:\Windows\System32\wbem\unsecapp.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\wbem\unsecapp.exe|Name=@FirewallAPI.dll,-34256|Desc=@FirewallAPI.dll,-34257|EmbedCtxt=@FirewallAPI.dll,-34251| - Enabled - Microsoft Corporation
       FPS-NB_Session-In-TCP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=139|App=System|Name=@FirewallAPI.dll,-28503|Desc=@FirewallAPI.dll,-28506|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Session-Out-TCP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=139|App=System|Name=@FirewallAPI.dll,-28507|Desc=@FirewallAPI.dll,-28510|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-SMB-In-TCP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=445|App=System|Name=@FirewallAPI.dll,-28511|Desc=@FirewallAPI.dll,-28514|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-SMB-Out-TCP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=445|App=System|Name=@FirewallAPI.dll,-28515|Desc=@FirewallAPI.dll,-28518|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Name-In-UDP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=137|App=System|Name=@FirewallAPI.dll,-28519|Desc=@FirewallAPI.dll,-28522|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Name-Out-UDP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=137|App=System|Name=@FirewallAPI.dll,-28523|Desc=@FirewallAPI.dll,-28526|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Datagram-In-UDP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=138|App=System|Name=@FirewallAPI.dll,-28527|Desc=@FirewallAPI.dll,-28530|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Datagram-Out-UDP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=138|App=System|Name=@FirewallAPI.dll,-28531|Desc=@FirewallAPI.dll,-28534|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-SpoolSvc-In-TCP-NoScope --> C:\Windows\System32\spoolsv.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\spoolsv.exe|Svc=Spooler|Name=@FirewallAPI.dll,-28535|Desc=@FirewallAPI.dll,-28538|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - Microsoft Corporation
       FPS-RPCSS-In-TCP-NoScope - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|Svc=Rpcss|Name=@FirewallAPI.dll,-28539|Desc=@FirewallAPI.dll,-28542|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP4-ERQ-In-NoScope - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=1|Profile=Domain|ICMP4=8:*|Name=@FirewallAPI.dll,-28543|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP4-ERQ-Out-NoScope - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=1|Profile=Domain|ICMP4=8:*|Name=@FirewallAPI.dll,-28544|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP6-ERQ-In-NoScope - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=58|Profile=Domain|ICMP6=128:*|Name=@FirewallAPI.dll,-28545|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP6-ERQ-Out-NoScope - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=128:*|Name=@FirewallAPI.dll,-28546|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Session-In-TCP --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=139|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28503|Desc=@FirewallAPI.dll,-28506|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Session-Out-TCP --> System - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RPort=139|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28507|Desc=@FirewallAPI.dll,-28510|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-SMB-In-TCP --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28511|Desc=@FirewallAPI.dll,-28514|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-SMB-Out-TCP --> System - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|RPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28515|Desc=@FirewallAPI.dll,-28518|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Name-In-UDP --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28519|Desc=@FirewallAPI.dll,-28522|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Name-Out-UDP --> System - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28523|Desc=@FirewallAPI.dll,-28526|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Datagram-In-UDP --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28527|Desc=@FirewallAPI.dll,-28530|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Datagram-Out-UDP --> System - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28531|Desc=@FirewallAPI.dll,-28534|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-SpoolSvc-In-TCP --> C:\Windows\System32\spoolsv.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\spoolsv.exe|Svc=Spooler|Name=@FirewallAPI.dll,-28535|Desc=@FirewallAPI.dll,-28538|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - Microsoft Corporation
       FPS-RPCSS-In-TCP - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|Svc=Rpcss|Name=@FirewallAPI.dll,-28539|Desc=@FirewallAPI.dll,-28542|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP4-ERQ-In - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=1|Profile=Public|ICMP4=8:*|RA4=LocalSubnet|Name=@FirewallAPI.dll,-28543|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP4-ERQ-Out - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=1|Profile=Public|ICMP4=8:*|RA4=LocalSubnet|Name=@FirewallAPI.dll,-28544|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP6-ERQ-In - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Public|ICMP6=128:*|RA6=LocalSubnet|Name=@FirewallAPI.dll,-28545|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP6-ERQ-Out - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Public|ICMP6=128:*|RA6=LocalSubnet|Name=@FirewallAPI.dll,-28546|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-LLMNR-In-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-28548|Desc=@FirewallAPI.dll,-28549|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - Microsoft Corporation
       FPS-LLMNR-Out-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-28550|Desc=@FirewallAPI.dll,-28551|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - Microsoft Corporation
       WINRM-HTTP-In-TCP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|Profile=Private|LPort=5985|App=System|Name=@FirewallAPI.dll,-30253|Desc=@FirewallAPI.dll,-30256|EmbedCtxt=@FirewallAPI.dll,-30267| - Enabled - 
       WINRM-HTTP-In-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|LPort=5985|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-30253|Desc=@FirewallAPI.dll,-30256|EmbedCtxt=@FirewallAPI.dll,-30267| - Enabled - 
       WINRM-HTTP-Compat-In-TCP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=80|App=System|Name=@FirewallAPI.dll,-35001|Desc=@FirewallAPI.dll,-35002|EmbedCtxt=@FirewallAPI.dll,-30252| - Enabled - 
       WINRM-HTTP-Compat-In-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=80|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-35001|Desc=@FirewallAPI.dll,-35002|EmbedCtxt=@FirewallAPI.dll,-30252| - Enabled - 
       SSTP-IN-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=443|App=System|Name=@sstpsvc.dll,-35002|Desc=@sstpsvc.dll,-35003|EmbedCtxt=@sstpsvc.dll,-35001| - Enabled - 
       Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=3587|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\svchost.exe|Svc=p2psvc|Name=@%systemroot%\system32\provsvc.dll,-200|Desc=@%systemroot%\system32\provsvc.dll,-201|EmbedCtxt=@%systemroot%\system32\provsvc.dll,-202| - Enabled - Microsoft Corporation
       Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=3587|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\svchost.exe|Svc=p2psvc|Name=@%systemroot%\system32\provsvc.dll,-203|Desc=@%systemroot%\system32\provsvc.dll,-204|EmbedCtxt=@%systemroot%\system32\provsvc.dll,-202| - Enabled - Microsoft Corporation
       Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=3540|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\svchost.exe|Svc=pnrpsvc|Name=@%systemroot%\system32\provsvc.dll,-205|Desc=@%systemroot%\system32\provsvc.dll,-206|EmbedCtxt=@%systemroot%\system32\provsvc.dll,-202| - Enabled - Microsoft Corporation
       Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=3540|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\svchost.exe|Svc=pnrpsvc|Name=@%systemroot%\system32\provsvc.dll,-207|Desc=@%systemroot%\system32\provsvc.dll,-208|EmbedCtxt=@%systemroot%\system32\provsvc.dll,-202| - Enabled - Microsoft Corporation
       RemoteAssistance-In-TCP-EdgeScope --> C:\Windows\System32\msra.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|App=%SystemRoot%\system32\msra.exe|Name=@FirewallAPI.dll,-33003|Desc=@FirewallAPI.dll,-33006|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=TRUE|Defer=App| - Enabled - Microsoft Corporation
       RemoteAssistance-Out-TCP --> C:\Windows\System32\msra.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|App=%SystemRoot%\system32\msra.exe|Name=@FirewallAPI.dll,-33007|Desc=@FirewallAPI.dll,-33010|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-PnrpSvc-UDP-In-EdgeScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Public|LPort=3540|App=%systemroot%\system32\svchost.exe|Svc=pnrpsvc|Name=@FirewallAPI.dll,-33039|Desc=@FirewallAPI.dll,-33040|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=TRUE|Defer=App| - Enabled - Microsoft Corporation
       RemoteAssistance-PnrpSvc-UDP-OUT --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Public|App=%systemroot%\system32\svchost.exe|Svc=pnrpsvc|Name=@FirewallAPI.dll,-33037|Desc=@FirewallAPI.dll,-33038|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-RAServer-In-TCP-NoScope-Active --> C:\Windows\System32\raserver.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\raserver.exe|Name=@FirewallAPI.dll,-33011|Desc=@FirewallAPI.dll,-33014|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-RAServer-Out-TCP-NoScope-Active --> C:\Windows\System32\raserver.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\raserver.exe|Name=@FirewallAPI.dll,-33015|Desc=@FirewallAPI.dll,-33018|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-DCOM-In-TCP-NoScope-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%SystemRoot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-33035|Desc=@FirewallAPI.dll,-33036|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-In-TCP-EdgeScope-Active --> C:\Windows\System32\msra.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|Profile=Private|App=%SystemRoot%\system32\msra.exe|Name=@FirewallAPI.dll,-33003|Desc=@FirewallAPI.dll,-33006|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=TRUE|Defer=App| - Enabled - Microsoft Corporation
       RemoteAssistance-Out-TCP-Active --> C:\Windows\System32\msra.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Private|App=%SystemRoot%\system32\msra.exe|Name=@FirewallAPI.dll,-33007|Desc=@FirewallAPI.dll,-33010|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-SSDPSrv-In-UDP-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Private|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-33019|Desc=@FirewallAPI.dll,-33022|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-SSDPSrv-Out-UDP-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Private|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-33023|Desc=@FirewallAPI.dll,-33026|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-SSDPSrv-In-TCP-Active --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|Profile=Private|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-33027|Desc=@FirewallAPI.dll,-33030|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - 
       RemoteAssistance-SSDPSrv-Out-TCP-Active --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-33031|Desc=@FirewallAPI.dll,-33034|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - 
       RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Private|LPort=3540|App=%systemroot%\system32\svchost.exe|Svc=pnrpsvc|Name=@FirewallAPI.dll,-33039|Desc=@FirewallAPI.dll,-33040|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=TRUE|Defer=App| - Enabled - Microsoft Corporation
