VIRY.CZ

Dobrý den prosím o kontrolu logu.
Děkuji.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Gordon at 2015-08-12 22:39:39
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 55 GB (36%) free of 153 GB
Total RAM: 2039 MB (18% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:40:22, on 12.8.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17909)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Windows\system32\igfxsrvc.exe
C:\Users\Gordon\AppData\Local\Google\Update\1.3.28.1\GoogleCrashHandler.exe
C:\Program Files\COMODO\COMODO Internet Security\cis.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\taskmgr.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\werfault.exe
C:\download\RSIT.exe
C:\Program Files\trend micro\Gordon.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll
O4 - HKLM\..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [Google Update] "C:\Users\Gordon\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: Foxit Cloud Safe Update Service (FoxitCloudUpdateService) - Foxit Software Inc. - C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Corel License Validation Service V2, Powered by arvato (PSI_SVC_2) - arvato digital services llc - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files\Sony\Sony PC Companion\PCCService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

--
End of file - 5518 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-339101144-130110853-2470278515-1001Core.job - C:\Users\Gordon\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-339101144-130110853-2470278515-1001UA.job - C:\Users\Gordon\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2014-12-21 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-12-21 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-08-09 1361088]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-23 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-23 173592]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-23 150552]
"VirtualCloneDrive"=C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2013-03-10 88984]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
"SwitchBoard"=C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Gordon\AppData\Local\Google\Update\GoogleUpdate.exe [2014-09-19 116648]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-23 218112]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-08-12 22:13:00 ----D---- C:\Program Files\trend micro
2015-08-12 22:12:58 ----D---- C:\rsit
2015-08-04 22:12:27 ----A---- C:\Windows\system32\lpk.dll
2015-08-04 22:12:27 ----A---- C:\Windows\system32\fontsub.dll
2015-08-04 22:12:27 ----A---- C:\Windows\system32\dciman32.dll
2015-08-04 22:12:27 ----A---- C:\Windows\system32\atmlib.dll
2015-08-04 22:12:27 ----A---- C:\Windows\system32\atmfd.dll
2015-08-02 18:36:09 ----D---- C:\Program Files\Lame For Audacity
2015-07-14 20:16:23 ----A---- C:\Windows\system32\ole32.dll
2015-07-14 20:16:18 ----A---- C:\Windows\system32\cewmdm.dll
2015-07-14 20:16:16 ----A---- C:\Windows\system32\rdpudd.dll
2015-07-14 20:16:16 ----A---- C:\Windows\system32\rdpcorets.dll
2015-07-14 20:16:16 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2015-07-14 20:16:11 ----A---- C:\Windows\system32\kerberos.dll
2015-07-14 20:16:10 ----A---- C:\Windows\system32\rpcrt4.dll
2015-07-14 20:16:10 ----A---- C:\Windows\system32\ncrypt.dll
2015-07-14 20:16:10 ----A---- C:\Windows\system32\msv1_0.dll
2015-07-14 20:16:10 ----A---- C:\Windows\system32\lsasrv.dll
2015-07-14 20:16:10 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-07-14 20:16:10 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-07-14 20:16:10 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-07-14 20:16:10 ----A---- C:\Windows\system32\adtschema.dll
2015-07-14 20:16:09 ----A---- C:\Windows\system32\wdigest.dll
2015-07-14 20:16:09 ----A---- C:\Windows\system32\TSpkg.dll
2015-07-14 20:16:09 ----A---- C:\Windows\system32\sspicli.dll
2015-07-14 20:16:09 ----A---- C:\Windows\system32\schannel.dll
2015-07-14 20:16:09 ----A---- C:\Windows\system32\secur32.dll
2015-07-14 20:16:09 ----A---- C:\Windows\system32\msaudite.dll
2015-07-14 20:16:09 ----A---- C:\Windows\system32\lsass.exe
2015-07-14 20:16:09 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-07-14 20:16:09 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-07-14 20:16:09 ----A---- C:\Windows\system32\cryptbase.dll
2015-07-14 20:16:09 ----A---- C:\Windows\system32\credssp.dll
2015-07-14 20:16:09 ----A---- C:\Windows\system32\auditpol.exe
2015-07-14 20:16:08 ----A---- C:\Windows\system32\sspisrv.dll
2015-07-14 20:16:08 ----A---- C:\Windows\system32\msobjs.dll
2015-07-14 20:15:09 ----A---- C:\Windows\system32\msimsg.dll
2015-07-14 20:15:09 ----A---- C:\Windows\system32\msihnd.dll
2015-07-14 20:15:09 ----A---- C:\Windows\system32\msiexec.exe
2015-07-14 20:15:09 ----A---- C:\Windows\system32\msi.dll
2015-07-14 20:15:09 ----A---- C:\Windows\system32\consent.exe
2015-07-14 20:15:09 ----A---- C:\Windows\system32\authui.dll
2015-07-14 20:15:09 ----A---- C:\Windows\system32\appinfo.dll
2015-07-14 20:14:43 ----A---- C:\Windows\system32\gdi32.dll
2015-07-14 20:14:41 ----A---- C:\Windows\system32\win32k.sys
2015-07-14 20:14:38 ----A---- C:\Windows\system32\urlmon.dll
2015-07-14 20:14:37 ----A---- C:\Windows\system32\ieui.dll
2015-07-14 20:14:36 ----A---- C:\Windows\system32\ieframe.dll
2015-07-14 20:14:34 ----A---- C:\Windows\system32\mshtml.dll
2015-07-14 20:14:33 ----A---- C:\Windows\system32\iertutil.dll
2015-07-14 20:14:30 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-14 20:14:30 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-07-14 20:14:30 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-07-14 20:14:29 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-14 20:14:29 ----A---- C:\Windows\system32\iernonce.dll
2015-07-14 20:14:29 ----A---- C:\Windows\system32\iedkcs32.dll
2015-07-14 20:14:29 ----A---- C:\Windows\system32\ie4uinit.exe
2015-07-14 20:14:28 ----A---- C:\Windows\system32\jsproxy.dll
2015-07-14 20:14:28 ----A---- C:\Windows\system32\ieUnatt.exe
2015-07-14 20:14:27 ----A---- C:\Windows\system32\msfeeds.dll
2015-07-14 20:14:27 ----A---- C:\Windows\system32\ieapfltr.dll
2015-07-14 20:14:27 ----A---- C:\Windows\system32\dxtmsft.dll
2015-07-14 20:14:25 ----A---- C:\Windows\system32\msrating.dll
2015-07-14 20:14:25 ----A---- C:\Windows\system32\iesetup.dll
2015-07-14 20:14:24 ----A---- C:\Windows\system32\wininet.dll
2015-07-14 20:14:24 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-07-14 20:14:22 ----A---- C:\Windows\system32\dxtrans.dll
2015-07-14 20:14:19 ----A---- C:\Windows\system32\mshtmled.dll
2015-07-14 20:14:18 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-07-14 20:14:17 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-07-14 20:14:11 ----A---- C:\Windows\system32\vbscript.dll
2015-07-14 20:14:11 ----A---- C:\Windows\system32\jscript.dll
2015-07-14 20:13:42 ----A---- C:\Windows\system32\jscript9.dll
2015-07-14 20:13:41 ----A---- C:\Windows\system32\jscript9diag.dll

======List of files/folders modified in the last 1 month======

2015-08-12 22:38:53 ----D---- C:\Windows\Prefetch
2015-08-12 22:13:00 ----RD---- C:\Program Files
2015-08-12 22:12:43 ----D---- C:\download
2015-08-12 21:31:24 ----D---- C:\Windows\system32\config
2015-08-12 21:04:26 ----D---- C:\Windows\Temp
2015-08-09 22:04:24 ----D---- C:\Windows\System32
2015-08-09 22:04:24 ----D---- C:\Windows\inf
2015-08-09 22:04:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-08-09 15:51:38 ----HD---- C:\ProgramData
2015-08-08 21:35:42 ----SHD---- C:\Windows\Installer
2015-08-05 02:29:53 ----A---- C:\Windows\system32\cmdcsr.dll
2015-08-05 02:29:50 ----A---- C:\Windows\system32\guard32.dll
2015-08-05 02:27:20 ----A---- C:\Windows\system32\cmdvrt32.dll
2015-08-05 02:26:53 ----A---- C:\Windows\system32\cmdkbd32.dll
2015-08-04 23:38:09 ----D---- C:\svatba
2015-08-04 22:19:36 ----D---- C:\Windows\winsxs
2015-08-04 22:13:22 ----SHD---- C:\System Volume Information
2015-08-02 18:41:09 ----D---- C:\Users\Gordon\AppData\Roaming\Audacity
2015-07-31 00:16:07 ----D---- C:\Hry
2015-07-31 00:10:14 ----D---- C:\music
2015-07-23 18:58:08 ----D---- C:\Windows\rescache
2015-07-20 23:23:17 ----RSD---- C:\Windows\Fonts
2015-07-19 22:30:30 ----D---- C:\Windows\system32\Tasks
2015-07-18 12:16:18 ----SHD---- C:\$Recycle.Bin
2015-07-18 11:12:55 ----D---- C:\Windows\system32\drivers
2015-07-15 21:52:09 ----D---- C:\Windows\Tasks
2015-07-15 21:37:15 ----D---- C:\Users\Gordon\AppData\Roaming\Scribus
2015-07-15 21:35:51 ----D---- C:\Windows\system32\FxsTmp
2015-07-14 22:13:13 ----D---- C:\Windows\system32\en-US
2015-07-14 22:13:13 ----D---- C:\Windows\system32\cs-CZ
2015-07-14 22:13:08 ----D---- C:\Program Files\Internet Explorer
2015-07-14 20:59:10 ----D---- C:\Windows\system32\MRT
2015-07-14 20:29:38 ----D---- C:\ProgramData\Microsoft Help
2015-07-14 20:10:51 ----D---- C:\Windows\system32\catroot2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 O2MDRDR;O2MDRDR; C:\Windows\system32\DRIVERS\o2media.sys [2005-11-14 34176]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2015-08-05 17064]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2015-08-05 626776]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2015-08-05 41736]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2013-03-04 30616]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2015-08-05 91176]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2009-07-14 1035776]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-07-14 1096704]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-23 4808192]
R3 netr28u;RT2870 USB Extensible Wireless LAN Card Driver; C:\Windows\system32\DRIVERS\netr28u.sys [2015-02-17 1617200]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-14 139776]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 84992]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2013-07-24 29696]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 393728]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl.sys [2015-03-14 18944]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2015-07-14 15872]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2014-12-16 15872]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2015-03-14 45056]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]
S3 usbser;USB Serial emulation driver; C:\Windows\system32\DRIVERS\usbser.sys [2013-08-29 28160]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam.sys [2008-05-06 11520]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2015-08-09 4353840]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 FoxitCloudUpdateService;Foxit Cloud Safe Update Service; C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [2015-07-27 244392]
R2 PSI_SVC_2;Corel License Validation Service V2, Powered by arvato; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2013-09-13 277360]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-09 104912]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-30 116648]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2015-08-09 1664704]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-30 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-07-14 102912]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [2015-07-09 155520]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-04-30 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2012-07-09 46528]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]

-----------------EOF-----------------

Zdravim

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

Děkuji za reakci.
Zde jsou logy.
OTL.Txt:
OTL logfile created on: 16.8.2015 19:35:06 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Gordon\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17959)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,99 Gb Total Physical Memory | 1,36 Gb Available Physical Memory | 68,54% Memory free
3,98 Gb Paging File | 3,09 Gb Available in Paging File | 77,49% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 148,95 Gb Total Space | 56,38 Gb Free Space | 37,85% Space Free | Partition Type: NTFS
Drive E: | 931,48 Gb Total Space | 687,22 Gb Free Space | 73,78% Space Free | Partition Type: NTFS

Computer Name: GORDON-PC | User Name: Gordon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2015.08.14 19:20:10 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Gordon\Desktop\OTL.exe
PRC - [2015.08.09 15:49:47 | 000,455,360 | ---- | M] (COMODO) -- C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
PRC - [2015.08.09 15:49:20 | 007,702,208 | ---- | M] (COMODO) -- C:\Program Files\COMODO\COMODO Internet Security\cis.exe
PRC - [2015.08.09 15:49:20 | 001,361,088 | ---- | M] (COMODO) -- C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
PRC - [2015.08.09 15:49:16 | 004,353,840 | ---- | M] (COMODO) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
PRC - [2015.07.27 19:55:18 | 000,244,392 | ---- | M] (Foxit Software Inc.) -- C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
PRC - [2015.07.15 21:51:48 | 000,245,576 | ---- | M] (Google Inc.) -- C:\Users\Gordon\AppData\Local\Google\Update\1.3.28.1\GoogleCrashHandler.exe
PRC - [2014.05.02 01:09:50 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2013.09.13 12:24:54 | 000,277,360 | ---- | M] (arvato digital services llc) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
PRC - [2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe

========== Modules (No Company Name) ==========

========== Services (SafeList) ==========

SRV - [2015.08.12 23:04:19 | 000,102,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV - [2015.08.09 15:49:18 | 001,664,704 | ---- | M] (COMODO) [On_Demand | Stopped] -- C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe -- (cmdvirth)
SRV - [2015.08.09 15:49:16 | 004,353,840 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (CmdAgent)
SRV - [2015.07.27 19:55:18 | 000,244,392 | ---- | M] (Foxit Software Inc.) [Auto | Running] -- C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe -- (FoxitCloudUpdateService)
SRV - [2015.07.09 18:43:53 | 000,155,520 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
SRV - [2014.04.30 01:30:50 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2013.09.13 12:24:54 | 000,277,360 | ---- | M] (arvato digital services llc) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2013.05.27 06:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2010.02.19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc)
DRV - [2015.08.05 02:31:15 | 000,091,176 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\Windows\System32\drivers\inspect.sys -- (inspect)
DRV - [2015.08.05 02:31:12 | 000,041,736 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\Windows\System32\drivers\cmdhlp.sys -- (cmdHlp)
DRV - [2015.08.05 02:31:09 | 000,626,776 | ---- | M] (COMODO) [File_System | System | Running] -- C:\Windows\System32\drivers\cmdguard.sys -- (cmdGuard)
DRV - [2015.08.05 02:31:06 | 000,017,064 | ---- | M] (COMODO) [File_System | System | Running] -- C:\Windows\System32\drivers\cmderd.sys -- (cmderd)
DRV - [2015.07.14 20:16:16 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2015.03.14 15:00:18 | 000,018,944 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\netaapl.sys -- (Netaapl)
DRV - [2015.02.17 23:06:35 | 001,617,200 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\netr28u.sys -- (netr28u)
DRV - [2010.11.20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010.11.20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010.11.20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010.11.20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010.11.20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010.11.20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2009.07.14 01:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
DRV - [2009.07.14 01:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
DRV - [2009.07.14 00:13:48 | 001,035,776 | ---- | M] (LSI Corp) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2009.07.14 00:02:46 | 001,096,704 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2008.05.06 16:06:00 | 000,011,520 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wdcsam.sys -- (WDC_SAM)
DRV - [2005.11.14 13:28:00 | 000,034,176 | ---- | M] (O2Micro ) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\o2media.sys -- (O2MDRDR)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-339101144-130110853-2470278515-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKU\S-1-5-21-339101144-130110853-2470278515-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-339101144-130110853-2470278515-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-339101144-130110853-2470278515-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE11SR
IE - HKU\S-1-5-21-339101144-130110853-2470278515-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.25.2: C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2: C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Gordon\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Gordon\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll (Google Inc.)

========== Chrome ==========

CHR - Extension: No name found = C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
CHR - Extension: No name found = C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.0_0\
CHR - Extension: No name found = C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0\
CHR - Extension: No name found = C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.9.1_0\
CHR - Extension: No name found = C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_0\
CHR - Extension: No name found = C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Extensions\eakadkkcemnilpmfdmhlmkfkfahjbnem\1.2.0_0\
CHR - Extension: No name found = C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcpecggcpdbebpphgbbihbaeabilklhf\0.2.1.39_0\
CHR - Extension: No name found = C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpdnogahpolnfpmnofheendeponbmla\1.0_0\
CHR - Extension: No name found = C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\
CHR - Extension: No name found = C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\

O1 HOSTS File: ([2014.05.07 20:25:02 | 000,000,864 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 validation.sls.microsoft.com
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cistray.exe (COMODO)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKU\S-1-5-21-339101144-130110853-2470278515-1001..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-339101144-130110853-2470278515-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.46.172.36 213.46.172.37
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4C779837-BE2B-4873-B0B9-03A9D2D5EE2E}: DhcpNameServer = 213.46.172.36 213.46.172.37
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CEE33711-8DF1-4F44-BAFC-C515E4426ABF}: DhcpNameServer = 213.46.172.36 213.46.172.37
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2014.01.19 00:18:51 | 000,000,000 | ---D | M] - E:\autorun -- [ NTFS ]
O32 - AutoRun File - [2012.11.02 22:39:44 | 000,000,059 | ---- | M] () - E:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{2c53849f-3135-11e4-aa74-001d924e72c4}\Shell - "" = AutoRun
O33 - MountPoints2\{2c53849f-3135-11e4-aa74-001d924e72c4}\Shell\AutoRun\command - "" = E:\unlock.exe autoplay=true
O33 - MountPoints2\{458b4372-d469-11e3-a77f-001d924e72c4}\Shell - "" = AutoRun
O33 - MountPoints2\{458b4372-d469-11e3-a77f-001d924e72c4}\Shell\AutoRun\command - "" = E:\Startme.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2015.08.14 19:19:44 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Gordon\Desktop\OTL.exe
[2015.08.13 00:18:56 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2015.08.12 23:09:55 | 000,103,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
[2015.08.12 23:04:54 | 002,943,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2015.08.12 23:04:54 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2015.08.12 23:04:54 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wu.upgrade.ps.dll
[2015.08.12 23:04:53 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2015.08.12 23:04:53 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2015.08.12 23:04:53 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2015.08.12 23:04:53 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2015.08.12 23:04:52 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2015.08.12 23:04:52 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSetupUI.dll
[2015.08.12 23:04:19 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollector.exe
[2015.08.12 23:04:19 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\JavaScriptCollectionAgent.dll
[2015.08.12 23:04:19 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwproxystub.dll
[2015.08.12 23:04:18 | 000,685,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2015.08.12 23:04:17 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2015.08.12 23:04:16 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2015.08.12 23:04:16 | 000,342,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2015.08.12 23:04:13 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2015.08.12 23:04:12 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2015.08.12 23:04:12 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9diag.dll
[2015.08.12 23:04:12 | 000,418,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2015.08.12 23:04:12 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2015.08.12 23:04:11 | 000,689,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2015.08.12 23:04:10 | 002,724,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2015.08.12 23:04:07 | 002,052,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2015.08.12 23:04:06 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2015.08.12 23:04:05 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2015.08.12 23:04:02 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollectorres.dll
[2015.08.12 23:03:57 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2015.08.12 23:03:55 | 000,479,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2015.08.12 23:03:48 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2015.08.12 23:03:45 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2015.08.12 23:03:42 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MshtmlDac.dll
[2015.08.12 23:03:39 | 004,520,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2015.08.12 23:03:12 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aaclient.dll
[2015.08.12 23:03:12 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsgqec.dll
[2015.08.12 23:02:58 | 001,251,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2015.08.12 23:02:58 | 000,299,520 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2015.08.12 23:02:49 | 002,384,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2015.08.12 23:02:48 | 001,987,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2015.08.12 23:02:46 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2015.08.12 23:02:46 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2015.08.12 23:02:46 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dciman32.dll
[2015.08.12 23:01:59 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\basesrv.dll
[2015.08.12 23:01:32 | 003,989,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2015.08.12 23:01:32 | 003,934,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2015.08.12 23:01:31 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2015.08.12 23:01:30 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rstrui.exe
[2015.08.12 23:01:30 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2015.08.12 23:01:30 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\auditpol.exe
[2015.08.12 23:01:30 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2015.08.12 23:01:29 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adtschema.dll
[2015.08.12 23:01:29 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msaudite.dll
[2015.08.12 23:01:29 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msobjs.dll
[2015.08.12 23:01:29 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
[2015.08.12 23:01:29 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmmsp.dll
[2015.08.12 23:01:29 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apisetschema.dll
[2015.08.12 23:01:05 | 000,715,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcupdate_GenuineIntel.dll
[2015.08.12 22:44:32 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml6r.dll
[2015.08.12 22:44:32 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll
[2015.08.12 22:13:00 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2015.08.12 22:12:58 | 000,000,000 | ---D | C] -- C:\rsit
[2015.08.02 18:36:09 | 000,000,000 | ---D | C] -- C:\Program Files\Lame For Audacity

========== Files - Modified Within 30 Days ==========

[2015.08.16 19:42:27 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2015.08.16 19:40:09 | 001,474,832 | ---- | M] () -- C:\Windows\System32\drivers\sfi.dat
[2015.08.16 19:24:11 | 000,000,940 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2015.08.16 18:57:03 | 000,000,966 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-339101144-130110853-2470278515-1001UA.job
[2015.08.16 16:59:47 | 000,002,422 | ---- | M] () -- C:\Users\Gordon\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome Canary.lnk
[2015.08.16 16:59:47 | 000,002,420 | ---- | M] () -- C:\Users\Gordon\Desktop\Google Chrome Canary.lnk
[2015.08.16 16:50:15 | 000,016,768 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015.08.16 16:50:15 | 000,016,768 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015.08.16 16:40:43 | 000,000,936 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2015.08.16 16:40:20 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015.08.16 16:40:09 | 1603,756,032 | -HS- | M] () -- C:\hiberfil.sys
[2015.08.14 21:58:09 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-339101144-130110853-2470278515-1001Core.job
[2015.08.14 19:20:10 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Gordon\Desktop\OTL.exe
[2015.08.14 15:35:54 | 003,819,248 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2015.08.12 23:09:55 | 000,103,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
[2015.08.12 23:04:54 | 002,943,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2015.08.12 23:04:54 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2015.08.12 23:04:54 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wu.upgrade.ps.dll
[2015.08.12 23:04:53 | 000,173,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2015.08.12 23:04:53 | 000,093,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2015.08.12 23:04:53 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2015.08.12 23:04:53 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2015.08.12 23:04:52 | 000,566,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2015.08.12 23:04:52 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSetupUI.dll
[2015.08.12 23:04:19 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollector.exe
[2015.08.12 23:04:19 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\JavaScriptCollectionAgent.dll
[2015.08.12 23:04:19 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwproxystub.dll
[2015.08.12 23:04:18 | 000,685,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2015.08.12 23:04:17 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2015.08.12 23:04:16 | 000,667,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2015.08.12 23:04:16 | 000,342,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2015.08.12 23:04:13 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2015.08.12 23:04:12 | 000,710,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2015.08.12 23:04:12 | 000,620,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9diag.dll
[2015.08.12 23:04:12 | 000,418,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2015.08.12 23:04:12 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2015.08.12 23:04:11 | 000,689,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2015.08.12 23:04:07 | 002,052,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2015.08.12 23:04:06 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2015.08.12 23:04:05 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2015.08.12 23:04:02 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollectorres.dll
[2015.08.12 23:03:57 | 000,285,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2015.08.12 23:03:55 | 000,479,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2015.08.12 23:03:45 | 001,155,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2015.08.12 23:03:42 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MshtmlDac.dll
[2015.08.12 23:03:39 | 004,520,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2015.08.12 23:03:12 | 000,131,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aaclient.dll
[2015.08.12 23:03:12 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tsgqec.dll
[2015.08.12 23:02:59 | 000,299,520 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2015.08.12 23:02:58 | 001,251,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2015.08.12 23:02:49 | 002,384,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2015.08.12 23:02:48 | 001,987,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2015.08.12 23:02:47 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2015.08.12 23:02:47 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dciman32.dll
[2015.08.12 23:02:46 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2015.08.12 23:01:59 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\basesrv.dll
[2015.08.12 23:01:33 | 003,989,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2015.08.12 23:01:32 | 003,934,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2015.08.12 23:01:31 | 000,400,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2015.08.12 23:01:30 | 000,262,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rstrui.exe
[2015.08.12 23:01:30 | 000,221,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2015.08.12 23:01:30 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\auditpol.exe
[2015.08.12 23:01:30 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2015.08.12 23:01:29 | 000,686,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\adtschema.dll
[2015.08.12 23:01:29 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msaudite.dll
[2015.08.12 23:01:29 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msobjs.dll
[2015.08.12 23:01:29 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
[2015.08.12 23:01:29 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmmsp.dll
[2015.08.12 23:01:29 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apisetschema.dll
[2015.08.12 23:01:29 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mountmgr.sys.mui
[2015.08.12 23:01:29 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\cs-CZ\mountmgr.sys.mui
[2015.08.12 23:01:05 | 000,715,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcupdate_GenuineIntel.dll
[2015.08.12 22:44:32 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml6r.dll
[2015.08.12 22:44:32 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll
[2015.08.10 22:00:54 | 000,009,216 | ---- | M] () -- C:\Users\Gordon\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2015.08.09 22:04:24 | 000,668,398 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2015.08.09 22:04:24 | 000,653,724 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2015.08.09 22:04:24 | 000,141,012 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2015.08.09 22:04:24 | 000,121,596 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2015.08.09 16:06:44 | 000,068,816 | ---- | M] () -- C:\Windows\System32\drivers\fvstore.dat
[2015.08.05 02:31:15 | 000,091,176 | ---- | M] (COMODO) -- C:\Windows\System32\drivers\inspect.sys
[2015.08.05 02:31:12 | 000,041,736 | ---- | M] (COMODO) -- C:\Windows\System32\drivers\cmdhlp.sys
[2015.08.05 02:31:09 | 000,626,776 | ---- | M] (COMODO) -- C:\Windows\System32\drivers\cmdguard.sys
[2015.08.05 02:31:06 | 000,017,064 | ---- | M] (COMODO) -- C:\Windows\System32\drivers\cmderd.sys
[2015.08.05 02:29:53 | 000,033,496 | ---- | M] (COMODO) -- C:\Windows\System32\cmdcsr.dll
[2015.08.05 02:29:50 | 000,445,472 | ---- | M] (COMODO) -- C:\Windows\System32\guard32.dll
[2015.08.05 02:27:20 | 000,288,448 | ---- | M] (COMODO) -- C:\Windows\System32\cmdvrt32.dll
[2015.08.05 02:26:53 | 000,040,640 | ---- | M] (COMODO) -- C:\Windows\System32\cmdkbd32.dll
[2015.07.29 18:57:42 | 000,001,489 | ---- | M] () -- C:\Users\Gordon\AppData\Local\recently-used.xbel
[2015.07.27 23:32:23 | 000,000,132 | ---- | M] () -- C:\Users\Gordon\AppData\Roaming\Adobe Formát PNG CS6 – předvolby

========== Files Created - No Company Name ==========

[2015.08.14 19:42:05 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2015.07.29 18:57:42 | 000,001,489 | ---- | C] () -- C:\Users\Gordon\AppData\Local\recently-used.xbel
[2015.07.27 23:32:23 | 000,000,132 | ---- | C] () -- C:\Users\Gordon\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
[2015.07.06 23:54:27 | 000,000,345 | ---- | C] () -- C:\Users\Gordon\rect4230.png
[2015.04.11 01:01:44 | 000,000,653 | ---- | C] () -- C:\Windows\unins000.dat
[2015.02.17 23:06:35 | 000,078,756 | ---- | C] () -- C:\Windows\System32\drivers\FW_7610.bin
[2015.02.17 23:06:35 | 000,046,692 | ---- | C] () -- C:\Windows\System32\drivers\FW_7601.bin
[2015.02.17 23:06:35 | 000,013,973 | ---- | C] () -- C:\Windows\System32\RaCoInst.dat
[2015.02.17 23:06:35 | 000,008,192 | ---- | C] () -- C:\Windows\System32\drivers\FW_2870.bin
[2015.02.17 23:06:35 | 000,004,096 | ---- | C] () -- C:\Windows\System32\drivers\FW_3573.bin
[2015.02.10 22:49:40 | 000,000,600 | ---- | C] () -- C:\Users\Gordon\AppData\Local\PUTTY.RND
[2015.02.01 22:34:17 | 000,000,286 | ---- | C] () -- C:\Users\Gordon\default-soapui-workspace.xml
[2015.02.01 22:33:59 | 000,002,253 | ---- | C] () -- C:\Users\Gordon\soapui-settings.xml
[2014.12.12 20:05:32 | 000,068,816 | ---- | C] () -- C:\Windows\System32\drivers\fvstore.dat
[2014.06.16 20:04:10 | 000,000,132 | ---- | C] () -- C:\Users\Gordon\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2014.05.17 16:54:25 | 000,009,216 | ---- | C] () -- C:\Users\Gordon\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014.05.07 21:49:43 | 000,180,224 | ---- | C] ( ) -- C:\Windows\System32\lmabtppm.dll
[2014.05.07 21:43:51 | 000,446,464 | ---- | C] ( ) -- C:\Windows\System32\lexlog.dll
[2014.04.30 23:37:33 | 000,007,595 | ---- | C] () -- C:\Users\Gordon\AppData\Local\Resmon.ResmonCfg
[2014.04.30 23:04:01 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2014.04.30 23:02:20 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2014.04.30 00:45:03 | 000,140,288 | ---- | C] () -- C:\Windows\System32\igfxtvcx.dll
[2014.04.30 00:43:20 | 000,668,398 | ---- | C] () -- C:\Windows\System32\perfh005.dat
[2014.04.30 00:43:20 | 000,292,004 | ---- | C] () -- C:\Windows\System32\perfi005.dat
[2014.04.30 00:43:20 | 000,141,012 | ---- | C] () -- C:\Windows\System32\perfc005.dat
[2014.04.30 00:43:20 | 000,036,232 | ---- | C] () -- C:\Windows\System32\perfd005.dat
[2014.04.29 21:28:33 | 001,474,832 | ---- | C] () -- C:\Windows\System32\drivers\sfi.dat

========== ZeroAccess Check ==========

[2009.07.14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2015.08.12 23:04:25 | 012,875,776 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2015.08.02 18:41:09 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Audacity
[2015.06.22 22:54:49 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Audio Editor Deluxe
[2014.10.22 20:17:25 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\ensemble.Ensemble2
[2014.05.11 22:40:04 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Foxit Software
[2015.06.22 22:35:04 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Get from YouTube
[2014.06.11 19:34:24 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\GHISLER
[2015.07.06 23:38:33 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\inkscape
[2014.05.13 00:04:49 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\IrfanView
[2014.05.13 23:43:24 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\MPC-HC
[2015.06.22 22:21:49 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\New Version Available
[2015.06.22 22:30:57 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Opera Software
[2014.05.21 23:49:16 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\pdfforge
[2015.07.15 21:37:15 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Scribus
[2015.06.22 22:25:47 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Shortcut
[2014.05.01 21:19:42 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Subversion
[2015.04.11 00:15:44 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\TreeCardGames
[2015.06.22 22:22:24 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\WebExtend

========== Purity Check ==========

========== Custom Scans ==========

< >
[2009.07.14 06:53:46 | 000,032,622 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2009.07.14 06:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2014.04.30 00:52:14 | 000,000,936 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2014.04.30 00:52:15 | 000,000,940 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2014.09.19 22:14:55 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-339101144-130110853-2470278515-1001Core.job
[2014.09.19 22:14:56 | 000,000,966 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-339101144-130110853-2470278515-1001UA.job

