AlternateDataStreams: C:\windows\system32\WmpDui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wmpdxm.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wmpeffects.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wmpmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wmpps.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wmpshell.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wmsgapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WMVCORE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wmvdspa.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WofTasks.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WofUtil.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WorkFolders.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WorkFoldersGPExt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WorkFoldersShell.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wowreg32.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Wpc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wpccpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WpcMon.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wpcsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WpcWebSync.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wpdbusenum.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WpdMtp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WpdMtpUS.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WPDShextAutoplay.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WPDShServiceObj.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WPDSp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wpd_ci.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wpnapps.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wpncore.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wpninprc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wpnpinst.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wpnprv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wpnsruprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\write.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\ws2help.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wscinterop.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wscisvif.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WSClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WSCollect.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wscproxystub.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wscript.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wscui.cpl:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WSDApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wsdchngr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WSDMon.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\system32\WSDPrintProxy.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WSDScanProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WSDScDrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wsecedit.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\system32\wsepno.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wshbth.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wshcon.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wshelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wshext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wship6.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wshirda.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wshnetbs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wshom.ocx:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wshqos.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WSHTCPIP.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WSManHTTPConfig.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WSManMigrationPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wsmplpxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wsmprovhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wsnmp32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wsock32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wsqmcons.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WSReset.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WSService.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\system32\WSSync.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WSTPager.ax:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wtsapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wuapi.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\system32\wuapp.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wuauclt.exe:$CmdTcID [130]
AlternateDataStreams: C:\windows\system32\wuaueng.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wucltux.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WUDFCoinstaller.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WUDFHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WUDFPlatform.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WUDFSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WUDFx.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WUDFx02000.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wudriver.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wusa.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WUSettingsProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wuwebv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WwaApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WWAHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WWanAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wwancfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wwanconn.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WWanHC.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wwaninst.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wwanmm.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Wwanpref.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wwanprotdim.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\WwanRadioManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\wwansvc.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\system32\wwapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\XAudio2_8.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\xcopy.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\XInput1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\XInput9_1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\xmlfilter.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\xmllite.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\xmlprovi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\xolehlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\XpsFilt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\XpsGdiConverter.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\XpsPrint.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\XpsRasterService.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\xpsrchvw.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\xpsservices.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\XPSSHHDR.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\xpssvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\xwizard.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\xwizards.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\xwreg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\xwtpdui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\xwtpw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\zipfldr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\HelpPane.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\hh.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\regedit.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\splwow64.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\twain_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\winhlp32.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\write.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\accessibilitycpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\acledit.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\aclui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\acppage.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ActionCenter.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ActionCenterCPL.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\activeds.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\adprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\adsldp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\adsldpc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\adsmsext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\adsnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\advpack.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\amstream.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\apds.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\apphelp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Apphlpdm.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\apprepapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\apprepsync.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\appwiz.cpl:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\AppxApplicabilityEngine.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\AppXDeploymentClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\AppxPackaging.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\AppxSip.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ARP.EXE:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\aspnet_counters.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\at.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\AtBroker.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\atl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\atmfd.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\atmlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\attrib.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\audiodev.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\auditpol.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\AuthBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\AuthExt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\authfwcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\AuthFWGP.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\AuthFWSnapin.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\AuthFWWizFwk.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\autoconv.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\autoplay.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\avicap32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\avifil32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\avrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\azroles.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\azroleui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\AzSqlExt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\backgroundTaskHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\BackgroundTransferHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\basecsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\batmeter.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\bcd.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\BCP47Langs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\bcrypt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\bdaplgin.ax:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\bidispl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\BioCredProv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\bitsadmin.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\bitsperf.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\bitsprx2.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\bitsprx3.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\bitsprx4.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\bitsprx5.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\bitsprx6.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\bitsprx7.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\biwinrt.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\blackbox.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\BluetoothApis.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\bootcfg.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\browcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\browseui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\bthprops.cpl:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\bthudtask.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\btpanui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Bubbles.scr:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\BWContextHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ByteCodeGenerator.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cabinet.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cabview.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cacls.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\CallButtons.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\CallButtons.ProxyStub.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\CameraSettingsUIHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\capiprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\capisp.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\catsrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\catsrvps.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cca.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cdosys.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\certca.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\certCredProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\certenc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\CertEnroll.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\CertEnrollCtrl.