       RemoteAssistance-PnrpSvc-UDP-OUT-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Private|App=%systemroot%\system32\svchost.exe|Svc=pnrpsvc|Name=@FirewallAPI.dll,-33037|Desc=@FirewallAPI.dll,-33038|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       MSDTC-In-TCP-NoScope --> C:\Windows\System32\msdtc.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\msdtc.exe|Name=@FirewallAPI.dll,-33503|Desc=@FirewallAPI.dll,-33506|EmbedCtxt=@FirewallAPI.dll,-33502| - Enabled - Microsoft Corporation
       MSDTC-Out-TCP-NoScope --> C:\Windows\System32\msdtc.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\msdtc.exe|Name=@FirewallAPI.dll,-33507|Desc=@FirewallAPI.dll,-33510|EmbedCtxt=@FirewallAPI.dll,-33502| - Enabled - Microsoft Corporation
       MSDTC-KTMRM-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\svchost.exe|Svc=ktmrm|Name=@FirewallAPI.dll,-33511|Desc=@FirewallAPI.dll,-33512|EmbedCtxt=@FirewallAPI.dll,-33502| - Enabled - Microsoft Corporation
       MSDTC-RPCSS-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-33513|Desc=@FirewallAPI.dll,-33514|EmbedCtxt=@FirewallAPI.dll,-33502| - Enabled - Microsoft Corporation
       MSDTC-In-TCP --> C:\Windows\System32\msdtc.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\msdtc.exe|Name=@FirewallAPI.dll,-33503|Desc=@FirewallAPI.dll,-33506|EmbedCtxt=@FirewallAPI.dll,-33502| - Enabled - Microsoft Corporation
       MSDTC-Out-TCP --> C:\Windows\System32\msdtc.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\msdtc.exe|Name=@FirewallAPI.dll,-33507|Desc=@FirewallAPI.dll,-33510|EmbedCtxt=@FirewallAPI.dll,-33502| - Enabled - Microsoft Corporation
       MSDTC-KTMRM-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=ktmrm|Name=@FirewallAPI.dll,-33511|Desc=@FirewallAPI.dll,-33512|EmbedCtxt=@FirewallAPI.dll,-33502| - Enabled - Microsoft Corporation
       MSDTC-RPCSS-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-33513|Desc=@FirewallAPI.dll,-33514|EmbedCtxt=@FirewallAPI.dll,-33502| - Enabled - Microsoft Corporation
       WMPNSS-QWave-In-UDP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=2177|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31253|Desc=@FirewallAPI.dll,-31256|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-QWave-Out-UDP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=2177|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31257|Desc=@FirewallAPI.dll,-31260|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-QWave-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=2177|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31261|Desc=@FirewallAPI.dll,-31264|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-QWave-Out-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=2177|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31265|Desc=@FirewallAPI.dll,-31268|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-HTTPSTR-In-TCP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=10243|App=System|Name=@FirewallAPI.dll,-31285|Desc=@FirewallAPI.dll,-31288|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - 
       WMPNSS-HTTPSTR-Out-TCP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=10243|App=System|Name=@FirewallAPI.dll,-31289|Desc=@FirewallAPI.dll,-31292|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - 
       WMPNSS-WMP-In-UDP-NoScope --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|App=%PROGRAMFILES%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31293|Desc=@FirewallAPI.dll,-31296|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-WMP-Out-UDP-NoScope --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|App=%PROGRAMFILES%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31297|Desc=@FirewallAPI.dll,-31300|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-WMP-Out-TCP-NoScope --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%PROGRAMFILES%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31301|Desc=@FirewallAPI.dll,-31304|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-In-UDP-NoScope --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31305|Desc=@FirewallAPI.dll,-31308|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-Out-UDP-NoScope --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31309|Desc=@FirewallAPI.dll,-31312|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-In-TCP-NoScope --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31313|Desc=@FirewallAPI.dll,-31316|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-Out-TCP-NoScope --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31317|Desc=@FirewallAPI.dll,-31320|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-QWave-In-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Public|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31253|Desc=@FirewallAPI.dll,-31256|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-QWave-Out-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Public|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31257|Desc=@FirewallAPI.dll,-31260|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-QWave-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31261|Desc=@FirewallAPI.dll,-31264|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-QWave-Out-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31265|Desc=@FirewallAPI.dll,-31268|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-SSDPSrv-In-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Public|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=ssdpsrv|Name=@FirewallAPI.dll,-31269|Desc=@FirewallAPI.dll,-31272|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-SSDPSrv-Out-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Public|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=ssdpsrv|Name=@FirewallAPI.dll,-31273|Desc=@FirewallAPI.dll,-31276|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-UPnPHost-In-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|Profile=Public|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31277|Desc=@FirewallAPI.dll,-31280|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - 
       WMPNSS-UPnPHost-Out-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31281|Desc=@FirewallAPI.dll,-31284|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - 
       WMPNSS-HTTPSTR-In-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|LPort=10243|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31285|Desc=@FirewallAPI.dll,-31288|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - 
       WMPNSS-HTTPSTR-Out-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|RPort=10243|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31289|Desc=@FirewallAPI.dll,-31292|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - 
       WMPNSS-WMP-In-UDP --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31293|Desc=@FirewallAPI.dll,-31296|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-WMP-Out-UDP --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31297|Desc=@FirewallAPI.dll,-31300|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-WMP-Out-TCP --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31301|Desc=@FirewallAPI.dll,-31304|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-In-UDP --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31305|Desc=@FirewallAPI.dll,-31308|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-Out-UDP --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31309|Desc=@FirewallAPI.dll,-31312|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-In-TCP --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31313|Desc=@FirewallAPI.dll,-31316|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-Out-TCP --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31317|Desc=@FirewallAPI.dll,-31320|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-UPnP-Out-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=upnphost|Name=@FirewallAPI.dll,-31321|Desc=@FirewallAPI.dll,-31322|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-RME-HTTP-In-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|Profile=Private|LPort=10245|App=System|Name=@FirewallAPI.dll,-31501|Desc=@FirewallAPI.dll,-31502|EmbedCtxt=@FirewallAPI.dll,-31500|Edge=TRUE|Defer=App| - Enabled - 
       RemoteEventLogSvc-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\svchost.exe|Svc=Eventlog|Name=@FirewallAPI.dll,-29253|Desc=@FirewallAPI.dll,-29256|EmbedCtxt=@FirewallAPI.dll,-29252| - Enabled - Microsoft Corporation
       RemoteEventLogSvc-NP-In-TCP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=445|App=System|Name=@FirewallAPI.dll,-29257|Desc=@FirewallAPI.dll,-29260|EmbedCtxt=@FirewallAPI.dll,-29252| - Enabled - 
       RemoteEventLogSvc-RPCSS-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-29265|Desc=@FirewallAPI.dll,-29268|EmbedCtxt=@FirewallAPI.dll,-29252| - Enabled - Microsoft Corporation
       RemoteEventLogSvc-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Eventlog|Name=@FirewallAPI.dll,-29253|Desc=@FirewallAPI.dll,-29256|EmbedCtxt=@FirewallAPI.dll,-29252| - Enabled - Microsoft Corporation
       RemoteEventLogSvc-NP-In-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-29257|Desc=@FirewallAPI.dll,-29260|EmbedCtxt=@FirewallAPI.dll,-29252| - Enabled - 
       RemoteEventLogSvc-RPCSS-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-29265|Desc=@FirewallAPI.dll,-29268|EmbedCtxt=@FirewallAPI.dll,-29252| - Enabled - Microsoft Corporation
       RemoteTask-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\svchost.exe|Svc=schedule|Name=@FirewallAPI.dll,-33253|Desc=@FirewallAPI.dll,-33256|EmbedCtxt=@FirewallAPI.dll,-33252| - Enabled - Microsoft Corporation
       RemoteTask-RPCSS-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-33257|Desc=@FirewallAPI.dll,-33260|EmbedCtxt=@FirewallAPI.dll,-33252| - Enabled - Microsoft Corporation
       RemoteTask-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=schedule|Name=@FirewallAPI.dll,-33253|Desc=@FirewallAPI.dll,-33256|EmbedCtxt=@FirewallAPI.dll,-33252| - Enabled - Microsoft Corporation
       RemoteTask-RPCSS-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-33257|Desc=@FirewallAPI.dll,-33260|EmbedCtxt=@FirewallAPI.dll,-33252| - Enabled - Microsoft Corporation
       RVM-VDS-In-TCP-NoScope --> C:\Windows\System32\vds.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\vds.exe|Svc=vds|Name=@FirewallAPI.dll,-34502|Desc=@FirewallAPI.dll,-34503|EmbedCtxt=@FirewallAPI.dll,-34501| - Enabled - Microsoft Corporation
       RVM-VDSLDR-In-TCP-NoScope --> C:\Windows\System32\vdsldr.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\vdsldr.exe|Name=@FirewallAPI.dll,-34504|Desc=@FirewallAPI.dll,-34505|EmbedCtxt=@FirewallAPI.dll,-34501| - Enabled - Microsoft Corporation
       RVM-RPCSS-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-34506|Desc=@FirewallAPI.dll,-34507|EmbedCtxt=@FirewallAPI.dll,-34501| - Enabled - Microsoft Corporation
       RVM-VDS-In-TCP --> C:\Windows\System32\vds.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\vds.exe|Svc=vds|Name=@FirewallAPI.dll,-34502|Desc=@FirewallAPI.dll,-34503|EmbedCtxt=@FirewallAPI.dll,-34501| - Enabled - Microsoft Corporation
       RVM-VDSLDR-In-TCP --> C:\Windows\System32\vdsldr.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\vdsldr.exe|Name=@FirewallAPI.dll,-34504|Desc=@FirewallAPI.dll,-34505|EmbedCtxt=@FirewallAPI.dll,-34501| - Enabled - Microsoft Corporation
       RVM-RPCSS-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-34506|Desc=@FirewallAPI.dll,-34507|EmbedCtxt=@FirewallAPI.dll,-34501| - Enabled - Microsoft Corporation
       PlayTo-HTTPSTR-In-TCP-NoScope --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=10246|App=System|Name=@FirewallAPI.dll,-36002|Desc=@FirewallAPI.dll,-36003|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - 
       PlayTo-HTTPSTR-In-TCP-LocalSubnetScope --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=10246|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-36002|Desc=@FirewallAPI.dll,-36003|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - 
       PlayTo-HTTPSTR-In-TCP-PlayToScope --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=10246|RA42=Ply2Renders|RA62=Ply2Renders|App=System|Name=@FirewallAPI.dll,-36002|Desc=@FirewallAPI.dll,-36003|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - 