< >

< MD5 for: AGP440.SYS >
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2009.07.14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\System32\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 01:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_5f7fb206051affbb\cdrom.sys
[2010.11.20 10:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\drivers\cdrom.sys
[2010.11.20 10:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_6381e09675524225\cdrom.sys
[2010.11.20 10:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_61b0c5ce02098355\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2012.06.02 06:52:32 | 000,142,336 | ---- | M] (Microsoft Corporation) MD5=063DD65889D21035311463337BD268E7 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_788c7cc71232cc19\cryptsvc.dll
[2013.05.13 06:45:55 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=3897DFF247D9ED0006190349DE264E14 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18151_none_77d8a461f934afb8\cryptsvc.dll
[2015.03.14 22:04:35 | 000,143,872 | ---- | M] (Microsoft Corporation) MD5=49474B3E37969AF4B5C076F42B623AFF -- C:\Windows\System32\cryptsvc.dll
[2015.03.14 22:04:35 | 000,143,872 | ---- | M] (Microsoft Corporation) MD5=49474B3E37969AF4B5C076F42B623AFF -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18741_none_77e37fb1f92c82b1\cryptsvc.dll
[2014.07.07 03:40:07 | 000,143,872 | ---- | M] (Microsoft Corporation) MD5=623E143F2DF17C0106A9988F5D7DC878 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18526_none_77fe1d2ff917cf34\cryptsvc.dll
[2013.07.09 15:57:37 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=6DB499DEFCC827317C5371164A7CDB27 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_7840d305126b8725\cryptsvc.dll
[2013.07.09 06:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=7CA1BECEA5DE2643ADDAD32670E7A4C9 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18205_none_7812b70bf9088686\cryptsvc.dll
[2014.07.07 03:40:42 | 000,145,920 | ---- | M] (Microsoft Corporation) MD5=90BFC30E730A6760F1FEE2A55F8AB029 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22736_none_787cebf5123d8816\cryptsvc.dll
[2012.06.02 06:36:29 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=96C0E38905CFD788313BE8E11DAE3F2F -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_77ddc9e5f93000db\cryptsvc.dll
[2009.07.14 03:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_75d5ef87fc22e35a\cryptsvc.dll
[2010.11.20 14:18:24 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_7807034ff91166f4\cryptsvc.dll
[2013.05.11 06:59:05 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=AC04D05309BB2C418D0D80B9FB014642 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22322_none_7883b3211239122d\cryptsvc.dll
[2015.03.14 22:04:34 | 000,145,920 | ---- | M] (Microsoft Corporation) MD5=B97E16D36DB7B7DD22C97857506FA58A -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22948_none_787420691243d103\cryptsvc.dll
[2012.06.02 06:41:59 | 000,141,312 | ---- | M] (Microsoft Corporation) MD5=EA8C26ECF1656D9647EF044F115EC6DA -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.21225_none_76a05147150ffad1\cryptsvc.dll
[2013.10.05 03:52:03 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=F2D9242C3BBD1C36467FCAE1AE01733F -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22473_none_784ea5b51260b460\cryptsvc.dll
[2012.06.02 06:45:21 | 000,139,264 | ---- | M] (Microsoft Corporation) MD5=F2FDE6C8DBAAD44CC58D1E07E4AF4EED -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.17035_none_760be2a9fbfa79d1\cryptsvc.dll

< MD5 for: EXPLORER.EXE >
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2009.08.03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009.08.03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009.10.31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe

< MD5 for: HAL.DLL >
[2010.11.20 14:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\System32\hal.dll
[2010.11.20 14:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_ad305c8fb7ec5060\hal.dll
[2009.07.14 03:20:28 | 000,194,640 | ---- | M] (Microsoft Corporation) MD5=9A557EAE64ABAB3BA67A9BB035D24CB9 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_aaff48c7bafdccc6\hal.dll

< MD5 for: IASTORV.SYS >
[2009.07.14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
[2010.11.20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\drivers\iaStorV.sys
[2010.11.20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2009.07.14 03:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\System32\drivers\isapnp.sys
[2009.07.14 03:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\isapnp.sys
[2009.07.14 03:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\isapnp.sys
[2009.07.14 03:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\isapnp.sys

< MD5 for: LSASS.EXE >
[2011.11.17 09:09:25 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=05F38CB7CAB3CE8E9A1812D517DA93EF -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21092_none_a69c8e86d7476262\lsass.exe
[2015.03.14 22:06:22 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=0B0A841A8DE520CB85EA985DDD21CAE3 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22920_none_a8ccaf4ed436b8b6\lsass.exe
[2015.07.14 20:15:40 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=172E23440447BAE4C02BE92C11DFF544 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23112_none_a8d959d6d42cffdc\lsass.exe
[2015.03.14 22:06:22 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=1BFCF24227B53F35BA534BF94F0DB95C -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18714_none_a851e1b1bb0d6530\lsass.exe
[2015.03.14 22:07:09 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=2668762334E663B7BD68067A047C4187 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22943_none_a8ba1054d4443c9d\lsass.exe
[2015.08.12 23:01:30 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=266A126D1464409DF8FA826C48166B0E -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23136_none_a8c7bb26d4399d1a\lsass.exe
[2015.03.14 22:04:29 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=27945CF21E17AFBFF1E31993AAEE4551 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18741_none_a82e710fbb286cfe\lsass.exe
[2015.04.24 18:21:07 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=3228BE5229F9EEFB18654A56B016F642 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_a8e427dcd424e6c4\lsass.exe
[2015.05.13 18:51:15 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=35F0817C803DFC520CBF7031B72B6A17 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_a8de5962d4288168\lsass.exe
[2015.08.12 23:01:30 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=3AD57B7A84035A05079226D1DE47E771 -- C:\Windows\System32\lsass.exe
[2015.08.12 23:01:30 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=3AD57B7A84035A05079226D1DE47E771 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18933_none_a83b455bbb1e7e09\lsass.exe
[2015.07.14 20:15:40 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=43972ED806646274C05E6BA2C1585B99 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18909_none_a861b6dbbb00c240\lsass.exe
[2015.03.14 22:07:09 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=4B66FC6316D1940837965C01D6DDD9A1 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18738_none_a8404301bb1a026e\lsass.exe
[2013.09.25 02:54:21 | 000,022,016 | ---- | M] (Microsoft Corporation) MD5=559C7769B397F07E12725EE55337D4C6 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22465_none_a8a66792d452b56a\lsass.exe
[2015.05.13 18:51:15 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=618BA9298726844DA4E9E53C7C8D4015 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_a84fe303bb0f2fa9\lsass.exe
[2014.04.12 04:06:16 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=627B40EB2595D8FCF1960F33389EB7D3 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22653_none_a8af3ab6d44c6119\lsass.exe
[2014.04.12 04:06:16 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=627B40EB2595D8FCF1960F33389EB7D3 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22712_none_a8d97c02d42cd525\lsass.exe
[2014.04.12 04:06:16 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=627B40EB2595D8FCF1960F33389EB7D3 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22736_none_a8c7dd52d4397263\lsass.exe
[2014.04.12 04:06:16 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=627B40EB2595D8FCF1960F33389EB7D3 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22807_none_a8e94f46d420350e\lsass.exe
[2014.04.12 04:06:16 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=627B40EB2595D8FCF1960F33389EB7D3 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22843_none_a8ba0e6ed4443f76\lsass.exe
[2014.04.12 04:06:16 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=627B40EB2595D8FCF1960F33389EB7D3 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22923_none_a8cfb02cd43404bb\lsass.exe
[2013.09.25 02:49:20 | 000,022,016 | ---- | M] (Microsoft Corporation) MD5=803B370865D907EA21DC0C2B6A8936B5 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18270_none_a80cf783bb41b5b7\lsass.exe
[2011.11.17 07:29:50 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=81951F51E318AECC2D68559E47485CC4 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_a84828d7bb1480d7\lsass.exe
[2011.11.17 07:29:50 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=81951F51E318AECC2D68559E47485CC4 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17856_none_a828bb43bb2beb28\lsass.exe
[2015.03.14 22:04:29 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=8CAD69B705D065CCAAA0E4C17C07B21E -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22948_none_a8bf11c6d43fbb50\lsass.exe
[2015.04.24 18:21:07 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=981CE3E3A653511799F4A862494B66A8 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_a7ff6379bb4aaa14\lsass.exe
[2015.07.14 20:16:09 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=A1FEDB23C022280B2649B553D8113F18 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23115_none_a8dc5ab4d42a4be1\lsass.exe
[2012.06.02 06:40:31 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=A6034689ACF9D14973F8384AD5A5451E -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21225_none_a6eb42a4d70be51e\lsass.exe
[2015.08.12 23:01:58 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=A7D58776C4D1F7D98F93C2DCA4FDD0E8 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18923_none_a8461547bb166218\lsass.exe
[2014.12.24 14:22:32 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=AC0D7A5778D5A8C17ECFEECB302B4FA4 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18606_none_a85eb04bbb037ec6\lsass.exe
[2015.03.14 22:06:43 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=BA0FE19728F5FA8473FB13C9C031FCC0 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18717_none_a854e28fbb0ab135\lsass.exe
[2015.03.14 22:07:25 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=BE2D700A9B21B40622C250FE1206A02F -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22983_none_a88ed0a4d464ac61\lsass.exe
[2011.11.17 07:36:26 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=C2243FF9E9AAD0C30E8B1A0914DA15B6 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16915_none_a66c9bbdbde5f8fa\lsass.exe
[2011.11.17 07:36:26 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=C2243FF9E9AAD0C30E8B1A0914DA15B6 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.17035_none_a656d407bdf6641e\lsass.exe
[2015.08.12 23:01:57 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=CCA1BCA3020C6A95BE416D7DEEF62B2C -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23126_none_a8d28b12d4318129\lsass.exe
[2015.07.14 20:16:09 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=DC0B4400073A404B53F571126B58F480 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18912_none_a84fe4e9bb0f2cd0\lsass.exe
[2014.04.12 04:11:22 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=DD17E1573651293D4ED31053795B3471 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18443_none_a8306bf1bb26a837\lsass.exe
[2014.04.12 04:11:22 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=DD17E1573651293D4ED31053795B3471 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18496_none_a7fd5d33bb4c7ff1\lsass.exe
[2014.04.12 04:11:22 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=DD17E1573651293D4ED31053795B3471 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18526_none_a8490e8dbb13b981\lsass.exe
[2014.04.12 04:11:22 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=DD17E1573651293D4ED31053795B3471 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18637_none_a83f40d1bb1aebf0\lsass.exe
[2014.12.24 14:22:32 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F0F6E52554E314A71E776B1086B5B3DD -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22814_none_a8db7e7cd42b04fa\lsass.exe
[2009.07.14 03:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_a620e0e5be1ecda7\lsass.exe
[2009.07.14 03:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_a61fe281be1fb177\lsass.exe
[2009.07.14 03:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_a69eaf60d7456d32\lsass.exe
[2009.07.14 03:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_a851f4adbb0d5141\lsass.exe
[2015.03.14 22:07:25 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F65F365AC0D1657917EFDB52445C848B -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18779_none_a816039bbb398b89\lsass.exe
[2012.06.02 06:51:22 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=FA7B950E4CA6AA260C4EABA19E03644D -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22010_none_a8d76e24d42eb666\lsass.exe
[2011.11.17 07:24:04 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=FBCB2DFA40862DAA7B1534C9538208A5 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21861_none_a8a284cad4562b09\lsass.exe

< MD5 for: NDIS.SYS >
[2009.07.14 03:20:44 | 000,710,720 | ---- | M] (Microsoft Corporation) MD5=23759D175A0A9BAAF04D05047BC135A8 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_a79d81ea7d62a289\ndis.sys
[2010.11.20 14:30:06 | 000,712,576 | ---- | M] (Microsoft Corporation) MD5=E7C54812A2AAF43316EB6930C1FFA108 -- C:\Windows\System32\drivers\ndis.sys
[2010.11.20 14:30:06 | 000,712,576 | ---- | M] (Microsoft Corporation) MD5=E7C54812A2AAF43316EB6930C1FFA108 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_a9ce95b27a512623\ndis.sys

< MD5 for: NETLOGON.DLL >
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll

< MD5 for: NVRAID.SYS >
[2009.07.14 03:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) MD5=3F3D04B1D08D43C16EA7963954EC768D -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvraid.sys
[2010.11.20 14:30:06 | 000,117,120 | ---- | M] (NVIDIA Corporation) MD5=AF2EEC9580C1D32FB7EAF105D9784061 -- C:\Windows\System32\drivers\nvraid.sys
[2010.11.20 14:30:06 | 000,117,120 | ---- | M] (NVIDIA Corporation) MD5=AF2EEC9580C1D32FB7EAF105D9784061 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvraid.sys
[2010.11.20 14:30:06 | 000,117,120 | ---- | M] (NVIDIA Corporation) MD5=AF2EEC9580C1D32FB7EAF105D9784061 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvraid.sys

< MD5 for: NVSTOR.SYS >
[2010.11.20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\drivers\nvstor.sys
[2010.11.20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys
[2009.07.14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll

< MD5 for: SMSS.EXE >
[2015.03.14 22:04:31 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=01C6C743FE49D0FB3F0A1391FEF1DEB3 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18741_none_ae1e8e4a778ed482\smss.exe
[2013.03.19 04:43:41 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=0294CC751D7FAEB13621EEFB8A749429 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22280_none_ae7bdfb790cddbcf\smss.exe
[2015.03.14 22:07:09 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=0C41393891E2EB9F8FDF28A0654C5B5E -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18738_none_ae30603c778069f2\smss.exe
[2015.08.12 23:01:59 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=10F4A8EE79F4E0ECC88AC71CA068B54C -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18923_none_ae363282777cc99c\smss.exe
[2009.07.14 03:14:39 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=16742790895960690237A5143CEDEC8B -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_ac10fe207a85352b\smss.exe
[2015.08.12 23:01:30 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=2B8B8E5AE54D0EAAE5B84F65C325C3A7 -- C:\Windows\System32\smss.exe
[2015.08.12 23:01:30 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=2B8B8E5AE54D0EAAE5B84F65C325C3A7 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18933_none_ae2b62967784e58d\smss.exe
[2013.03.19 04:51:05 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=37F4765554F2CD34AAAB616F696E5539 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.21490_none_ac8ab2c593af8bd4\smss.exe
[2015.04.24 18:21:07 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=485436C2A90318218777401FB973558C -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18798_none_adef80b477b11198\smss.exe
[2013.07.08 05:02:28 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=634E0B45780F502304592C5615A31089 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22379_none_ae8fb42390bda114\smss.exe
[2015.08.12 23:01:59 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=697A24C3A9F1ECD602C3D961D001036C -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23126_none_aec2a84d9097e8ad\smss.exe
[2015.03.14 22:04:32 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=7FFC65934B6CC409D62448ADFE50EBF1 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22948_none_aeaf2f0190a622d4\smss.exe
[2013.03.19 04:50:03 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=B24BF638652522BB5E14AB7993FD4A5D -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.17273_none_ac19b4ca7a7f0306\smss.exe
[2015.04.24 18:21:07 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=BCE230B8626E42E997285173A9426EE5 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23002_none_aed44517908b4e48\smss.exe
[2015.08.12 23:01:30 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=C288ED8B99BC77DD8C8006CB8E97DC10 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23136_none_aeb7d86190a0049e\smss.exe
[2014.05.02 01:10:55 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=D2A72C71CD6C18A99E920EC5761F0C7D -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22436_none_aeb7f4db909fe272\smss.exe
[2014.04.12 04:06:24 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=D8A5E3B8EB601B897AC78B060177E460 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22653_none_ae9f57f190b2c89d\smss.exe
[2014.04.12 04:06:24 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=D8A5E3B8EB601B897AC78B060177E460 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22780_none_ae7be93590cdcd92\smss.exe
[2014.04.12 04:06:24 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=D8A5E3B8EB601B897AC78B060177E460 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22921_none_aebdccd3909c3991\smss.exe
[2014.04.12 04:06:24 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=D8A5E3B8EB601B897AC78B060177E460 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22923_none_aebfcd67909a6c3f\smss.exe
[2013.03.19 04:49:16 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=DE91DCC7BC55E940979097E98F743205 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18113_none_ae40f33e7774c473\smss.exe
[2015.03.14 22:07:09 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=EA4931A2EE99926C89935FC92526D7A4 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22943_none_aeaa2d8f90aaa421\smss.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe

< MD5 for: TCPIP.SYS >
[2011.04.25 06:56:06 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=0158D5E9982E9D6A90DFC802F618E130 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16802_none_b347f075c77b9c9d\tcpip.sys
[2011.04.25 06:31:30 | 001,290,624 | ---- | M] (Microsoft Corporation) MD5=24326784DF8F3D5F5BBB9F878CE33C14 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_b52f4dc5c4a121e0\tcpip.sys
[2009.07.14 03:19:10 | 001,285,712 | ---- | M] (Microsoft Corporation) MD5=2CC3D75488ABD3EC628BBB9A4FC84EFC -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_b2f46875c7b9d667\tcpip.sys
[2013.01.03 07:01:49 | 001,303,912 | ---- | M] (Microsoft Corporation) MD5=34AE5CC0C7417AB701C2AA8A7BC75417 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21415_none_b3c99dece09ecc3b\tcpip.sys
[2010.11.20 14:30:12 | 001,290,112 | ---- | M] (Microsoft Corporation) MD5=37E8FA3779668837CA9E2C36D2415949 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_b5257c3dc4a85a01\tcpip.sys
[2013.01.04 06:56:23 | 001,308,504 | ---- | M] (Microsoft Corporation) MD5=4A95845C5F33A4DDEB6AEF6367FB6520 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_b5becc06ddb98192\tcpip.sys
[2013.07.06 07:05:35 | 001,293,760 | ---- | M] (Microsoft Corporation) MD5=4E8B9BE71B807B3BAEDB7F4243F85E3C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_b52f2f65c4a146e5\tcpip.sys
[2013.07.06 06:57:37 | 001,309,120 | ---- | M] (Microsoft Corporation) MD5=528F7CC60391DD0FAB0344F32F051FDF -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_b5721e2eddf328f9\tcpip.sys
[2014.04.05 04:25:01 | 001,294,272 | ---- | M] (Microsoft Corporation) MD5=5579DD18546999F5D0EC39D018726C6B -- C:\Windows\System32\drivers\tcpip.sys
[2014.04.05 04:25:01 | 001,294,272 | ---- | M] (Microsoft Corporation) MD5=5579DD18546999F5D0EC39D018726C6B -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18438_none_b513c4dfc4b513b9\tcpip.sys
[2014.05.02 01:10:17 | 001,309,120 | ---- | M] (Microsoft Corporation) MD5=6C4F3D92764FFA22D28061A4D9235446 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22444_none_b58e8eb0ddde6cf1\tcpip.sys
[2011.04.25 08:31:09 | 001,301,376 | ---- | M] (Microsoft Corporation) MD5=6D4728CFF2724FF3A4654971D61D0F1C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_b5ad1a5addc7c444\tcpip.sys
[2013.01.03 07:05:20 | 001,293,672 | ---- | M] (Microsoft Corporation) MD5=7C0507D2391AF5933600CBCED799F277 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_b502eb9fc4c2a304\tcpip.sys
[2011.04.25 06:44:18 | 001,298,816 | ---- | M] (Microsoft Corporation) MD5=8861B9A06BA99C6E1D62D0C86DFAB86C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20951_none_b39a7d5ae0c2aec5\tcpip.sys
[2013.01.04 06:55:21 | 001,287,528 | ---- | M] (Microsoft Corporation) MD5=BBCEAEFF1FD72A026F827CBB2F4AA8AD -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.17206_none_b34bcf71c7782cb0\tcpip.sys
[2014.05.02 01:10:18 | 001,294,272 | ---- | M] (Microsoft Corporation) MD5=CA59F7C570AF70BC174F477CFE2D9EE3 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_b4fa2013c4c8ebf1\tcpip.sys
[2014.04.05 04:16:21 | 001,310,144 | ---- | M] (Microsoft Corporation) MD5=EA47AB18E289333AB94397D77CA6E3A1 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22648_none_b59293a4dddacc9b\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2009.10.28 08:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009.10.28 07:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2014.07.16 04:56:14 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=4F37B93C14AEE313BEC52A23AFB15C2E -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_7224b2134c7555fa\winlogon.exe
[2014.07.17 03:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\System32\winlogon.exe
[2014.07.17 03:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_71a5e34e334f9d18\winlogon.exe
[2010.11.20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009.07.14 03:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
[2014.03.04 11:17:02 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=998507B046BA314CE8245364C686FA67 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_71da23b23327143c\winlogon.exe
[2014.03.04 12:39:02 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=D53972F87D850CD2EB4B29B60CAFDD77 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_7255f1994c4f8119\winlogon.exe

< MD5 for: WS2_32.DLL >
[2010.11.20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\System32\ws2_32.dll
[2010.11.20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll
[2009.07.14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[9 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[10 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\Installer\{2736B6BD-31EC-4FC8-A48C-F0A5C914C0B6}\*.tmp files -> C:\Windows\Installer\{2736B6BD-31EC-4FC8-A48C-F0A5C914C0B6}\*.tmp -> ]
[13 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2015.06.01 22:57:15 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Adobe
[2015.08.02 18:41:09 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Audacity
[2015.06.22 22:54:49 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Audio Editor Deluxe
[2014.10.14 23:10:49 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Corel
[2014.10.22 20:17:25 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\ensemble.Ensemble2
[2014.05.11 22:40:04 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Foxit Software
[2015.06.22 22:35:04 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Get from YouTube
[2014.06.11 19:34:24 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\GHISLER
[2014.04.29 21:20:53 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Identities
[2015.07.06 23:38:33 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\inkscape
[2015.02.17 23:05:23 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\InstallShield
[2014.05.13 00:04:49 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\IrfanView
[2015.06.01 22:32:27 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Macromedia
[2009.07.14 09:48:45 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Media Center Programs
[2015.02.01 15:53:09 | 000,000,000 | --SD | M] -- C:\Users\Gordon\AppData\Roaming\Microsoft
[2015.06.22 22:22:42 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Mozilla
[2014.05.13 23:43:24 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\MPC-HC
[2015.06.22 22:21:49 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\New Version Available
[2015.06.22 22:30:57 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Opera Software
[2014.05.21 23:49:16 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\pdfforge
[2015.07.15 21:37:15 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Scribus
[2015.06.22 22:25:47 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Shortcut
[2014.05.01 21:19:42 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\Subversion
[2015.04.11 00:15:44 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\TreeCardGames
[2015.02.09 23:45:47 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\vlc
[2015.06.22 22:22:24 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\WebExtend
[2014.04.30 23:57:15 | 000,000,000 | ---D | M] -- C:\Users\Gordon\AppData\Roaming\WinRAR

< %APPDATA%\*.exe /s >
[2015.06.22 22:21:50 | 000,805,224 | ---- | M] (Web Internet Generic ) -- C:\Users\Gordon\AppData\Roaming\New Version Available\AudioEditorDeluxe.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2015.08.16 16:50:15 | 000,016,768 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015.08.16 16:50:15 | 000,016,768 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015.08.14 15:35:54 | 003,819,248 | ---- | M] () -- C:\Windows\system32\FNTCACHE.DAT

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Google Update" = "C:\Users\Gordon\AppData\Local\Google\Update\GoogleUpdate.exe" /c -- [2014.09.19 22:14:27 | 000,116,648 | ---- | M] (Google Inc.)
"AdobeBridge" =

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2015.08.16 19:42:27 | 000,000,512 | ---- | M] () MD5=A3E005933FEFA41CA228DFFED2E8BF4C -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2014.03.14 23:04:40 | 000,092,827 | ---- | M] () -- \Program Files\Corel\CorelDRAW Graphics Suite X7\Custom Data\Bumpmap\Cracks.cpt
[2014.03.14 23:04:42 | 000,017,870 | ---- | M] () -- \Program Files\Corel\CorelDRAW Graphics Suite X7\Custom Data\Canvas\cracks2c.bmp
[2014.08.26 22:07:28 | 000,062,238 | ---- | M] () -- \Program Files\GIMP 2\share\gimp\2.0\patterns\cracked.pat
[2015.01.30 20:51:30 | 000,114,899 | ---- | M] () -- \Program Files\Inkscape\python\Lib\site-packages\numpy\f2py\crackfortran.py
[2014.12.21 18:54:03 | 000,004,041 | ---- | M] () -- \Program Files\JDownloader\jd\plugins\hoster\CrackedCom.class