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\CertEnrollUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\certmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\CertPolEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\certreq.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\certutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cewmdm.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cfgbkend.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cfgmgr32.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\cfmifs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cfmifsproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\charmap.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\chartv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\chcp.com:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\CheckNetIsolation.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\chkdsk.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\chkntfs.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\choice.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\CHxReadingStringIME.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cic.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cipher.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\clb.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\clbcatq.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cleanmgr.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cliconfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cliconfg.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\clip.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\CloudNotifications.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\CloudStorageWizard.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\clusapi.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\cmcfg32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cmd.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cmdext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cmdial32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cmdkey.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cmdl32.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cmifw.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cmlua.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cmmon32.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cmpbk32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cmstp.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cmstplua.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cmutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cngcredui.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\cngprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cnvfat.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\colbact.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\colorcpl.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\colorui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\combase.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\comcat.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\comdlg32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\comp.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\compact.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\CompPkgSup.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ComputerDefaults.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\comrepl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\comsnap.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\comsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\comuid.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ConfigureExpandedStorage.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\connect.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ConnectedAccountState.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\console.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\control.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\convert.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\CPFilters.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\CredentialMigrationHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\CredentialUIBroker.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\credssp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\credui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\credwiz.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cryptbase.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cryptdlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cryptdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cryptext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cryptnet.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\CryptoWinRT.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cryptsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\crypttpmeksvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cryptui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cryptuiwizard.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cryptxml.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cscapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cscdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cscript.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ctfmon.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cttune.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\cttunesvr.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\C_G18030.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\C_IS2022.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\C_ISCII.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\d3d10.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\d3d10core.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\d3d10warp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\d3d10_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\d3d10_1core.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\d3d11.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\d3d8.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\d3d8thk.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\d3d9.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\D3DCompiler_47.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\d3dim.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\d3dim700.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\d3dramp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\d3dxof.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dabapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DaOtpCredentialProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dataclen.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\davhlpr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dbnetlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dbnmpntw.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dccw.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dcomcnfg.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dcomp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DDACLSys.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ddodiag.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DDOIProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DDORes.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ddraw.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ddrawex.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DefaultDeviceManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DefaultPrinterProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\delegatorprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\desk.cpl:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\deskadp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\deskmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DevDispItemProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\deviceaccess.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\deviceassociation.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DeviceCenter.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DeviceDisplayStatusManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DevicePairing.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DevicePairingFolder.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DevicePairingProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DevicePairingWizard.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DeviceProperties.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DeviceUxRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\devmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\devobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\devrtl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dfrgui.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dfscli.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DfsShlEx.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dhcpcmonitor.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dhcpcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dhcpcore6.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dhcpcsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dhcpcsvc6.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DHCPQEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dialer.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\difxapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dimsjob.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dimsroam.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dinput.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dinput8.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\diskcomp.com:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\diskcopy.com:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\diskcopy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\diskpart.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\diskraid.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dispex.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Display.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DisplaySwitch.exe:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\dllhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dllhst3g.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dlnashext.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\dmband.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dmcompos.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dmdlgs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dmdskmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dmime.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dmintf.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dmloader.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dmocx.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dmscript.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dmstyle.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dmsynth.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dmusic.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dmutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dmvdsitf.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dmview.ocx:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dnsapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\docprop.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\doskey.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dot3api.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dot3cfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dot3dlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dot3gpclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dot3gpui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dot3hc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dot3msm.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\dot3ui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dpapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dpapimig.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dpapiprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DpiScaling.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\driverquery.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\drmmgrtn.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\drmv2clt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\drprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\drt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\drtprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\drttransport.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\drvinst.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\drvstore.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dsauth.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dsdmo.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dskquota.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dskquoui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dsound.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dsprop.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dsquery.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dsrole.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dssec.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dssenh.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Dsui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dsuiext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dswave.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dtsh.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dui70.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\duser.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dvdplay.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dvdupgrd.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dwmapi.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\DWWIN.EXE:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dxdiag.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dxdiagn.