       PlayTo-In-UDP-NoScope --> C:\Windows\System32\mdeserver.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|App=%SystemRoot%\system32\mdeserver.exe|Name=@FirewallAPI.dll,-36004|Desc=@FirewallAPI.dll,-36005|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - Microsoft Corporation
       PlayTo-In-UDP-LocalSubnetScope --> C:\Windows\System32\mdeserver.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\mdeserver.exe|Name=@FirewallAPI.dll,-36004|Desc=@FirewallAPI.dll,-36005|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - Microsoft Corporation
       PlayTo-In-UDP-PlayToScope --> C:\Windows\System32\mdeserver.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|RA42=Ply2Renders|RA62=Ply2Renders|App=%SystemRoot%\system32\mdeserver.exe|Name=@FirewallAPI.dll,-36004|Desc=@FirewallAPI.dll,-36005|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - Microsoft Corporation
       PlayTo-Out-UDP-NoScope --> C:\Windows\System32\mdeserver.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|App=%SystemRoot%\system32\mdeserver.exe|Name=@FirewallAPI.dll,-36006|Desc=@FirewallAPI.dll,-36007|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - Microsoft Corporation
       PlayTo-Out-UDP-LocalSubnetScope --> C:\Windows\System32\mdeserver.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\mdeserver.exe|Name=@FirewallAPI.dll,-36006|Desc=@FirewallAPI.dll,-36007|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - Microsoft Corporation
       PlayTo-Out-UDP-PlayToScope --> C:\Windows\System32\mdeserver.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RA42=Ply2Renders|RA62=Ply2Renders|App=%SystemRoot%\system32\mdeserver.exe|Name=@FirewallAPI.dll,-36006|Desc=@FirewallAPI.dll,-36007|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - Microsoft Corporation
       PlayTo-In-RTSP-NoScope --> C:\Windows\System32\mdeserver.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=23554|LPort=23555|LPort=23556|App=%SystemRoot%\system32\mdeserver.exe|Name=@FirewallAPI.dll,-36008|Desc=@FirewallAPI.dll,-36009|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - Microsoft Corporation
       PlayTo-In-RTSP-LocalSubnetScope --> C:\Windows\System32\mdeserver.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=23554|LPort=23555|LPort=23556|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\mdeserver.exe|Name=@FirewallAPI.dll,-36008|Desc=@FirewallAPI.dll,-36009|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - Microsoft Corporation
       PlayTo-In-RTSP-PlayToScope --> C:\Windows\System32\mdeserver.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=23554|LPort=23555|LPort=23556|RA42=Ply2Renders|RA62=Ply2Renders|App=%SystemRoot%\system32\mdeserver.exe|Name=@FirewallAPI.dll,-36008|Desc=@FirewallAPI.dll,-36009|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - Microsoft Corporation
       PlayTo-SSDP-Discovery-PlayToScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort2_20=Ply2Disc|App=%SystemRoot%\system32\svchost.exe|Svc=ssdpsrv|Name=@FirewallAPI.dll,-36104|Desc=@FirewallAPI.dll,-36105|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - Microsoft Corporation
       PlayTo-UPnP-Events-PlayToScope --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=2869|RA42=Ply2Renders|RA62=Ply2Renders|App=System|Name=@FirewallAPI.dll,-36106|Desc=@FirewallAPI.dll,-36107|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - 
       PlayTo-QWave-In-UDP-PlayToScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|Profile=Public|LPort=2177|RA42=Ply2Renders|RA62=Ply2Renders|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-36010|Desc=@FirewallAPI.dll,-36011|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - Microsoft Corporation
       PlayTo-QWave-Out-UDP-PlayToScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|Profile=Public|RPort=2177|RA42=Ply2Renders|RA62=Ply2Renders|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-36012|Desc=@FirewallAPI.dll,-36013|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - Microsoft Corporation
       PlayTo-QWave-In-TCP-PlayToScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=2177|RA42=Ply2Renders|RA62=Ply2Renders|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-36014|Desc=@FirewallAPI.dll,-36015|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - Microsoft Corporation
       PlayTo-QWave-Out-TCP-PlayToScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RPort=2177|RA42=Ply2Renders|RA62=Ply2Renders|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-36016|Desc=@FirewallAPI.dll,-36017|EmbedCtxt=@FirewallAPI.dll,-36001| - Enabled - Microsoft Corporation
       WFDPRINT-DAFWSD-In-Active --> C:\Windows\System32\dasHost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Profile=Public|App=%SystemRoot%\system32\dashost.exe|Name=@FirewallAPI.dll,-36852|Desc=@FirewallAPI.dll,-36853|LUAuth=O:LSD:(A;;CC;;;S-1-5-92-3339056971-1291069075-3798698925-2882100687-0)|EmbedCtxt=@FirewallAPI.dll,-36851|TTK2_22=WFDPrint| - Enabled - Microsoft Corporation
       WFDPRINT-DAFWSD-Out-Active --> C:\Windows\System32\dasHost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Public|App=%SystemRoot%\system32\dashost.exe|Name=@FirewallAPI.dll,-36854|Desc=@FirewallAPI.dll,-36855|LUAuth=O:LSD:(A;;CC;;;S-1-5-92-3339056971-1291069075-3798698925-2882100687-0)|EmbedCtxt=@FirewallAPI.dll,-36851|TTK2_22=WFDPrint| - Enabled - Microsoft Corporation
       WFDPRINT-SPOOL-In-Active --> C:\Windows\System32\spoolsv.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Profile=Public|App=%SystemRoot%\system32\spoolsv.exe|Svc=Spooler|Name=@FirewallAPI.dll,-36856|Desc=@FirewallAPI.dll,-36857|EmbedCtxt=@FirewallAPI.dll,-36851|TTK2_22=WFDPrint| - Enabled - Microsoft Corporation
       WFDPRINT-SPOOL-Out-Active --> C:\Windows\System32\spoolsv.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Public|App=%SystemRoot%\system32\spoolsv.exe|Svc=Spooler|Name=@FirewallAPI.dll,-36858|Desc=@FirewallAPI.dll,-36859|EmbedCtxt=@FirewallAPI.dll,-36851|TTK2_22=WFDPrint| - Enabled - Microsoft Corporation
       WFDPRINT-SCAN-In-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Profile=Public|App=%SystemRoot%\system32\svchost.exe|Svc=stisvc|Name=@FirewallAPI.dll,-36860|Desc=@FirewallAPI.dll,-36861|EmbedCtxt=@FirewallAPI.dll,-36851|TTK2_22=WFDPrint| - Enabled - Microsoft Corporation
       WFDPRINT-SCAN-Out-Active --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Public|App=%SystemRoot%\system32\svchost.exe|Svc=stisvc|Name=@FirewallAPI.dll,-36862|Desc=@FirewallAPI.dll,-36863|EmbedCtxt=@FirewallAPI.dll,-36851|TTK2_22=WFDPrint| - Enabled - Microsoft Corporation
       RRAS-GRE-In --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=47|App=System|Name=@FirewallAPI.dll,-33769|Desc=@FirewallAPI.dll,-33772|EmbedCtxt=@FirewallAPI.dll,-33752| - Enabled - 
       RRAS-GRE-Out --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=47|App=System|Name=@FirewallAPI.dll,-33773|Desc=@FirewallAPI.dll,-33776|EmbedCtxt=@FirewallAPI.dll,-33752| - Enabled - 
       RRAS-L2TP-In-UDP --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1701|App=System|Name=@FirewallAPI.dll,-33753|Desc=@FirewallAPI.dll,-33756|EmbedCtxt=@FirewallAPI.dll,-33752| - Enabled - 
       RRAS-L2TP-Out-UDP --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1701|App=System|Name=@FirewallAPI.dll,-33757|Desc=@FirewallAPI.dll,-33760|EmbedCtxt=@FirewallAPI.dll,-33752| - Enabled - 
       RRAS-PPTP-In-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=1723|App=System|Name=@FirewallAPI.dll,-33765|Desc=@FirewallAPI.dll,-33768|EmbedCtxt=@FirewallAPI.dll,-33752| - Enabled - 
       RRAS-PPTP-Out-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RPort=1723|App=System|Name=@FirewallAPI.dll,-33761|Desc=@FirewallAPI.dll,-33764|EmbedCtxt=@FirewallAPI.dll,-33752| - Enabled - 
       CoreNet-ICMP6-DU-In --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=1:*|App=System|Name=@FirewallAPI.dll,-25110|Desc=@FirewallAPI.dll,-25112|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=TRUE| - Enabled - 
       CoreNet-ICMP6-PTB-In - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=2:*|Name=@FirewallAPI.dll,-25001|Desc=@FirewallAPI.dll,-25007|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=TRUE| - Enabled - 
       CoreNet-ICMP6-PTB-Out - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=2:*|Name=@FirewallAPI.dll,-25002|Desc=@FirewallAPI.dll,-25007|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-TE-In --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=3:*|App=System|Name=@FirewallAPI.dll,-25113|Desc=@FirewallAPI.dll,-25115|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=TRUE| - Enabled - 
       CoreNet-ICMP6-TE-Out - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=3:*|Name=@FirewallAPI.dll,-25114|Desc=@FirewallAPI.dll,-25115|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-PP-In --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=4:*|App=System|Name=@FirewallAPI.dll,-25116|Desc=@FirewallAPI.dll,-25118|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=TRUE| - Enabled - 
       CoreNet-ICMP6-PP-Out - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=4:*|Name=@FirewallAPI.dll,-25117|Desc=@FirewallAPI.dll,-25118|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-NDS-In --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=135:*|App=System|Name=@FirewallAPI.dll,-25019|Desc=@FirewallAPI.dll,-25025|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=TRUE| - Enabled - 
       CoreNet-ICMP6-NDS-Out - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=135:*|Name=@FirewallAPI.dll,-25020|Desc=@FirewallAPI.dll,-25025|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-NDA-In --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=136:*|App=System|Name=@FirewallAPI.dll,-25026|Desc=@FirewallAPI.dll,-25032|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=TRUE| - Enabled - 
       CoreNet-ICMP6-NDA-Out - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=136:*|Name=@FirewallAPI.dll,-25027|Desc=@FirewallAPI.dll,-25032|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-RA-In --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=134:*|RA6=fe80::/64|App=System|Name=@FirewallAPI.dll,-25012|Desc=@FirewallAPI.dll,-25018|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-RA-Out - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=134:*|LA6=fe80::/64|RA6=LocalSubnet|RA6=fe80::/64|RA6=ff02::1|Name=@FirewallAPI.dll,-25013|Desc=@FirewallAPI.dll,-25018|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-RS-In --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=133:*|App=System|Name=@FirewallAPI.dll,-25009|Desc=@FirewallAPI.dll,-25011|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-RS-Out - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=133:*|RA6=LocalSubnet|RA6=fe80::/64|RA6=ff02::2|Name=@FirewallAPI.dll,-25008|Desc=@FirewallAPI.dll,-25011|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-LQ-In --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=130:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25061|Desc=@FirewallAPI.dll,-25067|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-LQ-Out - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=130:*|RA6=LocalSubnet|Name=@FirewallAPI.dll,-25062|Desc=@FirewallAPI.dll,-25067|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-LR-In --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=131:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25068|Desc=@FirewallAPI.dll,-25074|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-LR-Out - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=131:*|RA6=LocalSubnet|Name=@FirewallAPI.dll,-25069|Desc=@FirewallAPI.dll,-25074|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-LR2-In --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=143:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25075|Desc=@FirewallAPI.dll,-25081|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-LR2-Out - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=143:*|RA6=LocalSubnet|Name=@FirewallAPI.dll,-25076|Desc=@FirewallAPI.dll,-25081|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-LD-In --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=132:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25082|Desc=@FirewallAPI.dll,-25088|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-LD-Out - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=132:*|RA6=LocalSubnet|Name=@FirewallAPI.dll,-25083|Desc=@FirewallAPI.dll,-25088|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP4-DUFRAG-In --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=1|ICMP4=3:4|App=System|Name=@FirewallAPI.dll,-25251|Desc=@FirewallAPI.dll,-25257|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-IGMP-In --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=2|App=System|Name=@FirewallAPI.dll,-25376|Desc=@FirewallAPI.dll,-25382|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-IGMP-Out --> System - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=2|App=System|Name=@FirewallAPI.dll,-25377|Desc=@FirewallAPI.dll,-25382|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-DHCP-In --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=68|RPort=67|App=%SystemRoot%\system32\svchost.exe|Svc=dhcp|Name=@FirewallAPI.dll,-25301|Desc=@FirewallAPI.dll,-25303|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-DHCP-Out --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|LPort=68|RPort=67|App=%SystemRoot%\system32\svchost.exe|Svc=dhcp|Name=@FirewallAPI.dll,-25302|Desc=@FirewallAPI.dll,-25303|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-DHCPV6-In --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=546|RPort=547|App=%SystemRoot%\system32\svchost.exe|Svc=dhcp|Name=@FirewallAPI.dll,-25304|Desc=@FirewallAPI.dll,-25306|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-DHCPV6-Out --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|LPort=546|RPort=547|App=%SystemRoot%\system32\svchost.exe|Svc=dhcp|Name=@FirewallAPI.dll,-25305|Desc=@FirewallAPI.dll,-25306|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-Teredo-In --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=Teredo|App=%SystemRoot%\system32\svchost.exe|Svc=iphlpsvc|Name=@FirewallAPI.dll,-25326|Desc=@FirewallAPI.dll,-25332|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-Teredo-Out --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|App=%SystemRoot%\system32\svchost.exe|Svc=iphlpsvc|Name=@FirewallAPI.dll,-25327|Desc=@FirewallAPI.dll,-25333|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-IPHTTPS-In --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|LPort2_10=IPTLSIn|LPort2_10=IPHTTPSIn|App=System|Name=@FirewallAPI.dll,-25426|Desc=@FirewallAPI.dll,-25428|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-IPHTTPS-Out --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|RPort2_10=IPTLSOut|RPort2_10=IPHTTPSOut|App=%SystemRoot%\system32\svchost.exe|Svc=iphlpsvc|Name=@FirewallAPI.dll,-25427|Desc=@FirewallAPI.dll,-25429|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-IPv6-In --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=41|App=System|Name=@FirewallAPI.dll,-25351|Desc=@FirewallAPI.dll,-25357|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-IPv6-Out --> System - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=41|App=System|Name=@FirewallAPI.dll,-25352|Desc=@FirewallAPI.dll,-25358|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-GP-NP-Out-TCP --> System - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|RPort=445|App=System|Name=@FirewallAPI.dll,-25401|Desc=@FirewallAPI.dll,-25401|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-GP-Out-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Name=@FirewallAPI.dll,-25403|Desc=@FirewallAPI.dll,-25404|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-DNS-Out-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|RPort=53|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-25405|Desc=@FirewallAPI.dll,-25406|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-GP-LSASS-Out-TCP --> C:\Windows\System32\lsass.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\lsass.exe|Name=@FirewallAPI.dll,-25407|Desc=@FirewallAPI.dll,-25408|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       PerfLogsAlerts-PLASrv-In-TCP --> C:\Windows\System32\plasrv.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\plasrv.exe|Name=@FirewallAPI.dll,-34753|Desc=@FirewallAPI.dll,-34754|EmbedCtxt=@FirewallAPI.dll,-34752| - Enabled - Microsoft Corporation
       PerfLogsAlerts-DCOM-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=135|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-34755|Desc=@FirewallAPI.dll,-34756|EmbedCtxt=@FirewallAPI.dll,-34752| - Enabled - Microsoft Corporation
       PerfLogsAlerts-PLASrv-In-TCP-NoScope --> C:\Windows\System32\plasrv.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%systemroot%\system32\plasrv.exe|Name=@FirewallAPI.dll,-34753|Desc=@FirewallAPI.dll,-34754|EmbedCtxt=@FirewallAPI.dll,-34752| - Enabled - Microsoft Corporation
       PerfLogsAlerts-DCOM-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%systemroot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-34755|Desc=@FirewallAPI.dll,-34756|EmbedCtxt=@FirewallAPI.dll,-34752| - Enabled - Microsoft Corporation
       RemoteSvcAdmin-In-TCP-NoScope --> C:\Windows\System32\services.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\services.exe|Name=@FirewallAPI.dll,-29503|Desc=@FirewallAPI.dll,-29506|EmbedCtxt=@FirewallAPI.dll,-29502| - Enabled - Microsoft Corporation
       RemoteSvcAdmin-NP-In-TCP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=445|App=System|Name=@FirewallAPI.dll,-29507|Desc=@FirewallAPI.dll,-29510|EmbedCtxt=@FirewallAPI.dll,-29502| - Enabled - 
       RemoteSvcAdmin-RPCSS-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-29515|Desc=@FirewallAPI.dll,-29518|EmbedCtxt=@FirewallAPI.dll,-29502| - Enabled - Microsoft Corporation
       RemoteSvcAdmin-In-TCP --> C:\Windows\System32\services.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\services.exe|Name=@FirewallAPI.dll,-29503|Desc=@FirewallAPI.dll,-29506|EmbedCtxt=@FirewallAPI.dll,-29502| - Enabled - Microsoft Corporation
       RemoteSvcAdmin-NP-In-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-29507|Desc=@FirewallAPI.dll,-29510|EmbedCtxt=@FirewallAPI.dll,-29502| - Enabled - 
       RemoteSvcAdmin-RPCSS-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-29515|Desc=@FirewallAPI.dll,-29518|EmbedCtxt=@FirewallAPI.dll,-29502| - Enabled - Microsoft Corporation
       {5F4632C0-D5B1-40C3-B0D9-E3A759C81B9E} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=SonicWALL.MobileConnect|Desc=SonicWALL.MobileConnect|LUOwn=S-1-1-0|AppPkgId=S-1-15-2-1141404472-3582312691-3771565717-2155153689-4284170330-1053580937-782359393|EmbedCtxt=SonicWALL.MobileConnect|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {560448D6-095C-4907-B046-AC7F710701A7} - v2.22|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|Name=SonicWALL.MobileConnect|Desc=SonicWALL.MobileConnect|LUOwn=S-1-1-0|AppPkgId=S-1-15-2-1141404472-3582312691-3771565717-2155153689-4284170330-1053580937-782359393|EmbedCtxt=SonicWALL.MobileConnect|Platform=2:6:2|Platform2=GTEQ|Edge=TRUE| - Enabled - 
       {D6980480-941A-4DF6-AB81-3734ECD3D779} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=JuniperNetworks.JunosPulseVpn|Desc=JuniperNetworks.JunosPulseVpn|LUOwn=S-1-1-0|AppPkgId=S-1-15-2-413786399-3497379642-531169432-1175633435-3083429259-2317590812-1892764672|EmbedCtxt=JuniperNetworks.JunosPulseVpn|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {EC799E33-72BA-42D7-9127-DEFE68F9799D} - v2.22|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|Name=JuniperNetworks.JunosPulseVpn|Desc=JuniperNetworks.JunosPulseVpn|LUOwn=S-1-1-0|AppPkgId=S-1-15-2-413786399-3497379642-531169432-1175633435-3083429259-2317590812-1892764672|EmbedCtxt=JuniperNetworks.JunosPulseVpn|Platform=2:6:2|Platform2=GTEQ|Edge=TRUE| - Enabled - 
       {F64300AD-D559-4000-BD45-0997BCC8E70A} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=f5.vpn.client|Desc=f5.vpn.client|LUOwn=S-1-1-0|AppPkgId=S-1-15-2-3873129616-3864902477-3117653462-838095904-2337665935-1018217662-2152729480|EmbedCtxt=f5.vpn.client|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {F77E5446-4378-4E99-8B7A-7061AAAEA193} - v2.22|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|Name=f5.vpn.client|Desc=f5.vpn.client|LUOwn=S-1-1-0|AppPkgId=S-1-15-2-3873129616-3864902477-3117653462-838095904-2337665935-1018217662-2152729480|EmbedCtxt=f5.vpn.client|Platform=2:6:2|Platform2=GTEQ|Edge=TRUE| - Enabled - 
       {9E3D57FC-7C37-4424-9352-4831E97D029D} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{C:\Windows\WinStore\resources.pri?ms-resource://WinStore/resources/DisplayName}|Desc=@{C:\Windows\WinStore\resources.pri?ms-resource://WinStore/resources/Description}|LUOwn=S-1-1-0|AppPkgId=S-1-15-2-2608634532-1453884237-1118350049-1925931850-670756941-1603938316-3764965493|EmbedCtxt=@{C:\Windows\WinStore\resources.pri?ms-resource://WinStore/resources/DisplayName}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6} - v2.22|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Name=@{C:\Windows\WinStore\resources.pri?ms-resource://WinStore/resources/DisplayName}|Desc=@{C:\Windows\WinStore\resources.pri?ms-resource://WinStore/resources/Description}|LUOwn=S-1-1-0|AppPkgId=S-1-15-2-2608634532-1453884237-1118350049-1925931850-670756941-1603938316-3764965493|EmbedCtxt=@{C:\Windows\WinStore\resources.pri?ms-resource://WinStore/resources/DisplayName}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {DB59588E-ED90-4C47-A7B5-7929DD0C0BD2} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=CheckPoint.VPN|Desc=CheckPoint.VPN|LUOwn=S-1-1-0|AppPkgId=S-1-15-2-3676279713-3632409675-756843784-3388909659-2454753834-4233625902-1413163418|EmbedCtxt=CheckPoint.VPN|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {4282FE99-8560-4BC7-9576-5F3ED84E263F} - v2.22|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|Name=CheckPoint.VPN|Desc=CheckPoint.VPN|LUOwn=S-1-1-0|AppPkgId=S-1-15-2-3676279713-3632409675-756843784-3388909659-2454753834-4233625902-1413163418|EmbedCtxt=CheckPoint.VPN|Platform=2:6:2|Platform2=GTEQ|Edge=TRUE| - Enabled - 
       NetPres-In-TCP-NoScope --> C:\WINDOWS\system32\netproj.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\netproj.exe|Name=@FirewallAPI.dll,-31761|Desc=@FirewallAPI.dll,-31764|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - File not found
       NetPres-Out-TCP-NoScope --> C:\WINDOWS\system32\netproj.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\netproj.exe|Name=@FirewallAPI.dll,-31765|Desc=@FirewallAPI.dll,-31768|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - File not found
       NetPres-WSDEVNT-In-TCP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5357|App=System|Name=@FirewallAPI.dll,-31769|Desc=@FirewallAPI.dll,-31770|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - 
       NetPres-WSDEVNT-Out-TCP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=5357|App=System|Name=@FirewallAPI.dll,-31771|Desc=@FirewallAPI.dll,-31772|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - 
       NetPres-WSDEVNTS-In-TCP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5358|App=System|Name=@FirewallAPI.dll,-31773|Desc=@FirewallAPI.dll,-31774|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - 
       NetPres-WSDEVNTS-Out-TCP-NoScope --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=5358|App=System|Name=@FirewallAPI.dll,-31775|Desc=@FirewallAPI.dll,-31776|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - 
       NetPres-WSD-In-UDP --> C:\WINDOWS\system32\netproj.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\netproj.exe|Name=@FirewallAPI.dll,-31753|Desc=@FirewallAPI.dll,-31756|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - File not found
       NetPres-WSD-Out-UDP --> C:\WINDOWS\system32\netproj.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\netproj.exe|Name=@FirewallAPI.dll,-31757|Desc=@FirewallAPI.dll,-31760|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - File not found
       NetPres-In-TCP --> C:\WINDOWS\system32\netproj.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\netproj.exe|Name=@FirewallAPI.dll,-31761|Desc=@FirewallAPI.dll,-31764|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - File not found