< *keygen* /s >

< *AntiWPA* /s >

< *loader* /s >
[2014.09.05 16:43:58 | 000,000,668 | ---- | M] () -- \download\Flaska 2015-08-06\Futurum\old\assets\graphics\loader.gif
[2014.09.05 16:43:58 | 000,000,673 | ---- | M] () -- \download\Flaska 2015-08-06\Futurum\old\assets\graphics\loader.white.gif
[2012.03.13 12:18:28 | 003,297,128 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\Photodownloader.exe
[2012.03.13 10:41:34 | 000,000,860 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\Photodownloader.exe.manifest
[2012.03.13 10:41:58 | 000,011,161 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2012.03.13 10:42:00 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\da_dk\Photodownloader.ini
[2012.03.13 10:42:02 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\de_de\Photodownloader.ini
[2012.03.13 10:42:02 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\en_us\Photodownloader.ini
[2012.03.13 10:42:02 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\es_es\Photodownloader.ini
[2012.03.13 10:42:02 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\fi_fi\Photodownloader.ini
[2012.03.13 10:42:02 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\fr_fr\Photodownloader.ini
[2012.03.13 10:42:02 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\it_it\Photodownloader.ini
[2012.03.13 10:42:04 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\ja_jp\Photodownloader.ini
[2012.03.13 10:42:04 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\ko_kr\Photodownloader.ini
[2012.03.13 10:42:04 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\nl_nl\Photodownloader.ini
[2012.03.13 10:42:04 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\no_no\Photodownloader.ini
[2012.03.13 10:42:04 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\pt_br\Photodownloader.ini
[2012.03.13 10:42:04 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\sv_se\Photodownloader.ini
[2012.03.13 10:42:06 | 000,000,324 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\zh_cn\Photodownloader.ini
[2012.03.13 10:42:06 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6\apd\shared_assets\locales\zh_tw\Photodownloader.ini
[2014.06.19 13:55:24 | 000,017,867 | ---- | M] () -- \Program Files\Apache\apache-tomcat-8.0.9\webapps\docs\class-loader-howto.html
[2014.06.19 13:55:24 | 000,011,664 | ---- | M] () -- \Program Files\Apache\apache-tomcat-8.0.9\webapps\docs\config\loader.html
[2014.08.26 19:09:40 | 000,001,032 | ---- | M] () -- \Program Files\Apache\apache-tomcat-8.0.9\webapps\ui-examples\WEB-INF\classes\test\ZKResourceLoader.class
[2015.06.01 22:39:43 | 000,078,336 | ---- | M] () -- \Program Files\Common Files\Adobe\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_BinaryLoader_4.4.3.dll
[2015.06.01 22:39:43 | 000,155,136 | ---- | M] () -- \Program Files\Common Files\Adobe\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_XSDLoader2_4.4.3.dll
[2015.06.01 22:39:43 | 000,117,248 | ---- | M] () -- \Program Files\Common Files\Adobe\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_XSDLoader_4.4.3.dll
[2006.10.26 13:40:34 | 000,057,344 | ---- | M] () -- \Program Files\Common Files\microsoft shared\VS7DEBUG\coloader.dll
[2006.10.26 13:40:34 | 000,005,120 | ---- | M] () -- \Program Files\Common Files\microsoft shared\VS7DEBUG\coloader.tlb
[2014.03.15 00:26:26 | 000,014,160 | ---- | M] () -- \Program Files\Corel\CorelDRAW Graphics Suite X7\Programs\ReflectionLoader.dll
[2011.03.08 09:43:28 | 000,013,734 | ---- | M] () -- \Program Files\GIMP 2\Python\Lib\unittest\loader.py
[2015.01.30 20:51:30 | 000,003,614 | ---- | M] () -- \Program Files\Inkscape\etc\gtk-2.0\gdk-pixbuf.loaders
[2015.01.30 20:51:30 | 000,030,804 | ---- | M] () -- \Program Files\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ani.dll
[2015.01.30 20:51:30 | 000,027,898 | ---- | M] () -- \Program Files\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-bmp.dll
[2015.01.30 20:51:30 | 000,042,058 | ---- | M] () -- \Program Files\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-gif.dll
[2015.01.30 20:51:30 | 000,023,145 | ---- | M] () -- \Program Files\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-icns.dll
[2015.01.30 20:51:30 | 000,028,692 | ---- | M] () -- \Program Files\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ico.dll
[2015.01.30 20:51:30 | 000,034,496 | ---- | M] () -- \Program Files\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-jpeg.dll
[2015.01.30 20:51:30 | 000,022,435 | ---- | M] () -- \Program Files\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-pcx.dll
[2015.01.30 20:51:30 | 000,036,528 | ---- | M] () -- \Program Files\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-png.dll
[2015.01.30 20:51:30 | 000,026,252 | ---- | M] () -- \Program Files\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-pnm.dll
[2015.01.30 20:51:30 | 000,020,063 | ---- | M] () -- \Program Files\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ras.dll
[2015.01.30 20:51:30 | 000,024,412 | ---- | M] () -- \Program Files\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-tga.dll
[2015.01.30 20:51:30 | 000,029,401 | ---- | M] () -- \Program Files\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-tiff.dll
[2015.01.30 20:51:30 | 000,019,399 | ---- | M] () -- \Program Files\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-wbmp.dll
[2015.01.30 20:51:30 | 000,025,270 | ---- | M] () -- \Program Files\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-xbm.dll
[2015.01.30 20:51:30 | 000,042,114 | ---- | M] () -- \Program Files\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-xpm.dll
[2015.01.30 20:51:30 | 000,018,909 | ---- | M] () -- \Program Files\Inkscape\lib\gtk-2.0\2.10.0\loaders\svg_loader.dll
[2015.01.30 20:51:30 | 000,032,958 | ---- | M] () -- \Program Files\Inkscape\python\Lib\site-packages\sk1libs\filters\import\ailoader.py
[2015.01.30 20:51:30 | 000,001,847 | ---- | M] () -- \Program Files\Inkscape\python\Lib\site-packages\sk1libs\filters\import\bziploader.py
[2015.01.30 20:51:30 | 000,057,685 | ---- | M] () -- \Program Files\Inkscape\python\Lib\site-packages\sk1libs\filters\import\ccxloader.py
[2015.01.30 20:51:30 | 000,029,336 | ---- | M] () -- \Program Files\Inkscape\python\Lib\site-packages\sk1libs\filters\import\cdrloader.py
[2015.01.30 20:51:30 | 000,001,341 | ---- | M] () -- \Program Files\Inkscape\python\Lib\site-packages\sk1libs\filters\import\cdrziploader.py
[2015.01.30 20:51:30 | 000,028,643 | ---- | M] () -- \Program Files\Inkscape\python\Lib\site-packages\sk1libs\filters\import\cgmloader.py
[2015.01.30 20:51:30 | 000,055,918 | ---- | M] () -- \Program Files\Inkscape\python\Lib\site-packages\sk1libs\filters\import\cmxloader.py
[2015.01.30 20:51:30 | 000,038,308 | ---- | M] () -- \Program Files\Inkscape\python\Lib\site-packages\sk1libs\filters\import\dxfloader.py
[2015.01.30 20:51:30 | 000,001,949 | ---- | M] () -- \Program Files\Inkscape\python\Lib\site-packages\sk1libs\filters\import\gziploader.py
[2015.01.30 20:51:30 | 000,007,779 | ---- | M] () -- \Program Files\Inkscape\python\Lib\site-packages\sk1libs\filters\import\pltloader.py
[2015.01.30 20:51:30 | 000,017,301 | ---- | M] () -- \Program Files\Inkscape\python\Lib\site-packages\sk1libs\filters\import\sk1loader.py
[2015.01.30 20:51:30 | 000,015,416 | ---- | M] () -- \Program Files\Inkscape\python\Lib\site-packages\sk1libs\filters\import\skloader.py
[2015.01.30 20:51:30 | 000,015,832 | ---- | M] () -- \Program Files\Inkscape\python\Lib\site-packages\sk1libs\filters\import\stitchloader.py
[2015.01.30 20:51:30 | 000,038,937 | ---- | M] () -- \Program Files\Inkscape\python\Lib\site-packages\sk1libs\filters\import\svgloader.py
[2015.01.30 20:51:30 | 000,014,300 | ---- | M] () -- \Program Files\Inkscape\python\Lib\site-packages\sk1libs\filters\import\wmfloader.py
[2015.01.30 20:51:30 | 000,017,550 | ---- | M] () -- \Program Files\Inkscape\python\Lib\site-packages\sk1libs\filters\import\xfigloader.py
[2014.05.01 18:18:51 | 000,000,948 | ---- | M] () -- \Program Files\Java\jdk1.8.0_05\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-loaders.xml
[2014.05.01 18:18:51 | 000,000,411 | ---- | M] () -- \Program Files\Java\jdk1.8.0_05\lib\visualvm\platform\config\Modules\org-openide-loaders.xml
[2014.05.01 18:18:55 | 001,199,828 | ---- | M] () -- \Program Files\Java\jdk1.8.0_05\lib\visualvm\platform\modules\org-openide-loaders.jar
[2014.05.01 18:18:54 | 000,006,178 | ---- | M] () -- \Program Files\Java\jdk1.8.0_05\lib\visualvm\platform\modules\locale\org-openide-loaders_ja.jar
[2014.05.01 18:18:54 | 000,005,756 | ---- | M] () -- \Program Files\Java\jdk1.8.0_05\lib\visualvm\platform\modules\locale\org-openide-loaders_zh_CN.jar
[2014.05.01 18:18:56 | 000,000,456 | ---- | M] () -- \Program Files\Java\jdk1.8.0_05\lib\visualvm\platform\update_tracking\org-openide-loaders.xml
[2014.12.21 18:41:23 | 000,214,528 | ---- | M] () -- \Program Files\JDownloader\JDownloader.exe
[2012.05.22 09:43:16 | 000,593,293 | ---- | M] () -- \Program Files\JDownloader\JDownloader.jar
[2014.12.21 18:41:23 | 000,218,816 | ---- | M] () -- \Program Files\JDownloader\JDownloaderBETA.exe
[2014.12.21 18:41:23 | 000,218,816 | ---- | M] () -- \Program Files\JDownloader\JDownloaderD3D.exe
[2014.12.21 18:41:23 | 000,219,264 | ---- | M] () -- \Program Files\JDownloader\JDownloaderPortable.exe
[2014.12.21 18:58:43 | 000,000,111 | ---- | M] () -- \Program Files\JDownloader\jd\img\hosterlogos\bigdownloader.com.png
[2014.12.21 18:58:45 | 000,000,101 | ---- | M] () -- \Program Files\JDownloader\jd\img\hosterlogos\exclusiveloader.com.png
[2014.12.21 18:48:00 | 000,000,105 | ---- | M] () -- \Program Files\JDownloader\jd\img\hosterlogos\uploader.pl.png
[2014.12.21 18:51:18 | 000,011,345 | ---- | M] () -- \Program Files\JDownloader\jd\plugins\hoster\BigDownloaderCom.class
[2014.12.21 18:50:37 | 000,003,882 | ---- | M] () -- \Program Files\JDownloader\jd\plugins\hoster\UploaderJp.class
[2012.05.22 09:43:16 | 000,032,222 | ---- | M] () -- \Program Files\JDownloader\licenses\jdownloader.license
[2014.04.30 09:54:12 | 000,013,501 | ---- | M] () -- \Program Files\Scribus 1.4.5\lib\unittest\loader.py
[2014.04.09 10:44:38 | 000,072,857 | ---- | M] () -- \Program Files\SmartBear\SoapUI-5.0.0\lib\downloader-1.0-SNAPSHOT.jar
[2015.04.29 11:31:02 | 000,001,702 | ---- | M] () -- \Program Files\Sony Mobile\Update Engine\licenses\loaderbinarylegal.txt
[2014.12.21 18:42:09 | 000,001,891 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Uninstaller.lnk
[2014.12.21 18:42:08 | 000,001,870 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
[2014.12.21 18:42:09 | 000,001,947 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk
[2014.05.01 18:36:31 | 000,000,745 | ---- | M] () -- \Programování\eclipse\configuration\org.eclipse.osgi\bundles\360\1\.cp\org\eclipse\jdt\internal\junit\runner\AbstractTestLoader.class
[2014.05.01 18:36:32 | 000,000,332 | ---- | M] () -- \Programování\eclipse\configuration\org.eclipse.osgi\bundles\360\1\.cp\org\eclipse\jdt\internal\junit\runner\ITestLoader.class
[2014.05.01 18:36:32 | 000,000,839 | ---- | M] () -- \Programování\eclipse\configuration\org.eclipse.osgi\bundles\360\1\.cp\org\eclipse\jdt\internal\junit\runner\junit3\JUnit3TestLoader$1.class
[2014.05.01 18:36:32 | 000,006,616 | ---- | M] () -- \Programování\eclipse\configuration\org.eclipse.osgi\bundles\360\1\.cp\org\eclipse\jdt\internal\junit\runner\junit3\JUnit3TestLoader.class
[2014.05.01 18:36:31 | 000,003,620 | ---- | M] () -- \Programování\eclipse\configuration\org.eclipse.osgi\bundles\361\1\.cp\org\eclipse\jdt\internal\junit4\runner\JUnit4TestLoader.class
[2014.05.01 18:30:20 | 000,003,297 | ---- | M] () -- \Programování\eclipse\configuration\org.eclipse.osgi\bundles\525\1\.cp\org\eclipse\m2e\core\ui\internal\wizards\MavenProjectWizardArchetypeParametersPage$RequiredPropertiesLoader.class
[2012.01.27 17:26:24 | 000,006,565 | ---- | M] () -- \Programování\eclipse\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PEAR\Autoloader.php
[2012.01.27 17:26:24 | 000,066,585 | ---- | M] () -- \Programování\eclipse\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PEAR\Downloader.php
[2012.01.27 17:28:16 | 000,007,655 | ---- | M] () -- \Programování\eclipse\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHP\Depend\Metrics\AnalyzerLoader.php
[2012.01.27 17:26:00 | 000,005,507 | ---- | M] () -- \Programování\eclipse\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHPUnit\Runner\StandardTestSuiteLoader.php
[2012.01.27 17:26:00 | 000,002,817 | ---- | M] () -- \Programování\eclipse\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHPUnit\Runner\TestSuiteLoader.php
[2012.01.27 17:26:10 | 000,003,844 | ---- | M] () -- \Programování\eclipse\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHPUnit\Util\Fileloader.php
[2014.07.08 20:02:13 | 000,003,297 | ---- | M] () -- \Programování\eclipse-luna\configuration\org.eclipse.osgi\525\0\.cp\org\eclipse\m2e\core\ui\internal\wizards\MavenProjectWizardArchetypeParametersPage$RequiredPropertiesLoader.class
[2012.01.27 17:26:24 | 000,006,565 | ---- | M] () -- \Programování\eclipse-luna\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PEAR\Autoloader.php
[2012.01.27 17:26:24 | 000,066,585 | ---- | M] () -- \Programování\eclipse-luna\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PEAR\Downloader.php
[2012.01.27 17:28:16 | 000,007,655 | ---- | M] () -- \Programování\eclipse-luna\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHP\Depend\Metrics\AnalyzerLoader.php
[2012.01.27 17:26:00 | 000,005,507 | ---- | M] () -- \Programování\eclipse-luna\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHPUnit\Runner\StandardTestSuiteLoader.php
[2012.01.27 17:26:00 | 000,002,817 | ---- | M] () -- \Programování\eclipse-luna\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHPUnit\Runner\TestSuiteLoader.php
[2012.01.27 17:26:10 | 000,003,844 | ---- | M] () -- \Programování\eclipse-luna\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHPUnit\Util\Fileloader.php
[2015.04.10 21:47:09 | 000,003,297 | ---- | M] () -- \Programování\eclipse-luna-EE\eclipse\configuration\org.eclipse.osgi\525\0\.cp\org\eclipse\m2e\core\ui\internal\wizards\MavenProjectWizardArchetypeParametersPage$RequiredPropertiesLoader.class
[2015.07.05 17:09:37 | 000,003,297 | ---- | M] () -- \Programování\eclipse-mars\configuration\org.eclipse.osgi\231\0\.cp\org\eclipse\m2e\core\ui\internal\wizards\MavenProjectWizardArchetypeParametersPage$RequiredPropertiesLoader.class
[2015.04.28 21:35:19 | 000,017,865 | ---- | M] () -- \Programování\export\ajax-loader.gif
[2014.08.26 19:00:41 | 000,000,804 | ---- | M] () -- \Programování\Java\ZkossExamples\ui-examples\src\main\java\test\ZKResourceLoader.java
[2015.02.18 19:51:30 | 000,001,032 | ---- | M] () -- \Programování\Java\ZkossExamples\ui-examples\target\classes\test\ZKResourceLoader.class
[2014.08.26 19:09:39 | 000,001,032 | ---- | M] () -- \Programování\Java\ZkossExamples\ui-examples\target\ui-examples\WEB-INF\classes\test\ZKResourceLoader.class
[2014.06.19 13:55:24 | 000,017,867 | ---- | M] () -- \Programování\Servers\apache-tomcat-8.0.9\webapps\docs\class-loader-howto.html
[2014.06.19 13:55:24 | 000,011,664 | ---- | M] () -- \Programování\Servers\apache-tomcat-8.0.9\webapps\docs\config\loader.html
[2014.12.21 18:42:09 | 000,001,891 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\JDownloader Uninstaller.lnk
[2014.12.21 18:42:08 | 000,001,870 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
[2014.12.21 18:42:09 | 000,001,947 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk
[2015.07.14 16:15:32 | 000,003,208 | ---- | M] () -- \Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.9.1_0\skin\ajax-loader.gif
[2013.05.09 15:04:52 | 000,022,499 | ---- | M] () -- \Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcpecggcpdbebpphgbbihbaeabilklhf\0.2.1.39_0\lib\source\cocos2d\CCLoader.js
[2013.02.22 12:06:28 | 000,007,989 | ---- | M] () -- \Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcpecggcpdbebpphgbbihbaeabilklhf\0.2.1.39_0\lib\source\cocos2d\platform\jsloader.js
[2012.12.04 03:25:12 | 000,013,187 | ---- | M] () -- \Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcpecggcpdbebpphgbbihbaeabilklhf\0.2.1.39_0\lib\source\extensions\CCBReader\CCControlLoader.js
[2012.12.04 03:25:12 | 000,035,527 | ---- | M] () -- \Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcpecggcpdbebpphgbbihbaeabilklhf\0.2.1.39_0\lib\source\extensions\CCBReader\CCNodeLoader.js
[2012.12.04 03:25:12 | 000,004,245 | ---- | M] () -- \Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcpecggcpdbebpphgbbihbaeabilklhf\0.2.1.39_0\lib\source\extensions\CCBReader\CCNodeLoaderLibrary.js
[2012.12.04 03:25:12 | 000,019,842 | ---- | M] () -- \Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcpecggcpdbebpphgbbihbaeabilklhf\0.2.1.39_0\lib\source\extensions\CCBReader\CCSpriteLoader.js
[2012.05.22 13:33:34 | 025,101,952 | ---- | M] () -- \Users\Gordon\AppData\Local\Temp\is1201216051\6F27F02E_stp\JDownloaderSetup_IC.exe
[2014.12.21 18:42:20 | 000,001,947 | ---- | M] () -- \Users\Gordon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\JDownloader.lnk
[2015.04.28 21:35:18 | 000,000,694 | ---- | M] () -- \Users\Gordon\AppData\Roaming\Microsoft\Windows\Recent\ajax-loader.lnk
[2014.12.21 18:42:20 | 000,001,983 | ---- | M] () -- \Users\Gordon\Desktop\JDownloader.lnk
[2015.07.15 05:32:15 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_da-dk_d3044f216ab5bf07.manifest
[2015.07.15 05:34:30 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_de-de_d02fe45d6c8c13a1.manifest
[2015.07.15 05:34:12 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_el-gr_78c611f05ba17c2f.manifest
[2015.07.15 05:34:55 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_es-es_78ec173a5b91110b.manifest
[2015.07.15 05:32:52 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_fi-fi_18071be750ab0335.manifest
[2015.07.15 05:34:22 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_fr-fr_1ba38d394e63276d.manifest
[2015.07.15 05:33:18 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_hu-hu_63140d8132c2f689.manifest
[2015.07.15 05:33:52 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_it-it_05cb838025950ceb.manifest
[2015.07.15 05:37:41 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_ja-jp_a7f1028d18b01ec6.manifest
[2015.07.15 05:37:31 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_ko-kr_4b5adf420b20e5dc.manifest
[2015.07.15 05:32:18 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_nb-no_33ed6076e3461198.manifest
[2015.07.15 05:32:50 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_nl-nl_322cabb4e4721b6d.manifest
[2015.07.15 05:32:11 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_pl-pl_78690636c9948921.manifest
[2015.07.15 05:35:15 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_pt-br_7abcf0dac81e1d05.manifest
[2015.07.15 05:32:00 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_pt-pt_7b9ec046c78d8ce1.manifest
[2015.07.15 05:34:48 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_ru-ru_c241d20aac6f1b0d.manifest
[2015.07.15 05:32:49 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_sv-se_5e3cbc7fa3982568.manifest
[2015.07.15 05:32:23 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_tr-tr_074a06c692542759.manifest
[2015.07.15 05:37:06 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_zh-cn_d8a724c4428bf978.manifest
[2015.07.15 05:31:32 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_zh-hk_d7521d5243676c08.manifest
[2015.07.15 05:37:09 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_zh-tw_dca3621a3ffcd5e8.manifest
[2015.07.15 05:32:10 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_cs-cz_43bd45e6af8c7864.manifest
[2015.07.15 05:32:15 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_da-dk_e0f7260da5d27463.manifest
[2015.07.15 05:34:01 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_de-de_de22bb49a7a8c8fd.manifest
[2015.07.15 05:34:12 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_el-gr_86b8e8dc96be318b.manifest
[2015.07.15 05:04:26 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_en-us_871391429686d4c2.manifest
[2015.07.15 05:34:26 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_es-es_86deee2696adc667.manifest
[2015.07.15 05:32:51 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_fi-fi_25f9f2d38bc7b891.manifest
[2015.07.15 05:33:49 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_fr-fr_29966425897fdcc9.manifest
[2015.07.15 05:32:51 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_hu-hu_7106e46d6ddfabe5.manifest
[2015.07.15 05:33:25 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_it-it_13be5a6c60b1c247.manifest
[2015.07.15 05:37:08 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_ja-jp_b5e3d97953ccd422.manifest
[2015.07.15 05:36:51 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_ko-kr_594db62e463d9b38.manifest
[2015.07.15 05:32:17 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_nb-no_41e037631e62c6f4.manifest
[2015.07.15 05:32:14 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_nl-nl_401f82a11f8ed0c9.manifest
[2015.07.15 05:31:43 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_pl-pl_865bdd2304b13e7d.manifest
[2015.07.15 05:34:49 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_pt-br_88afc7c7033ad261.manifest
[2015.07.15 05:31:34 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_pt-pt_8991973302aa423d.manifest
[2015.07.15 05:34:20 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_ru-ru_d034a8f6e78bd069.manifest
[2015.07.15 05:32:17 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_sv-se_6c2f936bdeb4dac4.manifest
[2015.07.15 05:31:53 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_tr-tr_153cddb2cd70dcb5.manifest
[2015.07.15 05:36:30 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_zh-cn_e699fbb07da8aed4.manifest
[2015.07.15 05:31:31 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_zh-hk_e544f43e7e842164.manifest
[2015.07.15 05:36:33 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_zh-tw_ea9639067b198b44.manifest
[2015.07.15 05:25:36 | 000,004,249 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4c64d5f2b2d9727ec81ccfcc812e5053\x86_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.23126_none_42768f32e1fd8667.manifest
[2015.07.15 20:43:51 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_da-dk_d2f97f356abddaf8.manifest
[2015.07.15 20:43:01 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_de-de_d02514716c942f92.manifest
[2015.07.15 20:44:36 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_el-gr_78bb42045ba99820.manifest
[2015.07.15 20:45:14 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_es-es_78e1474e5b992cfc.manifest
[2015.07.15 20:41:51 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_fi-fi_17fc4bfb50b31f26.manifest
[2015.07.15 20:42:39 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_fr-fr_1b98bd4d4e6b435e.manifest
[2015.07.15 20:43:53 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_hu-hu_63093d9532cb127a.manifest
[2015.07.15 20:44:33 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_it-it_05c0b394259d28dc.manifest
[2015.07.15 20:46:12 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_ja-jp_a7e632a118b83ab7.manifest
[2015.07.15 20:45:28 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_ko-kr_4b500f560b2901cd.manifest
[2015.07.15 20:43:53 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_nb-no_33e2908ae34e2d89.manifest
[2015.07.15 20:45:01 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_nl-nl_3221dbc8e47a375e.manifest
[2015.07.15 20:43:51 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_pl-pl_785e364ac99ca512.manifest
[2015.07.15 20:44:12 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_pt-br_7ab220eec82638f6.manifest
[2015.07.15 20:44:24 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_pt-pt_7b93f05ac795a8d2.manifest
[2015.07.15 20:44:19 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_ru-ru_c237021eac7736fe.manifest
[2015.07.15 20:44:01 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_sv-se_5e31ec93a3a04159.manifest
[2015.07.15 20:44:26 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_tr-tr_073f36da925c434a.manifest
[2015.07.15 20:44:42 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_zh-cn_d89c54d842941569.manifest
[2015.07.15 20:41:27 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_zh-hk_d7474d66436f87f9.manifest
[2015.07.15 20:44:50 | 000,002,883 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_zh-tw_dc98922e4004f1d9.manifest
[2015.07.15 20:43:28 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_cs-cz_43b275faaf949455.manifest
[2015.07.15 20:43:45 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_da-dk_e0ec5621a5da9054.manifest
[2015.07.15 20:42:32 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_de-de_de17eb5da7b0e4ee.manifest
[2015.07.15 20:44:35 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_el-gr_86ae18f096c64d7c.manifest
[2015.07.15 19:54:05 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_en-us_8708c156968ef0b3.manifest
[2015.07.15 20:44:44 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_es-es_86d41e3a96b5e258.manifest
[2015.07.15 20:41:51 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_fi-fi_25ef22e78bcfd482.manifest
[2015.07.15 20:42:14 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_fr-fr_298b94398987f8ba.manifest
[2015.07.15 20:42:49 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_hu-hu_70fc14816de7c7d6.manifest
[2015.07.15 20:43:21 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_it-it_13b38a8060b9de38.manifest
[2015.07.15 20:45:45 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_ja-jp_b5d9098d53d4f013.manifest
[2015.07.15 20:45:04 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_ko-kr_5942e6424645b729.manifest
[2015.07.15 20:43:51 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_nb-no_41d567771e6ae2e5.manifest
[2015.07.15 20:44:16 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_nl-nl_4014b2b51f96ecba.manifest
[2015.07.15 20:42:48 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_pl-pl_86510d3704b95a6e.manifest
[2015.07.15 20:43:22 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_pt-br_88a4f7db0342ee52.manifest
[2015.07.15 20:43:19 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_pt-pt_8986c74702b25e2e.manifest
[2015.07.15 20:43:29 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_ru-ru_d029d90ae793ec5a.manifest
[2015.07.15 20:42:54 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_sv-se_6c24c37fdebcf6b5.manifest
[2015.07.15 20:43:20 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_tr-tr_15320dc6cd78f8a6.manifest
[2015.07.15 20:44:17 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_zh-cn_e68f2bc47db0cac5.manifest
[2015.07.15 20:41:26 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_zh-hk_e53a24527e8c3d55.manifest
[2015.07.15 20:44:25 | 000,002,886 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_zh-tw_ea8b691a7b21a735.manifest
[2015.07.15 20:16:45 | 000,004,249 | ---- | M] () -- \Windows\SoftwareDistribution\Download\7b7614eb75e73fe74fbdd4d02b794638\x86_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.23136_none_426bbf46e205a258.manifest
[2015.06.09 20:29:29 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2009.07.14 06:54:01 | 000,003,532 | ---- | M] () -- \Windows\System32\Tasks\Microsoft\Windows\WindowsColorSystem\Calibration Loader
[2015.03.14 22:14:28 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_352654f75b66aedd.manifest
[2015.03.14 22:14:28 | 000,034,744 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_352654f75b66aedd_winload.exe.mui_3bc5b827
[2015.03.14 22:14:29 | 000,030,136 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_352654f75b66aedd_winresume.exe.mui_ff8b5358
[2015.03.14 22:14:38 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_en-us_787ca05342610b3b.manifest
[2015.03.14 22:14:38 | 000,033,216 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_en-us_787ca05342610b3b_winload.exe.mui_3bc5b827
[2015.03.14 22:14:38 | 000,029,632 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_en-us_787ca05342610b3b_winresume.exe.mui_ff8b5358
[2015.03.14 22:15:23 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18741_none_5d0aa07fcb041510.manifest
[2015.03.14 22:15:25 | 000,521,384 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18741_none_5d0aa07fcb041510_winload.exe_75835076
[2015.03.14 22:15:28 | 000,455,752 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18741_none_5d0aa07fcb041510_winresume.exe_85cd1215
[2009.07.14 04:17:38 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 04:17:38 | 000,017,472 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23_spldr.sys_98bd87a0
[2009.07.13 18:54:50 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2009.07.14 04:29:12 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_766f102945576be4.manifest
[2014.07.08 23:41:55 | 000,002,777 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_cs-cz_3540f2755b51fb60.manifest
[2014.07.08 23:41:53 | 000,002,777 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_en-us_78973dd1424c57be.manifest
[2015.02.03 05:54:10 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_352654f75b66aedd.manifest
[2015.02.03 05:16:42 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_en-us_787ca05342610b3b.manifest
[2014.07.08 23:42:00 | 000,002,777 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_cs-cz_35bfc13a7477b442.manifest
[2014.07.08 23:41:44 | 000,002,777 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_en-us_79160c965b7210a0.manifest
[2015.01.13 00:09:15 | 000,002,777 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_cs-cz_35c59380747413ec.manifest
[2015.01.13 00:09:31 | 000,002,777 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_en-us_791bdedc5b6e704a.manifest
[2015.01.16 08:24:33 | 000,002,777 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_cs-cz_35c794147472469a.manifest
[2015.01.16 08:23:55 | 000,002,777 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_en-us_791ddf705b6ca2f8.manifest
[2015.01.27 06:12:13 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22943_cs-cz_35b1f43c74827e7c.manifest
[2015.01.27 05:33:20 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22943_en-us_79083f985b7cdada.manifest
[2015.02.03 06:04:47 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22948_cs-cz_35b6f5ae747dfd2f.manifest
[2015.02.03 05:36:49 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22948_en-us_790d410a5b78598d.manifest
[2015.03.17 07:30:44 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_35dc0bc4746328a3.manifest
[2015.03.17 06:50:57 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23002_en-us_793257205b5d8501.manifest
[2015.07.15 05:32:43 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_cs-cz_35ca6efa746fc308.manifest
[2015.07.15 05:04:54 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_en-us_7920ba565b6a1f66.manifest
[2015.07.15 20:44:27 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_cs-cz_35bf9f0e7477def9.manifest
[2015.07.15 19:54:31 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_en-us_7915ea6a5b723b57.manifest
[2009.07.14 03:47:46 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_5afd1055cdfa75b9.manifest
[2009.08.19 09:38:48 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16411_none_5b44c087cdc549ed.manifest
[2009.08.19 09:21:21 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20509_none_5be12f8ee6d3987e.manifest
[2010.11.20 05:02:40 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953.manifest
[2014.08.19 05:02:10 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18574_none_5ced2dcdcb19ba9a.manifest
[2015.02.03 05:32:58 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18741_none_5d0aa07fcb041510.manifest
[2014.08.19 05:09:35 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22780_none_5d67fb6ae4430e20.manifest
[2015.01.12 05:35:19 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22921_none_5da9df08e4117a1f.manifest
[2015.01.14 08:45:13 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22923_none_5dabdf9ce40faccd.manifest
[2015.01.27 05:51:15 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22943_none_5d963fc4e41fe4af.manifest
[2015.02.03 05:54:42 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22948_none_5d9b4136e41b6362.manifest
[2015.03.17 07:06:11 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23002_none_5dc0574ce4008ed6.manifest
[2015.07.15 05:25:32 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23126_none_5daeba82e40d293b.manifest
[2015.07.15 20:16:39 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23136_none_5da3ea96e415452c.manifest
[2009.07.14 03:52:31 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:45:38 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_0abe3b21dcfb1c4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:43:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_0adfad15dce1def6\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:48:05 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_0b47d9d2f618b93c\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:39:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_0b5e7bdaf60797d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:40:37 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.06.09 20:29:29 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.03.04 12:35:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22616_none_0d44e078f32df860\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.04.12 04:03:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22653_none_0d169feaf3511c1f\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.06.09 20:29:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.03.30 13:28:59 | 000,008,192 | ---- | M] () -- \xampp\mailtodisk\_win32sysloader.pyd
[2012.04.16 19:30:20 | 000,068,096 | ---- | M] () -- \xampp\MercuryMail\loader.exe
[2012.04.16 17:30:20 | 000,004,896 | ---- | M] () -- \xampp\php\pear\Crypt\RSA\MathLoader.php
[2013.06.18 10:26:21 | 000,006,565 | ---- | M] () -- \xampp\php\pear\PEAR\Autoloader.php
[2013.06.18 10:26:21 | 000,066,585 | ---- | M] () -- \xampp\php\pear\PEAR\Downloader.php
[2013.06.18 16:16:52 | 000,005,511 | ---- | M] () -- \xampp\php\pear\PHPUnit\Runner\StandardTestSuiteLoader.php
[2013.06.18 16:16:52 | 000,002,806 | ---- | M] () -- \xampp\php\pear\PHPUnit\Runner\TestSuiteLoader.php
[2013.06.18 16:16:52 | 000,003,814 | ---- | M] () -- \xampp\php\pear\PHPUnit\Util\Fileloader.php
[2013.06.18 10:31:55 | 000,004,609 | ---- | M] () -- \xampp\php\pear\PHPUnit2\Runner\StandardTestSuiteLoader.php
[2013.06.18 10:31:55 | 000,003,186 | ---- | M] () -- \xampp\php\pear\PHPUnit2\Runner\TestSuiteLoader.php
[2013.06.18 10:31:56 | 000,003,767 | ---- | M] () -- \xampp\php\pear\PHPUnit2\Util\Fileloader.php
[2013.06.18 16:16:48 | 000,000,334 | ---- | M] () -- \xampp\php\pear\Symfony\Component\Yaml\autoloader.php
[2014.03.27 14:11:23 | 000,000,673 | ---- | M] () -- \xampp\phpMyAdmin\doc\html\_static\ajax-loader.gif
[2013.07.02 10:59:12 | 000,020,714 | ---- | M] () -- \xampp\tomcat\webapps\docs\class-loader-howto.html
[2013.07.02 10:59:12 | 000,016,741 | ---- | M] () -- \xampp\tomcat\webapps\docs\config\loader.html

< *minodlogin* /s >

< *tnod* /s >
[2012.01.01 23:13:24 | 000,000,370 | ---- | M] () -- \Program Files\Scribus 1.4.5\share\icons\ResetNode.png
[2014.05.01 18:30:20 | 000,002,141 | ---- | M] () -- \Programování\eclipse\configuration\org.eclipse.osgi\bundles\525\1\.cp\org\eclipse\m2e\core\ui\internal\views\build\ProjectNode.class
[2014.05.01 18:30:20 | 000,000,200 | ---- | M] () -- \Programování\eclipse\configuration\org.eclipse.osgi\bundles\525\1\.cp\org\eclipse\m2e\core\ui\internal\views\nodes\IArtifactNode.class
[2014.05.01 18:30:20 | 000,002,965 | ---- | M] () -- \Programování\eclipse\configuration\org.eclipse.osgi\bundles\525\1\.cp\org\eclipse\m2e\core\ui\internal\views\nodes\IndexedArtifactNode.class
[2014.05.01 18:30:20 | 000,001,891 | ---- | M] () -- \Programování\eclipse\configuration\org.eclipse.osgi\bundles\525\1\.cp\org\eclipse\m2e\core\ui\internal\views\nodes\LocalRepositoryRootNode.class
[2012.01.27 17:28:18 | 000,015,754 | ---- | M] () -- \Programování\eclipse\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHP\Depend\Code\ASTNode.php
[2012.01.27 17:28:18 | 000,006,104 | ---- | M] () -- \Programování\eclipse\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHP\Depend\Code\ASTNodeI.php
[2012.01.27 17:27:34 | 000,008,690 | ---- | M] () -- \Programování\eclipse\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHP\PMD\AbstractNode.php
[2012.01.27 17:27:32 | 000,003,092 | ---- | M] () -- \Programování\eclipse\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHP\PMD\Node\AbstractNode.php
[2012.01.27 17:27:32 | 000,004,293 | ---- | M] () -- \Programování\eclipse\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHP\PMD\Node\ASTNode.php
[2014.07.08 20:02:12 | 000,002,141 | ---- | M] () -- \Programování\eclipse-luna\configuration\org.eclipse.osgi\525\0\.cp\org\eclipse\m2e\core\ui\internal\views\build\ProjectNode.class
[2014.07.08 20:02:12 | 000,000,200 | ---- | M] () -- \Programování\eclipse-luna\configuration\org.eclipse.osgi\525\0\.cp\org\eclipse\m2e\core\ui\internal\views\nodes\IArtifactNode.class
[2014.07.08 20:02:12 | 000,002,965 | ---- | M] () -- \Programování\eclipse-luna\configuration\org.eclipse.osgi\525\0\.cp\org\eclipse\m2e\core\ui\internal\views\nodes\IndexedArtifactNode.class
[2014.07.08 20:02:12 | 000,001,891 | ---- | M] () -- \Programování\eclipse-luna\configuration\org.eclipse.osgi\525\0\.cp\org\eclipse\m2e\core\ui\internal\views\nodes\LocalRepositoryRootNode.class
[2012.01.27 17:28:18 | 000,015,754 | ---- | M] () -- \Programování\eclipse-luna\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHP\Depend\Code\ASTNode.php
[2012.01.27 17:28:18 | 000,006,104 | ---- | M] () -- \Programování\eclipse-luna\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHP\Depend\Code\ASTNodeI.php
[2012.01.27 17:27:34 | 000,008,690 | ---- | M] () -- \Programování\eclipse-luna\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHP\PMD\AbstractNode.php
[2012.01.27 17:27:32 | 000,003,092 | ---- | M] () -- \Programování\eclipse-luna\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHP\PMD\Node\AbstractNode.php
[2012.01.27 17:27:32 | 000,004,293 | ---- | M] () -- \Programování\eclipse-luna\plugins\org.phpsrc.eclipse.pti.library.pear_1.2.2.R20120127000000\php\library\PEAR\PHP\PMD\Node\ASTNode.php
[2015.04.10 21:47:07 | 000,002,141 | ---- | M] () -- \Programování\eclipse-luna-EE\eclipse\configuration\org.eclipse.osgi\525\0\.cp\org\eclipse\m2e\core\ui\internal\views\build\ProjectNode.class
[2015.04.10 21:47:06 | 000,000,200 | ---- | M] () -- \Programování\eclipse-luna-EE\eclipse\configuration\org.eclipse.osgi\525\0\.cp\org\eclipse\m2e\core\ui\internal\views\nodes\IArtifactNode.class
[2015.04.10 21:47:07 | 000,002,965 | ---- | M] () -- \Programování\eclipse-luna-EE\eclipse\configuration\org.eclipse.osgi\525\0\.cp\org\eclipse\m2e\core\ui\internal\views\nodes\IndexedArtifactNode.class
[2015.04.10 21:47:07 | 000,001,891 | ---- | M] () -- \Programování\eclipse-luna-EE\eclipse\configuration\org.eclipse.osgi\525\0\.cp\org\eclipse\m2e\core\ui\internal\views\nodes\LocalRepositoryRootNode.class
[2015.07.05 17:09:34 | 000,002,141 | ---- | M] () -- \Programování\eclipse-mars\configuration\org.eclipse.osgi\231\0\.cp\org\eclipse\m2e\core\ui\internal\views\build\ProjectNode.class
[2015.07.05 17:09:35 | 000,000,200 | ---- | M] () -- \Programování\eclipse-mars\configuration\org.eclipse.osgi\231\0\.cp\org\eclipse\m2e\core\ui\internal\views\nodes\IArtifactNode.class
[2015.07.05 17:09:35 | 000,002,965 | ---- | M] () -- \Programování\eclipse-mars\configuration\org.eclipse.osgi\231\0\.cp\org\eclipse\m2e\core\ui\internal\views\nodes\IndexedArtifactNode.class
[2015.07.05 17:09:35 | 000,001,891 | ---- | M] () -- \Programování\eclipse-mars\configuration\org.eclipse.osgi\231\0\.cp\org\eclipse\m2e\core\ui\internal\views\nodes\LocalRepositoryRootNode.class
[2015.07.05 17:09:43 | 000,002,431 | ---- | M] () -- \Programování\eclipse-mars\configuration\org.eclipse.osgi\370\0\.cp\org\eclipse\recommenders\rcp\utils\ASTNodeUtils$1.class
[2015.07.05 17:09:42 | 000,000,837 | ---- | M] () -- \Programování\eclipse-mars\configuration\org.eclipse.osgi\370\0\.cp\org\eclipse\recommenders\rcp\utils\ASTNodeUtils$Finder.class
[2015.07.05 17:09:43 | 000,010,451 | ---- | M] () -- \Programování\eclipse-mars\configuration\org.eclipse.osgi\370\0\.cp\org\eclipse\recommenders\rcp\utils\ASTNodeUtils.class