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dxgi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dxmasf.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\DxpTaskSync.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\dxva2.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\eappprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\eapprovp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\EAPQEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\EaseOfAccessDialog.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\easwrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\efsadu.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\efscore.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\efsui.exe:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\efsutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\efswrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\EhStorAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\EhStorAuthn.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\EhStorPwdMgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\els.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ELSCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\elshyph.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\elslad.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\elsTrans.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\encapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\EncDec.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\eqossnap.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\es.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\esent.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\esentprf.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\esentutl.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\eudcedit.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\eventcls.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\eventcreate.exe:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\eventvwr.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\expand.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\extrac32.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fc.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fdBth.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fdBthProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\FdDevQuery.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fde.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fdeploy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fdPnp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fdprint.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fdProxy.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\fdSSDP.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fdWCN.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fdWNet.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fdWSD.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\feclient.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\filemgmt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\find.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\findstr.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\finger.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\FirewallAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\FirewallControlPanel.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fixmapi.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\FlashPlayerApp.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\FlashPlayerCPLApp.cpl:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fltLib.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fltMC.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fmifs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fms.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Fondue.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fontext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fontview.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\forfiles.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\format.com:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fphc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\framedyn.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\framedynos.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\frprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fsutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fsutilext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ftp.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fundisc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\fwcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\FWPUCLNT.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\FwRemoteSvr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\FXSAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\FXSCOM.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\FXSCOMEX.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\FXSEXT32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\FXSXP32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\g711codc.ax:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\gameux.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\gcdef.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\getmac.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\getuname.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\glcndFilter.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\glmf32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\GlobCollationHost.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\globinputhost.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\glu32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\gpapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\gpedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\gpprnext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\gpresult.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\gptext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\gpupdate.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\grpconv.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\hbaapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\hcproviders.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\hdwwiz.cpl:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\hdwwiz.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\help.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\HelpPaneProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\hh.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\hhsetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\hid.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\hidphone.tsp:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\hidserv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\hlink.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\hnetcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\hnetmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\HOSTNAME.EXE:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\httpapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\htui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ias.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iasacct.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iasads.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iasdatastore.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iashlpr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\IasMigPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iasnap.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iaspolcy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iasrad.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iasrecst.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iassam.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iassdo.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iassvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\icacls.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iccvid.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\icm32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\icmui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\IconCodecService.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\icsigd.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\icsunattend.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\IdCtrls.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\idndl.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\IDStore.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ieapfltr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iedkcs32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ifmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ifsutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ifsutilx.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\imaadp32.acm:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\imagehlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\imapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\imapi2.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\imapi2fs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\imm32.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\inetcomm.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\inetmib1.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\InfDefaultInstall.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\input.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\InputSwitch.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\intl.cpl:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ipconfig.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\IPHLPAPI.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iprop.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iprtprio.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iprtrmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ipsecsnp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ipsmsnap.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ir32_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ir41_32.ax:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ir41_qc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ir41_qcx.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ir50_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ir50_qc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ir50_qcx.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\irclass.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\irprops.cpl:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iscsicli.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iscsicpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iscsicpl.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iscsidsc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iscsied.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iscsium.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iscsiwmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iscsiwmiv2.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\isoburn.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\itircl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\itss.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\iyuv_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\joy.cpl:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\KBDBASH.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\KBDRU.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\KBDRU1.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\KBDRUM.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\KBDTAT.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\KBDTT102.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\KBDYAK.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\kernel.appcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\kernel32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\KernelBase.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\keyiso.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\keymgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\kmddsp.tsp:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\korwbrkr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\kstvtune.ax:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Kswdmcap.ax:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ksxbar.ax:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ktmutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ktmw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\l2gpstore.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\l2nacp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\L2SecHC.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\l3codeca.acm:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\l3codecp.acm:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\label.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\LAPRXY.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\LaunchTM.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\linkinfo.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\loadperf.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\localsec.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\LocationApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\LocationNotifications.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\lodctr.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\logagent.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\loghours.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\logoncli.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\lsmproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\luainstall.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Magnification.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Magnify.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\main.cpl:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\makecab.