       NetPres-Out-TCP --> C:\WINDOWS\system32\netproj.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\netproj.exe|Name=@FirewallAPI.dll,-31765|Desc=@FirewallAPI.dll,-31768|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - File not found
       NetPres-WSDEVNT-In-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31769|Desc=@FirewallAPI.dll,-31770|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - 
       NetPres-WSDEVNT-Out-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31771|Desc=@FirewallAPI.dll,-31772|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - 
       NetPres-WSDEVNTS-In-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31773|Desc=@FirewallAPI.dll,-31774|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - 
       NetPres-WSDEVNTS-Out-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31775|Desc=@FirewallAPI.dll,-31776|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - 
       WPDMTP-Out-TCP-NoScope --> C:\Windows\System32\WUDFHost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=15740|App=%SystemRoot%\system32\wudfhost.exe|Name=@FirewallAPI.dll,-30503|Desc=@FirewallAPI.dll,-30506|EmbedCtxt=@FirewallAPI.dll,-30502| - Enabled - Microsoft Corporation
       WPDMTP-Out-TCP --> C:\Windows\System32\WUDFHost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RPort=15740|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\wudfhost.exe|Name=@FirewallAPI.dll,-30503|Desc=@FirewallAPI.dll,-30506|EmbedCtxt=@FirewallAPI.dll,-30502| - Enabled - Microsoft Corporation
       WPDMTP-SSDPSrv-In-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-30507|Desc=@FirewallAPI.dll,-30510|EmbedCtxt=@FirewallAPI.dll,-30502| - Enabled - Microsoft Corporation
       WPDMTP-SSDPSrv-Out-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-30511|Desc=@FirewallAPI.dll,-30514|EmbedCtxt=@FirewallAPI.dll,-30502| - Enabled - Microsoft Corporation
       WPDMTP-UPnPHost-In-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-30515|Desc=@FirewallAPI.dll,-30518|EmbedCtxt=@FirewallAPI.dll,-30502| - Enabled - 
       WPDMTP-UPnPHost-Out-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-30519|Desc=@FirewallAPI.dll,-30522|EmbedCtxt=@FirewallAPI.dll,-30502| - Enabled - Microsoft Corporation
       WPDMTP-UPnP-Out-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=upnphost|Name=@FirewallAPI.dll,-30523|Desc=@FirewallAPI.dll,-30524|EmbedCtxt=@FirewallAPI.dll,-30502| - Enabled - Microsoft Corporation
       MCX-SSDPSrv-In-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-30753|Desc=@FirewallAPI.dll,-30756|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-SSDPSrv-Out-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-30757|Desc=@FirewallAPI.dll,-30760|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-In-TCP --> C:\WINDOWS\ehome\ehshell.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=554|LPort=8554|LPort=8555|LPort=8556|LPort=8557|LPort=8558|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\ehome\ehshell.exe|Name=@FirewallAPI.dll,-30761|Desc=@FirewallAPI.dll,-30764|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - File not found
       MCX-Out-TCP --> C:\WINDOWS\ehome\ehshell.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\ehome\ehshell.exe|Name=@FirewallAPI.dll,-30765|Desc=@FirewallAPI.dll,-30768|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - File not found
       MCX-QWave-In-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-30769|Desc=@FirewallAPI.dll,-30772|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-QWave-Out-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-30773|Desc=@FirewallAPI.dll,-30776|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-QWave-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-30777|Desc=@FirewallAPI.dll,-30780|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-QWave-Out-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-30781|Desc=@FirewallAPI.dll,-30784|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-HTTPSTR-In-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=10244|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-30785|Desc=@FirewallAPI.dll,-30788|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - 
       MCX-TERMSRV-In-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=3390|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=termservice|Name=@FirewallAPI.dll,-30793|Desc=@FirewallAPI.dll,-30796|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-In-UDP --> C:\WINDOWS\ehome\ehshell.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=7777|LPort=7778|LPort=7779|LPort=7780|LPort=7781|LPort=5004|LPort=5005|LPort=50004|LPort=50005|LPort=50006|LPort=50007|LPort=50008|LPort=50009|LPort=50010|LPort=50011|LPort=50012|LPort=50013|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\ehome\ehshell.exe|Name=@FirewallAPI.dll,-30801|Desc=@FirewallAPI.dll,-30804|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - File not found
       MCX-Out-UDP --> C:\WINDOWS\ehome\ehshell.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\ehome\ehshell.exe|Name=@FirewallAPI.dll,-30805|Desc=@FirewallAPI.dll,-30808|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - File not found
       MCX-MCX2SVC-Out-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=mcx2svc|Name=@FirewallAPI.dll,-30810|Desc=@FirewallAPI.dll,-30811|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-Prov-Out-TCP --> C:\WINDOWS\ehome\mcx2prov.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|App=%SystemRoot%\ehome\mcx2prov.exe|Name=@FirewallAPI.dll,-30812|Desc=@FirewallAPI.dll,-30813|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - File not found
       MCX-PlayTo-In-TCP --> System - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-30814|Desc=@FirewallAPI.dll,-30815|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - 
       MCX-PlayTo-Out-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=upnphost|Name=@FirewallAPI.dll,-30816|Desc=@FirewallAPI.dll,-30817|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-McrMgr-Out-TCP --> C:\WINDOWS\ehome\mcrmgr.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|App=%SystemRoot%\ehome\mcrmgr.exe|Name=@FirewallAPI.dll,-30818|Desc=@FirewallAPI.dll,-30819|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - File not found
       MCX-PlayTo-Out-UDP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-30820|Desc=@FirewallAPI.dll,-30821|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-FDPHost-Out-TCP --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-30822|Desc=@FirewallAPI.dll,-30823|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       {30B14B58-5EB2-4104-9400-BF8D9995AEA8} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=windows_ie_ac_001|Desc=Created by IE|LUOwn=S-1-5-21-2316643553-1202322727-324119559-500|AppPkgId=S-1-15-2-1430448594-2639229838-973813799-439329657-1197984847-4069167804-1277922394|EmbedCtxt=windows_ie_ac_001|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       FPS-LLMNR-Out-UDP_1 --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-28550|Desc=@FirewallAPI.dll,-28551|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - Microsoft Corporation
       FPS-LLMNR-In-UDP_1 --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-28548|Desc=@FirewallAPI.dll,-28549|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - Microsoft Corporation
       FPS-ICMP6-ERQ-Out_1 - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Private|ICMP6=128:*|RA6=LocalSubnet|Name=@FirewallAPI.dll,-28546|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP6-ERQ-In_1 - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Private|ICMP6=128:*|RA6=LocalSubnet|Name=@FirewallAPI.dll,-28545|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP4-ERQ-Out_1 - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=1|Profile=Private|ICMP4=8:*|RA4=LocalSubnet|Name=@FirewallAPI.dll,-28544|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP4-ERQ-In_1 - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=1|Profile=Private|ICMP4=8:*|RA4=LocalSubnet|Name=@FirewallAPI.dll,-28543|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-RPCSS-In-TCP_1 - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|Svc=Rpcss|Name=@FirewallAPI.dll,-28539|Desc=@FirewallAPI.dll,-28542|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-SpoolSvc-In-TCP_1 --> C:\Windows\System32\spoolsv.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\spoolsv.exe|Svc=Spooler|Name=@FirewallAPI.dll,-28535|Desc=@FirewallAPI.dll,-28538|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - Microsoft Corporation
       FPS-NB_Datagram-Out-UDP_1 --> System - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28531|Desc=@FirewallAPI.dll,-28534|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Datagram-In-UDP_1 --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28527|Desc=@FirewallAPI.dll,-28530|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Name-Out-UDP_1 --> System - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28523|Desc=@FirewallAPI.dll,-28526|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Name-In-UDP_1 --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28519|Desc=@FirewallAPI.dll,-28522|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-SMB-Out-TCP_1 --> System - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28515|Desc=@FirewallAPI.dll,-28518|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-SMB-In-TCP_1 --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28511|Desc=@FirewallAPI.dll,-28514|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Session-Out-TCP_1 --> System - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=139|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28507|Desc=@FirewallAPI.dll,-28510|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Session-In-TCP_1 --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=139|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28503|Desc=@FirewallAPI.dll,-28506|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       NETDIS-FDRESPUB-WSD-Out-UDP_1 --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdrespub|Name=@FirewallAPI.dll,-32811|Desc=@FirewallAPI.dll,-32812|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-FDRESPUB-WSD-In-UDP_1 --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdrespub|Name=@FirewallAPI.dll,-32809|Desc=@FirewallAPI.dll,-32810|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-LLMNR-Out-UDP_1 --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-32805|Desc=@FirewallAPI.dll,-32808|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-LLMNR-In-UDP_1 --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-32801|Desc=@FirewallAPI.dll,-32804|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-FDPHOST-Out-UDP_1 --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32789|Desc=@FirewallAPI.dll,-32792|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-DAS-In-UDP_1 --> C:\Windows\System32\dasHost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\dashost.exe|Name=@FirewallAPI.dll,-32825|Desc=@FirewallAPI.dll,-32826|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-FDPHOST-In-UDP_1 --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32785|Desc=@FirewallAPI.dll,-32788|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-UPnP-Out-TCP_1 --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=upnphost|Name=@FirewallAPI.dll,-32821|Desc=@FirewallAPI.dll,-32822|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-SSDPSrv-Out-UDP_1 --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32757|Desc=@FirewallAPI.dll,-32760|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-SSDPSrv-In-UDP_1 --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32753|Desc=@FirewallAPI.dll,-32756|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       UDP Query User{57FA96FA-9D4F-44B0-BFD0-8E058E83F1EE}C:\users\j r\appdata\roaming\utorrent\utorrent.exe --> C:\Users\J R\AppData\Roaming\uTorrent\utorrent.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\users\j r\appdata\roaming\utorrent\utorrent.exe|Name=utorrent.exe|Desc=utorrent.exe|Edge=TRUE|Defer=App| - Enabled - BitTorrent, Inc.