< *AutoKMS* /s >

< *activator* /s >
[2014.05.01 18:30:20 | 000,005,248 | ---- | M] () -- \Programování\eclipse\configuration\org.eclipse.osgi\bundles\525\1\.cp\org\eclipse\m2e\core\ui\internal\M2EUIPluginActivator.class
[2014.07.08 20:02:13 | 000,005,248 | ---- | M] () -- \Programování\eclipse-luna\configuration\org.eclipse.osgi\525\0\.cp\org\eclipse\m2e\core\ui\internal\M2EUIPluginActivator.class
[2015.04.10 21:47:07 | 000,005,248 | ---- | M] () -- \Programování\eclipse-luna-EE\eclipse\configuration\org.eclipse.osgi\525\0\.cp\org\eclipse\m2e\core\ui\internal\M2EUIPluginActivator.class
[2015.07.05 17:09:40 | 000,005,980 | ---- | M] () -- \Programování\eclipse-mars\configuration\org.eclipse.osgi\231\0\.cp\org\eclipse\m2e\core\ui\internal\M2EUIPluginActivator.class

< *serial* /s >
[2012.01.10 12:59:36 | 000,001,821 | ---- | M] () -- \download\Flaska 2015-08-06\combo\development-bundle\demos\selectable\serialize.html
[2009.06.26 07:34:18 | 000,049,496 | ---- | M] () -- \download\Flaska 2015-08-06\JSF\jsf-spec-2.0-20090626\javadocs\serialized-form.html
[2009.06.26 07:34:18 | 000,014,387 | ---- | M] () -- \download\Flaska 2015-08-06\JSF\jsf-spec-2.0-20090626\javadocs\javax\faces\application\StateManager.SerializedView.html
[2015.08.06 12:02:46 | 000,014,336 | ---- | M] () -- \download\Flaska 2015-08-06\Project Border\Last FOP\java\bin\serialver.exe
[2014.03.15 00:25:38 | 000,042,800 | ---- | M] () -- \Program Files\Corel\CorelDRAW Graphics Suite X7\Connect\Connect.XmlSerializers.dll
[2014.03.15 00:25:40 | 000,018,736 | ---- | M] () -- \Program Files\Corel\CorelDRAW Graphics Suite X7\Connect\CrlUtlWPF.XmlSerializers.dll
[2014.03.15 00:26:32 | 000,018,736 | ---- | M] () -- \Program Files\Corel\CorelDRAW Graphics Suite X7\VideoBrowser\CrlUtlWPF.XmlSerializers.dll
[2014.04.12 20:06:04 | 000,278,281 | ---- | M] () -- \Program Files\FreeMind\lib\serializer.jar
[2014.05.01 18:18:31 | 000,015,752 | ---- | M] () -- \Program Files\Java\jdk1.8.0_05\bin\serialver.exe
[2015.05.30 20:17:43 | 000,283,669 | ---- | M] () -- \Program Files\jboss\wildfly-8.2.0.Final\modules\system\layers\base\org\apache\xalan\main\serializer-2.7.1.jbossorg-1.jar
[2015.07.28 01:47:54 | 000,434,368 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.40728.0\System.Runtime.Serialization.dll
[2015.08.13 00:14:40 | 001,164,288 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.40728.0\System.Runtime.Serialization.ni.dll
[2014.07.11 00:24:10 | 000,970,752 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2014.04.09 10:44:38 | 000,278,281 | ---- | M] () -- \Program Files\SmartBear\SoapUI-5.0.0\lib\serializer-2.7.1.jar
[2015.04.29 11:30:24 | 000,042,293 | ---- | M] () -- \Program Files\Sony Mobile\Update Engine\plugins\com.serialio_2.15.6.201504291043.jar
[2015.04.29 11:30:36 | 000,008,962 | ---- | M] () -- \Program Files\Sony Mobile\Update Engine\plugins\com.sonymobile.cs.serialcommunication_2.15.6.201504291043.jar
[2014.05.01 18:30:17 | 000,004,964 | ---- | M] () -- \Programování\eclipse\configuration\org.eclipse.osgi\bundles\285\1\.cp\org\eclipse\epp\internal\mpc\ui\wizards\SelectionModelStateSerializer.class
[2014.02.24 06:02:58 | 000,302,018 | ---- | M] () -- \Programování\eclipse\plugins\org.apache.xml.serializer_2.7.1.v201005080400.jar
[2011.06.28 19:40:24 | 000,007,842 | ---- | M] () -- \Programování\eclipse\plugins\org.phpsrc.eclipse.pti.tools.phpdepend_0.3.3.R20110627000000\org\phpsrc\eclipse\pti\tools\phpdepend\core\model\MetricRunSessionSerializer.class
[2011.11.19 12:42:32 | 000,009,085 | ---- | M] () -- \Programování\eclipse\plugins\org.phpsrc.eclipse.pti.tools.phpunit_0.8.0.R20111119000000\org\phpsrc\eclipse\pti\tools\phpunit\core\model\TestRunSessionSerializer.class
[2014.07.08 20:02:01 | 000,005,989 | ---- | M] () -- \Programování\eclipse-luna\configuration\org.eclipse.osgi\285\0\.cp\org\eclipse\epp\internal\mpc\ui\wizards\SelectionModelStateSerializer.class
[2014.06.12 03:40:10 | 000,302,018 | ---- | M] () -- \Programování\eclipse-luna\plugins\org.apache.xml.serializer_2.7.1.v201005080400.jar
[2011.06.28 19:40:24 | 000,007,842 | ---- | M] () -- \Programování\eclipse-luna\plugins\org.phpsrc.eclipse.pti.tools.phpdepend_0.3.3.R20110627000000\org\phpsrc\eclipse\pti\tools\phpdepend\core\model\MetricRunSessionSerializer.class
[2011.11.19 12:42:32 | 000,009,085 | ---- | M] () -- \Programování\eclipse-luna\plugins\org.phpsrc.eclipse.pti.tools.phpunit_0.8.0.R20111119000000\org\phpsrc\eclipse\pti\tools\phpunit\core\model\TestRunSessionSerializer.class
[2015.04.10 21:47:03 | 000,005,989 | ---- | M] () -- \Programování\eclipse-luna-EE\eclipse\configuration\org.eclipse.osgi\285\0\.cp\org\eclipse\epp\internal\mpc\ui\wizards\SelectionModelStateSerializer.class
[2015.02.19 03:31:02 | 000,302,018 | ---- | M] () -- \Programování\eclipse-luna-EE\eclipse\plugins\org.apache.xml.serializer_2.7.1.v201005080400.jar
[2015.07.05 17:09:29 | 000,005,989 | ---- | M] () -- \Programování\eclipse-mars\configuration\org.eclipse.osgi\133\0\.cp\org\eclipse\epp\internal\mpc\ui\wizards\SelectionModelStateSerializer.class
[2015.06.21 13:01:20 | 000,302,018 | ---- | M] () -- \Programování\eclipse-mars\plugins\org.apache.xml.serializer_2.7.1.v201005080400.jar
[2015.04.20 22:02:26 | 000,003,072 | ---- | M] () -- \Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.serialzone.cz_0.localstorage
[2015.04.20 22:02:26 | 000,003,608 | ---- | M] () -- \Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.serialzone.cz_0.localstorage-journal
[2013.07.08 14:43:48 | 000,011,776 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2014.06.24 01:43:20 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2010.11.13 04:37:50 | 000,090,112 | ---- | M] () -- \Windows\assembly\GAC_MSIL\system.runtime.serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2014.07.11 00:24:10 | 000,970,752 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2014.10.14 22:23:58 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\91eb4f41130c65ef17f0fee1d3ab48fb\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2014.10.15 19:14:59 | 002,347,008 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\b1e0939384cc320d6ac7b8921ccc2877\System.Runtime.Serialization.ni.dll
[2014.10.27 19:45:55 | 000,304,640 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runt9064068c#\2b29c4612af7a079788ea5dc3b890bc2\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2014.10.27 19:45:55 | 000,000,580 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runt9064068c#\2b29c4612af7a079788ea5dc3b890bc2\System.Runtime.Serialization.Formatters.Soap.ni.dll.aux
[2014.12.24 16:20:18 | 002,786,304 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\30e5600ec60648ec4b086b99693b0007\System.Runtime.Serialization.ni.dll
[2014.12.24 16:20:18 | 000,001,308 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\30e5600ec60648ec4b086b99693b0007\System.Runtime.Serialization.ni.dll.aux
[2014.10.27 19:48:02 | 000,026,624 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.84e525b7#\2274c5ec38ec9aece46207d001b8129e\System.Xml.Serialization.ni.dll
[2014.10.27 19:48:02 | 000,000,376 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.84e525b7#\2274c5ec38ec9aece46207d001b8129e\System.Xml.Serialization.ni.dll.aux
[2012.07.09 00:40:08 | 001,050,096 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\924216F900A444D388FC41D62AEEF129\4.5.50709\System.Runtime.Serialization.dll.x86
[2012.07.09 00:40:08 | 001,050,096 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\924216F900A444D388FC41D62AEEF129\4.5.50709\System.Runtime.Serialization.dll_gac_x86
[2012.07.09 02:42:12 | 000,027,760 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2012.07.09 00:40:10 | 000,132,656 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2012.07.09 00:40:08 | 000,022,024 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Json\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Json.dll
[2012.07.09 00:40:08 | 000,022,048 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Primitives\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Primitives.dll
[2012.07.09 02:42:12 | 000,113,704 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2012.07.09 00:40:08 | 000,022,016 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Xml\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Xml.dll
[2014.07.23 02:17:44 | 001,050,840 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2012.07.09 00:40:08 | 000,036,320 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
[2012.07.09 00:40:08 | 000,022,496 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.XmlSerializer\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Xml.XmlSerializer.dll
[2014.06.24 01:43:20 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2014.07.11 00:24:11 | 000,970,752 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2014.07.23 02:17:44 | 001,050,840 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2012.07.09 00:40:10 | 000,132,656 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2012.07.09 00:40:08 | 000,022,024 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Json.dll
[2012.07.09 00:40:08 | 000,022,048 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Primitives.dll
[2012.07.09 00:40:08 | 000,022,016 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Xml.dll
[2012.07.09 00:40:08 | 000,036,320 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Serialization.dll
[2012.07.09 00:40:08 | 000,022,496 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.XmlSerializer.dll
[2012.07.09 02:42:12 | 000,027,760 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2012.07.09 02:42:12 | 000,113,704 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\System32\serialui.dll
[2009.07.13 18:38:14 | 000,005,120 | ---- | M] () -- \Windows\System32\cs-CZ\serialui.dll.mui
[2009.07.14 01:45:33 | 000,083,456 | ---- | M] () -- \Windows\System32\drivers\serial.sys
[2009.07.13 18:39:44 | 000,009,728 | ---- | M] () -- \Windows\System32\drivers\cs-CZ\serial.sys.mui
[2009.07.14 04:09:30 | 000,010,240 | ---- | M] () -- \Windows\System32\drivers\en-US\serial.sys.mui
[2009.07.14 00:13:45 | 001,068,032 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\mdmmotsm.inf_x86_neutral_c1415d9789c54b89\smserial.sys
[2009.07.14 01:45:33 | 000,083,456 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_x86_neutral_c1a802e06677f73f\serial.sys
[2009.07.14 00:09:18 | 000,031,232 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_x86_neutral_63e72c669d043f14\grserial.sys
[2009.07.14 04:10:04 | 000,005,120 | ---- | M] () -- \Windows\System32\en-US\serialui.dll.mui
[2009.07.14 04:18:03 | 000,002,762 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486.manifest
[2009.07.14 04:18:03 | 000,015,952 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486_kdcom.dll_db5e7744
[2014.04.29 22:30:02 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed_serialui.dll.mui_7d29d2a3
[2009.07.14 06:56:40 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_en-us_919783112bf8b64b_serialui.dll.mui_7d29d2a3
[2009.07.14 04:18:51 | 000,015,360 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a_serialui.dll_bea29328
[2009.07.14 03:52:33 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896.manifest
[2012.10.06 20:07:20 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.17136_none_a6a4fe887487d009.manifest
[2012.10.06 20:58:54 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.21337_none_8fd740dc8e2f4a01.manifest
[2010.11.20 05:06:16 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c.manifest
[2012.10.05 19:15:39 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285.manifest
[2014.07.02 07:57:49 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.18523_none_a6803b1074d97c29.manifest
[2014.07.14 04:04:09 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.18532_none_a681522274d87bdf.manifest
[2012.10.05 19:17:50 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d.manifest
[2014.07.02 08:07:46 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22733_none_8fb394768e7ff5d7.manifest
[2014.07.14 04:04:27 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22743_none_8fb494c08e7f0f2e.manifest
[2009.07.13 18:54:22 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0.manifest
[2009.07.14 04:28:14 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_en-us_8f71d563bf7aa3c2.manifest
[2012.10.06 19:14:05 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_en-us_8f6cbf57bf7f3b35.manifest
[2012.10.06 19:18:21 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_en-us_789f01abd926b52d.manifest
[2012.10.05 21:04:43 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_cs-cz_342f3c238422529f.manifest
[2012.10.05 19:12:04 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_en-us_8f4bb639bfcd9db1.manifest
[2014.07.02 08:50:42 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.18523_cs-cz_342b81c984259c43.manifest
[2014.07.02 07:39:48 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.18523_en-us_8f47fbdfbfd0e755.manifest
[2014.07.14 05:14:58 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.18532_cs-cz_342c98db84249bf9.manifest
[2014.07.14 03:45:53 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.18532_en-us_8f4912f1bfcfe70b.manifest
[2012.10.05 21:02:24 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_cs-cz_1d5d97659dcd4797.manifest
[2012.10.05 19:12:20 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_en-us_787a117bd97892a9.manifest
[2014.07.02 22:15:55 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22733_cs-cz_1d5edb2f9dcc15f1.manifest
[2014.07.02 07:46:32 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22733_en-us_787b5545d9776103.manifest
[2014.07.14 05:04:07 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22743_cs-cz_1d5fdb799dcb2f48.manifest
[2014.07.14 03:46:55 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22743_en-us_787c558fd9767a5a.manifest
[2009.07.14 03:51:52 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9.manifest
[2012.10.06 20:11:48 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.17136_none_d6e834229c2ed13c.manifest
[2012.10.06 21:03:01 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.21337_none_c01a7676b5d64b34.manifest
[2010.11.20 05:05:38 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f.manifest
[2012.10.05 19:15:03 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8.manifest
[2014.07.02 08:00:03 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.18523_none_d6c370aa9c807d5c.manifest
[2014.07.14 04:06:40 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.18532_none_d6c487bc9c7f7d12.manifest
[2012.10.05 19:17:15 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0.manifest
[2014.07.02 08:10:04 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22733_none_bff6ca10b626f70a.manifest
[2014.07.14 04:06:53 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22743_none_bff7ca5ab6261061.manifest
[2009.07.14 03:49:26 | 000,002,762 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486.manifest
[2009.07.14 03:45:27 | 000,000,866 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft.windows.h..tserial-driverclass_31bf3856ad364e35_6.1.7600.16385_none_2c93290b67c98d09.manifest
[2009.07.14 03:57:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b.manifest
[2012.10.06 20:09:38 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_dbc2dfefdd056b7e.manifest
[2012.10.06 21:00:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_c4f52243f6ace576.manifest
[2010.11.20 05:10:46 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1.manifest
[2012.10.05 19:19:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa.manifest
[2014.07.02 07:58:58 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.18523_none_db9e1c77dd57179e.manifest
[2014.07.14 04:05:25 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.18532_none_db9f3389dd561754.manifest
[2012.10.05 19:22:10 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2.manifest
[2014.07.02 08:08:55 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22733_none_c4d175ddf6fd914c.manifest
[2014.07.14 04:05:41 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22743_none_c4d27627f6fcaaa3.manifest
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_1c9a3ec1e01c684b\System.Runtime.Serialization.Formatters.Soap.dll
[2014.06.24 01:43:20 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7601.18523_none_1c70653de072abde\System.Runtime.Serialization.Formatters.Soap.dll
[2014.06.24 01:43:36 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7601.22733_none_05a3bea3fa19258c\System.Runtime.Serialization.Formatters.Soap.dll
[2009.06.10 14:14:16 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.1.7600.16385_cs-cz_d5c3552dd9b47144\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013.07.08 14:43:48 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.1.7601.18523_cs-cz_d5997ba9da0ab4d7\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.06.10 23:14:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896\System.Runtime.Serialization.dll
[2012.10.06 12:54:26 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.17136_none_a6a4fe887487d009\System.Runtime.Serialization.dll
[2012.10.06 12:57:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.21337_none_8fd740dc8e2f4a01\System.Runtime.Serialization.dll
[2010.11.05 03:52:39 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c\System.Runtime.Serialization.dll
[2012.10.05 12:53:24 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285\System.Runtime.Serialization.dll
[2014.03.09 23:47:42 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.18523_none_a6803b1074d97c29\System.Runtime.Serialization.dll
[2014.07.11 00:24:11 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.18532_none_a681522274d87bdf\System.Runtime.Serialization.dll
[2012.10.06 12:57:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d\System.Runtime.Serialization.dll
[2014.03.17 16:38:28 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22733_none_8fb394768e7ff5d7\System.Runtime.Serialization.dll
[2014.07.08 01:27:52 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22743_none_8fb494c08e7f0f2e\System.Runtime.Serialization.dll
[2009.06.08 10:38:48 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0\System.RunTime.Serialization.Resources.dll
[2010.11.13 03:55:26 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_cs-cz_342f3c238422529f\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:37:50 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.18523_cs-cz_342b81c984259c43\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:37:50 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.18532_cs-cz_342c98db84249bf9\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:37:50 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_cs-cz_1d5d97659dcd4797\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:37:50 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22733_cs-cz_1d5edb2f9dcc15f1\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:37:50 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22743_cs-cz_1d5fdb799dcb2f48\System.RunTime.Serialization.Resources.dll
[2009.06.10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9\System.Runtime.Serialization.dll
[2012.10.06 12:54:25 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.17136_none_d6e834229c2ed13c\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.21337_none_c01a7676b5d64b34\System.Runtime.Serialization.dll
[2010.11.05 03:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f\System.Runtime.Serialization.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8\System.Runtime.Serialization.dll
[2014.03.09 23:47:42 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.18523_none_d6c370aa9c807d5c\System.Runtime.Serialization.dll
[2014.07.11 00:24:10 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.18532_none_d6c487bc9c7f7d12\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0\System.Runtime.Serialization.dll
[2014.03.17 16:38:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22733_none_bff6ca10b626f70a\System.Runtime.Serialization.dll
[2014.07.08 01:27:52 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22743_none_bff7ca5ab6261061\System.Runtime.Serialization.dll
[2009.07.14 00:13:45 | 001,068,032 | ---- | M] () -- \Windows\winsxs\x86_mdmmotsm.inf_31bf3856ad364e35_6.1.7600.16385_none_7a97936f8a972896\smserial.sys
[2009.06.10 14:14:16 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_c002c1170ca9a88f\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_c233d4df09982c29\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.18523_cs-cz_c227ede109a14864\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.22731_cs-cz_c2a4bc1222c8ce98\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.07.13 18:38:14 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed\serialui.dll.mui
[2009.07.14 04:10:04 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_en-us_919783112bf8b64b\serialui.dll.mui
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a\serialui.dll
[2009.06.08 10:38:48 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_5d4a68b4b3d26ecc\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_5f7b7c7cb0c0f266\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.18523_cs-cz_5f6f957eb0ca0ea1\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.22733_cs-cz_5fee6443c9efc783\System.RunTime.Serialization.Resources.dll
[2009.07.13 18:39:44 | 000,009,728 | ---- | M] () -- \Windows\winsxs\x86_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_c48c78a9ad8ff996\serial.sys.mui
[2009.07.14 04:09:30 | 000,010,240 | ---- | M] () -- \Windows\winsxs\x86_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_07e2c405948a55f4\serial.sys.mui
[2009.07.14 01:45:33 | 000,083,456 | ---- | M] () -- \Windows\winsxs\x86_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_f86e06d519b1d9a4\serial.sys
[2009.07.14 00:09:18 | 000,031,232 | ---- | M] () -- \Windows\winsxs\x86_smartcrd.inf_31bf3856ad364e35_6.1.7600.16385_none_7280378295916274\grserial.sys
[2009.06.10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b\System.Runtime.Serialization.dll
[2012.10.06 12:54:25 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_dbc2dfefdd056b7e\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_c4f52243f6ace576\System.Runtime.Serialization.dll
[2010.11.05 03:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1\System.Runtime.Serialization.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa\System.Runtime.Serialization.dll
[2014.03.09 23:47:42 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.18523_none_db9e1c77dd57179e\System.Runtime.Serialization.dll
[2014.07.11 00:24:10 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.18532_none_db9f3389dd561754\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2\System.Runtime.Serialization.dll
[2014.03.17 16:38:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22733_none_c4d175ddf6fd914c\System.Runtime.Serialization.dll
[2014.07.08 01:27:52 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22743_none_c4d27627f6fcaaa3\System.Runtime.Serialization.dll
[2012.04.16 17:30:20 | 000,040,836 | ---- | M] () -- \xampp\php\pear\XML\Serializer.php
[2012.04.16 17:30:20 | 000,029,989 | ---- | M] () -- \xampp\php\pear\XML\Unserializer.php
[2014.03.27 14:11:23 | 000,003,035 | ---- | M] () -- \xampp\phpMyAdmin\js\jquery\src\jquery\serialize.js