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mapistub.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MbaeApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MbaeApiPublic.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mbsmsapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mbussdapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mcbuilder.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mciavi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mcicda.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mciqtz32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mciseq.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mciwave.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mdminst.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mdmregistration.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mf.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mf3216.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mfAACEnc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mfasfsrcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mfc42.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mfc42u.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MFCaptureEngine.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mfcsubs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mfds.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mfdvdec.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mfh264enc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MFMediaEngine.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\mfmjpegdec.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mfmpeg2srcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mfplat.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\MFPlay.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mfpmp.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mfreadwrite.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\mfsrcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mftranscode.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mgmtapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mibincodec.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Microsoft.Management.Infrastructure.Native.Unmanaged.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MicrosoftAccountTokenProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\midimap.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\miguiresource.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mimefilt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mimofcodec.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MirrorDrvCompat.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\miutils.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mlang.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mmc.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mmcbase.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\mmci.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mmcico.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mmcndmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mmcshext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MMDevAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mmsys.cpl:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mobsync.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mode.com:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\modemui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\more.com:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mountvol.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Mpeg2Data.ax:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mpg2splt.ax:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mpr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mprapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mprddm.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mprdim.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mprext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mprmsg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MRINFO.EXE:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MrmIndexer.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msaatext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MSAC3ENC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msacm32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msacm32.drv:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msadp32.acm:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msasn1.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MSAudDecMFT.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mscandui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mscat32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mscms.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mscpxl32.dLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msctfime.ime:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MsCtfMonitor.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msctfp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msctfui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msctfuimanager.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msdadiag.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msdart.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msdelta.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msdmo.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msdrm.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msdt.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msdtcprx.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msdtcuiu.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MSDvbNP.ax:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msdxm.ocx:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msg711.acm:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msgsm32.acm:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\msidcrl40.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msident.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msidle.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msieftp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msiltcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msimg32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msimtf.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msinfo32.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msisip.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msiwer.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mskeyprotcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mskeyprotect.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msls31.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MSMPEG2ENC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msmpeg2vdec.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msnetobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MSNP.ax:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msoeacct.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msoert2.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msorcl32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mspaint.exe:$CmdTcID [32]
AlternateDataStreams: C:\windows\SysWOW64\mspatcha.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mspatchc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msports.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msra.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msrdc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MsRdpWebAccess.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msrle32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msscntrs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msscp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msscript.ocx:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mssha.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msshooks.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mssign32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mssip32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mssitlb.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MsSpellCheckingFacility.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MsSpellCheckingHost.exe:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\mssphtb.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mssprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mstask.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mstsc.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msutb.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msv1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msvcirt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msvcp60.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msvcrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msvfw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msvidc32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MSVidCtl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MSVideoDSP.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msvproc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MSWB7.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MSWB70011.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MSWB7001E.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MSWB70404.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MSWB70804.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mswmdm.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msxml3.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msxml6.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\msyuv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mtstocom.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mtxclu.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mtxdm.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mtxex.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mtxlegih.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mtxoci.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\muifontsetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\MuiUnattend.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mycomput.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\mydocs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Mystify.scr:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\napdsnap.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NapiNSP.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\napipsec.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NAPMONTR.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NAPSTAT.EXE:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Narrator.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NaturalLanguage6.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NcaApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NcdProp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\nci.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ncobjapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ncpa.cpl:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ncryptprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ndadmin.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\nddeapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ndfapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ndfetw.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ndfhcdiscovery.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ndiscapCfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ndishc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ndproxystub.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\negoexts.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\net.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\net1.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\netapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\netbios.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\netbtugc.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\netcenter.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\netcorehc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\netdiagfx.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\netid.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\netiohlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\netiougc.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\netjoin.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\netplwiz.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Netplwiz.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\netprofm.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\netprovisionsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\netsh.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\netshell.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NETSTAT.EXE:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\netutils.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\networkexplorer.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\networkitemfactory.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\newdev.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\newdev.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ninput.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NL7Data0011.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NL7Data001E.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NL7Data0404.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NL7Data0804.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\nlhtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\nlmgp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\nlmproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\nlmsprep.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0000.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0002.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0003.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0007.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0009.