       TCP Query User{18973741-E9C4-467A-A84F-6BF342F84CAB}C:\users\j r\appdata\roaming\utorrent\utorrent.exe --> C:\Users\J R\AppData\Roaming\uTorrent\utorrent.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\users\j r\appdata\roaming\utorrent\utorrent.exe|Name=utorrent.exe|Desc=utorrent.exe|Edge=TRUE|Defer=App| - Enabled - BitTorrent, Inc.
       UDP Query User{107B39E3-4159-4553-A793-CA5CB64D87C5}C:\users\j r\appdata\roaming\dropbox\bin\dropbox.exe --> C:\Users\J R\AppData\Roaming\Dropbox\bin\Dropbox.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\users\j r\appdata\roaming\dropbox\bin\dropbox.exe|Name=dropbox.exe|Desc=dropbox.exe|Defer=User| - Enabled - Dropbox, Inc.
       TCP Query User{2FAD5A6C-B06D-437B-BDD4-E516C624128B}C:\users\j r\appdata\roaming\dropbox\bin\dropbox.exe --> C:\Users\J R\AppData\Roaming\Dropbox\bin\Dropbox.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\users\j r\appdata\roaming\dropbox\bin\dropbox.exe|Name=dropbox.exe|Desc=dropbox.exe|Defer=User| - Enabled - Dropbox, Inc.
       {9330A417-9096-4E9E-9068-FB35F7A3935D} --> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTE.EXE - v2.20|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Program Files (x86)\Microsoft Office\Office12\ONENOTE.EXE|Name=Microsoft Office OneNote| - Enabled - Microsoft Corporation
       {477EEC19-0270-4C80-A8B8-9DFCB0930CEE} --> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTE.EXE - v2.20|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Program Files (x86)\Microsoft Office\Office12\ONENOTE.EXE|Name=Microsoft Office OneNote| - Enabled - Microsoft Corporation
       {45FB7BAF-ED10-4933-B72D-3047F1A9D739} --> C:\Program Files (x86)\Microsoft Office\Office12\GROOVE.EXE - v2.20|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Program Files (x86)\Microsoft Office\Office12\GROOVE.EXE|Name=Microsoft Office Groove| - Enabled - Microsoft Corporation
       {133FE3C5-622E-4888-94F9-DC59280790B5} --> C:\Program Files (x86)\Microsoft Office\Office12\GROOVE.EXE - v2.20|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Program Files (x86)\Microsoft Office\Office12\GROOVE.EXE|Name=Microsoft Office Groove| - Enabled - Microsoft Corporation
       {C56A3FD2-0AD7-402F-B5A2-582609EA6CC3} --> C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE - v2.20|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=6004|App=C:\Program Files (x86)\Microsoft Office\Office12\outlook.exe|Name=Microsoft Office Outlook| - Enabled - Microsoft Corporation
       {08B44878-7819-4CF5-BD8D-B222476075E1} --> C:\Users\J R\AppData\Roaming\Dropbox\bin\Dropbox.exe - v2.20|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Users\J R\AppData\Roaming\Dropbox\bin\Dropbox.exe|Name=Dropbox| - Enabled - Dropbox, Inc.
       {EBCC7D0E-5BF2-4762-8CF1-0D3BE4F41462} --> C:\Users\J R\AppData\Roaming\Dropbox\bin\Dropbox.exe - v2.20|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Users\J R\AppData\Roaming\Dropbox\bin\Dropbox.exe|Name=Dropbox| - Enabled - Dropbox, Inc.
       {AB0A4BDF-5C6C-47E9-BEDC-903DD0731F11} - v2.20|Action=Allow|Active=TRUE|Dir=Out|Name=@{Microsoft.ZuneVideo_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneVideo/resources/33270}|Desc=@{Microsoft.ZuneVideo_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneVideo/resources/33271}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-2967553933-3217682302-2494645345-2077017737-3805576244-585965800-1797614741|EmbedCtxt=@{Microsoft.ZuneVideo_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneVideo/resources/33270}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {09B60379-1638-4E35-B473-3DC460E37D04} - v2.20|Action=Allow|Active=TRUE|Dir=Out|Name=@{Microsoft.ZuneMusic_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/resources/33273}|Desc=@{Microsoft.ZuneMusic_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/resources/33274}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-3132517012-1571311091-3263739450-2968124769-4061529133-2106415361-233808003|EmbedCtxt=@{Microsoft.ZuneMusic_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/resources/33273}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {DB830B92-C2D8-4A9C-8A05-E62EB03B6A84} - v2.20|Action=Allow|Active=TRUE|Dir=Out|Name=@{Microsoft.XboxLIVEGames_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.XboxLIVEGames/resources/34150}|Desc=@{Microsoft.XboxLIVEGames_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.XboxLIVEGames/resources/34150}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-1006207729-2866503879-2823532697-3939787710-1205904879-1762002398-487380619|EmbedCtxt=@{Microsoft.XboxLIVEGames_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.XboxLIVEGames/resources/34150}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {59B714CE-5543-4E2A-BF02-C6511ED417FA} - v2.20|Action=Allow|Active=TRUE|Dir=In|Name=@{Microsoft.SkypeApp_1.0.0.266_x86__kzf8qxf38zg5c?ms-resource://Microsoft.SkypeApp/resources/manifest_display_name}|Desc=@{Microsoft.SkypeApp_1.0.0.266_x86__kzf8qxf38zg5c?ms-resource://Microsoft.SkypeApp/resources/manifest_description}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-2246530975-808720366-1776470054-230329187-4153223113-3550430174-4193313734|EmbedCtxt=@{Microsoft.SkypeApp_1.0.0.266_x86__kzf8qxf38zg5c?ms-resource://Microsoft.SkypeApp/resources/manifest_display_name}|Platform=2:6:2|Platform2=GTEQ|Edge=TRUE| - Enabled - 
       {C72620D7-329A-449F-9485-395C40EBA123} - v2.20|Action=Allow|Active=TRUE|Dir=Out|Name=@{Microsoft.SkypeApp_1.0.0.266_x86__kzf8qxf38zg5c?ms-resource://Microsoft.SkypeApp/resources/manifest_display_name}|Desc=@{Microsoft.SkypeApp_1.0.0.266_x86__kzf8qxf38zg5c?ms-resource://Microsoft.SkypeApp/resources/manifest_description}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-2246530975-808720366-1776470054-230329187-4153223113-3550430174-4193313734|EmbedCtxt=@{Microsoft.SkypeApp_1.0.0.266_x86__kzf8qxf38zg5c?ms-resource://Microsoft.SkypeApp/resources/manifest_display_name}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {E3067A41-C4DD-438B-8487-33C11E8A3E3A} - v2.20|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Name=@{Microsoft.Reader_6.2.8516.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Reader/resources/ShortDisplayName}|Desc=@{Microsoft.Reader_6.2.8516.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Reader/resources/Description}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-1836922079-3315719509-1286091592-2257468071-2062031229-3984053578-3488308777|EmbedCtxt=@{Microsoft.Reader_6.2.8516.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Reader/resources/ShortDisplayName}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {406C58CC-120F-4ED1-BFD8-02FF041B829A} - v2.20|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Name=@{Microsoft.Reader_6.2.8516.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Reader/resources/ShortDisplayName}|Desc=@{Microsoft.Reader_6.2.8516.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Reader/resources/Description}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-1836922079-3315719509-1286091592-2257468071-2062031229-3984053578-3488308777|EmbedCtxt=@{Microsoft.Reader_6.2.8516.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Reader/resources/ShortDisplayName}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {EA7F4FE8-D104-4A51-8B29-24C661FCCB9B} - v2.20|Action=Allow|Active=TRUE|Dir=Out|Name=@{Microsoft.BingWeather_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingWeather/resources/AppTitle}|Desc=@{Microsoft.BingWeather_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingWeather/resources/AppDescription}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-2040986369-264322980-3882385089-1970153872-3662121739-3363227934-2464603330|EmbedCtxt=@{Microsoft.BingWeather_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingWeather/resources/AppTitle}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {BAB7F069-6EA1-4EAB-885E-8D34A775128F} - v2.20|Action=Allow|Active=TRUE|Dir=Out|Name=windows_ie_ac_001|Desc=Created by IE|LUOwn=S-1-5-21-2316643553-1202322727-324119559-500|AppPkgId=S-1-15-2-1430448594-2639229838-973813799-439329657-1197984847-4069167804-1277922394|EmbedCtxt=windows_ie_ac_001|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {43A4B368-FEBD-4F53-870A-9EB533D56567} - v2.20|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|Name=Windows Live Communications Platform (SSDP)| - Enabled - 
       {D0FA0F34-2B11-4B51-BE43-943BD88E7185} - v2.20|Action=Allow|Active=TRUE|Dir=In|Protocol=6|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|Name=Windows Live Communications Platform (UPnP)| - Enabled - 
       {EE1E9DB0-229C-4E4D-AB74-642FAA08F87E} --> C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe - v2.20|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe|Name=Windows Live Communications Platform|Edge=TRUE| - Enabled - Microsoft Corporation
       {E7985E1D-C36F-4787-80A8-6350D07E9266} - v2.20|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Name=@{C:\Windows\WinStore\resources.pri?ms-resource://WinStore/resources/DisplayName}|Desc=@{C:\Windows\WinStore\resources.pri?ms-resource://WinStore/resources/Description}|LUOwn=S-1-1-0|AppPkgId=S-1-15-2-2608634532-1453884237-1118350049-1925931850-670756941-1603938316-3764965493|EmbedCtxt=@{C:\Windows\WinStore\resources.pri?ms-resource://WinStore/resources/DisplayName}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {808F1451-4108-46FD-ADBB-F17324B5F0BD} - v2.20|Action=Allow|Active=TRUE|Dir=Out|Name=@{C:\Windows\WinStore\resources.pri?ms-resource://WinStore/resources/DisplayName}|Desc=@{C:\Windows\WinStore\resources.pri?ms-resource://WinStore/resources/Description}|LUOwn=S-1-1-0|AppPkgId=S-1-15-2-2608634532-1453884237-1118350049-1925931850-670756941-1603938316-3764965493|EmbedCtxt=@{C:\Windows\WinStore\resources.pri?ms-resource://WinStore/resources/DisplayName}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {67AC7CEE-08C4-4E9C-8EAA-075D15A4E776} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=windows_ie_ac_001|Desc=Created by IE|LUOwn=S-1-5-18|AppPkgId=S-1-15-2-1430448594-2639229838-973813799-439329657-1197984847-4069167804-1277922394|EmbedCtxt=windows_ie_ac_001|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {F4CDADEC-4220-403E-9831-F55A20254B00} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=Check Point VPN|Desc=Check Point VPN|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-3676279713-3632409675-756843784-3388909659-2454753834-4233625902-1413163418|EmbedCtxt=Check Point VPN|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {2D00FFC7-6352-4D1A-B913-611F7BF110AA} - v2.22|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|Name=Check Point VPN|Desc=Check Point VPN|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-3676279713-3632409675-756843784-3388909659-2454753834-4233625902-1413163418|EmbedCtxt=Check Point VPN|Platform=2:6:2|Platform2=GTEQ|Edge=TRUE| - Enabled - 