< *w7lxe* /s >

========== Alternate Data Streams ==========

@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.1.7601.23149_none_59e26e3abf39ec59\WindowsBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.1.7601.23044_none_59dd6ae2bf3e707f\WindowsBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.1.7601.18946_none_5955f86fa61ecd48\WindowsBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.1.7601.18842_none_5951f561a6226ac5\WindowsBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-reachframework_31bf3856ad364e35_6.1.7601.23149_none_029f8c86a02d4d3e\ReachFramework.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-reachframework_31bf3856ad364e35_6.1.7601.23044_none_029a892ea031d164\ReachFramework.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-reachframework_31bf3856ad364e35_6.1.7601.18946_none_021316bb87122e2d\ReachFramework.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-reachframework_31bf3856ad364e35_6.1.7601.18842_none_020f13ad8715cbaa\ReachFramework.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.1.7601.23149_none_7280ce8f977308a1\PresentationHostDLL.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.1.7601.23044_none_727bcb3797778cc7\PresentationHostDLL.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.1.7601.18946_none_71f458c47e57e990\PresentationHostDLL.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.1.7601.18842_none_71f055b67e5b870d\PresentationHostDLL.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.1.7601.23149_none_70fbbd5ccd6a3483\PresentationFramework.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.1.7601.23044_none_70f6ba04cd6eb8a9\PresentationFramework.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.1.7601.18946_none_706f4791b44f1572\PresentationFramework.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.1.7601.18842_none_706b4483b452b2ef\PresentationFramework.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-presentationcffrasterizernative_31bf3856ad364e35_6.1.7601.23149_none_cc0ac07205c63e10\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-presentationcffrasterizernative_31bf3856ad364e35_6.1.7601.23044_none_cc05bd1a05cac236\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-presentationcffrasterizernative_31bf3856ad364e35_6.1.7601.18946_none_cb7e4aa6ecab1eff\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-presentationcffrasterizernative_31bf3856ad364e35_6.1.7601.18842_none_cb7a4798ecaebc7c\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.1.7601.23149_none_ae26743e7c21a0c3\PenIMC.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.1.7601.23044_none_ae2170e67c2624e9\PenIMC.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.1.7601.18946_none_ad99fe73630681b2\PenIMC.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.1.7601.18842_none_ad95fb65630a1f2f\PenIMC.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.1.7601.22965_none_b4bb4d5fecca1310\System.Web.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.1.7601.18758_none_cb87afa1d323e645\System.Web.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_system.printing_31bf3856ad364e35_6.1.7601.23149_none_75b5c413ed901a81\System.Printing.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_system.printing_31bf3856ad364e35_6.1.7601.23044_none_75b0c0bbed949ea7\System.Printing.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_system.printing_31bf3856ad364e35_6.1.7601.18946_none_75294e48d474fb70\System.Printing.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_system.printing_31bf3856ad364e35_6.1.7601.18842_none_75254b3ad47898ed\System.Printing.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.1.7601.23149_none_aea6739607681656\wpfgfx_v0300.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.1.7601.23149_none_aea6739607681656\PresentationCore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.1.7601.23044_none_aea1703e076c9a7c\wpfgfx_v0300.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.1.7601.23044_none_aea1703e076c9a7c\PresentationCore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.1.7601.18946_none_ae19fdcaee4cf745\wpfgfx_v0300.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.1.7601.18946_none_ae19fdcaee4cf745\PresentationCore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.1.7601.18842_none_ae15fabcee5094c2\wpfgfx_v0300.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.1.7601.18842_none_ae15fabcee5094c2\PresentationCore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.1.7601.22965_none_f432e2a80e320b63\webengine.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.1.7601.18758_none_0aff44e9f48bde98\webengine.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.1.7601.22965_none_827c782d628f84dd\aspnet_wp.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.1.7601.18758_none_9948da6f48e95812\aspnet_wp.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-wpd-legacywmdmcesp_31bf3856ad364e35_6.1.7601.23075_none_beeed4ad7884e80b\cewmdm.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-wpd-legacywmdmcesp_31bf3856ad364e35_6.1.7601.18872_none_be625ee25f69c8fa\cewmdm.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-wintrust-dll_31bf3856ad364e35_6.1.7601.22948_none_f222c0ca1185681d\wintrust.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-wintrust-dll_31bf3856ad364e35_6.1.7601.18741_none_f1922012f86e19cb\wintrust.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.23049_none_b8f3f61313c9055e\winsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.18847_none_b8688091faacffa4\winsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-winsetupui_31bf3856ad364e35_6.1.7601.18937_none_6100e93823fa7a56\WinSetupUI.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-winsetupui_31bf3856ad364e35_6.1.7601.18804_none_611e563823e4dd57\WinSetupUI.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-windowsupdateclient-ui_31bf3856ad364e35_7.6.7601.18937_none_08debaf14ccccd85\wucltux.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-windowsupdateclient-ui_31bf3856ad364e35_7.6.7601.18804_none_08fc27f14cb73086\wucltux.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-windowscodec_31bf3856ad364e35_7.1.7601.22948_none_8a66bac4a37949e4\WindowsCodecs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-windowscodec_31bf3856ad364e35_7.1.7601.22865_none_8a4e1828a38c389a\WindowsCodecs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-windowscodec_31bf3856ad364e35_7.1.7601.18741_none_89d61a0d8a61fb92\WindowsCodecs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-windowscodec_31bf3856ad364e35_7.1.7601.18658_none_89d24a418a63cbbd\WindowsCodecs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-windowscodec_31bf3856ad364e35_6.1.7601.22948_none_98f63e7f1892a115\WindowsCodecs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-windowscodec_31bf3856ad364e35_6.1.7601.22865_none_98dd9be318a58fcb\WindowsCodecs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-windowscodec_31bf3856ad364e35_6.1.7601.18741_none_98659dc7ff7b52c3\WindowsCodecs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-windowscodec_31bf3856ad364e35_6.1.7601.18658_none_9861cdfbff7d22ee\WindowsCodecs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.23149_none_bb68db1111fa969a\win32k.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.23109_none_bb941ac111da26d6\win32k.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.23072_none_bb41676112193be5\win32k.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.23038_none_bb72a8cd11f3642b\win32k.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.22978_none_bb4790fb1213a0ad\win32k.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.22831_none_bb6bccbf11f98261\win32k.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.18946_none_badc6545f8df7789\win32k.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.18906_none_bb07a4f5f8bf07c5\win32k.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.18869_none_bac9c465f8ecfe49\win32k.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.18834_none_bae532b7f8d92bc3\win32k.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.18773_none_bab8f0d7f8fa8509\win32k.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.18635_none_bae62f35f8d84acc\win32k.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.1.7601.23115_none_57b799af2b10b72c\WebClnt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.1.7601.22913_none_57b5bf132b125415\WebClnt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.1.7601.18912_none_572b23e411f5981b\WebClnt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.1.7601.22913_none_173ada8e3d1c552e\mrxdav.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.1.7601.18706_none_16bf0ca723f3e851\mrxdav.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.1.7601.23115_none_965f3931c99e4e2f\davclnt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.1.7601.22913_none_965d5e95c99feb18\davclnt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.1.7601.18912_none_95d2c366b0832f1e\davclnt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7601.18937_none_8b319746acc88ad4\wups2.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7601.18937_none_8b319746acc88ad4\wuaueng.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7601.18937_none_8b319746acc88ad4\wuauclt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7601.18804_none_8b4f0446acb2edd5\wups2.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7601.18804_none_8b4f0446acb2edd5\wuaueng.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7601.18804_none_8b4f0446acb2edd5\wuauclt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_7.6.7601.18937_none_1b4d91d3664015d3\wuwebv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_7.6.7601.18937_none_1b4d91d3664015d3\wuapp.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_7.6.7601.18804_none_1b6afed3662a78d4\wuwebv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_7.6.7601.18804_none_1b6afed3662a78d4\wuapp.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.6.7601.18937_none_7142d192c088e3d7\wups.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.6.7601.18937_none_7142d192c088e3d7\wudriver.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.6.7601.18937_none_7142d192c088e3d7\wuapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.6.7601.18804_none_71603e92c07346d8\wups.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.6.7601.18804_none_71603e92c07346d8\wudriver.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.6.7601.18804_none_71603e92c07346d8\wuapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..lient-aux.resources_31bf3856ad364e35_7.6.7601.18937_en-us_8ad3647c5c09f3a0\wuapi.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..lient-aux.resources_31bf3856ad364e35_7.6.7601.18937_cs-cz_477d1920750f9742\wuapi.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..lient-aux.resources_31bf3856ad364e35_7.6.7601.18804_en-us_8af0d17c5bf456a1\wuapi.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..lient-aux.resources_31bf3856ad364e35_7.6.7601.18804_cs-cz_479a862074f9fa43\wuapi.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..ient-core.resources_31bf3856ad364e35_7.6.7601.18937_en-us_e0a604cde1623a9b\wuaueng.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..ient-core.resources_31bf3856ad364e35_7.6.7601.18937_cs-cz_9d4fb971fa67de3d\wuaueng.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..ient-core.resources_31bf3856ad364e35_7.6.7601.18804_en-us_e0c371cde14c9d9c\wuaueng.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..ient-core.resources_31bf3856ad364e35_7.6.7601.18804_cs-cz_9d6d2671fa52413e\wuaueng.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..ent-internalupgrade_31bf3856ad364e35_7.6.7601.18937_none_cf6abb2ad01a2298\wu.upgrade.ps.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..ent-internalupgrade_31bf3856ad364e35_7.6.7601.18804_none_cf88282ad0048599\wu.upgrade.ps.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..client-ui.resources_31bf3856ad364e35_7.6.7601.18937_en-us_f1fe0bd86f10321c\wucltux.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..client-ui.resources_31bf3856ad364e35_7.6.7601.18937_cs-cz_aea7c07c8815d5be\wucltux.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..client-ui.resources_31bf3856ad364e35_7.6.7601.18804_en-us_f21b78d86efa951d\wucltux.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-w..client-ui.resources_31bf3856ad364e35_7.6.7601.18804_cs-cz_aec52d7c880038bf\wucltux.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-u..roundprocessmanager_31bf3856ad364e35_6.1.7601.22948_none_68c497ff68dcae96\ubpm.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-u..roundprocessmanager_31bf3856ad364e35_6.1.7601.18741_none_6833f7484fc56044\ubpm.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.23020_none_1a3385001c03e9a7\NBMapTIP.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.23020_none_1a3385001c03e9a7\NBDoc.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.23020_none_1a3385001c03e9a7\MSPVWCTL.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.23020_none_1a3385001c03e9a7\Journal.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.23020_none_1a3385001c03e9a7\JNTFiltr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.23020_none_1a3385001c03e9a7\InkSeg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18815_none_19b9e17102d9795d\NBMapTIP.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18815_none_19b9e17102d9795d\NBDoc.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18815_none_19b9e17102d9795d\MSPVWCTL.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18815_none_19b9e17102d9795d\Journal.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18815_none_19b9e17102d9795d\JNTFiltr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18815_none_19b9e17102d9795d\InkSeg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..tivexcore.resources_31bf3856ad364e35_6.1.7601.23121_en-us_7644afeffde91dc6\tsgqec.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..tivexcore.resources_31bf3856ad364e35_6.1.7601.23121_en-us_7644afeffde91dc6\mstscax.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..tivexcore.resources_31bf3856ad364e35_6.1.7601.23121_en-us_7644afeffde91dc6\aaclient.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..tivexcore.resources_31bf3856ad364e35_6.1.7601.23121_cs-cz_32ee649416eec168\tsgqec.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..tivexcore.resources_31bf3856ad364e35_6.1.7601.23121_cs-cz_32ee649416eec168\mstscax.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..tivexcore.resources_31bf3856ad364e35_6.1.7601.23121_cs-cz_32ee649416eec168\aaclient.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.22843_none_910ec574cbbd1ea2\termsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.18637_none_9093f7d7b293cb1c\termsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.1.7601.23121_none_3271069b3d1300bd\tsgqec.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.1.7601.23121_none_3271069b3d1300bd\mstscax.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.1.7601.23121_none_3271069b3d1300bd\aaclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.1.7601.18918_none_31f963a023e6c321\tsgqec.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.1.7601.18918_none_31f963a023e6c321\mstscax.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.1.7601.18918_none_31f963a023e6c321\aaclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.23020_none_cd128487ae7b1595\rtscom.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.23020_none_cd128487ae7b1595\journal.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.23020_none_cd128487ae7b1595\InkObj.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.23020_none_cd128487ae7b1595\InkEd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.23020_none_cd128487ae7b1595\InkDiv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18815_none_cc98e0f89550a54b\rtscom.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18815_none_cc98e0f89550a54b\journal.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18815_none_cc98e0f89550a54b\InkObj.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18815_none_cc98e0f89550a54b\InkEd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18815_none_cc98e0f89550a54b\InkDiv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.23020_none_501a36bff6108268\jnwppr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.23020_none_501a36bff6108268\jnwmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.23020_none_501a36bff6108268\jnwdui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.23020_none_501a36bff6108268\JNWDRV.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.18815_none_4fa09330dce6121e\jnwppr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.18815_none_4fa09330dce6121e\jnwmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.18815_none_4fa09330dce6121e\jnwdui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.18815_none_4fa09330dce6121e\JNWDRV.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_6.1.7601.23121_none_505f4c7398825a3e\mstsc.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..icesframework-msctf_31bf3856ad364e35_6.1.7601.22937_none_784206c06632676b\msctf.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..icesframework-msctf_31bf3856ad364e35_6.1.7601.18731_none_77b266534d1a3270\msctf.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..es-workspaceruntime_31bf3856ad364e35_6.1.7601.23121_none_28e8399b54ad03b0\wksprt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..-collaboration-core_31bf3856ad364e35_6.1.7601.23095_none_bd4a45096dcaae36\rdpcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.23020_none_44e6ec18c47130ee\PDIALOG.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.23020_none_44e6ec18c47130ee\jnwppr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.23020_none_44e6ec18c47130ee\jnwmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.23020_none_44e6ec18c47130ee\jnwdui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.23020_none_44e6ec18c47130ee\JNWDRV.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.18815_none_446d4889ab46c0a4\PDIALOG.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.18815_none_446d4889ab46c0a4\jnwppr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.18815_none_446d4889ab46c0a4\jnwmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.18815_none_446d4889ab46c0a4\jnwdui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.18815_none_446d4889ab46c0a4\JNWDRV.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..alservices-webproxy_31bf3856ad364e35_6.1.7601.22907_none_34167143cfa479b2\TSWbPrxy.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..alservices-webproxy_31bf3856ad364e35_6.1.7601.18699_none_332d81f4b6ce0dc1\TSWbPrxy.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.23136_none_495d004c2aad630d\srcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.23136_none_495d004c2aad630d\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.23136_none_495d004c2aad630d\rstrui.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.23126_none_4967d0382aa5471c\srcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.23126_none_4967d0382aa5471c\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.23126_none_4967d0382aa5471c\rstrui.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.23002_none_49796d022a98acb7\srcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.23002_none_49796d022a98acb7\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.23002_none_49796d022a98acb7\rstrui.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.22948_none_495456ec2ab38143\srcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.22948_none_495456ec2ab38143\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.22948_none_495456ec2ab38143\rstrui.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.22943_none_494f557a2ab80290\srcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.22943_none_494f557a2ab80290\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.22943_none_494f557a2ab80290\rstrui.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18933_none_48d08a81119243fc\srcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18933_none_48d08a81119243fc\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18933_none_48d08a81119243fc\rstrui.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18923_none_48db5a6d118a280b\srcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18923_none_48db5a6d118a280b\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18923_none_48db5a6d118a280b\rstrui.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18798_none_4894a89f11be7007\srcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18798_none_4894a89f11be7007\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18798_none_4894a89f11be7007\rstrui.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18741_none_48c3b635119c32f1\srcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18741_none_48c3b635119c32f1\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18741_none_48c3b635119c32f1\rstrui.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18738_none_48d58827118dc861\srcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18738_none_48d58827118dc861\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18738_none_48d58827118dc861\rstrui.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23136_none_aeb7d86190a0049e\smss.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23136_none_aeb7d86190a0049e\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23126_none_aec2a84d9097e8ad\smss.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23126_none_aec2a84d9097e8ad\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23002_none_aed44517908b4e48\smss.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23002_none_aed44517908b4e48\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22948_none_aeaf2f0190a622d4\smss.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22948_none_aeaf2f0190a622d4\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22943_none_aeaa2d8f90aaa421\smss.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22943_none_aeaa2d8f90aaa421\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18933_none_ae2b62967784e58d\smss.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18933_none_ae2b62967784e58d\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18923_none_ae363282777cc99c\smss.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18923_none_ae363282777cc99c\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18798_none_adef80b477b11198\smss.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18798_none_adef80b477b11198\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18741_none_ae1e8e4a778ed482\smss.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18741_none_ae1e8e4a778ed482\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18738_none_ae30603c778069f2\smss.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18738_none_ae30603c778069f2\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23136_none_820e9d99c88bd407\mrxsmb.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23126_none_82196d85c883b816\mrxsmb.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23115_none_82233d27c87c82ce\mrxsmb.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.23112_none_82203c49c87f36c9\mrxsmb.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.18933_none_818227ceaf70b4f6\mrxsmb.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.18923_none_818cf7baaf689905\mrxsmb.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.18912_none_8196c75caf6163bd\mrxsmb.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.18909_none_81a8994eaf52f92d\mrxsmb.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.1.7601.23136_none_8d582600013445da\mrxsmb20.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.1.7601.23126_none_8d62f5ec012c29e9\mrxsmb20.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.1.7601.23115_none_8d6cc58e0124f4a1\mrxsmb20.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.1.7601.23112_none_8d69c4b00127a89c\mrxsmb20.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.1.7601.18933_none_8ccbb034e81926c9\mrxsmb20.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.1.7601.18923_none_8cd68020e8110ad8\mrxsmb20.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.1.7601.18912_none_8ce04fc2e809d590\mrxsmb20.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.1.7601.18909_none_8cf221b4e7fb6b00\mrxsmb20.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.1.7601.23136_none_8b21bbedc2dd1269\mrxsmb10.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.1.7601.23126_none_8b2c8bd9c2d4f678\mrxsmb10.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.1.7601.23115_none_8b365b7bc2cdc130\mrxsmb10.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.1.7601.23112_none_8b335a9dc2d0752b\mrxsmb10.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.1.7601.18933_none_8a954622a9c1f358\mrxsmb10.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.1.7601.18923_none_8aa0160ea9b9d767\mrxsmb10.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.1.7601.18912_none_8aa9e5b0a9b2a21f\mrxsmb10.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.1.7601.18909_none_8abbb7a2a9a4378f\mrxsmb10.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-shell-comctl32-v5_31bf3856ad364e35_6.1.7601.23039_none_3c1c4e5d4f63373c\comctl32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-shell-comctl32-v5_31bf3856ad364e35_6.1.7601.18837_none_3b90d8dc36473182\comctl32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.1.7601.23121_none_6eac29bc8966b7ff\shell32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.1.7601.22969_none_6e891254897fc212\shell32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.1.7601.18918_none_6e3486c1703a7a63\shell32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.1.7601.18762_none_6df8719d706873c0\shell32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\xmllite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\wrpint.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\wmiutils.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\wmicmiplugin.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\wdscore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\wcp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\wbemprox.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\wbemcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\wbemcomn.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\SvcIni.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\smipi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\smiengine.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\repdrvfs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\poqexec.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\PkgMgr.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\OEMHelpIns.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\mspatcha.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\msdelta.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\mofinstall.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\mofd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\locdrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\helpcins.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\fastprox.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\esscli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\drvstore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\DrUpdate.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\dpx.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\CntrtextInstaller.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\cmiv2.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\cmitrust.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\cmiadapter.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\CbsMsg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\CbsCore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\apss.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\apircl.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\apds.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23136_none_24937b72ccb13ba5\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23126_none_249e4b5ecca91fb4\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23115_none_24a81b00cca1ea6c\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23112_none_24a51a22cca49e67\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23045_none_2487a956ccba4118\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23002_none_24afe828cc9c854f\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22983_none_245a90f0ccdc4aec\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22948_none_248ad212ccb759db\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22943_none_2485d0a0ccbbdb28\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22923_none_249b7078ccaba346\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22920_none_24986f9accae5741\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22865_none_24722f76ccca4891\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22843_none_2485cebaccbbde01\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.22814_none_24a73ec8cca2a385\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18933_none_240705a7b3961c94\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18923_none_2411d593b38e00a3\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18912_none_241ba535b386cb5b\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18909_none_242d7727b37860cb\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18843_none_23fc33d5b39e3b5e\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18798_none_23cb23c5b3c2489f\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18779_none_23e1c3e7b3b12a14\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18741_none_23fa315bb3a00b89\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18738_none_240c034db391a0f9\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18714_none_241da1fdb38503bb\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18606_none_242a7097b37b1d51\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-pku2u_31bf3856ad364e35_6.1.7601.22865_none_80cbb8af15ff3298\pku2u.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-pku2u_31bf3856ad364e35_6.1.7601.18658_none_804feac7fcd6c5bb\pku2u.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.23136_none_7f301d37d9f927fc\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.23126_none_7f3aed23d9f10c0b\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.23115_none_7f44bcc5d9e9d6c3\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.23112_none_7f41bbe7d9ec8abe\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.23017_none_7f46bb73d9e80c4a\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.23002_none_7f4c89edd9e471a6\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.22983_none_7ef732b5da243743\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.22948_none_7f2773d7d9ff4632\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.22943_none_7f227265da03c77f\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.22920_none_7f35115fd9f64398\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.22814_none_7f43e08dd9ea8fdc\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.18933_none_7ea3a76cc0de08eb\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.18923_none_7eae7758c0d5ecfa\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.18912_none_7eb846fac0ceb7b2\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.18909_none_7eca18ecc0c04d22\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.18812_none_7eb84514c0ceba8b\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.18798_none_7e67c58ac10a34f6\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.18779_none_7e7e65acc0f9166b\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.18741_none_7e96d320c0e7f7e0\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.18738_none_7ea8a512c0d98d50\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.18714_none_7eba43c2c0ccf012\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.18606_none_7ec7125cc0c309a8\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.23136_none_e9540d90283bf4dc\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.23126_none_e95edd7c2833d8eb\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.23115_none_e968ad1e282ca3a3\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.23112_none_e965ac40282f579e\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.23017_none_e96aabcc282ad92a\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.23002_none_e9707a4628273e86\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.22983_none_e91b230e28670423\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.22948_none_e94b643028421312\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.22943_none_e94662be2846945f\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.22923_none_e95c029628365c7d\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.22920_none_e95901b828391078\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.22865_none_e932c194285501c8\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.22843_none_e94660d828469738\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.22814_none_e967d0e6282d5cbc\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18933_none_e8c797c50f20d5cb\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18923_none_e8d267b10f18b9da\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18912_none_e8dc37530f118492\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18909_none_e8ee09450f031a02\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18812_none_e8dc356d0f11876b\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18798_none_e88bb5e30f4d01d6\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18779_none_e8a256050f3be34b\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18741_none_e8bac3790f2ac4c0\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18738_none_e8cc956b0f1c5a30\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18714_none_e8de341b0f0fbcf2\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18658_none_e8b6f3ad0f2c94eb\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18606_none_e8eb02b50f05d688\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23136_none_3d4a7b7bf42378ad\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23126_none_3d554b67f41b5cbc\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23115_none_3d5f1b09f4142774\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23112_none_3d5c1a2bf416db6f\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23017_none_3d6119b7f4125cfb\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23002_none_3d66e831f40ec257\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22983_none_3d1190f9f44e87f4\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22948_none_3d41d21bf42996e3\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22943_none_3d3cd0a9f42e1830\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22920_none_3d4f6fa3f4209449\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.22814_none_3d5e3ed1f414e08d\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18933_none_3cbe05b0db08599c\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18923_none_3cc8d59cdb003dab\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18912_none_3cd2a53edaf90863\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18909_none_3ce47730daea9dd3\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18812_none_3cd2a358daf90b3c\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18798_none_3c8223cedb3485a7\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18779_none_3c98c3f0db23671c\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18741_none_3cb13164db124891\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18738_none_3cc30356db03de01\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18714_none_3cd4a206daf740c3\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18606_none_3ce170a0daed5a59\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23136_none_c63561d418fe69b5\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23136_none_c63561d418fe69b5\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23126_none_c64031c018f64dc4\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23126_none_c64031c018f64dc4\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23115_none_c64a016218ef187c\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23115_none_c64a016218ef187c\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23112_none_c647008418f1cc77\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23112_none_c647008418f1cc77\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23017_none_c64c001018ed4e03\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23017_none_c64c001018ed4e03\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23002_none_c651ce8a18e9b35f\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23002_none_c651ce8a18e9b35f\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.22983_none_c5fc7752192978fc\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.22983_none_c5fc7752192978fc\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.22948_none_c62cb874190487eb\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.22948_none_c62cb874190487eb\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.22943_none_c627b70219090938\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.22943_none_c627b70219090938\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.22920_none_c63a55fc18fb8551\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.22920_none_c63a55fc18fb8551\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.22814_none_c649252a18efd195\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.22814_none_c649252a18efd195\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18933_none_c5a8ec08ffe34aa4\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18933_none_c5a8ec08ffe34aa4\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18923_none_c5b3bbf4ffdb2eb3\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18923_none_c5b3bbf4ffdb2eb3\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18912_none_c5bd8b96ffd3f96b\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18912_none_c5bd8b96ffd3f96b\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18909_none_c5cf5d88ffc58edb\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18909_none_c5cf5d88ffc58edb\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18812_none_c5bd89b0ffd3fc44\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18812_none_c5bd89b0ffd3fc44\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18798_none_c56d0a27000f76af\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18798_none_c56d0a27000f76af\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18779_none_c583aa48fffe5824\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18779_none_c583aa48fffe5824\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18741_none_c59c17bcffed3999\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18741_none_c59c17bcffed3999\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18738_none_c5ade9aeffdecf09\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18738_none_c5ade9aeffdecf09\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18714_none_c5bf885effd231cb\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18714_none_c5bf885effd231cb\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18606_none_c5cc56f8ffc84b61\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18606_none_c5cc56f8ffc84b61\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_11.2.9600.17959_none_ce5f57398abdb23b\vbscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_11.2.9600.17914_none_ce5bc7f98ac0ccba\vbscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_11.2.9600.17843_none_ce69af8b8ab5e32d\vbscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_11.2.9600.17801_none_ce65dbf38ab94a8f\vbscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_11.2.9600.17728_none_ce720cfb8ab014b3\vbscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_11.2.9600.17691_none_ce847e658aa0f6bc\vbscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_11.2.9600.17633_none_ce7e4f198aa691f4\vbscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_11.2.9600.17501_none_ce864bb78aa0f6bc\vbscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17959_none_ca2ee09a1a8825a8\jscript9diag.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17959_none_ca2ee09a1a8825a8\jscript9.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17918_none_ca2af63a1a8ba6ab\jscript9diag.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17918_none_ca2af63a1a8ba6ab\jscript9.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17914_none_ca2b515a1a8b4027\jscript9diag.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17914_none_ca2b515a1a8b4027\jscript9.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17843_none_ca3938ec1a80569a\jscript9diag.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17843_none_ca3938ec1a80569a\jscript9.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17801_none_ca3565541a83bdfc\jscript9diag.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17801_none_ca3565541a83bdfc\jscript9.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17728_none_ca41965c1a7a8820\jscript9diag.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17728_none_ca41965c1a7a8820\jscript9.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17691_none_ca5407c61a6b6a29\jscript9diag.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17691_none_ca5407c61a6b6a29\jscript9.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17633_none_ca4dd87a1a710561\jscript9diag.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17633_none_ca4dd87a1a710561\jscript9.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17501_none_ca55d5181a6b6a29\jscript9diag.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17501_none_ca55d5181a6b6a29\jscript9.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_11.2.9600.17959_none_08e53c8153fb05ff\jscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_11.2.9600.17914_none_08e1ad4153fe207e\jscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_11.2.9600.17843_none_08ef94d353f336f1\jscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_11.2.9600.17801_none_08ebc13b53f69e53\jscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7601.23033_none_d1d9ee0844ba1cc2\services.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7601.18829_none_d1614ac32b8ec5cf\services.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..mmaintenanceservice_31bf3856ad364e35_6.1.7601.23136_none_3fcb22af57a5b7bb\sysmain.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..mmaintenanceservice_31bf3856ad364e35_6.1.7601.18933_none_3f3eace43e8a98aa\sysmain.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-jscript9.resources_31bf3856ad364e35_11.2.9600.17959_en-us_67c081a5d4e73f6d\jscript9.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-jscript9.resources_31bf3856ad364e35_11.2.9600.17914_en-us_67bcf265d4ea59ec\jscript9.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-jscript9.resources_31bf3856ad364e35_11.2.9600.17843_en-us_67cad9f7d4df705f\jscript9.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-jscript9.resources_31bf3856ad364e35_11.2.9600.17843_cs-cz_24748e9bede51401\jscript9.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-jscript9.resources_31bf3856ad364e35_11.2.9600.17801_en-us_67c7065fd4e2d7c1\jscript9.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-jscript9.resources_31bf3856ad364e35_11.2.9600.17728_en-us_67d33767d4d9a1e5\jscript9.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-jscript9.resources_31bf3856ad364e35_11.2.9600.17691_en-us_67e5a8d1d4ca83ee\jscript9.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-jscript9.resources_31bf3856ad364e35_11.2.9600.17633_en-us_67df7985d4d01f26\jscript9.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-jscript9.resources_31bf3856ad364e35_11.2.9600.17633_cs-cz_24892e29edd5c2c8\jscript9.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-jscript9.resources_31bf3856ad364e35_11.2.9600.17501_en-us_67e77623d4ca83ee\jscript9.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-jscript9.resources_31bf3856ad364e35_11.2.9600.17501_cs-cz_24912ac7edd02790\jscript9.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-downlevel.binaries_31bf3856ad364e35_6.3.9600.17959_none_0371703f46f76d28\MsSpellCheckingFacility.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-downlevel.binaries_31bf3856ad364e35_6.3.9600.17914_none_0397ae7d46db7eb1\MsSpellCheckingFacility.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-downlevel.binaries_31bf3856ad364e35_6.3.9600.17843_none_03763c8946f4bc06\MsSpellCheckingFacility.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-downlevel.binaries_31bf3856ad364e35_6.3.9600.17801_none_039f7ba546d61994\MsSpellCheckingFacility.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-downlevel.binaries_31bf3856ad364e35_6.3.9600.17728_none_0390dbed46e005b0\MsSpellCheckingFacility.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-downlevel.binaries_31bf3856ad364e35_6.3.9600.17691_none_033e288d471f1abf\MsSpellCheckingFacility.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-downlevel.binaries_31bf3856ad364e35_6.3.9600.17633_none_038108a946eca5c7\MsSpellCheckingFacility.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-downlevel.binaries_31bf3856ad364e35_6.3.9600.17501_none_039f75f346d6221f\MsSpellCheckingFacility.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..configurationengine_31bf3856ad364e35_6.1.7601.22894_none_bb5f580e003b569d\scesrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..configurationengine_31bf3856ad364e35_6.1.7601.18686_none_bae289dce713d069\scesrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-rpc-local_31bf3856ad364e35_6.1.7601.23136_none_b677cf7bbc82b443\rpcrt4.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-rpc-local_31bf3856ad364e35_6.1.7601.23126_none_b6829f67bc7a9852\rpcrt4.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-rpc-local_31bf3856ad364e35_6.1.7601.23115_none_b68c6f09bc73630a\rpcrt4.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-rpc-local_31bf3856ad364e35_6.1.7601.23112_none_b6896e2bbc761705\rpcrt4.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-rpc-local_31bf3856ad364e35_6.1.7601.18933_none_b5eb59b0a3679532\rpcrt4.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-rpc-local_31bf3856ad364e35_6.1.7601.18923_none_b5f6299ca35f7941\rpcrt4.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-rpc-local_31bf3856ad364e35_6.1.7601.18912_none_b5fff93ea35843f9\rpcrt4.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-rpc-local_31bf3856ad364e35_6.1.7601.18909_none_b611cb30a349d969\rpcrt4.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-rpc-http_31bf3856ad364e35_6.1.7601.23136_none_a2761d54b6c24e92\rpchttp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-rpc-http_31bf3856ad364e35_6.1.7601.23126_none_a280ed40b6ba32a1\rpchttp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-rpc-http_31bf3856ad364e35_6.1.7601.23115_none_a28abce2b6b2fd59\rpchttp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-rpc-http_31bf3856ad364e35_6.1.7601.23112_none_a287bc04b6b5b154\rpchttp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_6.1.7601.23095_none_31c979507f6f229d\rdpvideominiport.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_6.1.7601.23095_none_31c979507f6f229d\rdpudd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_6.1.7601.23095_none_31c979507f6f229d\rdpcorets.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_6.1.7601.22947_none_3201b15e7f449654\rdpvideominiport.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_6.1.7601.22947_none_3201b15e7f449654\rdpudd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_6.1.7601.22947_none_3201b15e7f449654\rdpcorets.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_6.1.7601.18892_none_313d03856654038c\rdpvideominiport.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_6.1.7601.18892_none_313d03856654038c\rdpudd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_6.1.7601.18892_none_313d03856654038c\rdpcorets.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_6.1.7601.18740_none_317110a7662d4802\rdpvideominiport.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_6.1.7601.18740_none_317110a7662d4802\rdpudd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_6.1.7601.18740_none_317110a7662d4802\rdpcorets.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-profsvc_31bf3856ad364e35_6.1.7601.22913_none_fe414cc3aa0dbc3d\profsvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-profsvc_31bf3856ad364e35_6.1.7601.22913_none_fe414cc3aa0dbc3d\profprov.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-profsvc_31bf3856ad364e35_6.1.7601.18706_none_fdc57edc90e54f60\profsvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-photo-image-codec_31bf3856ad364e35_7.1.7601.22949_none_931fb1c948191bb9\WMPhoto.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-photo-image-codec_31bf3856ad364e35_7.1.7601.18742_none_928f11122f01cd67\WMPhoto.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-photo-image-codec_31bf3856ad364e35_6.1.7601.22949_none_a1af3583bd3272ea\WMPhoto.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-photo-image-codec_31bf3856ad364e35_6.1.7601.18742_none_a11e94cca41b2498\WMPhoto.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-peauth_31bf3856ad364e35_6.1.7601.22948_none_0a93cd69011aa051\PEAuth.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-peauth_31bf3856ad364e35_6.1.7601.18741_none_0a032cb1e80351ff\PEAuth.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-packager_31bf3856ad364e35_6.1.7601.22853_none_f074c244483f4149\packager.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-packager_31bf3856ad364e35_6.1.7601.18645_none_eff7f4132f17bb15\packager.dll:$CmdTcID