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData000a.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData000c.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData000d.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData000f.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0010.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0018.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData001a.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData001b.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData001d.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0020.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0021.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0022.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0024.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0026.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0027.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\NlsData002a.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0039.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData003e.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0045.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0046.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0047.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0049.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData004a.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData004b.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData004c.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData004e.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0414.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0416.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0816.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData081a.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsData0c1a.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Nlsdl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\NlsLexicons0009.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\normaliz.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\npmproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\nshhttp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\nshipsec.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\nshwfp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\nsi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\nslookup.exe:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\ntasn1.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ntdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ntdsapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ntlanman.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ntlanui2.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ntmarta.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ntprint.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ntprint.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ntshrui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\objsel.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ocsetapi.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\odbc32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\odbcad32.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\odbcbcp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\odbcconf.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\odbcconf.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\odbccp32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\odbccr32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\odbccu32.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\odbcji32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\odbcjt32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\odbctrac.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\oddbse32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\odexl32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\odfox32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\odpdx32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\odtext32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\OEMLicense.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\offfilt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\offreg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ogldrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ole32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\oleacc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\oleacchooks.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\olecli32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\oledlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\oleprn.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\olesvr32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\olethk32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\OnDemandConnRouteHelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\onex.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\onexui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\OobeFldr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\OpcServices.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\openfiles.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\opengl32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\OpenWith.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\osbaseln.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\osk.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\OskSupport.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\osuninst.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\P2P.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\P2PGraph.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\p2pnetsh.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\packager.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\PackageStateRoaming.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\panmap.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PasswordOnWakeSettingFlyout.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PATHPING.EXE:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\pautoenr.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\pcacli.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\pcaui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\pcaui.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PCPTpm12.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\pdh.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\pdhui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\perfctrs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\perfdisk.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\perfmon.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\perfnet.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\perfos.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\perfproc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\perfts.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PhotoScreensaver.scr:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\photowiz.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PickerHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\pid.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PING.EXE:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PkgMgr.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\pla.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\playlistfolder.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PlaySndSrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PlayToDevice.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PlayToManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PlayToStatusProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\pnrpnsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\polstore.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PortableDeviceApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PortableDeviceClassExtension.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PortableDeviceConnectApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PortableDeviceStatus.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PortableDeviceSyncProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PortableDeviceTypes.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PortableDeviceWiaCompat.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PortableDeviceWMDRM.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\pots.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\powercfg.cpl:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\powercfg.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\powercpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\powrprof.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\prevhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\print.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PrintDialogs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\printui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\prncache.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\prnfldr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\prntvpt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\profapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\profext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\propsys.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\proquota.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\provcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\provsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\provthrd.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ProximityCommon.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ProximityCommonPal.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ProximityRtapiPal.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\prvdmofcomp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\psapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\psisdecd.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\psisrndr.ax:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\PSModuleDiscoveryProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\psr.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\pstorec.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\pwrshplugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\QAGENT.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\qasf.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\QCLIPROV.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\qdv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\qmgrprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\QSHVHOST.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\QSVRMGMT.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Query.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\QUTIL.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\qwave.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RacEngn.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\racpldlg.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\radardt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\radarrs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RADCUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rasadhlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rasapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rasautou.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rascfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\raschap.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\raschapext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rasctrs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rasdiag.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rasdial.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rasdlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\raserver.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rasgcw.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rasman.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rasmontr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rasmxs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rasphone.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rasplap.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rasppp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rasser.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rastls.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rastlsext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rdpcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rdpencom.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rdpendp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RdpSa.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RdpSaProxy.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RdpSaPs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RdpSaUacHelper.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rdrleakdiag.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rdvvmtransport.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ReAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ReAgentc.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\recover.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\reg.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\regapi.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\RegCtrl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\regedit.exe:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\regedt32.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\regini.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Register-CimProvider.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\regsvr32.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ReInfo.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rekeywiz.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\remotepg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\remotesp.tsp:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RemoveDeviceContextHandler.