       {C744F0C1-DEB7-4598-BE30-382BF85E1900} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=F5 VPN|Desc=F5 VPN|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-3873129616-3864902477-3117653462-838095904-2337665935-1018217662-2152729480|EmbedCtxt=F5 VPN|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {80CFC557-B2D8-4FA3-A82A-50DD5F7483F5} - v2.22|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|Name=F5 VPN|Desc=F5 VPN|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-3873129616-3864902477-3117653462-838095904-2337665935-1018217662-2152729480|EmbedCtxt=F5 VPN|Platform=2:6:2|Platform2=GTEQ|Edge=TRUE| - Enabled - 
       {46BDFC69-3276-476F-A38B-07B401268215} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=Juniper Networks Junos Pulse|Desc=Juniper Networks Junos Pulse|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-413786399-3497379642-531169432-1175633435-3083429259-2317590812-1892764672|EmbedCtxt=Juniper Networks Junos Pulse|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {793C0BBD-701D-4581-B0EA-D521AD1D55B3} - v2.22|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|Name=Juniper Networks Junos Pulse|Desc=Juniper Networks Junos Pulse|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-413786399-3497379642-531169432-1175633435-3083429259-2317590812-1892764672|EmbedCtxt=Juniper Networks Junos Pulse|Platform=2:6:2|Platform2=GTEQ|Edge=TRUE| - Enabled - 
       {FF517989-272A-4D09-AAD0-D7A0BB2B719E} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=SonicWALL Mobile Connect|Desc=SonicWALL Mobile Connect|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-1141404472-3582312691-3771565717-2155153689-4284170330-1053580937-782359393|EmbedCtxt=SonicWALL Mobile Connect|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {D1B9BEF5-6F85-4074-829F-CE3E49B19881} - v2.22|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|Name=SonicWALL Mobile Connect|Desc=SonicWALL Mobile Connect|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-1141404472-3582312691-3771565717-2155153689-4284170330-1053580937-782359393|EmbedCtxt=SonicWALL Mobile Connect|Platform=2:6:2|Platform2=GTEQ|Edge=TRUE| - Enabled - 
       {EA2BC52A-586E-41DD-90CA-0E6422E7BCDA} --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-28548|Desc=@FirewallAPI.dll,-28549|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - Microsoft Corporation
       {12662859-58EF-4EDB-A821-A2D77254058F} --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-28550|Desc=@FirewallAPI.dll,-28551|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - Microsoft Corporation
       {85A5E96F-8BDB-42AA-BFF2-FF83E906E124} --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31011|Desc=@FirewallAPI.dll,-31014|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       {DAAF4F5C-2281-4DA4-A0FC-E263B2B33DD7} --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31007|Desc=@FirewallAPI.dll,-31010|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       {7C57DDB8-9418-41DF-AC4B-A5E76F66860B} --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31003|Desc=@FirewallAPI.dll,-31006|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       {8676EF18-A4DD-4FE3-AA22-CA661EB019BF} --> C:\Program Files (x86)\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|App=%ProgramFiles(x86)%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31025|Desc=@FirewallAPI.dll,-31014|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       {74C3D6CF-E78E-4799-B9CD-C9CC7BC3C4FE} --> C:\Program Files (x86)\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|App=%ProgramFiles(x86)%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31024|Desc=@FirewallAPI.dll,-31010|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       {237C259D-996A-4192-B3D6-CA6E60B38EAA} --> C:\Program Files (x86)\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=%ProgramFiles(x86)%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31023|Desc=@FirewallAPI.dll,-31006|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       {29FAD7F9-8B5C-46CC-9965-79E0FE628B66} --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=upnphost|Name=@FirewallAPI.dll,-31321|Desc=@FirewallAPI.dll,-31322|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       {668178AC-3C35-46FA-91E3-27FE91AC0482} --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31317|Desc=@FirewallAPI.dll,-31320|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       {9FFD19FC-8EAB-4B83-83B6-0E6F96DC1D53} --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31313|Desc=@FirewallAPI.dll,-31316|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       {70F3721A-D019-4100-B5D8-CAFA46BB5240} --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31309|Desc=@FirewallAPI.dll,-31312|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       {AD55EEA5-53CC-46F3-934A-14120146C8F2} --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31305|Desc=@FirewallAPI.dll,-31308|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       {36BBE18A-40EE-44A4-A982-A7E22ABD542C} --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31301|Desc=@FirewallAPI.dll,-31304|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       {6867067E-FB5B-44F1-AB40-9C00D4B17DC8} --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31297|Desc=@FirewallAPI.dll,-31300|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       {58CDB208-45C9-4655-95B1-FC19F33C7578} --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31293|Desc=@FirewallAPI.dll,-31296|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       {41A77BB8-8571-4E69-91C3-407F2BE7A4CD} --> System - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=10243|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31289|Desc=@FirewallAPI.dll,-31292|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - 
       {3DA2CF40-6FA9-43F4-B826-AA4A593557E4} --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=10243|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31285|Desc=@FirewallAPI.dll,-31288|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - 
       {2AA06504-9EC9-46E8-BDC8-AE351153BDED} --> System - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31281|Desc=@FirewallAPI.dll,-31284|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - 
       {7D1D9634-41A4-4EF8-B04B-148FFDA27FED} --> System - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31277|Desc=@FirewallAPI.dll,-31280|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - 
       {E8778F03-6515-4F24-85E2-03A27387F089} --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=ssdpsrv|Name=@FirewallAPI.dll,-31273|Desc=@FirewallAPI.dll,-31276|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       {D109FC23-1B6C-4AAA-8A50-89A1A41CD2DE} --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=ssdpsrv|Name=@FirewallAPI.dll,-31269|Desc=@FirewallAPI.dll,-31272|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       {7FEC6065-F0B9-4256-AEEF-FB95F975DBAE} --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31265|Desc=@FirewallAPI.dll,-31268|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       {39EC5F8F-FD28-4DE7-B6DE-93B11FE2BB49} --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31261|Desc=@FirewallAPI.dll,-31264|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       {1A0EF90C-6F31-4D15-A77E-DFA001AD3B12} --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31257|Desc=@FirewallAPI.dll,-31260|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       {A45F9F49-875C-4654-B66E-A84E1AAADB2F} --> C:\Windows\System32\svchost.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31253|Desc=@FirewallAPI.dll,-31256|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       {9ADBD364-C855-4070-A68A-FB13A629B037} --> C:\Program Files (x86)\Common Files\soft602\langserv.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Program Files (x86)\Common Files\soft602\langserv.exe|Name=Software602 Spell Checker| - Enabled - 
       {7312905D-CE1E-437D-A22B-711180535A63} --> C:\Program Files (x86)\Common Files\soft602\langserv.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Program Files (x86)\Common Files\soft602\langserv.exe|Name=Software602 Spell Checker| - Enabled - 
       {58E67265-A6C5-4744-BA06-24AEAF32938C} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.BingTravel_3.0.1.202_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingTravel/resources/AppTitle}|Desc=@{Microsoft.BingTravel_3.0.1.202_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingTravel/resources/AppDescription}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-2870191891-2241688837-171142518-109998219-184790337-3361571429-3188846544|EmbedCtxt=@{Microsoft.BingTravel_3.0.1.202_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingTravel/resources/AppTitle}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {6D5FE413-F372-431B-83EB-09447B9A587C} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.BingSports_3.0.1.203_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingSports/resources/BingSports}|Desc=@{Microsoft.BingSports_3.0.1.203_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingSports/resources/BingSportsApp}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-1457613951-1028716704-1089715812-858319886-3420779130-1191463368-1428868892|EmbedCtxt=@{Microsoft.BingSports_3.0.1.203_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingSports/resources/BingSports}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {1947E269-F015-4CB6-976A-A86049918967} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.BingWeather_3.0.1.203_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingWeather/resources/AppTitle}|Desc=@{Microsoft.BingWeather_3.0.1.203_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingWeather/resources/AppDescription}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-2040986369-264322980-3882385089-1970153872-3662121739-3363227934-2464603330|EmbedCtxt=@{Microsoft.BingWeather_3.0.1.203_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingWeather/resources/AppTitle}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {B404D6FE-3632-43E6-85FC-9B3043C75B58} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationsPackageName}|Desc=@{microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationsPackageName}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-2551677095-2355568638-4209445997-2436930744-3692183382-387691378-1866284433|EmbedCtxt=@{microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationsPackageName}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {2522EB93-D65A-4D83-8A53-87B483DF41E4} - v2.22|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Name=@{microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationsPackageName}|Desc=@{microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationsPackageName}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-2551677095-2355568638-4209445997-2436930744-3692183382-387691378-1866284433|EmbedCtxt=@{microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationsPackageName}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {EE6031D4-786B-4B65-9569-5506CAB51F3A} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.BingFinance_3.0.1.299_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingFinance/resources/AppTitle}|Desc=Finance