@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.23136_none_6ead92052b91774c\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.23136_none_6ead92052b91774c\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.23126_none_6eb861f12b895b5b\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.23126_none_6eb861f12b895b5b\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.23002_none_6ec9febb2b7cc0f6\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.23002_none_6ec9febb2b7cc0f6\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.22948_none_6ea4e8a52b979582\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.22948_none_6ea4e8a52b979582\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.22943_none_6e9fe7332b9c16cf\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.22943_none_6e9fe7332b9c16cf\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.22923_none_6eb5870b2b8bdeed\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.22923_none_6eb5870b2b8bdeed\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.22921_none_6eb386772b8dac3f\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.22921_none_6eb386772b8dac3f\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18933_none_6e211c3a1276583b\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18933_none_6e211c3a1276583b\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18923_none_6e2bec26126e3c4a\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18923_none_6e2bec26126e3c4a\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18798_none_6de53a5812a28446\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18798_none_6de53a5812a28446\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18741_none_6e1447ee12804730\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18741_none_6e1447ee12804730\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18738_none_6e2619e01271dca0\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18738_none_6e2619e01271dca0\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18717_none_6e3ab96e12628b67\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18717_none_6e3ab96e12628b67\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18715_none_6e38b8da126458b9\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18715_none_6e38b8da126458b9\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.1.7601.22846_none_bf72af1872f0866d\oleaut32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.1.7601.18640_none_bee30eab59d85172\oleaut32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ntdll_31bf3856ad364e35_6.1.7601.23136_none_5b540ea6739c10fa\ntdll.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ntdll_31bf3856ad364e35_6.1.7601.23126_none_5b5ede927393f509\ntdll.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ntdll_31bf3856ad364e35_6.1.7601.23002_none_5b707b5c73875aa4\ntdll.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ntdll_31bf3856ad364e35_6.1.7601.18933_none_5ac798db5a80f1e9\ntdll.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ntdll_31bf3856ad364e35_6.1.7601.18923_none_5ad268c75a78d5f8\ntdll.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ntdll_31bf3856ad364e35_6.1.7601.18798_none_5a8bb6f95aad1df4\ntdll.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-notepadwin_31bf3856ad364e35_6.1.7601.23120_none_454bcb737278beb2\notepad.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-notepadwin_31bf3856ad364e35_6.1.7601.18917_none_44d42878594c8116\notepad.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-notepad_31bf3856ad364e35_6.1.7601.23120_none_719c8c0fe76b6c5c\notepad.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-notepad_31bf3856ad364e35_6.1.7601.18917_none_7124e914ce3f2ec0\notepad.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-nlasvc_31bf3856ad364e35_6.1.7601.22893_none_69bf69d7828bd85a\nlasvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-nlasvc_31bf3856ad364e35_6.1.7601.22893_none_69bf69d7828bd85a\nlaapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-nlasvc_31bf3856ad364e35_6.1.7601.22893_none_69bf69d7828bd85a\ncsi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-nlasvc_31bf3856ad364e35_6.1.7601.18685_none_69429ba669645226\nlasvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-nlasvc_31bf3856ad364e35_6.1.7601.18685_none_69429ba669645226\nlaapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-nlasvc_31bf3856ad364e35_6.1.7601.18685_none_69429ba669645226\ncsi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.23136_none_605b85f6690a7387\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.23126_none_606655e269025796\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.23115_none_6070258468fb224e\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.23112_none_606d24a668fdd649\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.23017_none_6072243268f957d5\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.23002_none_6077f2ac68f5bd31\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.22983_none_60229b74693582ce\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.22948_none_6052dc96691091bd\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.22943_none_604ddb246915130a\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.22923_none_60637afc6904db28\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.22920_none_60607a1e69078f23\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.22865_none_603a39fa69238073\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.22843_none_604dd93e691515e3\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.22814_none_606f494c68fbdb67\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.18933_none_5fcf102b4fef5476\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.18923_none_5fd9e0174fe73885\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.18912_none_5fe3afb94fe0033d\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.18909_none_5ff581ab4fd198ad\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.18812_none_5fe3add34fe00616\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.18798_none_5f932e49501b8081\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.18779_none_5fa9ce6b500a61f6\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.18741_none_5fc23bdf4ff9436b\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.18738_none_5fd40dd14fead8db\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.18714_none_5fe5ac814fde3b9d\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.18606_none_5ff27b1b4fd45533\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.1.7601.23126_none_8af5fc930e3cb812\msxml6r.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.1.7601.23126_none_8af5fc930e3cb812\msxml6.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.1.7601.18923_none_8a6986c7f5219901\msxml6r.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.1.7601.18923_none_8a6986c7f5219901\msxml6.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.1.7601.23126_none_8af640eb0e3c6b2f\msxml3r.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.1.7601.23126_none_8af640eb0e3c6b2f\msxml3.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.1.7601.22986_none_8ab5875b0e6ce26c\msxml3r.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.1.7601.22986_none_8ab5875b0e6ce26c\msxml3.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.1.7601.22782_none_8ab182670e7082c2\msxml3r.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.1.7601.22782_none_8ab182670e7082c2\msxml3.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.1.7601.18923_none_8a69cb1ff5214c1e\msxml3r.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.1.7601.18923_none_8a69cb1ff5214c1e\msxml3.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.1.7601.18782_none_8a27e781f552e01f\msxml3r.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.1.7601.18782_none_8a27e781f552e01f\msxml3.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.1.7601.18576_none_8a36b4c9f5472f3c\msxml3r.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.1.7601.18576_none_8a36b4c9f5472f3c\msxml3.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msmpeg2vdec_31bf3856ad364e35_6.1.7601.22948_none_936bcbca2f768adf\msmpeg2vdec.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msmpeg2vdec_31bf3856ad364e35_6.1.7601.18741_none_92db2b13165f3c8d\msmpeg2vdec.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23136_none_c9bfaab2efdbd9a0\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23136_none_c9bfaab2efdbd9a0\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23136_none_c9bfaab2efdbd9a0\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23136_none_c9bfaab2efdbd9a0\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23126_none_c9ca7a9eefd3bdaf\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23126_none_c9ca7a9eefd3bdaf\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23126_none_c9ca7a9eefd3bdaf\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23126_none_c9ca7a9eefd3bdaf\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23115_none_c9d44a40efcc8867\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23115_none_c9d44a40efcc8867\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23115_none_c9d44a40efcc8867\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23115_none_c9d44a40efcc8867\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23112_none_c9d14962efcf3c62\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23112_none_c9d14962efcf3c62\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23112_none_c9d14962efcf3c62\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23112_none_c9d14962efcf3c62\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23017_none_c9d648eeefcabdee\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23017_none_c9d648eeefcabdee\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23017_none_c9d648eeefcabdee\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23017_none_c9d648eeefcabdee\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23002_none_c9dc1768efc7234a\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23002_none_c9dc1768efc7234a\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23002_none_c9dc1768efc7234a\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23002_none_c9dc1768efc7234a\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22983_none_c986c030f006e8e7\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22983_none_c986c030f006e8e7\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22983_none_c986c030f006e8e7\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22983_none_c986c030f006e8e7\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22948_none_c9b70152efe1f7d6\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22948_none_c9b70152efe1f7d6\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22948_none_c9b70152efe1f7d6\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22948_none_c9b70152efe1f7d6\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22943_none_c9b1ffe0efe67923\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22943_none_c9b1ffe0efe67923\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22943_none_c9b1ffe0efe67923\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22943_none_c9b1ffe0efe67923\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22923_none_c9c79fb8efd64141\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22923_none_c9c79fb8efd64141\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22923_none_c9c79fb8efd64141\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22923_none_c9c79fb8efd64141\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22920_none_c9c49edaefd8f53c\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22920_none_c9c49edaefd8f53c\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22920_none_c9c49edaefd8f53c\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22920_none_c9c49edaefd8f53c\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22865_none_c99e5eb6eff4e68c\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22865_none_c99e5eb6eff4e68c\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22843_none_c9b1fdfaefe67bfc\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22843_none_c9b1fdfaefe67bfc\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22814_none_c9d36e08efcd4180\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22814_none_c9d36e08efcd4180\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22814_none_c9d36e08efcd4180\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.22814_none_c9d36e08efcd4180\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18933_none_c93334e7d6c0ba8f\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18933_none_c93334e7d6c0ba8f\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18933_none_c93334e7d6c0ba8f\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18933_none_c93334e7d6c0ba8f\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18923_none_c93e04d3d6b89e9e\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18923_none_c93e04d3d6b89e9e\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18923_none_c93e04d3d6b89e9e\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18923_none_c93e04d3d6b89e9e\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18912_none_c947d475d6b16956\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18912_none_c947d475d6b16956\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18912_none_c947d475d6b16956\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18912_none_c947d475d6b16956\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18909_none_c959a667d6a2fec6\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18909_none_c959a667d6a2fec6\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18909_none_c959a667d6a2fec6\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18909_none_c959a667d6a2fec6\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18812_none_c947d28fd6b16c2f\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18812_none_c947d28fd6b16c2f\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18812_none_c947d28fd6b16c2f\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18812_none_c947d28fd6b16c2f\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18798_none_c8f75305d6ece69a\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18798_none_c8f75305d6ece69a\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18798_none_c8f75305d6ece69a\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18798_none_c8f75305d6ece69a\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18779_none_c90df327d6dbc80f\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18779_none_c90df327d6dbc80f\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18779_none_c90df327d6dbc80f\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18779_none_c90df327d6dbc80f\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18741_none_c926609bd6caa984\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18741_none_c926609bd6caa984\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18741_none_c926609bd6caa984\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18741_none_c926609bd6caa984\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18738_none_c938328dd6bc3ef4\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18738_none_c938328dd6bc3ef4\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18738_none_c938328dd6bc3ef4\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18738_none_c938328dd6bc3ef4\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18717_none_c94cd21bd6acedbb\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18717_none_c94cd21bd6acedbb\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18717_none_c94cd21bd6acedbb\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18717_none_c94cd21bd6acedbb\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18714_none_c949d13dd6afa1b6\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18714_none_c949d13dd6afa1b6\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18714_none_c949d13dd6afa1b6\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18714_none_c949d13dd6afa1b6\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18637_none_c937305dd6bd2876\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18637_none_c937305dd6bd2876\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mountpointmanager_31bf3856ad364e35_6.1.7601.23136_none_f515552a7e742878\msmmsp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mountpointmanager_31bf3856ad364e35_6.1.7601.23136_none_f515552a7e742878\mountmgr.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mountpointmanager_31bf3856ad364e35_6.1.7601.22948_none_f50cabca7e7a46ae\msmmsp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mountpointmanager_31bf3856ad364e35_6.1.7601.22948_none_f50cabca7e7a46ae\mountmgr.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mountpointmanager_31bf3856ad364e35_6.1.7601.18933_none_f488df5f65590967\msmmsp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mountpointmanager_31bf3856ad364e35_6.1.7601.18933_none_f488df5f65590967\mountmgr.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mountpointmanager_31bf3856ad364e35_6.1.7601.18741_none_f47c0b136562f85c\msmmsp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mountpointmanager_31bf3856ad364e35_6.1.7601.18741_none_f47c0b136562f85c\mountmgr.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mfplat_31bf3856ad364e35_6.1.7601.22948_none_f91f1fb1cae9d43c\mfplat.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mfplat_31bf3856ad364e35_6.1.7601.18741_none_f88e7efab1d285ea\mfplat.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.1.7601.22948_none_70a2a2473c417163\wmdrmsdk.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.1.7601.22948_none_70a2a2473c417163\msscp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.1.7601.22948_none_70a2a2473c417163\msnetobj.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.1.7601.22948_none_70a2a2473c417163\drmv2clt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.1.7601.22948_none_70a2a2473c417163\drmmgrtn.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.1.7601.22948_none_70a2a2473c417163\blackbox.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.1.7601.18741_none_70120190232a2311\wmdrmsdk.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.1.7601.18741_none_70120190232a2311\msscp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.1.7601.18741_none_70120190232a2311\msnetobj.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.1.7601.18741_none_70120190232a2311\drmv2clt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.1.7601.18741_none_70120190232a2311\drmmgrtn.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.1.7601.18741_none_70120190232a2311\blackbox.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.23041_none_0dd7203fc694be90\wmpshare.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.23041_none_0dd7203fc694be90\wmploc.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.23041_none_0dd7203fc694be90\wmplayer.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.23041_none_0dd7203fc694be90\wmpconfig.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.23041_none_0dd7203fc694be90\wmp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.23041_none_0dd7203fc694be90\spwmp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.23041_none_0dd7203fc694be90\msdxm.ocx:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.23041_none_0dd7203fc694be90\dxmasf.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.22948_none_0dde4a23c68e3caf\wmpshare.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.22948_none_0dde4a23c68e3caf\wmploc.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.22948_none_0dde4a23c68e3caf\wmplayer.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.22948_none_0dde4a23c68e3caf\wmpconfig.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.22948_none_0dde4a23c68e3caf\wmp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.22948_none_0dde4a23c68e3caf\spwmp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.22948_none_0dde4a23c68e3caf\msdxm.ocx:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.22948_none_0dde4a23c68e3caf\dxmasf.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.18840_none_0d4cab08ad77d22d\wmpshare.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.18840_none_0d4cab08ad77d22d\wmploc.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.18840_none_0d4cab08ad77d22d\wmplayer.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.18840_none_0d4cab08ad77d22d\wmpconfig.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.18840_none_0d4cab08ad77d22d\wmp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.18840_none_0d4cab08ad77d22d\spwmp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.18840_none_0d4cab08ad77d22d\msdxm.ocx:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.18840_none_0d4cab08ad77d22d\dxmasf.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.18741_none_0d4da96cad76ee5d\wmpshare.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.18741_none_0d4da96cad76ee5d\wmploc.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.18741_none_0d4da96cad76ee5d\wmplayer.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.18741_none_0d4da96cad76ee5d\wmpconfig.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.18741_none_0d4da96cad76ee5d\wmp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.18741_none_0d4da96cad76ee5d\spwmp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.18741_none_0d4da96cad76ee5d\msdxm.ocx:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.18741_none_0d4da96cad76ee5d\dxmasf.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7601.22948_none_9ed3b64084362d9d\rrinstaller.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7601.22948_none_9ed3b64084362d9d\mfps.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7601.22948_none_9ed3b64084362d9d\mfpmp.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7601.22948_none_9ed3b64084362d9d\mferror.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7601.22948_none_9ed3b64084362d9d\mf.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7601.18741_none_9e4315896b1edf4b\rrinstaller.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7601.18741_none_9e4315896b1edf4b\mfps.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7601.18741_none_9e4315896b1edf4b\mfpmp.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7601.18741_none_9e4315896b1edf4b\mferror.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7601.18741_none_9e4315896b1edf4b\mf.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..update-genuineintel_31bf3856ad364e35_6.1.7601.18848_none_beaaf69b10a43194\mcupdate_GenuineIntel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ntmanager.resources_31bf3856ad364e35_6.1.7601.23136_en-us_3f8a612db6b56e6f\mountmgr.sys.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ntmanager.resources_31bf3856ad364e35_6.1.7601.23136_cs-cz_fc3415d1cfbb1211\mountmgr.sys.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ntmanager.resources_31bf3856ad364e35_6.1.7601.18933_en-us_3efdeb629d9a4f5e\mountmgr.sys.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ntmanager.resources_31bf3856ad364e35_6.1.7601.18933_cs-cz_fba7a006b69ff300\mountmgr.sys.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23136_en-us_5c82d457d14acbb1\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23136_en-us_5c82d457d14acbb1\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23136_en-us_5c82d457d14acbb1\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23136_en-us_5c82d457d14acbb1\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23136_cs-cz_192c88fbea506f53\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23136_cs-cz_192c88fbea506f53\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23136_cs-cz_192c88fbea506f53\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23136_cs-cz_192c88fbea506f53\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23126_en-us_5c8da443d142afc0\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23126_en-us_5c8da443d142afc0\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23126_en-us_5c8da443d142afc0\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23126_en-us_5c8da443d142afc0\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23126_cs-cz_193758e7ea485362\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23126_cs-cz_193758e7ea485362\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23126_cs-cz_193758e7ea485362\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23126_cs-cz_193758e7ea485362\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23115_en-us_5c9773e5d13b7a78\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23115_en-us_5c9773e5d13b7a78\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23115_en-us_5c9773e5d13b7a78\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23115_en-us_5c9773e5d13b7a78\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23115_cs-cz_19412889ea411e1a\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23115_cs-cz_19412889ea411e1a\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23115_cs-cz_19412889ea411e1a\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23115_cs-cz_19412889ea411e1a\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23112_en-us_5c947307d13e2e73\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23112_en-us_5c947307d13e2e73\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23112_en-us_5c947307d13e2e73\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23112_en-us_5c947307d13e2e73\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23112_cs-cz_193e27abea43d215\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23112_cs-cz_193e27abea43d215\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23112_cs-cz_193e27abea43d215\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23112_cs-cz_193e27abea43d215\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23017_en-us_5c997293d139afff\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23017_en-us_5c997293d139afff\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23017_en-us_5c997293d139afff\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23017_en-us_5c997293d139afff\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23017_cs-cz_19432737ea3f53a1\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23017_cs-cz_19432737ea3f53a1\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23017_cs-cz_19432737ea3f53a1\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23017_cs-cz_19432737ea3f53a1\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23002_en-us_5c9f410dd136155b\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23002_en-us_5c9f410dd136155b\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23002_en-us_5c9f410dd136155b\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23002_en-us_5c9f410dd136155b\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_1948f5b1ea3bb8fd\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_1948f5b1ea3bb8fd\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_1948f5b1ea3bb8fd\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_1948f5b1ea3bb8fd\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22983_en-us_5c49e9d5d175daf8\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22983_en-us_5c49e9d5d175daf8\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22983_en-us_5c49e9d5d175daf8\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22983_en-us_5c49e9d5d175daf8\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22983_cs-cz_18f39e79ea7b7e9a\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22983_cs-cz_18f39e79ea7b7e9a\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22983_cs-cz_18f39e79ea7b7e9a\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22983_cs-cz_18f39e79ea7b7e9a\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22948_en-us_5c7a2af7d150e9e7\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22948_en-us_5c7a2af7d150e9e7\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22948_en-us_5c7a2af7d150e9e7\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22948_en-us_5c7a2af7d150e9e7\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22948_cs-cz_1923df9bea568d89\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22948_cs-cz_1923df9bea568d89\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22948_cs-cz_1923df9bea568d89\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22948_cs-cz_1923df9bea568d89\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22943_en-us_5c752985d1556b34\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22943_en-us_5c752985d1556b34\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22943_en-us_5c752985d1556b34\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22943_en-us_5c752985d1556b34\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22943_cs-cz_191ede29ea5b0ed6\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22943_cs-cz_191ede29ea5b0ed6\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22943_cs-cz_191ede29ea5b0ed6\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22943_cs-cz_191ede29ea5b0ed6\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22923_en-us_5c8ac95dd1453352\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22923_en-us_5c8ac95dd1453352\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22923_cs-cz_19347e01ea4ad6f4\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22923_cs-cz_19347e01ea4ad6f4\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22920_en-us_5c87c87fd147e74d\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22920_en-us_5c87c87fd147e74d\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22920_en-us_5c87c87fd147e74d\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22920_en-us_5c87c87fd147e74d\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22920_cs-cz_19317d23ea4d8aef\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22920_cs-cz_19317d23ea4d8aef\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22920_cs-cz_19317d23ea4d8aef\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22920_cs-cz_19317d23ea4d8aef\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22865_en-us_5c61885bd163d89d\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22865_en-us_5c61885bd163d89d\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22865_cs-cz_190b3cffea697c3f\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22865_cs-cz_190b3cffea697c3f\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22843_en-us_5c75279fd1556e0d\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22843_en-us_5c75279fd1556e0d\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22843_cs-cz_191edc43ea5b11af\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22843_cs-cz_191edc43ea5b11af\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_en-us_5c9697add13c3391\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_en-us_5c9697add13c3391\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_en-us_5c9697add13c3391\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_en-us_5c9697add13c3391\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_cs-cz_19404c51ea41d733\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_cs-cz_19404c51ea41d733\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_cs-cz_19404c51ea41d733\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.22814_cs-cz_19404c51ea41d733\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18933_en-us_5bf65e8cb82faca0\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18933_en-us_5bf65e8cb82faca0\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18933_en-us_5bf65e8cb82faca0\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18933_en-us_5bf65e8cb82faca0\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18933_cs-cz_18a01330d1355042\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18933_cs-cz_18a01330d1355042\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18933_cs-cz_18a01330d1355042\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18933_cs-cz_18a01330d1355042\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18923_en-us_5c012e78b82790af\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18923_en-us_5c012e78b82790af\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18923_en-us_5c012e78b82790af\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18923_en-us_5c012e78b82790af\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18923_cs-cz_18aae31cd12d3451\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18923_cs-cz_18aae31cd12d3451\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18923_cs-cz_18aae31cd12d3451\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18923_cs-cz_18aae31cd12d3451\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18912_en-us_5c0afe1ab8205b67\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18912_en-us_5c0afe1ab8205b67\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18912_en-us_5c0afe1ab8205b67\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18912_en-us_5c0afe1ab8205b67\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18912_cs-cz_18b4b2bed125ff09\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18912_cs-cz_18b4b2bed125ff09\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18912_cs-cz_18b4b2bed125ff09\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18912_cs-cz_18b4b2bed125ff09\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18909_en-us_5c1cd00cb811f0d7\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18909_en-us_5c1cd00cb811f0d7\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18909_en-us_5c1cd00cb811f0d7\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18909_en-us_5c1cd00cb811f0d7\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18909_cs-cz_18c684b0d1179479\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18909_cs-cz_18c684b0d1179479\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18909_cs-cz_18c684b0d1179479\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18909_cs-cz_18c684b0d1179479\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18812_en-us_5c0afc34b8205e40\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18812_en-us_5c0afc34b8205e40\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18812_en-us_5c0afc34b8205e40\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18812_en-us_5c0afc34b8205e40\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18812_cs-cz_18b4b0d8d12601e2\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18812_cs-cz_18b4b0d8d12601e2\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18812_cs-cz_18b4b0d8d12601e2\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18812_cs-cz_18b4b0d8d12601e2\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18798_en-us_5bba7caab85bd8ab\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18798_en-us_5bba7caab85bd8ab\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18798_en-us_5bba7caab85bd8ab\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18798_en-us_5bba7caab85bd8ab\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18798_cs-cz_1864314ed1617c4d\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18798_cs-cz_1864314ed1617c4d\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18798_cs-cz_1864314ed1617c4d\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18798_cs-cz_1864314ed1617c4d\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18779_en-us_5bd11cccb84aba20\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18779_en-us_5bd11cccb84aba20\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18779_en-us_5bd11cccb84aba20\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18779_en-us_5bd11cccb84aba20\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18779_cs-cz_187ad170d1505dc2\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18779_cs-cz_187ad170d1505dc2\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18779_cs-cz_187ad170d1505dc2\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18779_cs-cz_187ad170d1505dc2\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18741_en-us_5be98a40b8399b95\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18741_en-us_5be98a40b8399b95\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18741_en-us_5be98a40b8399b95\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18741_en-us_5be98a40b8399b95\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_18933ee4d13f3f37\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_18933ee4d13f3f37\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_18933ee4d13f3f37\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_18933ee4d13f3f37\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18738_en-us_5bfb5c32b82b3105\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18738_en-us_5bfb5c32b82b3105\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18738_en-us_5bfb5c32b82b3105\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18738_en-us_5bfb5c32b82b3105\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18738_cs-cz_18a510d6d130d4a7\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18738_cs-cz_18a510d6d130d4a7\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18738_cs-cz_18a510d6d130d4a7\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18738_cs-cz_18a510d6d130d4a7\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18717_en-us_5c0ffbc0b81bdfcc\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18717_en-us_5c0ffbc0b81bdfcc\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18717_en-us_5c0ffbc0b81bdfcc\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18717_en-us_5c0ffbc0b81bdfcc\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18717_cs-cz_18b9b064d121836e\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18717_cs-cz_18b9b064d121836e\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18717_cs-cz_18b9b064d121836e\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18717_cs-cz_18b9b064d121836e\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18714_en-us_5c0cfae2b81e93c7\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18714_en-us_5c0cfae2b81e93c7\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18714_en-us_5c0cfae2b81e93c7\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18714_en-us_5c0cfae2b81e93c7\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18714_cs-cz_18b6af86d1243769\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18714_cs-cz_18b6af86d1243769\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18714_cs-cz_18b6af86d1243769\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18714_cs-cz_18b6af86d1243769\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18637_en-us_5bfa5a02b82c1a87\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18637_en-us_5bfa5a02b82c1a87\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18637_cs-cz_18a40ea6d131be29\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18637_cs-cz_18a40ea6d131be29\adtschema.dll.mui:$CmdTcID