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\RemoveDeviceElevated.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\replace.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\resmon.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\resutils.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Ribbons.scr:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\riched20.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\riched32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RMActivate.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RMActivate_isv.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RMActivate_ssp.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RMActivate_ssp_isv.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RmClient.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rnr20.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Robocopy.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ROUTE.EXE:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rpchttp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RpcNs4.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rpcnsh.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RpcPing.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RpcRtRemote.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rrinstaller.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rshx32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RstrtMgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rtffilt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rtm.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rtutils.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RTWorkQ.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\runas.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\rundll32.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\RunLegacyCPLElevated.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\runonce.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\samcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\samlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sas.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sbe.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sbeio.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sc.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\scansetting.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\SCardDlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\scecli.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\schedcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\scksp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\scripto.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\scrnsave.scr:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\scrobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\scrrun.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sdbinst.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sdchange.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sdiageng.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sdiagnhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sdiagprv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sdohlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SearchFilterHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SearchFolder.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\SearchIndexer.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SearchProtocolHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SecEdit.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\secinit.exe:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\secproc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\secproc_isv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\secproc_ssp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\secproc_ssp_isv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\secur32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sendmail.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SensApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SensorsApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SensorsCpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\serialui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\serwvdrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SessEnv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sethc.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SettingMonitor.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SettingSyncPolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\setupapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\setupcln.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\setupugc.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\setx.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sfc.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sfc_os.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SHCore.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\shdocvw.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\shfolder.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\shgina.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\shimeng.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\shimgvw.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\shlwapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\shpafact.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\shrpubw.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\shsetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\shsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\shunimpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\shutdown.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\shwebsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\signdrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SimAuth.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SimCfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sisbkup.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SkyDriveShell.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\slpts.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SmartcardCredentialProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SmartScreenSettings.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SMBHelperClass.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\smphost.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SndVol.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SndVolSSO.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\snmpapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\softkbd.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\softpub.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sort.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SortServer2003Compat.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SortWindows61.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SortWindows6Compat.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\spbcd.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\spfileq.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SPInf.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\spnet.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\spopk.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\spp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\spwinsat.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\spwizeng.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\spwmp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sqlcecompact40.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sqlceoledb40.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sqlceqp40.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sqlcese40.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sqlsrv32.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\sqmapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\srchadmin.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\srclient.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\srumapi.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\srumsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\srvcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sscore.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ssdpapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sspicli.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SSShim.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ssText3d.scr:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Startupscan.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\stclient.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sti.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\storagewmi_passthru.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Storprop.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\StorSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\StructuredQuery.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\subst.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sud.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\svchost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sxproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sxs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sxshared.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sxsstore.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sxstrace.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SyncCenter.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\synceng.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SyncHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SyncHostps.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SyncInfrastructure.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SyncInfrastructureps.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Syncreg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\syncui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sysdm.cpl:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\syskey.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\sysmon.ocx:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\syssetup.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\systemcpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SystemEventsBrokerClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\systeminfo.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SystemPropertiesAdvanced.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SystemPropertiesComputerName.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SystemPropertiesDataExecutionPrevention.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SystemPropertiesHardware.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SystemPropertiesPerformance.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SystemPropertiesProtection.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\SystemPropertiesRemote.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\systray.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\t2embed.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\takeown.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\tapi3.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\tapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\TapiMigPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\tapiperf.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\tapisrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\TapiSysprep.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\TapiUnattend.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\taskcomp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\taskkill.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\tasklist.exe:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\Taskmgr.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\taskschd.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\TaskSchdPS.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\tbs.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\tcmsetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\tcpipcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\tcpmib.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\tcpmonui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\TCPSVCS.EXE:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\telephon.cpl:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\termmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\themeui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\threadpoolwinrt.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\thumbcache.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ThumbnailExtractionHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\TimeBrokerClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\timedate.cpl:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\TimeDateMUICallback.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\timeout.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\tlscsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\tpmcompc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\TpmInit.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\TRACERT.EXE:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\traffic.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\tree.com:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\tsbyuv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\TSChannel.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\tsmf.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\TSpkg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\TSTheme.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\TSWorkspace.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\TtlsAuth.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\TtlsCfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\TtlsExt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\tvratings.