App|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-3492598633-4112760462-2134878185-2430567730-3345539238-3072415288-217264472|EmbedCtxt=@{Microsoft.BingFinance_3.0.1.299_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingFinance/resources/AppTitle}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {9EB04C35-E59D-48BC-85FB-34835FFD0335} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.XboxLIVEGames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.XboxLIVEGames/resources/34150}|Desc=@{Microsoft.XboxLIVEGames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.XboxLIVEGames/resources/34150}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-1006207729-2866503879-2823532697-3939787710-1205904879-1762002398-487380619|EmbedCtxt=@{Microsoft.XboxLIVEGames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.XboxLIVEGames/resources/34150}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {8D7824FB-9E3F-4DD8-8890-3977233814B2} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.BingHealthAndFitness_3.0.1.335_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingHealthAndFitness/resources/apptitle}|Desc=HealthAndFitness|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-1138804039-612586356-661925973-101396967-3526483782-2490177615-3594119953|EmbedCtxt=@{Microsoft.BingHealthAndFitness_3.0.1.335_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingHealthAndFitness/resources/apptitle}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {6F3F4A9C-9E60-4C68-AFAE-60F75E4AEA57} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.BingNews_3.0.1.321_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingNews/resources/AppTitle}|Desc=@{Microsoft.BingNews_3.0.1.321_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingNews/resources/NewsAppDesc}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-508114518-3340871649-811464485-526616082-4258465299-1774086546-1865468257|EmbedCtxt=@{Microsoft.BingNews_3.0.1.321_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingNews/resources/AppTitle}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       TCP Query User{E52223D2-F0D7-4FC6-8611-24BEF460974E}C:\users\j r\appdata\roaming\utorrent\utorrent.exe --> C:\Users\J R\AppData\Roaming\uTorrent\utorrent.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\users\j r\appdata\roaming\utorrent\utorrent.exe|Name=utorrent.exe|Desc=utorrent.exe| - Enabled - BitTorrent, Inc.
       UDP Query User{668AE47C-8835-4D14-945B-6C85CE8DA09D}C:\users\j r\appdata\roaming\utorrent\utorrent.exe --> C:\Users\J R\AppData\Roaming\uTorrent\utorrent.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\users\j r\appdata\roaming\utorrent\utorrent.exe|Name=utorrent.exe|Desc=utorrent.exe| - Enabled - BitTorrent, Inc.
       {7B2FA29E-760C-442D-A737-51B1D9D894B4} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{BrowserChoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://BrowserChoice/resources/DisplayName}|Desc=@{BrowserChoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://BrowserChoice/resources/DisplayName}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-2540836248-1980176511-1686232796-3610252712-3450814159-2925262043-1011558333|EmbedCtxt=@{BrowserChoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://BrowserChoice/resources/DisplayName}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {9944716E-E123-49C9-A66D-704A72382414} - v2.22|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Name=@{BrowserChoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://BrowserChoice/resources/DisplayName}|Desc=@{BrowserChoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://BrowserChoice/resources/DisplayName}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-2540836248-1980176511-1686232796-3610252712-3450814159-2925262043-1011558333|EmbedCtxt=@{BrowserChoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://BrowserChoice/resources/DisplayName}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {F77F52DC-95D6-469A-939B-417380E011A0} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=Fresh Paint|Desc=Fresh Paint|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-753205055-3642759886-2300710532-466079404-1496176425-3605778055-1481226570|EmbedCtxt=Fresh Paint|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {A58237A4-CA04-4797-B746-5E020671A9A5} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.WindowsReadingList_6.3.9654.20349_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsReadingList/resources/appPackageName}|Desc=@{Microsoft.WindowsReadingList_6.3.9654.20349_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsReadingList/resources/appPackageName}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-253023354-1127976746-3906962265-362626003-4127939218-3835539868-2341249685|EmbedCtxt=@{Microsoft.WindowsReadingList_6.3.9654.20349_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsReadingList/resources/appPackageName}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {46339EFA-05BD-42C7-84E3-5269A289D8DA} - v2.22|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Name=@{Microsoft.WindowsReadingList_6.3.9654.20349_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsReadingList/resources/appPackageName}|Desc=@{Microsoft.WindowsReadingList_6.3.9654.20349_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsReadingList/resources/appPackageName}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-253023354-1127976746-3906962265-362626003-4127939218-3835539868-2341249685|EmbedCtxt=@{Microsoft.WindowsReadingList_6.3.9654.20349_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsReadingList/resources/appPackageName}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {94F0BF51-9DD3-4ADF-9069-8E4DC745D3CB} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.BingFoodAndDrink_3.0.1.337_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingFoodAndDrink/resources/AppTitleWithBranding}|Desc=@{Microsoft.BingFoodAndDrink_3.0.1.337_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingFoodAndDrink/resources/AppDescription}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-1986440118-1442771495-871113684-214194731-1452296882-3170903903-2224822735|EmbedCtxt=@{Microsoft.BingFoodAndDrink_3.0.1.337_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingFoodAndDrink/resources/AppTitleWithBranding}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {D36C4821-8AA6-4B8B-907B-7825C6EECC15} --> D:\FIFA 14\Game\fifa14.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=D:\FIFA 14\Game\fifa14.exe|Name=FIFA 14| - Enabled - File not found
       {1195B5DF-7EE4-46BC-BC79-536E50FC8B5F} --> D:\FIFA 14\Game\fifa14.exe - v2.22|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=D:\FIFA 14\Game\fifa14.exe|Name=FIFA 14| - Enabled - File not found
       {3B7A97A4-983E-4926-A2F5-F2316E21D36F} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.BingMaps_2.0.2530.2317_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingMaps/Resources/AppDisplayName}|Desc=@{Microsoft.BingMaps_2.0.2530.2317_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingMaps/Resources/AppDisplayName}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-1220793744-3666789380-189579892-1973497788-2854962754-2836109804-3864561331|EmbedCtxt=@{Microsoft.BingMaps_2.0.2530.2317_x64__8wekyb3d8bbwe?ms-resource://Microsoft.BingMaps/Resources/AppDisplayName}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {3720FF41-650F-4F2E-97A0-B23AF37EF89F} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.ZuneMusic_2.2.550.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/resources/IDS_MANIFEST_MUSIC_APP_NAME}|Desc=@{Microsoft.ZuneMusic_2.2.550.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/resources/IDS_MANIFEST_MUSIC_APP_DESCRIPTION}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-3132517012-1571311091-3263739450-2968124769-4061529133-2106415361-233808003|EmbedCtxt=@{Microsoft.ZuneMusic_2.2.550.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/resources/IDS_MANIFEST_MUSIC_APP_NAME}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {FBB53E91-0AD3-4299-A28F-D56A04CABDF8} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.ZuneVideo_2.2.550.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneVideo/resources/IDS_MANIFEST_VIDEO_APP_NAME}|Desc=@{Microsoft.ZuneVideo_2.2.550.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneVideo/resources/IDS_MANIFEST_VIDEO_APP_DESCRIPTION}|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-2967553933-3217682302-2494645345-2077017737-3805576244-585965800-1797614741|EmbedCtxt=@{Microsoft.ZuneVideo_2.2.550.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneVideo/resources/IDS_MANIFEST_VIDEO_APP_NAME}|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {196C8DBF-28BB-472A-8F8B-FE1DF6BF8AC7} - v2.22|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=Skype|Desc=Skype|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-2246530975-808720366-1776470054-230329187-4153223113-3550430174-4193313734|EmbedCtxt=Skype|Platform=2:6:2|Platform2=GTEQ| - Enabled - 
       {37117D96-9DC0-4531-9616-7FC0D64557E6} - v2.22|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|Name=Skype|Desc=Skype|LUOwn=S-1-5-21-2316643553-1202322727-324119559-1001|AppPkgId=S-1-15-2-2246530975-808720366-1776470054-230329187-4153223113-3550430174-4193313734|EmbedCtxt=Skype|Platform=2:6:2|Platform2=GTEQ|Edge=TRUE| - Enabled - 

==========================================================================================

System User Name

       Administrator
       Guest
       HomeGroupUser$
       J R

==========================================================================================

Scan MBR Rootkit

       Unknow MBR!