@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lua_31bf3856ad364e35_6.1.7601.23099_none_a889ad06d467c6e0\consent.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lua_31bf3856ad364e35_6.1.7601.23099_none_a889ad06d467c6e0\appinfo.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lua_31bf3856ad364e35_6.1.7601.18896_none_a7fd373bbb4ca7cf\consent.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lua_31bf3856ad364e35_6.1.7601.18896_none_a7fd373bbb4ca7cf\appinfo.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23136_none_a8c7bb26d4399d1a\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23136_none_a8c7bb26d4399d1a\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23136_none_a8c7bb26d4399d1a\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23136_none_a8c7bb26d4399d1a\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23136_none_a8c7bb26d4399d1a\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23136_none_a8c7bb26d4399d1a\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23136_none_a8c7bb26d4399d1a\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23136_none_a8c7bb26d4399d1a\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23126_none_a8d28b12d4318129\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23126_none_a8d28b12d4318129\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23126_none_a8d28b12d4318129\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23126_none_a8d28b12d4318129\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23126_none_a8d28b12d4318129\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23126_none_a8d28b12d4318129\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23126_none_a8d28b12d4318129\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23126_none_a8d28b12d4318129\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23115_none_a8dc5ab4d42a4be1\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23115_none_a8dc5ab4d42a4be1\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23115_none_a8dc5ab4d42a4be1\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23115_none_a8dc5ab4d42a4be1\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23115_none_a8dc5ab4d42a4be1\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23115_none_a8dc5ab4d42a4be1\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23115_none_a8dc5ab4d42a4be1\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23115_none_a8dc5ab4d42a4be1\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23112_none_a8d959d6d42cffdc\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23112_none_a8d959d6d42cffdc\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23112_none_a8d959d6d42cffdc\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23112_none_a8d959d6d42cffdc\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23112_none_a8d959d6d42cffdc\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23112_none_a8d959d6d42cffdc\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23112_none_a8d959d6d42cffdc\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23112_none_a8d959d6d42cffdc\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_a8de5962d4288168\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_a8de5962d4288168\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_a8de5962d4288168\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_a8de5962d4288168\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_a8de5962d4288168\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_a8de5962d4288168\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_a8de5962d4288168\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_a8de5962d4288168\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_a8e427dcd424e6c4\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_a8e427dcd424e6c4\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_a8e427dcd424e6c4\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_a8e427dcd424e6c4\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_a8e427dcd424e6c4\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_a8e427dcd424e6c4\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_a8e427dcd424e6c4\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_a8e427dcd424e6c4\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22983_none_a88ed0a4d464ac61\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22983_none_a88ed0a4d464ac61\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22983_none_a88ed0a4d464ac61\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22983_none_a88ed0a4d464ac61\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22983_none_a88ed0a4d464ac61\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22983_none_a88ed0a4d464ac61\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22983_none_a88ed0a4d464ac61\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22983_none_a88ed0a4d464ac61\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22948_none_a8bf11c6d43fbb50\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22948_none_a8bf11c6d43fbb50\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22948_none_a8bf11c6d43fbb50\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22948_none_a8bf11c6d43fbb50\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22948_none_a8bf11c6d43fbb50\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22948_none_a8bf11c6d43fbb50\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22948_none_a8bf11c6d43fbb50\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22948_none_a8bf11c6d43fbb50\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22943_none_a8ba1054d4443c9d\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22943_none_a8ba1054d4443c9d\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22943_none_a8ba1054d4443c9d\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22943_none_a8ba1054d4443c9d\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22943_none_a8ba1054d4443c9d\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22943_none_a8ba1054d4443c9d\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22943_none_a8ba1054d4443c9d\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22943_none_a8ba1054d4443c9d\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22923_none_a8cfb02cd43404bb\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22923_none_a8cfb02cd43404bb\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22923_none_a8cfb02cd43404bb\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22920_none_a8ccaf4ed436b8b6\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22920_none_a8ccaf4ed436b8b6\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22920_none_a8ccaf4ed436b8b6\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22920_none_a8ccaf4ed436b8b6\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22920_none_a8ccaf4ed436b8b6\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22920_none_a8ccaf4ed436b8b6\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22920_none_a8ccaf4ed436b8b6\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22920_none_a8ccaf4ed436b8b6\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22843_none_a8ba0e6ed4443f76\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22843_none_a8ba0e6ed4443f76\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22814_none_a8db7e7cd42b04fa\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22814_none_a8db7e7cd42b04fa\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22814_none_a8db7e7cd42b04fa\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22814_none_a8db7e7cd42b04fa\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22814_none_a8db7e7cd42b04fa\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22814_none_a8db7e7cd42b04fa\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22814_none_a8db7e7cd42b04fa\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18933_none_a83b455bbb1e7e09\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18933_none_a83b455bbb1e7e09\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18933_none_a83b455bbb1e7e09\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18933_none_a83b455bbb1e7e09\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18933_none_a83b455bbb1e7e09\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18933_none_a83b455bbb1e7e09\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18933_none_a83b455bbb1e7e09\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18933_none_a83b455bbb1e7e09\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18923_none_a8461547bb166218\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18923_none_a8461547bb166218\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18923_none_a8461547bb166218\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18923_none_a8461547bb166218\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18923_none_a8461547bb166218\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18923_none_a8461547bb166218\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18923_none_a8461547bb166218\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18923_none_a8461547bb166218\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18912_none_a84fe4e9bb0f2cd0\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18912_none_a84fe4e9bb0f2cd0\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18912_none_a84fe4e9bb0f2cd0\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18912_none_a84fe4e9bb0f2cd0\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18912_none_a84fe4e9bb0f2cd0\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18912_none_a84fe4e9bb0f2cd0\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18912_none_a84fe4e9bb0f2cd0\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18912_none_a84fe4e9bb0f2cd0\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18909_none_a861b6dbbb00c240\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18909_none_a861b6dbbb00c240\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18909_none_a861b6dbbb00c240\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18909_none_a861b6dbbb00c240\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18909_none_a861b6dbbb00c240\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18909_none_a861b6dbbb00c240\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18909_none_a861b6dbbb00c240\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18909_none_a861b6dbbb00c240\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_a84fe303bb0f2fa9\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_a84fe303bb0f2fa9\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_a84fe303bb0f2fa9\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_a84fe303bb0f2fa9\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_a84fe303bb0f2fa9\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_a84fe303bb0f2fa9\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_a84fe303bb0f2fa9\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_a84fe303bb0f2fa9\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_a7ff6379bb4aaa14\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_a7ff6379bb4aaa14\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_a7ff6379bb4aaa14\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_a7ff6379bb4aaa14\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_a7ff6379bb4aaa14\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_a7ff6379bb4aaa14\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_a7ff6379bb4aaa14\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_a7ff6379bb4aaa14\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18779_none_a816039bbb398b89\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18779_none_a816039bbb398b89\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18779_none_a816039bbb398b89\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18779_none_a816039bbb398b89\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18779_none_a816039bbb398b89\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18779_none_a816039bbb398b89\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18779_none_a816039bbb398b89\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18779_none_a816039bbb398b89\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18741_none_a82e710fbb286cfe\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18741_none_a82e710fbb286cfe\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18741_none_a82e710fbb286cfe\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18741_none_a82e710fbb286cfe\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18741_none_a82e710fbb286cfe\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18741_none_a82e710fbb286cfe\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18741_none_a82e710fbb286cfe\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18741_none_a82e710fbb286cfe\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18738_none_a8404301bb1a026e\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18738_none_a8404301bb1a026e\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18738_none_a8404301bb1a026e\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18738_none_a8404301bb1a026e\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18738_none_a8404301bb1a026e\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18738_none_a8404301bb1a026e\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18738_none_a8404301bb1a026e\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18738_none_a8404301bb1a026e\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18717_none_a854e28fbb0ab135\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18717_none_a854e28fbb0ab135\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18717_none_a854e28fbb0ab135\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18717_none_a854e28fbb0ab135\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18717_none_a854e28fbb0ab135\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18717_none_a854e28fbb0ab135\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18717_none_a854e28fbb0ab135\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18717_none_a854e28fbb0ab135\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18714_none_a851e1b1bb0d6530\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18714_none_a851e1b1bb0d6530\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18714_none_a851e1b1bb0d6530\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18714_none_a851e1b1bb0d6530\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18714_none_a851e1b1bb0d6530\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18714_none_a851e1b1bb0d6530\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18714_none_a851e1b1bb0d6530\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18714_none_a851e1b1bb0d6530\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18637_none_a83f40d1bb1aebf0\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18637_none_a83f40d1bb1aebf0\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18606_none_a85eb04bbb037ec6\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18606_none_a85eb04bbb037ec6\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18606_none_a85eb04bbb037ec6\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18606_none_a85eb04bbb037ec6\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18606_none_a85eb04bbb037ec6\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18606_none_a85eb04bbb037ec6\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18606_none_a85eb04bbb037ec6\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.23136_en-us_892504b60e09bc0b\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.23136_cs-cz_45ceb95a270f5fad\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.23126_en-us_892fd4a20e01a01a\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.23126_cs-cz_45d98946270743bc\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.23115_en-us_8939a4440dfa6ad2\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.23115_cs-cz_45e358e827000e74\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.23112_en-us_8936a3660dfd1ecd\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.23112_cs-cz_45e0580a2702c26f\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.23017_en-us_893ba2f20df8a059\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.23017_cs-cz_45e5579626fe43fb\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.23002_en-us_8941716c0df505b5\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_45eb261026faa957\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.22983_en-us_88ec1a340e34cb52\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.22983_cs-cz_4595ced8273a6ef4\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.22948_en-us_891c5b560e0fda41\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.22948_cs-cz_45c60ffa27157de3\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.22943_en-us_891759e40e145b8e\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.22943_cs-cz_45c10e882719ff30\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.22920_en-us_8929f8de0e06d7a7\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.22920_cs-cz_45d3ad82270c7b49\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.22814_en-us_8938c80c0dfb23eb\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.22814_cs-cz_45e27cb02700c78d\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18933_en-us_88988eeaf4ee9cfa\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18933_cs-cz_4542438f0df4409c\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18923_en-us_88a35ed6f4e68109\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18923_cs-cz_454d137b0dec24ab\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18912_en-us_88ad2e78f4df4bc1\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18912_cs-cz_4556e31d0de4ef63\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18909_en-us_88bf006af4d0e131\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18909_cs-cz_4568b50f0dd684d3\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18812_en-us_88ad2c92f4df4e9a\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18812_cs-cz_4556e1370de4f23c\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18798_en-us_885cad08f51ac905\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18798_cs-cz_450661ad0e206ca7\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18779_en-us_88734d2af509aa7a\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18779_cs-cz_451d01cf0e0f4e1c\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18741_en-us_888bba9ef4f88bef\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_45356f430dfe2f91\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18738_en-us_889d8c90f4ea215f\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18738_cs-cz_454741350defc501\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18714_en-us_88af2b40f4dd8421\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18714_cs-cz_4558dfe50de327c3\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18606_en-us_88bbf9daf4d39db7\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18606_cs-cz_4565ae7f0dd94159\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-kernelbase_31bf3856ad364e35_6.1.7601.23049_none_2977d7c42c07e04d\KernelBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-kernelbase_31bf3856ad364e35_6.1.7601.18847_none_28ec624312ebda93\KernelBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23049_none_963344b1cdbf5861\kernel32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18847_none_95a7cf30b4a352a7\kernel32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-installer-handler_31bf3856ad364e35_6.1.7601.23099_none_e119d8f0c36be8ed\msihnd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-installer-handler_31bf3856ad364e35_6.1.7601.18896_none_e08d6325aa50c9dc\msihnd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-installer-executable_31bf3856ad364e35_6.1.7601.23099_none_4bc0c4a0fdb63e0d\msiexec.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-installer-executable_31bf3856ad364e35_6.1.7601.18896_none_4b344ed5e49b1efc\msiexec.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-installer-engine_31bf3856ad364e35_6.1.7601.23099_none_05b9ce002b211a69\msimsg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-installer-engine_31bf3856ad364e35_6.1.7601.23099_none_05b9ce002b211a69\msi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-installer-engine_31bf3856ad364e35_6.1.7601.18896_none_052d58351205fb58\msimsg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-installer-engine_31bf3856ad364e35_6.1.7601.18896_none_052d58351205fb58\msi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-vgx_31bf3856ad364e35_11.2.9600.17959_none_733c65554591a674\VGX.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-vgx_31bf3856ad364e35_11.2.9600.17914_none_7338d6154594c0f3\VGX.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-vgx_31bf3856ad364e35_11.2.9600.17843_none_7346bda74589d766\VGX.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-vgx_31bf3856ad364e35_11.2.9600.17801_none_7342ea0f458d3ec8\VGX.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-vgx_31bf3856ad364e35_11.2.9600.17728_none_734f1b17458408ec\VGX.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-vgx_31bf3856ad364e35_11.2.9600.17691_none_73618c814574eaf5\VGX.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-vgx_31bf3856ad364e35_11.2.9600.17633_none_735b5d35457a862d\VGX.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-vgx_31bf3856ad364e35_11.2.9600.17501_none_736359d34574eaf5\VGX.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-timeline_is_31bf3856ad364e35_11.2.9600.17959_none_ffdb58f42663bb3d\Timeline_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-timeline_is_31bf3856ad364e35_11.2.9600.17914_none_ffd7c9b42666d5bc\Timeline_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-timeline_is_31bf3856ad364e35_11.2.9600.17843_none_ffe5b146265bec2f\Timeline_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-timeline_is_31bf3856ad364e35_11.2.9600.17801_none_ffe1ddae265f5391\Timeline_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-timeline_is_31bf3856ad364e35_11.2.9600.17728_none_ffee0eb626561db5\Timeline_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-timeline_is_31bf3856ad364e35_11.2.9600.17691_none_000080202646ffbe\Timeline_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-timeline_is_31bf3856ad364e35_11.2.9600.17633_none_fffa50d4264c9af6\Timeline_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-timeline_is_31bf3856ad364e35_11.2.9600.17501_none_00024d722646ffbe\Timeline_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-timeline_31bf3856ad364e35_11.2.9600.17959_none_d2d54d35c6ac91c2\Timeline.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-timeline_31bf3856ad364e35_11.2.9600.17914_none_d2d1bdf5c6afac41\Timeline.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-timeline_31bf3856ad364e35_11.2.9600.17843_none_d2dfa587c6a4c2b4\Timeline.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-timeline_31bf3856ad364e35_11.2.9600.17801_none_d2dbd1efc6a82a16\Timeline.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-timeline_31bf3856ad364e35_11.2.9600.17728_none_d2e802f7c69ef43a\Timeline.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-timeline_31bf3856ad364e35_11.2.9600.17691_none_d2fa7461c68fd643\Timeline.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-timeline_31bf3856ad364e35_11.2.9600.17633_none_d2f44515c695717b\Timeline.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-timeline_31bf3856ad364e35_11.2.9600.17501_none_d2fc41b3c68fd643\Timeline.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17959_none_4bd6090ebb4ff860\iesetup.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17959_none_4bd6090ebb4ff860\iernonce.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17959_none_4bd6090ebb4ff860\ie4uinit.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17914_none_4bd279cebb5312df\iesetup.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17914_none_4bd279cebb5312df\iernonce.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17914_none_4bd279cebb5312df\ie4uinit.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17843_none_4be06160bb482952\iesetup.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17843_none_4be06160bb482952\iernonce.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17843_none_4be06160bb482952\ie4uinit.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17801_none_4bdc8dc8bb4b90b4\iesetup.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17801_none_4bdc8dc8bb4b90b4\iernonce.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17801_none_4bdc8dc8bb4b90b4\ie4uinit.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17728_none_4be8bed0bb425ad8\iesetup.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17728_none_4be8bed0bb425ad8\iernonce.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17728_none_4be8bed0bb425ad8\ie4uinit.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17691_none_4bfb303abb333ce1\iesetup.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17691_none_4bfb303abb333ce1\iernonce.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17691_none_4bfb303abb333ce1\ie4uinit.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17633_none_4bf500eebb38d819\iesetup.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17633_none_4bf500eebb38d819\iernonce.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17633_none_4bf500eebb38d819\ie4uinit.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17501_none_4bfcfd8cbb333ce1\iesetup.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17501_none_4bfcfd8cbb333ce1\iernonce.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17501_none_4bfcfd8cbb333ce1\ie4uinit.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17959_none_cda8fe43e95adf35\sqmapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17959_none_cda8fe43e95adf35\iertutil.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17923_none_cda68615e95cf96a\sqmapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17923_none_cda68615e95cf96a\iertutil.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17914_none_cda56f03e95df9b4\sqmapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17914_none_cda56f03e95df9b4\iertutil.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17843_none_cdb35695e9531027\sqmapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17843_none_cdb35695e9531027\iertutil.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17801_none_cdaf82fde9567789\sqmapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17801_none_cdaf82fde9567789\iertutil.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17728_none_cdbbb405e94d41ad\sqmapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17728_none_cdbbb405e94d41ad\iertutil.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17691_none_cdce256fe93e23b6\sqmapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17691_none_cdce256fe93e23b6\iertutil.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17633_none_cdc7f623e943beee\sqmapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17633_none_cdc7f623e943beee\iertutil.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17501_none_cdcff2c1e93e23b6\sqmapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17501_none_cdcff2c1e93e23b6\iertutil.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.2.9600.17959_none_4d97923eb991e9b9\msrating.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.2.9600.17914_none_4d9402feb9950438\msrating.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.2.9600.17843_none_4da1ea90b98a1aab\msrating.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.2.9600.17801_none_4d9e16f8b98d820d\msrating.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.2.9600.17728_none_4daa4800b9844c31\msrating.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.2.9600.17691_none_4dbcb96ab9752e3a\msrating.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.2.9600.17633_none_4db68a1eb97ac972\msrating.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.2.9600.17501_none_4dbe86bcb9752e3a\msrating.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-networkinspection_31bf3856ad364e35_11.2.9600.17959_none_fb01de53b0d7509f\networkinspection.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-networkinspection_31bf3856ad364e35_11.2.9600.17914_none_fafe4f13b0da6b1e\networkinspection.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-networkinspection_31bf3856ad364e35_11.2.9600.17843_none_fb0c36a5b0cf8191\networkinspection.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-networkinspection_31bf3856ad364e35_11.2.9600.17801_none_fb08630db0d2e8f3\networkinspection.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-networkinspection_31bf3856ad364e35_11.2.9600.17728_none_fb149415b0c9b317\networkinspection.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-networkinspection_31bf3856ad364e35_11.2.9600.17691_none_fb27057fb0ba9520\networkinspection.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-networkinspection_31bf3856ad364e35_11.2.9600.17633_none_fb20d633b0c03058\networkinspection.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-networkinspection_31bf3856ad364e35_11.2.9600.17501_none_fb28d2d1b0ba9520\networkinspection.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-mshtmldac_31bf3856ad364e35_11.2.9600.17959_none_5e42f68653f47b5a\MshtmlDac.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-mshtmldac_31bf3856ad364e35_11.2.9600.17914_none_5e3f674653f795d9\MshtmlDac.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-mshtmldac_31bf3856ad364e35_11.2.9600.17843_none_5e4d4ed853ecac4c\MshtmlDac.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-mshtmldac_31bf3856ad364e35_11.2.9600.17801_none_5e497b4053f013ae\MshtmlDac.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-mshtmldac_31bf3856ad364e35_11.2.9600.17728_none_5e55ac4853e6ddd2\MshtmlDac.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-mshtmldac_31bf3856ad364e35_11.2.9600.17691_none_5e681db253d7bfdb\MshtmlDac.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-mshtmldac_31bf3856ad364e35_11.2.9600.17633_none_5e61ee6653dd5b13\MshtmlDac.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-mshtmldac_31bf3856ad364e35_11.2.9600.17501_none_5e69eb0453d7bfdb\MshtmlDac.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-memoryanalyzer_31bf3856ad364e35_11.2.9600.17959_none_48fc6c0c50682600\MemoryAnalyzer.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-memoryanalyzer_31bf3856ad364e35_11.2.9600.17914_none_48f8dccc506b407f\MemoryAnalyzer.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-memoryanalyzer_31bf3856ad364e35_11.2.9600.17843_none_4906c45e506056f2\MemoryAnalyzer.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-memoryanalyzer_31bf3856ad364e35_11.2.9600.17801_none_4902f0c65063be54\MemoryAnalyzer.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-memoryanalyzer_31bf3856ad364e35_11.2.9600.17728_none_490f21ce505a8878\MemoryAnalyzer.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-memoryanalyzer_31bf3856ad364e35_11.2.9600.17691_none_49219338504b6a81\MemoryAnalyzer.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-memoryanalyzer_31bf3856ad364e35_11.2.9600.17633_none_491b63ec505105b9\MemoryAnalyzer.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-memoryanalyzer_31bf3856ad364e35_11.2.9600.17501_none_4923608a504b6a81\MemoryAnalyzer.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-jsprofilerui_31bf3856ad364e35_11.2.9600.17959_none_79044d922b09a67f\jsprofilerui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-jsprofilerui_31bf3856ad364e35_11.2.9600.17914_none_7900be522b0cc0fe\jsprofilerui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-jsprofilerui_31bf3856ad364e35_11.2.9600.17843_none_790ea5e42b01d771\jsprofilerui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-jsprofilerui_31bf3856ad364e35_11.2.9600.17801_none_790ad24c2b053ed3\jsprofilerui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-jsprofilerui_31bf3856ad364e35_11.2.9600.17728_none_791703542afc08f7\jsprofilerui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-jsprofilerui_31bf3856ad364e35_11.2.9600.17691_none_792974be2aeceb00\jsprofilerui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-jsprofilerui_31bf3856ad364e35_11.2.9600.17633_none_792345722af28638\jsprofilerui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-jsprofilerui_31bf3856ad364e35_11.2.9600.17501_none_792b42102aeceb00\jsprofilerui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.2.9600.17959_none_b56753f376d52fbb\ieUnatt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.2.9600.17914_none_b563c4b376d84a3a\ieUnatt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.2.9600.17843_none_b571ac4576cd60ad\ieUnatt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.2.9600.17801_none_b56dd8ad76d0c80f\ieUnatt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.2.9600.17728_none_b57a09b576c79233\ieUnatt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.2.9600.17691_none_b58c7b1f76b8743c\ieUnatt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.2.9600.17633_none_b5864bd376be0f74\ieUnatt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.2.9600.17509_none_b58d923176b94144\ieUnatt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.2.9600.17501_none_b58e487176b8743c\ieUnatt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_11.2.9600.17959_none_6ea12d08ee790c73\ieinstal.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_11.2.9600.17923_none_6e9eb4daee7b26a8\ieinstal.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_11.2.9600.17914_none_6e9d9dc8ee7c26f2\ieinstal.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_11.2.9600.17843_none_6eab855aee713d65\ieinstal.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_11.2.9600.17801_none_6ea7b1c2ee74a4c7\ieinstal.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_11.2.9600.17728_none_6eb3e2caee6b6eeb\ieinstal.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_11.2.9600.17691_none_6ec65434ee5c50f4\ieinstal.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_11.2.9600.17633_none_6ec024e8ee61ec2c\ieinstal.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_11.2.9600.17501_none_6ec82186ee5c50f4\ieinstal.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_11.2.9600.17959_none_cd9283dff70fb1c5\IEShims.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_11.2.9600.17914_none_cd8ef49ff712cc44\IEShims.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_11.2.9600.17843_none_cd9cdc31f707e2b7\IEShims.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_11.2.9600.17801_none_cd990899f70b4a19\IEShims.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_11.2.9600.17728_none_cda539a1f702143d\IEShims.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_11.2.9600.17691_none_cdb7ab0bf6f2f646\IEShims.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_11.2.9600.17633_none_cdb17bbff6f8917e\IEShims.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_11.2.9600.17501_none_cdb9785df6f2f646\IEShims.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_11.2.9600.17959_none_16343849a7674b57\ieproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_11.2.9600.17914_none_1630a909a76a65d6\ieproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_11.2.9600.17843_none_163e909ba75f7c49\ieproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_11.2.9600.17801_none_163abd03a762e3ab\ieproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_11.2.9600.17728_none_1646ee0ba759adcf\ieproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_11.2.9600.17691_none_16595f75a74a8fd8\ieproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_11.2.9600.17633_none_16533029a7502b10\ieproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_11.2.9600.17501_none_165b2cc7a74a8fd8\ieproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ielowutil_31bf3856ad364e35_11.2.9600.17959_none_8c7b6010ce11691d\ielowutil.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ielowutil_31bf3856ad364e35_11.2.9600.17914_none_8c77d0d0ce14839c\ielowutil.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ielowutil_31bf3856ad364e35_11.2.9600.17843_none_8c85b862ce099a0f\ielowutil.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ielowutil_31bf3856ad364e35_11.2.9600.17801_none_8c81e4cace0d0171\ielowutil.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ielowutil_31bf3856ad364e35_11.2.9600.17728_none_8c8e15d2ce03cb95\ielowutil.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ielowutil_31bf3856ad364e35_11.2.9600.17691_none_8ca0873ccdf4ad9e\ielowutil.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ielowutil_31bf3856ad364e35_11.2.9600.17633_none_8c9a57f0cdfa48d6\ielowutil.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ielowutil_31bf3856ad364e35_11.2.9600.17501_none_8ca2548ecdf4ad9e\ielowutil.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17959_none_491beac25f9d76ca\ieetwproxystub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17959_none_491beac25f9d76ca\ieetwcollectorres.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17959_none_491beac25f9d76ca\ieetwcollector.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17914_none_49185b825fa09149\ieetwproxystub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17914_none_49185b825fa09149\ieetwcollectorres.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17914_none_49185b825fa09149\ieetwcollector.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17843_none_492643145f95a7bc\ieetwproxystub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17843_none_492643145f95a7bc\ieetwcollectorres.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17843_none_492643145f95a7bc\ieetwcollector.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17801_none_49226f7c5f990f1e\ieetwproxystub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17801_none_49226f7c5f990f1e\ieetwcollectorres.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17801_none_49226f7c5f990f1e\ieetwcollector.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17728_none_492ea0845f8fd942\ieetwproxystub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17728_none_492ea0845f8fd942\ieetwcollectorres.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17728_none_492ea0845f8fd942\ieetwcollector.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17691_none_494111ee5f80bb4b\ieetwproxystub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17691_none_494111ee5f80bb4b\ieetwcollectorres.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17691_none_494111ee5f80bb4b\ieetwcollector.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17633_none_493ae2a25f865683\ieetwproxystub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17633_none_493ae2a25f865683\ieetwcollectorres.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17633_none_493ae2a25f865683\ieetwcollector.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17501_none_4942df405f80bb4b\ieetwproxystub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17501_none_4942df405f80bb4b\ieetwcollectorres.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17501_none_4942df405f80bb4b\ieetwcollector.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrenderingmedia_31bf3856ad364e35_11.2.9600.17959_none_4485ff10b622b55a\mshtmlmedia.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrenderingmedia_31bf3856ad364e35_11.2.9600.17914_none_44826fd0b625cfd9\mshtmlmedia.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrenderingmedia_31bf3856ad364e35_11.2.9600.17843_none_44905762b61ae64c\mshtmlmedia.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrenderingmedia_31bf3856ad364e35_11.2.9600.17801_none_448c83cab61e4dae\mshtmlmedia.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrenderingmedia_31bf3856ad364e35_11.2.9600.17728_none_4498b4d2b61517d2\mshtmlmedia.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrenderingmedia_31bf3856ad364e35_11.2.9600.17691_none_44ab263cb605f9db\mshtmlmedia.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrenderingmedia_31bf3856ad364e35_11.2.9600.17633_none_44a4f6f0b60b9513\mshtmlmedia.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrenderingmedia_31bf3856ad364e35_11.2.9600.17501_none_44acf38eb605f9db\mshtmlmedia.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17959_none_994866867f002a0e\mshtml.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17923_none_9945ee587f024443\mshtml.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17914_none_9944d7467f03448d\mshtml.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17843_none_9952bed87ef85b00\mshtml.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17801_none_994eeb407efbc262\mshtml.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17728_none_995b1c487ef28c86\mshtml.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17691_none_996d8db27ee36e8f\mshtml.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17633_none_99675e667ee909c7\mshtml.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17501_none_996f5b047ee36e8f\mshtml.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_11.2.9600.17959_none_ce2e3d51a03b73e6\mshtmled.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_11.2.9600.17914_none_ce2aae11a03e8e65\mshtmled.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_11.2.9600.17843_none_ce3895a3a033a4d8\mshtmled.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_11.2.9600.17801_none_ce34c20ba0370c3a\mshtmled.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_11.2.9600.17728_none_ce40f313a02dd65e\mshtmled.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_11.2.9600.17691_none_ce53647da01eb867\mshtmled.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_11.2.9600.17633_none_ce4d3531a024539f\mshtmled.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_11.2.9600.17501_none_ce5531cfa01eb867\mshtmled.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17959_none_eaa7c08a0af5b83b\ieui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17959_none_eaa7c08a0af5b83b\ieframe.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17923_none_eaa5485c0af7d270\ieui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17923_none_eaa5485c0af7d270\ieframe.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17914_none_eaa4314a0af8d2ba\ieui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17914_none_eaa4314a0af8d2ba\ieframe.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17843_none_eab218dc0aede92d\ieui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17843_none_eab218dc0aede92d\ieframe.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17801_none_eaae45440af1508f\ieui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17801_none_eaae45440af1508f\ieframe.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17728_none_eaba764c0ae81ab3\ieui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17728_none_eaba764c0ae81ab3\ieframe.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17691_none_eacce7b60ad8fcbc\ieui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17691_none_eacce7b60ad8fcbc\ieframe.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17633_none_eac6b86a0ade97f4\ieui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17633_none_eac6b86a0ade97f4\ieframe.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17501_none_eaceb5080ad8fcbc\ieui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17501_none_eaceb5080ad8fcbc\ieframe.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17959_en-us_15cb9c1b2a8505da\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17959_en-us_15cb9c1b2a8505da\ieframe.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17923_en-us_15c923ed2a87200f\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17923_en-us_15c923ed2a87200f\ieframe.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17914_en-us_15c80cdb2a882059\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17914_en-us_15c80cdb2a882059\ieframe.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17843_en-us_15d5f46d2a7d36cc\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17843_en-us_15d5f46d2a7d36cc\ieframe.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17843_cs-cz_d27fa9114382da6e\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17843_cs-cz_d27fa9114382da6e\ieframe.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17801_en-us_15d220d52a809e2e\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17801_en-us_15d220d52a809e2e\ieframe.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17728_en-us_15de51dd2a776852\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17728_en-us_15de51dd2a776852\ieframe.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17691_en-us_15f0c3472a684a5b\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17691_en-us_15f0c3472a684a5b\ieframe.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17633_en-us_15ea93fb2a6de593\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17633_en-us_15ea93fb2a6de593\ieframe.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17633_cs-cz_d294489f43738935\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17633_cs-cz_d294489f43738935\ieframe.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17501_en-us_15f290992a684a5b\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17501_en-us_15f290992a684a5b\ieframe.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17501_cs-cz_d29c453d436dedfd\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17501_cs-cz_d29c453d436dedfd\ieframe.dll.mui:$CmdTcID