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\twext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\twinapi.appcore.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\twinapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\txflog.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\txfw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\tzutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ucmhc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ucrtbase.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\udhisapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\uexfat.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ufat.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\UIAnimation.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\uicom.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\uireng.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\UIRibbon.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\UIRibbonRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ulib.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\umdmxfrm.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\unimdm.tsp:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\unimdmat.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\uniplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\unlodctr.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\unregmp2.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\untfs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\upnp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\upnpcont.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\upnphost.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ureg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\usbceip.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\usbperf.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\usbui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\UserAccountBroker.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\UserAccountControlSettings.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\UserAccountControlSettings.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\userenv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\userinit.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\userinitext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\UserLanguageProfileCallback.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\UserLanguagesCpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\usp10.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ustprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\utildll.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Utilman.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\uudf.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\UXInit.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\uxlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\uxtheme.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\VAN.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Vault.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\vaultcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\VBICodec.ax:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\vbisurf.ax:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\vdmdbg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\vds_ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\verclsid.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\verifier.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\verifier.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\version.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\vfwwdm32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\vidcap.ax:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\virtdisk.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\vpnikeapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\VscMgrPS.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\vssadmin.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\vssapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\vsstrace.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\vss_ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\w32tm.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\w32topl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WABSyncProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\waitfor.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wavemsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wbemcomn.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wcmapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WcnApi.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\wcnwiz.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WcsPlugInService.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wdc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wdi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wdigest.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wdmaud.drv:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wdscore.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\WebcamUi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\webservices.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Websocket.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wecapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wecutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\werui.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\wevtapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wevtfwd.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wevtutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wfapigp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wfdprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WfHC.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\where.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\whhelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\whoami.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wiaacmgr.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wiaaut.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wiadefui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wiadss.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wiascanprofiles.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wiashext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wiatrace.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wimgapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\winbio.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\winbrand.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wincorlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wincredprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.ApplicationModel.Background.TimeBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.ApplicationModel.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.ApplicationModel.Store.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Data.Pdf.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Devices.Background.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Devices.Background.ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Devices.Bluetooth.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Devices.Custom.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Devices.Custom.ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Devices.Enumeration.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Devices.Enumeration.ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Devices.Geolocation.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Devices.PointOfService.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Devices.Portable.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Devices.Printers.Extensions.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Devices.Scanners.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Devices.Sensors.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Devices.SmartCards.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Devices.Usb.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Devices.WiFiDirect.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Globalization.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Globalization.Fontgroups.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Graphics.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Graphics.Printing.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Management.Workplace.WorkplaceSettings.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Media.Devices.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Media.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Media.MediaControl.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Media.SpeechSynthesis.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Media.Streaming.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Media.Streaming.ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Networking.Connectivity.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Networking.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Networking.HostName.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Networking.NetworkOperators.HotspotAuthentication.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Networking.Proximity.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Networking.Sockets.PushEnabledApplication.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Security.Credentials.UI.CredentialPicker.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Security.Credentials.UI.UserConsentVerifier.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Shell.Search.UriHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Storage.ApplicationData.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Storage.Compression.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.System.Display.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.System.Profile.HardwareId.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\Windows.System.Profile.SystemManufacturers.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.System.RemoteDesktop.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.UI.Search.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Web.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Windows.Web.Http.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WindowsCodecs.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\WindowsCodecsExt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\windowslivelogin.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WinFax.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wininitext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\winipsec.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Winlangdb.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\winmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\winmm.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\winmmbase.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WinMsoIrmProtector.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\winnsi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WinOpcIrmProtector.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\winrnr.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\winrs.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\winrscmd.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\winrshost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\winrssrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WinRtTracing.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WinSATAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WinSCard.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\winsku.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\winsockhc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\winspool.drv:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\WINSRPC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\winsta.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WinSync.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WinSyncMetastore.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WinSyncProviders.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wintrust.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WinTypes.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\winusb.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\winver.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wisp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wkscli.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wkspbrokerAx.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wksprtPS.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wlanapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wlancfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WLanConn.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wlandlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wlanext.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wlangpui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wlanhlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wlaninst.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WlanMM.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wlanmsm.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wlanpref.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wlansec.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wlanui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Wldap32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wlgpclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wlidcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wlidcredprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wlidfdp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wlidnsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wlidprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WlS0WndH.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WMASF.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmcodecdspps.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmdmlog.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmdmps.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmdrmdev.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmdrmnet.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmdrmsdk.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmiclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmidcom.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmidx.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmiprop.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmitomi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WMNetMgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WMPDMC.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WmpDui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmpdxm.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmpeffects.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmpps.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmpshell.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmsgapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WMVCORE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wmvdspa.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wowreg32.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\Wpc.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\wpcsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WPDShextAutoplay.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WPDShServiceObj.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\WPDSp.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\wpnapps.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\write.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\ws2help.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wscinterop.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wscisvif.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WSClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wscproxystub.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wscript.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wscui.cpl:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\WSDApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wsdchngr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wsecedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wshbth.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wshcon.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wshelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wshext.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wship6.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wshirda.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wshom.ocx:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\wshqos.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WSHTCPIP.DLL:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WSManHTTPConfig.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WSManMigrationPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wsmplpxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wsmprovhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wsnmp32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wsock32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WSSync.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WSTPager.ax:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wtsapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wuapi.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\wuapp.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wudriver.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wusa.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wuwebv.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WwaApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WWAHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\WWanAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\wwapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\XAudio2_8.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\xcopy.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\XInput1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\XInput9_1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\xmlfilter.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\xmllite.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\xmlprovi.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\xolehlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\XpsFilt.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\XpsGdiConverter.dll:$CmdTcID [130]
AlternateDataStreams: C:\windows\SysWOW64\XpsPrint.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\XpsRasterService.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\xpsrchvw.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\xpsservices.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\XPSSHHDR.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\xpssvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\xwizard.exe:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\xwizards.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\xwreg.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\xwtpdui.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\xwtpw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\SysWOW64\zipfldr.dll:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\acpi.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\agilevpn.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\ahcache.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\bridge.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\bthenum.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\BTHUSB.SYS:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\dxgmms1.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\fltMgr.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\fsdepends.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\fvevol.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\hdaudbus.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\ks.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\ksecdd.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\mpsdrv.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\mrxdav.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\msgpioclx.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\msiscsi.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\mslldp.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\ndiscap.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\NdisImPlatform.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\ndistapi.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\ndproxy.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\Ndu.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\netbios.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\netio.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\netvsc63.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\nsiproxy.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\nwifi.sys:$CmdTcID [130]
AlternateDataStreams: C:\windows\system32\Drivers\pacer.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\partmgr.sys:$CmdTcID [130]
AlternateDataStreams: C:\windows\system32\Drivers\pci.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\qwavedrv.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\rasacd.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\rassstp.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\refs.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\rootmdm.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\scfilter.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\srv2.sys:$CmdTcID [130]
AlternateDataStreams: C:\windows\system32\Drivers\srvnet.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\swenum.sys:$CmdTcID [130]
AlternateDataStreams: C:\windows\system32\Drivers\tbs.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\TsUsbGD.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\UCX01000.SYS:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\usbccgp.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\usbcir.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\usbd.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\usbhub.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\USBHUB3.SYS:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\usbohci.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\usbport.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\USBSTOR.SYS:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\usbuhci.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\usbvideo.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\vmbkmcl.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\vmbus.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\vmstorfl.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\wanarp.sys:$CmdTcID [130]
AlternateDataStreams: C:\windows\system32\Drivers\wimmount.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\winhv.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\winusb.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\wpcfltr.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\WSDScan.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\WUDFPf.sys:$CmdTcID [64]
AlternateDataStreams: C:\windows\system32\Drivers\WUDFRd.sys:$CmdTcID [64]
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-698779785-4081944849-852420755-1001 -> CE3C92DDFDF2156E64695733E8F9C35D URL = hxxp://
www.bing.com/search?PC=WCUG&FORM=WCUGDF&q={searchTerms}
SearchScopes: HKU\S-1-5-21-698779785-4081944849-852420755-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://
www.bing.com/search?PC=WCUG&FORM=WCUGDF&q={searchTerms}
SearchScopes: HKU\S-1-5-21-698779785-4081944849-852420755-1001 -> {39290F62-3E0C-425D-93FA-DF313284FE91} URL =
SearchScopes: HKU\S-1-5-21-698779785-4081944849-852420755-1001 -> {c2b8e594-d284-ef0b-2c66-48a9c98914bc} URL = hxxps://search.gmx.com/web/result?origin=p_jkld_pl&p=jkld&p_brw=ie&p_mkt=cz&p_tsrc=301&p_w=y1w07&q={searchTerms}
FirewallRules: [{C9FDE62B-6521-4A30-A5B1-9175E6D25CAF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{225EF212-02C0-49C9-B12D-4D4D6AABDA1A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{F0793870-14D1-4C37-A3EB-F09952153360}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{1733B0CE-40A2-409D-83D0-41CD0DF16C05}] => (Allow) C:\Program Files (x86)\OSTotoHotspot\helptool.exe => No File
FirewallRules: [{D5F8648B-D826-47BA-B4ED-4DD4B3F1F60F}] => (Allow) C:\Program Files (x86)\OSTotoHotspot\YunExplorer.exe => No File
FirewallRules: [{041BD441-168F-40AD-B8AA-663FA20BB251}] => (Allow) C:\Program Files (x86)\OSTotoHotspot\WifiService.exe => No File
FirewallRules: [{2AEC0C62-C91C-4260-AD12-D9C269377C01}] => (Allow) C:\Program Files (x86)\OSTotoHotspot\OSTotoHotspot.exe => No File
FirewallRules: [{BCE7D7FB-D2ED-4B7B-943C-D0B0343A4D1F}] => (Block) C:\users\anjela\appdata\local\mediaget2\mediaget.exe => No File
FirewallRules: [{D955F0B6-78A3-4F98-877C-7F4760CD8EF8}] => (Block) C:\users\anjela\appdata\local\mediaget2\mediaget.exe => No File
FirewallRules: [{7E5B1627-A127-4E86-96A3-6081A4988553}] => (Allow) C:\Program Files (x86)\OSTotoHotspot\OSTotoHotspot.exe => No File
FirewallRules: [{5224B77E-8EBF-4B28-AF39-C5F4E5FA7F0D}] => (Allow) C:\Program Files (x86)\OSTotoHotspot\OSTotoHotspot.exe => No File
FirewallRules: [{4A6B2DCB-DC57-4D3D-8A38-3574EFE9F1BD}] => (Allow) C:\Program Files\IFC Markets MT5\metatester64.exe => No File
FirewallRules: [{067C33AF-AA7D-428B-986E-345F67C8FF9C}] => (Allow) C:\Users\Anjela\AppData\Local\Programs\Opera\51.0.2830.34\opera.exe => No File
FirewallRules: [{946A9840-5B42-402A-AF32-2C6840EAE314}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation-Mobile Wireless Group -> )
FirewallRules: [{3F98AF07-A5AF-4BB3-A5EF-55A9BEB9E2C4}] => (Allow) LPort=55100
FirewallRules: [TCP Query User{5A7DB899-5CD8-4CEF-B1C7-0CA4D3FF5BE2}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe => No File
FirewallRules: [UDP Query User{3E8C4CA9-0968-4427-8D35-DCE43D7EBB06}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe => No File
FirewallRules: [TCP Query User{F8FE5BD9-4B25-4532-B3CB-FD8823A342AF}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe => No File
FirewallRules: [UDP Query User{8B13D730-CE34-4D79-BDDE-006F12F23404}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe => No File
FirewallRules: [TCP Query User{42A4AE4F-3E31-45F7-AB7A-7A931D618FFE}C:\program files\ibm\spss\statistics\subscription\stats.exe] => (Allow) C:\program files\ibm\spss\statistics\subscription\stats.exe => No File
FirewallRules: [UDP Query User{DCB5DD75-FF7E-4B6A-8E7B-674BB5D296CB}C:\program files\ibm\spss\statistics\subscription\stats.exe] => (Allow) C:\program files\ibm\spss\statistics\subscription\stats.exe => No File
FirewallRules: [TCP Query User{5521E80E-085A-495F-90CB-609F11371E80}C:\program files\ibm\spss\statistics\subscription\stats.exe] => (Allow) C:\program files\ibm\spss\statistics\subscription\stats.exe => No File
FirewallRules: [UDP Query User{467FD53E-9006-45F5-8FD3-440770CB3B44}C:\program files\ibm\spss\statistics\subscription\stats.exe] => (Allow) C:\program files\ibm\spss\statistics\subscription\stats.exe => No File
FirewallRules: [{70E35CB1-5F84-4A1D-8612-2B5D9AAC95AE}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe => No File
FirewallRules: [{5E046BA7-5AD8-44B2-B373-F9017E6CF921}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe => No File
FirewallRules: [{806E97FD-F9D7-4B90-9665-99CEF986DEE5}] => (Allow) C:\Program Files (x86)\OSTotoHotspot\\WifiService.exe => No File
FirewallRules: [{F822E79C-54F9-421B-AF25-646182C43219}] => (Allow) C:\Users\Anjela\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{763D694E-467C-4FBB-9695-291372404941}] => (Allow) C:\Users\Anjela\AppData\Roaming\Zoom\bin\airhost.exe => No File
EmptyTemp:
Hosts:
End