@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_11.2.9600.17959_none_e5ebde36974d1390\msfeeds.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_11.2.9600.17914_none_e5e84ef697502e0f\msfeeds.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_11.2.9600.17843_none_e5f6368897454482\msfeeds.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_11.2.9600.17801_none_e5f262f09748abe4\msfeeds.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_11.2.9600.17728_none_e5fe93f8973f7608\msfeeds.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_11.2.9600.17691_none_e611056297305811\msfeeds.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_11.2.9600.17633_none_e60ad6169735f349\msfeeds.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_11.2.9600.17501_none_e612d2b497305811\msfeeds.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools_31bf3856ad364e35_11.2.9600.17959_none_0f4592b2edf7a627\F12Tools.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools_31bf3856ad364e35_11.2.9600.17914_none_0f420372edfac0a6\F12Tools.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools_31bf3856ad364e35_11.2.9600.17843_none_0f4feb04edefd719\F12Tools.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools_31bf3856ad364e35_11.2.9600.17801_none_0f4c176cedf33e7b\F12Tools.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools_31bf3856ad364e35_11.2.9600.17728_none_0f584874edea089f\F12Tools.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools_31bf3856ad364e35_11.2.9600.17691_none_0f6ab9deeddaeaa8\F12Tools.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools_31bf3856ad364e35_11.2.9600.17633_none_0f648a92ede085e0\F12Tools.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools_31bf3856ad364e35_11.2.9600.17501_none_0f6c8730eddaeaa8\F12Tools.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools.resources_31bf3856ad364e35_11.2.9600.17959_en-us_30ae3a1611c7c80e\F12Tools.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools.resources_31bf3856ad364e35_11.2.9600.17914_en-us_30aaaad611cae28d\F12Tools.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools.resources_31bf3856ad364e35_11.2.9600.17843_en-us_30b8926811bff900\F12Tools.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools.resources_31bf3856ad364e35_11.2.9600.17843_cs-cz_ed62470c2ac59ca2\F12Tools.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools.resources_31bf3856ad364e35_11.2.9600.17801_en-us_30b4bed011c36062\F12Tools.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools.resources_31bf3856ad364e35_11.2.9600.17728_en-us_30c0efd811ba2a86\F12Tools.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools.resources_31bf3856ad364e35_11.2.9600.17691_en-us_30d3614211ab0c8f\F12Tools.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools.resources_31bf3856ad364e35_11.2.9600.17633_en-us_30cd31f611b0a7c7\F12Tools.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools.resources_31bf3856ad364e35_11.2.9600.17633_cs-cz_ed76e69a2ab64b69\F12Tools.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools.resources_31bf3856ad364e35_11.2.9600.17501_en-us_30d52e9411ab0c8f\F12Tools.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools.resources_31bf3856ad364e35_11.2.9600.17501_cs-cz_ed7ee3382ab0b031\F12Tools.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12resources_31bf3856ad364e35_11.2.9600.17959_none_0870c0036a0dc0a3\F12Resources.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12resources_31bf3856ad364e35_11.2.9600.17914_none_086d30c36a10db22\F12Resources.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12resources_31bf3856ad364e35_11.2.9600.17843_none_087b18556a05f195\F12Resources.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12resources_31bf3856ad364e35_11.2.9600.17801_none_087744bd6a0958f7\F12Resources.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12resources_31bf3856ad364e35_11.2.9600.17728_none_088375c56a00231b\F12Resources.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12resources_31bf3856ad364e35_11.2.9600.17691_none_0895e72f69f10524\F12Resources.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12resources_31bf3856ad364e35_11.2.9600.17633_none_088fb7e369f6a05c\F12Resources.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12resources_31bf3856ad364e35_11.2.9600.17501_none_0897b48169f10524\F12Resources.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12diagnosticstap_31bf3856ad364e35_11.2.9600.17959_none_382ec08cd43af66d\DiagnosticsTap.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12diagnosticstap_31bf3856ad364e35_11.2.9600.17914_none_382b314cd43e10ec\DiagnosticsTap.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12diagnosticstap_31bf3856ad364e35_11.2.9600.17843_none_383918ded433275f\DiagnosticsTap.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12diagnosticstap_31bf3856ad364e35_11.2.9600.17801_none_38354546d4368ec1\DiagnosticsTap.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12diagnosticstap_31bf3856ad364e35_11.2.9600.17728_none_3841764ed42d58e5\DiagnosticsTap.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12diagnosticstap_31bf3856ad364e35_11.2.9600.17691_none_3853e7b8d41e3aee\DiagnosticsTap.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12diagnosticstap_31bf3856ad364e35_11.2.9600.17633_none_384db86cd423d626\DiagnosticsTap.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12diagnosticstap_31bf3856ad364e35_11.2.9600.17501_none_3855b50ad41e3aee\DiagnosticsTap.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12_31bf3856ad364e35_11.2.9600.17959_none_73b98f2945398d04\F12.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12_31bf3856ad364e35_11.2.9600.17914_none_73b5ffe9453ca783\F12.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12_31bf3856ad364e35_11.2.9600.17843_none_73c3e77b4531bdf6\F12.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12_31bf3856ad364e35_11.2.9600.17801_none_73c013e345352558\F12.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12_31bf3856ad364e35_11.2.9600.17728_none_73cc44eb452bef7c\F12.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12_31bf3856ad364e35_11.2.9600.17691_none_73deb655451cd185\F12.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12_31bf3856ad364e35_11.2.9600.17633_none_73d8870945226cbd\F12.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12_31bf3856ad364e35_11.2.9600.17501_none_73e083a7451cd185\F12.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12.resources_31bf3856ad364e35_11.2.9600.17959_en-us_f6486a21b6656d37\F12.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12.resources_31bf3856ad364e35_11.2.9600.17914_en-us_f644dae1b66887b6\F12.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12.resources_31bf3856ad364e35_11.2.9600.17843_en-us_f652c273b65d9e29\F12.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12.resources_31bf3856ad364e35_11.2.9600.17843_cs-cz_b2fc7717cf6341cb\F12.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12.resources_31bf3856ad364e35_11.2.9600.17801_en-us_f64eeedbb661058b\F12.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12.resources_31bf3856ad364e35_11.2.9600.17728_en-us_f65b1fe3b657cfaf\F12.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12.resources_31bf3856ad364e35_11.2.9600.17691_en-us_f66d914db648b1b8\F12.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12.resources_31bf3856ad364e35_11.2.9600.17633_en-us_f6676201b64e4cf0\F12.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12.resources_31bf3856ad364e35_11.2.9600.17633_cs-cz_b31116a5cf53f092\F12.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12.resources_31bf3856ad364e35_11.2.9600.17501_en-us_f66f5e9fb648b1b8\F12.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12.resources_31bf3856ad364e35_11.2.9600.17501_cs-cz_b3191343cf4e555a\F12.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17959_none_1dcba2f9de7ac159\dxtrans.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17959_none_1dcba2f9de7ac159\dxtmsft.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17914_none_1dc813b9de7ddbd8\dxtrans.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17914_none_1dc813b9de7ddbd8\dxtmsft.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17843_none_1dd5fb4bde72f24b\dxtrans.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17843_none_1dd5fb4bde72f24b\dxtmsft.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17801_none_1dd227b3de7659ad\dxtrans.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17801_none_1dd227b3de7659ad\dxtmsft.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17728_none_1dde58bbde6d23d1\dxtrans.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17728_none_1dde58bbde6d23d1\dxtmsft.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17691_none_1df0ca25de5e05da\dxtrans.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17691_none_1df0ca25de5e05da\dxtmsft.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17633_none_1dea9ad9de63a112\dxtrans.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17633_none_1dea9ad9de63a112\dxtmsft.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17501_none_1df29777de5e05da\dxtrans.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17501_none_1df29777de5e05da\dxtmsft.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-diagnosticshubis_31bf3856ad364e35_11.2.9600.17959_none_95f4642a1e1abf02\DiagnosticsHub_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-diagnosticshubis_31bf3856ad364e35_11.2.9600.17914_none_95f0d4ea1e1dd981\DiagnosticsHub_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-diagnosticshubis_31bf3856ad364e35_11.2.9600.17843_none_95febc7c1e12eff4\DiagnosticsHub_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-diagnosticshubis_31bf3856ad364e35_11.2.9600.17801_none_95fae8e41e165756\DiagnosticsHub_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-diagnosticshubis_31bf3856ad364e35_11.2.9600.17728_none_960719ec1e0d217a\DiagnosticsHub_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-diagnosticshubis_31bf3856ad364e35_11.2.9600.17691_none_96198b561dfe0383\DiagnosticsHub_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-diagnosticshubis_31bf3856ad364e35_11.2.9600.17633_none_96135c0a1e039ebb\DiagnosticsHub_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-diagnosticshubis_31bf3856ad364e35_11.2.9600.17501_none_961b58a81dfe0383\DiagnosticsHub_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_11.2.9600.17959_none_c1aa60ba9cad0d19\iedvtool.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_11.2.9600.17914_none_c1a6d17a9cb02798\iedvtool.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_11.2.9600.17843_none_c1b4b90c9ca53e0b\iedvtool.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_11.2.9600.17801_none_c1b0e5749ca8a56d\iedvtool.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_11.2.9600.17728_none_c1bd167c9c9f6f91\iedvtool.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_11.2.9600.17691_none_c1cf87e69c90519a\iedvtool.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_11.2.9600.17633_none_c1c9589a9c95ecd2\iedvtool.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_11.2.9600.17501_none_c1d155389c90519a\iedvtool.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-datawarehouse_31bf3856ad364e35_11.2.9600.17959_none_ccb38ad25d4232f2\DiagnosticsHub.DataWarehouse.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-datawarehouse_31bf3856ad364e35_11.2.9600.17914_none_ccaffb925d454d71\DiagnosticsHub.DataWarehouse.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-datawarehouse_31bf3856ad364e35_11.2.9600.17843_none_ccbde3245d3a63e4\DiagnosticsHub.DataWarehouse.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-datawarehouse_31bf3856ad364e35_11.2.9600.17801_none_ccba0f8c5d3dcb46\DiagnosticsHub.DataWarehouse.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-datawarehouse_31bf3856ad364e35_11.2.9600.17728_none_ccc640945d34956a\DiagnosticsHub.DataWarehouse.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-datawarehouse_31bf3856ad364e35_11.2.9600.17691_none_ccd8b1fe5d257773\DiagnosticsHub.DataWarehouse.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-datawarehouse_31bf3856ad364e35_11.2.9600.17633_none_ccd282b25d2b12ab\DiagnosticsHub.DataWarehouse.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-datawarehouse_31bf3856ad364e35_11.2.9600.17501_none_ccda7f505d257773\DiagnosticsHub.DataWarehouse.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_11.2.9600.17959_none_81976a41c8953b2b\ieapfltr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_11.2.9600.17914_none_8193db01c89855aa\ieapfltr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_11.2.9600.17843_none_81a1c293c88d6c1d\ieapfltr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_11.2.9600.17801_none_819deefbc890d37f\ieapfltr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_11.2.9600.17728_none_81aa2003c8879da3\ieapfltr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_11.2.9600.17691_none_81bc916dc8787fac\ieapfltr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_11.2.9600.17633_none_81b66221c87e1ae4\ieapfltr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_11.2.9600.17501_none_81be5ebfc8787fac\ieapfltr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_11.2.9600.17959_none_fa55c063b453e19f\iedkcs32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_11.2.9600.17914_none_fa523123b456fc1e\iedkcs32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_11.2.9600.17843_none_fa6018b5b44c1291\iedkcs32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_11.2.9600.17801_none_fa5c451db44f79f3\iedkcs32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_11.2.9600.17728_none_fa687625b4464417\iedkcs32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_11.2.9600.17691_none_fa7ae78fb4372620\iedkcs32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_11.2.9600.17633_none_fa74b843b43cc158\iedkcs32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_11.2.9600.17501_none_fa7cb4e1b4372620\iedkcs32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..trolpanel.resources_31bf3856ad364e35_11.2.9600.17959_en-us_a88ff9424502d200\inetcpl.cpl.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..trolpanel.resources_31bf3856ad364e35_11.2.9600.17914_en-us_a88c6a024505ec7f\inetcpl.cpl.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..trolpanel.resources_31bf3856ad364e35_11.2.9600.17843_en-us_a89a519444fb02f2\inetcpl.cpl.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..trolpanel.resources_31bf3856ad364e35_11.2.9600.17843_cs-cz_654406385e00a694\inetcpl.cpl.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..trolpanel.resources_31bf3856ad364e35_11.2.9600.17801_en-us_a8967dfc44fe6a54\inetcpl.cpl.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..trolpanel.resources_31bf3856ad364e35_11.2.9600.17728_en-us_a8a2af0444f53478\inetcpl.cpl.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..trolpanel.resources_31bf3856ad364e35_11.2.9600.17691_en-us_a8b5206e44e61681\inetcpl.cpl.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..trolpanel.resources_31bf3856ad364e35_11.2.9600.17633_en-us_a8aef12244ebb1b9\inetcpl.cpl.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..trolpanel.resources_31bf3856ad364e35_11.2.9600.17633_cs-cz_6558a5c65df1555b\inetcpl.cpl.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..trolpanel.resources_31bf3856ad364e35_11.2.9600.17501_en-us_a8b6edc044e61681\inetcpl.cpl.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..trolpanel.resources_31bf3856ad364e35_11.2.9600.17501_cs-cz_6560a2645debba23\inetcpl.cpl.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17959_none_87ee4767fea9c0d8\wininet.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17959_none_87ee4767fea9c0d8\jsproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17914_none_87eab827feacdb57\wininet.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17914_none_87eab827feacdb57\jsproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17843_none_87f89fb9fea1f1ca\wininet.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17843_none_87f89fb9fea1f1ca\jsproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17801_none_87f4cc21fea5592c\wininet.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17801_none_87f4cc21fea5592c\jsproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17728_none_8800fd29fe9c2350\wininet.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17728_none_8800fd29fe9c2350\jsproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17691_none_88136e93fe8d0559\wininet.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17691_none_88136e93fe8d0559\jsproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17633_none_880d3f47fe92a091\wininet.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17633_none_880d3f47fe92a091\jsproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17501_none_88153be5fe8d0559\wininet.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17501_none_88153be5fe8d0559\jsproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rityzones.resources_31bf3856ad364e35_11.2.9600.17959_en-us_f488058a3e50173c\urlmon.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rityzones.resources_31bf3856ad364e35_11.2.9600.17914_en-us_f484764a3e5331bb\urlmon.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rityzones.resources_31bf3856ad364e35_11.2.9600.17843_en-us_f4925ddc3e48482e\urlmon.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rityzones.resources_31bf3856ad364e35_11.2.9600.17843_cs-cz_b13c1280574debd0\urlmon.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rityzones.resources_31bf3856ad364e35_11.2.9600.17801_en-us_f48e8a443e4baf90\urlmon.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rityzones.resources_31bf3856ad364e35_11.2.9600.17728_en-us_f49abb4c3e4279b4\urlmon.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rityzones.resources_31bf3856ad364e35_11.2.9600.17691_en-us_f4ad2cb63e335bbd\urlmon.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rityzones.resources_31bf3856ad364e35_11.2.9600.17633_en-us_f4a6fd6a3e38f6f5\urlmon.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rityzones.resources_31bf3856ad364e35_11.2.9600.17633_cs-cz_b150b20e573e9a97\urlmon.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rityzones.resources_31bf3856ad364e35_11.2.9600.17501_en-us_f4aefa083e335bbd\urlmon.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rityzones.resources_31bf3856ad364e35_11.2.9600.17501_cs-cz_b158aeac5738ff5f\urlmon.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..riptedsandboxplugin_31bf3856ad364e35_11.2.9600.17959_none_e1e13193c8343569\DiagnosticsHub.ScriptedSandboxPlugin.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..riptedsandboxplugin_31bf3856ad364e35_11.2.9600.17914_none_e1dda253c8374fe8\DiagnosticsHub.ScriptedSandboxPlugin.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..riptedsandboxplugin_31bf3856ad364e35_11.2.9600.17843_none_e1eb89e5c82c665b\DiagnosticsHub.ScriptedSandboxPlugin.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..riptedsandboxplugin_31bf3856ad364e35_11.2.9600.17801_none_e1e7b64dc82fcdbd\DiagnosticsHub.ScriptedSandboxPlugin.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..riptedsandboxplugin_31bf3856ad364e35_11.2.9600.17728_none_e1f3e755c82697e1\DiagnosticsHub.ScriptedSandboxPlugin.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..riptedsandboxplugin_31bf3856ad364e35_11.2.9600.17691_none_e20658bfc81779ea\DiagnosticsHub.ScriptedSandboxPlugin.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..riptedsandboxplugin_31bf3856ad364e35_11.2.9600.17633_none_e2002973c81d1522\DiagnosticsHub.ScriptedSandboxPlugin.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..riptedsandboxplugin_31bf3856ad364e35_11.2.9600.17501_none_e2082611c81779ea\DiagnosticsHub.ScriptedSandboxPlugin.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..riptcollectionagent_31bf3856ad364e35_11.2.9600.17959_none_3bcc9bf7f5a11a13\JavaScriptCollectionAgent.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..riptcollectionagent_31bf3856ad364e35_11.2.9600.17914_none_3bc90cb7f5a43492\JavaScriptCollectionAgent.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..riptcollectionagent_31bf3856ad364e35_11.2.9600.17843_none_3bd6f449f5994b05\JavaScriptCollectionAgent.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..riptcollectionagent_31bf3856ad364e35_11.2.9600.17801_none_3bd320b1f59cb267\JavaScriptCollectionAgent.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..riptcollectionagent_31bf3856ad364e35_11.2.9600.17728_none_3bdf51b9f5937c8b\JavaScriptCollectionAgent.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..riptcollectionagent_31bf3856ad364e35_11.2.9600.17691_none_3bf1c323f5845e94\JavaScriptCollectionAgent.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..riptcollectionagent_31bf3856ad364e35_11.2.9600.17633_none_3beb93d7f589f9cc\JavaScriptCollectionAgent.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..riptcollectionagent_31bf3856ad364e35_11.2.9600.17501_none_3bf39075f5845e94\JavaScriptCollectionAgent.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..resources.resources_31bf3856ad364e35_11.2.9600.17959_en-us_c172844f746f9564\F12Resources.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..resources.resources_31bf3856ad364e35_11.2.9600.17914_en-us_c16ef50f7472afe3\F12Resources.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..resources.resources_31bf3856ad364e35_11.2.9600.17843_en-us_c17cdca17467c656\F12Resources.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..resources.resources_31bf3856ad364e35_11.2.9600.17843_cs-cz_7e2691458d6d69f8\F12Resources.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..resources.resources_31bf3856ad364e35_11.2.9600.17801_en-us_c1790909746b2db8\F12Resources.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..resources.resources_31bf3856ad364e35_11.2.9600.17728_en-us_c1853a117461f7dc\F12Resources.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..resources.resources_31bf3856ad364e35_11.2.9600.17691_en-us_c197ab7b7452d9e5\F12Resources.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..resources.resources_31bf3856ad364e35_11.2.9600.17633_en-us_c1917c2f7458751d\F12Resources.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..resources.resources_31bf3856ad364e35_11.2.9600.17633_cs-cz_7e3b30d38d5e18bf\F12Resources.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..resources.resources_31bf3856ad364e35_11.2.9600.17501_en-us_c19978cd7452d9e5\F12Resources.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..resources.resources_31bf3856ad364e35_11.2.9600.17501_cs-cz_7e432d718d587d87\F12Resources.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rendering.resources_31bf3856ad364e35_11.2.9600.17959_en-us_92edbf716043d4e7\mshtml.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rendering.resources_31bf3856ad364e35_11.2.9600.17914_en-us_92ea30316046ef66\mshtml.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rendering.resources_31bf3856ad364e35_11.2.9600.17843_en-us_92f817c3603c05d9\mshtml.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rendering.resources_31bf3856ad364e35_11.2.9600.17843_cs-cz_4fa1cc677941a97b\mshtml.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rendering.resources_31bf3856ad364e35_11.2.9600.17801_en-us_92f4442b603f6d3b\mshtml.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rendering.resources_31bf3856ad364e35_11.2.9600.17728_en-us_930075336036375f\mshtml.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rendering.resources_31bf3856ad364e35_11.2.9600.17691_en-us_9312e69d60271968\mshtml.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rendering.resources_31bf3856ad364e35_11.2.9600.17633_en-us_930cb751602cb4a0\mshtml.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rendering.resources_31bf3856ad364e35_11.2.9600.17633_cs-cz_4fb66bf579325842\mshtml.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rendering.resources_31bf3856ad364e35_11.2.9600.17501_en-us_9314b3ef60271968\mshtml.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rendering.resources_31bf3856ad364e35_11.2.9600.17501_cs-cz_4fbe6893792cbd0a\mshtml.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..osticstap.resources_31bf3856ad364e35_11.2.9600.17959_en-us_10ff8e4241a8db54\DiagnosticsTap.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..osticstap.resources_31bf3856ad364e35_11.2.9600.17914_en-us_10fbff0241abf5d3\DiagnosticsTap.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..osticstap.resources_31bf3856ad364e35_11.2.9600.17843_en-us_1109e69441a10c46\DiagnosticsTap.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..osticstap.resources_31bf3856ad364e35_11.2.9600.17843_cs-cz_cdb39b385aa6afe8\DiagnosticsTap.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..osticstap.resources_31bf3856ad364e35_11.2.9600.17801_en-us_110612fc41a473a8\DiagnosticsTap.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..osticstap.resources_31bf3856ad364e35_11.2.9600.17728_en-us_11124404419b3dcc\DiagnosticsTap.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..osticstap.resources_31bf3856ad364e35_11.2.9600.17691_en-us_1124b56e418c1fd5\DiagnosticsTap.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..osticstap.resources_31bf3856ad364e35_11.2.9600.17633_en-us_111e86224191bb0d\DiagnosticsTap.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..osticstap.resources_31bf3856ad364e35_11.2.9600.17633_cs-cz_cdc83ac65a975eaf\DiagnosticsTap.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..osticstap.resources_31bf3856ad364e35_11.2.9600.17501_en-us_112682c0418c1fd5\DiagnosticsTap.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..osticstap.resources_31bf3856ad364e35_11.2.9600.17501_cs-cz_cdd037645a91c377\DiagnosticsTap.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_11.2.9600.17959_none_153ef9faaeaf3f69\inetcpl.cpl:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_11.2.9600.17914_none_153b6abaaeb259e8\inetcpl.cpl:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_11.2.9600.17843_none_1549524caea7705b\inetcpl.cpl:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_11.2.9600.17801_none_15457eb4aeaad7bd\inetcpl.cpl:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_11.2.9600.17728_none_1551afbcaea1a1e1\inetcpl.cpl:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_11.2.9600.17691_none_15642126ae9283ea\inetcpl.cpl:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_11.2.9600.17633_none_155df1daae981f22\inetcpl.cpl:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_11.2.9600.17501_none_1565ee78ae9283ea\inetcpl.cpl:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.2.9600.17959_none_1ebbb0440a9c76c6\iexplore.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.2.9600.17914_none_1eb821040a9f9145\iexplore.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.2.9600.17843_none_1ec608960a94a7b8\iexplore.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.2.9600.17801_none_1ec234fe0a980f1a\iexplore.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.2.9600.17728_none_1ece66060a8ed93e\iexplore.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.2.9600.17691_none_1ee0d7700a7fbb47\iexplore.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.2.9600.17633_none_1edaa8240a85567f\iexplore.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.2.9600.17501_none_1ee2a4c20a7fbb47\iexplore.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_11.2.9600.17959_none_3ae86bc633a09a45\urlmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_11.2.9600.17923_none_3ae5f39833a2b47a\urlmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_11.2.9600.17914_none_3ae4dc8633a3b4c4\urlmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_11.2.9600.17843_none_3af2c4183398cb37\urlmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_11.2.9600.17801_none_3aeef080339c3299\urlmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_11.2.9600.17728_none_3afb21883392fcbd\urlmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_11.2.9600.17691_none_3b0d92f23383dec6\urlmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_11.2.9600.17633_none_3b0763a6338979fe\urlmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_11.2.9600.17501_none_3b0f60443383dec6\urlmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-http_31bf3856ad364e35_6.1.7601.22976_none_af1312f590699157\http.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-http_31bf3856ad364e35_6.1.7601.18772_none_ae85731c774f8f0a\http.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi32_31bf3856ad364e35_6.1.7601.23100_none_5c164868c0ad0472\gdi32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi32_31bf3856ad364e35_6.1.7601.22982_none_5bc1ef94c0ebe63f\gdi32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi32_31bf3856ad364e35_6.1.7601.18898_none_5b338499a7d0fa70\gdi32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi32_31bf3856ad364e35_6.1.7601.18778_none_5b49228ba7c0c567\gdi32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23149_none_ac4879ced1fa2a26\lpk.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23149_none_ac4879ced1fa2a26\fontsub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23149_none_ac4879ced1fa2a26\dciman32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23149_none_ac4879ced1fa2a26\atmlib.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23149_none_ac4879ced1fa2a26\atmfd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23126_none_ac5b18c8d1eca63f\lpk.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23126_none_ac5b18c8d1eca63f\fontsub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23126_none_ac5b18c8d1eca63f\dciman32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23126_none_ac5b18c8d1eca63f\atmlib.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23126_none_ac5b18c8d1eca63f\atmfd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23117_none_ac66e8fed1e3a3a5\lpk.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23117_none_ac66e8fed1e3a3a5\fontsub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23117_none_ac66e8fed1e3a3a5\dciman32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23117_none_ac66e8fed1e3a3a5\atmlib.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.23117_none_ac66e8fed1e3a3a5\atmfd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.22974_none_ac232e90d216cedd\lpk.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.22974_none_ac232e90d216cedd\fontsub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.22974_none_ac232e90d216cedd\dciman32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.22974_none_ac232e90d216cedd\atmlib.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.22974_none_ac232e90d216cedd\atmfd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18946_none_abbc0403b8df0b15\lpk.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18946_none_abbc0403b8df0b15\fontsub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18946_none_abbc0403b8df0b15\dciman32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18946_none_abbc0403b8df0b15\atmlib.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18946_none_abbc0403b8df0b15\atmfd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18923_none_abcea2fdb8d1872e\lpk.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18923_none_abcea2fdb8d1872e\fontsub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18923_none_abcea2fdb8d1872e\dciman32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18923_none_abcea2fdb8d1872e\atmlib.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18923_none_abcea2fdb8d1872e\atmfd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18914_none_abda7333b8c88494\lpk.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18914_none_abda7333b8c88494\fontsub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18914_none_abda7333b8c88494\dciman32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18914_none_abda7333b8c88494\atmlib.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18914_none_abda7333b8c88494\atmfd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18768_none_aba860f3b8ed7b57\lpk.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18768_none_aba860f3b8ed7b57\fontsub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18768_none_aba860f3b8ed7b57\dciman32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18768_none_aba860f3b8ed7b57\atmlib.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.1.7601.18768_none_aba860f3b8ed7b57\atmfd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-enhancedvideorenderer_31bf3856ad364e35_6.1.7601.22948_none_921704b043fb022e\evr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-enhancedvideorenderer_31bf3856ad364e35_6.1.7601.18741_none_918663f92ae3b3dc\evr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directx-warp10_31bf3856ad364e35_7.1.7601.23149_none_de4981805906d42a\d3d10warp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directx-warp10_31bf3856ad364e35_7.1.7601.18946_none_ddbd0bb53febb519\d3d10warp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directx-warp10_31bf3856ad364e35_6.1.7601.23149_none_ecd9053ace202b5b\d3d10warp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directx-warp10_31bf3856ad364e35_6.1.7601.18946_none_ec4c8f6fb5050c4a\d3d10warp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_7.1.7601.23149_none_f88febe813a9aac5\FntCache.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_7.1.7601.23038_none_f899b9a413a27856\FntCache.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_7.1.7601.18946_none_f803761cfa8e8bb4\FntCache.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_7.1.7601.18834_none_f80c438efa883fee\FntCache.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_6.1.7601.23149_none_071f6fa288c301f6\FntCache.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_6.1.7601.23038_none_07293d5e88bbcf87\FntCache.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_6.1.7601.18946_none_0692f9d76fa7e2e5\FntCache.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_6.1.7601.18834_none_069bc7496fa1971f\FntCache.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite_31bf3856ad364e35_7.1.7601.23149_none_c6834cbe01c9855d\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite_31bf3856ad364e35_7.1.7601.23038_none_c68d1a7a01c252ee\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite_31bf3856ad364e35_7.1.7601.18946_none_c5f6d6f2e8ae664c\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite_31bf3856ad364e35_7.1.7601.18834_none_c5ffa464e8a81a86\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite_31bf3856ad364e35_6.1.7601.23149_none_d512d07876e2dc8e\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite_31bf3856ad364e35_6.1.7601.23038_none_d51c9e3476dbaa1f\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite_31bf3856ad364e35_6.1.7601.18946_none_d4865aad5dc7bd7d\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite_31bf3856ad364e35_6.1.7601.18834_none_d48f281f5dc171b7\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directshow-dvdsupport_31bf3856ad364e35_6.1.7601.22948_none_5696b1d64b4d1676\qdvd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directshow-dvdsupport_31bf3856ad364e35_6.1.7601.18741_none_5606111f3235c824\qdvd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directshow-core_31bf3856ad364e35_6.1.7601.22948_none_a8e4bee5655aaea6\quartz.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directshow-core_31bf3856ad364e35_6.1.7601.18741_none_a8541e2e4c436054\quartz.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..s-ime-japanese-core_31bf3856ad364e35_6.1.7601.22764_none_71c63fac05303b61\IMJP10K.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..s-ime-japanese-core_31bf3856ad364e35_6.1.7601.18556_none_7149717aec08b52d\IMJP10K.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.22764_none_951c030fe1b41555\imjputyc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..japanese-propertyui_31bf3856ad364e35_6.1.7601.18556_none_949f34dec88c8f21\imjputyc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..gement-winproviders_31bf3856ad364e35_6.1.7601.22948_none_b9c2409c1c60a2e5\WimProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..gement-winproviders_31bf3856ad364e35_6.1.7601.22948_none_b9c2409c1c60a2e5\UnattendProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..gement-winproviders_31bf3856ad364e35_6.1.7601.22948_none_b9c2409c1c60a2e5\SmiProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..gement-winproviders_31bf3856ad364e35_6.1.7601.22948_none_b9c2409c1c60a2e5\OSProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..gement-winproviders_31bf3856ad364e35_6.1.7601.22948_none_b9c2409c1c60a2e5\IntlProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..gement-winproviders_31bf3856ad364e35_6.1.7601.22948_none_b9c2409c1c60a2e5\DmiProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..gement-winproviders_31bf3856ad364e35_6.1.7601.22948_none_b9c2409c1c60a2e5\CompatProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..gement-winproviders_31bf3856ad364e35_6.1.7601.22948_none_b9c2409c1c60a2e5\CbsProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..gement-winproviders_31bf3856ad364e35_6.1.7601.18741_none_b9319fe503495493\WimProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..gement-winproviders_31bf3856ad364e35_6.1.7601.18741_none_b9319fe503495493\UnattendProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..gement-winproviders_31bf3856ad364e35_6.1.7601.18741_none_b9319fe503495493\SmiProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..gement-winproviders_31bf3856ad364e35_6.1.7601.18741_none_b9319fe503495493\OSProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..gement-winproviders_31bf3856ad364e35_6.1.7601.18741_none_b9319fe503495493\IntlProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..gement-winproviders_31bf3856ad364e35_6.1.7601.18741_none_b9319fe503495493\DmiProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..gement-winproviders_31bf3856ad364e35_6.1.7601.18741_none_b9319fe503495493\CompatProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..gement-winproviders_31bf3856ad364e35_6.1.7601.18741_none_b9319fe503495493\CbsProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.22764_none_0d983120f862bbf0\imjpuexc.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_0d1b62efdf3b35bc\imjpuexc.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.23136_none_cc04676a1ccc06ad\csrsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.23126_none_cc0f37561cc3eabc\csrsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.23002_none_cc20d4201cb75057\csrsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.22948_none_cbfbbe0a1cd224e3\csrsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.22943_none_cbf6bc981cd6a630\csrsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.18933_none_cb77f19f03b0e79c\csrsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.18923_none_cb82c18b03a8cbab\csrsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.18798_none_cb3c0fbd03dd13a7\csrsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.18741_none_cb6b1d5303bad691\csrsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.18738_none_cb7cef4503ac6c01\csrsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-cryptui-dll_31bf3856ad364e35_6.1.7601.22948_none_8862e2630f97d631\cryptui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-cryptui-dll_31bf3856ad364e35_6.1.7601.18741_none_87d241abf68087df\cryptui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22948_none_787420691243d103\cryptsvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18741_none_77e37fb1f92c82b1\cryptsvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-cryptsp-dll_31bf3856ad364e35_6.1.7601.22948_none_2bd1f5117e410582\cryptsp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-cryptsp-dll_31bf3856ad364e35_6.1.7601.18741_none_2b41545a6529b730\cryptsp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-cryptnet-dll_31bf3856ad364e35_6.1.7601.22948_none_198dc81e734a3c5e\cryptnet.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-cryptnet-dll_31bf3856ad364e35_6.1.7601.18741_none_18fd27675a32ee0c\cryptnet.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-cryptbase_31bf3856ad364e35_6.1.7601.23136_none_67e305dd25685c19\cryptbase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-cryptbase_31bf3856ad364e35_6.1.7601.23126_none_67edd5c925604028\cryptbase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-cryptbase_31bf3856ad364e35_6.1.7601.23115_none_67f7a56b25590ae0\cryptbase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-cryptbase_31bf3856ad364e35_6.1.7601.23112_none_67f4a48d255bbedb\cryptbase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-cryptbase_31bf3856ad364e35_6.1.7601.18933_none_675690120c4d3d08\cryptbase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-cryptbase_31bf3856ad364e35_6.1.7601.18923_none_67615ffe0c452117\cryptbase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-cryptbase_31bf3856ad364e35_6.1.7601.18912_none_676b2fa00c3debcf\cryptbase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-cryptbase_31bf3856ad364e35_6.1.7601.18909_none_677d01920c2f813f\cryptbase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.1.7601.22948_none_5de448e0554849f4\crypt32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.1.7601.18741_none_5d53a8293c30fba2\crypt32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-crypt32-dll.resources_31bf3856ad364e35_6.1.7601.22948_en-us_d09b649331baf7b9\crypt32.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-crypt32-dll.resources_31bf3856ad364e35_6.1.7601.22948_cs-cz_8d4519374ac09b5b\crypt32.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-crypt32-dll.resources_31bf3856ad364e35_6.1.7601.18741_en-us_d00ac3dc18a3a967\crypt32.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-crypt32-dll.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_8cb4788031a94d09\crypt32.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23049_none_76d126c1798d9566\conhost.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18847_none_7645b14060718fac\conhost.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-commonlogservicesapi_31bf3856ad364e35_6.1.7601.22981_none_70f76baff772709a\clfsw32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-commonlogservicesapi_31bf3856ad364e35_6.1.7601.18777_none_707e9ea6de474fc2\clfsw32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.1.7601.22981_none_80c4dffb9f274772\clfs.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.1.7601.18777_none_804c12f285fc269a\clfs.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.23118_none_aeb2782c69adc034\ole32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.18915_none_ae2602615092a123\ole32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..tionauthorityclient_31bf3856ad364e35_6.1.7601.23037_none_d9fbe444b415093a\certcli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..tionauthorityclient_31bf3856ad364e35_6.1.7601.18833_none_d96e6e2f9afad0d2\certcli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.1.7601.23037_en-us_673d85b317423a47\certcli.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.1.7601.23037_cs-cz_23e73a573047dde9\certcli.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.1.7601.18833_en-us_66b00f9dfe2801df\certcli.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.1.7601.18833_cs-cz_2359c442172da581\certcli.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..integrity.resources_31bf3856ad364e35_6.1.7601.23136_en-us_fbb1b105c4c8eb91\ci.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..integrity.resources_31bf3856ad364e35_6.1.7601.23126_en-us_fbbc80f1c4c0cfa0\ci.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..integrity.resources_31bf3856ad364e35_6.1.7601.23002_en-us_fbce1dbbc4b4353b\ci.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..integrity.resources_31bf3856ad364e35_6.1.7601.22948_en-us_fba907a5c4cf09c7\ci.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..integrity.resources_31bf3856ad364e35_6.1.7601.22943_en-us_fba40633c4d38b14\ci.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..integrity.resources_31bf3856ad364e35_6.1.7601.18741_en-us_fb1866eeabb7bb75\ci.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-basesrv_31bf3856ad364e35_6.1.7601.23126_none_0f52eb265b2116c3\basesrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-basesrv_31bf3856ad364e35_6.1.7601.18923_none_0ec6755b4205f7b2\basesrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23136_none_5da3ea96e415452c\winresume.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23136_none_5da3ea96e415452c\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23126_none_5daeba82e40d293b\winresume.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23126_none_5daeba82e40d293b\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23002_none_5dc0574ce4008ed6\winresume.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23002_none_5dc0574ce4008ed6\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22948_none_5d9b4136e41b6362\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22943_none_5d963fc4e41fe4af\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22923_none_5dabdf9ce40faccd\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22921_none_5da9df08e4117a1f\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18741_none_5d0aa07fcb041510\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23136_en-us_1efa2918a797af3a\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23136_en-us_1efa2918a797af3a\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23136_cs-cz_dba3ddbcc09d52dc\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23136_cs-cz_dba3ddbcc09d52dc\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23126_en-us_1f04f904a78f9349\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23126_en-us_1f04f904a78f9349\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23126_cs-cz_dbaeada8c09536eb\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23126_cs-cz_dbaeada8c09536eb\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23002_en-us_1f1695cea782f8e4\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23002_en-us_1f1695cea782f8e4\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_dbc04a72c0889c86\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_dbc04a72c0889c86\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.22948_en-us_1ef17fb8a79dcd70\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.22948_en-us_1ef17fb8a79dcd70\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.22948_cs-cz_db9b345cc0a37112\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.22948_cs-cz_db9b345cc0a37112\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.22943_en-us_1eec7e46a7a24ebd\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.22943_en-us_1eec7e46a7a24ebd\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.22943_cs-cz_db9632eac0a7f25f\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.22943_cs-cz_db9632eac0a7f25f\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.18741_en-us_1e60df018e867f1e\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.18741_en-us_1e60df018e867f1e\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_db0a93a5a78c22c0\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_db0a93a5a78c22c0\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_en-us_7915ea6a5b723b57\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_en-us_7915ea6a5b723b57\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_cs-cz_35bf9f0e7477def9\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_cs-cz_35bf9f0e7477def9\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_en-us_7920ba565b6a1f66\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_en-us_7920ba565b6a1f66\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_cs-cz_35ca6efa746fc308\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_cs-cz_35ca6efa746fc308\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23002_en-us_793257205b5d8501\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23002_en-us_793257205b5d8501\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_35dc0bc4746328a3\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_35dc0bc4746328a3\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22948_en-us_790d410a5b78598d\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22948_en-us_790d410a5b78598d\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22948_cs-cz_35b6f5ae747dfd2f\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22948_cs-cz_35b6f5ae747dfd2f\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22943_en-us_79083f985b7cdada\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22943_en-us_79083f985b7cdada\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22943_cs-cz_35b1f43c74827e7c\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22943_cs-cz_35b1f43c74827e7c\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_en-us_787ca05342610b3b\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_en-us_787ca05342610b3b\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_352654f75b66aedd\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_352654f75b66aedd\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23136_none_6bb5c78f043902fd\winresume.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23136_none_6bb5c78f043902fd\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23136_none_6bb5c78f043902fd\setbcdlocale.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23126_none_6bc0977b0430e70c\winresume.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23126_none_6bc0977b0430e70c\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23126_none_6bc0977b0430e70c\setbcdlocale.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23002_none_6bd2344504244ca7\winresume.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23002_none_6bd2344504244ca7\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23002_none_6bd2344504244ca7\setbcdlocale.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22948_none_6bad1e2f043f2133\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22948_none_6bad1e2f043f2133\setbcdlocale.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22943_none_6ba81cbd0443a280\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22943_none_6ba81cbd0443a280\setbcdlocale.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22923_none_6bbdbc9504336a9e\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22921_none_6bbbbc01043537f0\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.18741_none_6b1c7d77eb27d2e1\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.18741_none_6b1c7d77eb27d2e1\setbcdlocale.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-authentication-authui_31bf3856ad364e35_6.1.7601.23099_none_0e32cceb6d043d5f\authui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-authentication-authui_31bf3856ad364e35_6.1.7601.18896_none_0da6572053e91e4e\authui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.22948_none_79144b2b5c1442f4\EncDump.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.22948_none_79144b2b5c1442f4\audiosrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.22948_none_79144b2b5c1442f4\AudioSes.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.22948_none_79144b2b5c1442f4\AUDIOKSE.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.22948_none_79144b2b5c1442f4\AudioEng.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.22948_none_79144b2b5c1442f4\audiodg.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.22826_none_7927e8895c05db3d\EncDump.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.22826_none_7927e8895c05db3d\audiosrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.22826_none_7927e8895c05db3d\AudioSes.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.22826_none_7927e8895c05db3d\AUDIOKSE.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.22826_none_7927e8895c05db3d\AudioEng.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.18741_none_7883aa7442fcf4a2\EncDump.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.18741_none_7883aa7442fcf4a2\audiosrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.18741_none_7883aa7442fcf4a2\AudioSes.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.18741_none_7883aa7442fcf4a2\AUDIOKSE.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.18741_none_7883aa7442fcf4a2\AudioEng.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.18741_none_7883aa7442fcf4a2\audiodg.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.18619_none_78ac1aa242dd6e60\EncDump.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.18619_none_78ac1aa242dd6e60\audiosrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.18619_none_78ac1aa242dd6e60\AudioSes.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.18619_none_78ac1aa242dd6e60\AUDIOKSE.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.18619_none_78ac1aa242dd6e60\AudioEng.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23136_none_59c940b02995b0ea\appidsvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23136_none_59c940b02995b0ea\appidpolicyconverter.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23136_none_59c940b02995b0ea\appidcertstorecheck.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23136_none_59c940b02995b0ea\appidapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23136_none_59c940b02995b0ea\appid.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23126_none_59d4109c298d94f9\appidsvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23126_none_59d4109c298d94f9\appidpolicyconverter.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23126_none_59d4109c298d94f9\appidcertstorecheck.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23126_none_59d4109c298d94f9\appidapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23126_none_59d4109c298d94f9\appid.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23002_none_59e5ad662980fa94\appidsvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23002_none_59e5ad662980fa94\appidpolicyconverter.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23002_none_59e5ad662980fa94\appidcertstorecheck.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23002_none_59e5ad662980fa94\appidapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23002_none_59e5ad662980fa94\appid.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22948_none_59c09750299bcf20\appidsvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22948_none_59c09750299bcf20\appidpolicyconverter.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22948_none_59c09750299bcf20\appidcertstorecheck.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22948_none_59c09750299bcf20\appidapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22948_none_59c09750299bcf20\appid.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22943_none_59bb95de29a0506d\appidsvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22943_none_59bb95de29a0506d\appidpolicyconverter.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22943_none_59bb95de29a0506d\appidcertstorecheck.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22943_none_59bb95de29a0506d\appidapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22943_none_59bb95de29a0506d\appid.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.18741_none_592ff699108480ce\appidsvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.18741_none_592ff699108480ce\appidpolicyconverter.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.18741_none_592ff699108480ce\appidcertstorecheck.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.18741_none_592ff699108480ce\appidapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.18741_none_592ff699108480ce\appid.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..on-authui.resources_31bf3856ad364e35_6.1.7601.23099_en-us_8dbbe74314a5d656\authui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..on-authui.resources_31bf3856ad364e35_6.1.7601.23099_cs-cz_4a659be72dab79f8\authui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..on-authui.resources_31bf3856ad364e35_6.1.7601.18896_en-us_8d2f7177fb8ab745\authui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..on-authui.resources_31bf3856ad364e35_6.1.7601.18896_cs-cz_49d9261c14905ae7\authui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.22948_none_363b0d189a9b8544\pcawrk.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.22948_none_363b0d189a9b8544\pcasvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.22948_none_363b0d189a9b8544\pcalua.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.22948_none_363b0d189a9b8544\pcaevts.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.22948_none_363b0d189a9b8544\pcadm.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.18741_none_35aa6c61818436f2\pcawrk.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.18741_none_35aa6c61818436f2\pcasvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.18741_none_35aa6c61818436f2\pcalua.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.18741_none_35aa6c61818436f2\pcaevts.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.18741_none_35aa6c61818436f2\pcadm.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23149_none_5c0676f9a00e9169\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23055_none_5c07d287a00d43eb\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23038_none_5c058d9ba00f5e20\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18946_none_72d45ee78666ea32\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18852_none_72d5ba7586659cb4\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.7601.23149_none_6cb508150708b7c2\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.7601.23055_none_6cb663a307076a44\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.7601.23038_none_6cb41eb707098479\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.7601.22948_none_6cb51bd70708a382\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.7601.22865_none_6cb760e7070688fc\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.7601.18946_none_8382f002ed61108b\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.7601.18852_none_83844b90ed5fc30d\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.7601.18834_none_83821d6ced61c3a1\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.7601.18741_none_83836232ed608fc4\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.7601.18658_none_8383c328ed605c31\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.23039_none_2b1a83ee457cfdf3\comctl32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.23011_none_2b19399a457dfe3d\comctl32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_41e554362bd82458\comctl32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.23039_none_ee6532a082bc3b56\comctl32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_windowsbase_31bf3856ad364e35_6.1.7601.23149_none_99944bc9a7176490\WindowsBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_windowsbase_31bf3856ad364e35_6.1.7601.23044_none_998f4871a71be8b6\WindowsBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_windowsbase_31bf3856ad364e35_6.1.7601.18946_none_9907d5fe8dfc457f\WindowsBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_windowsbase_31bf3856ad364e35_6.1.7601.18842_none_9903d2f08dffe2fc\WindowsBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.1.7601.22970_none_ee80ec6919cf66d3\System.Windows.Forms.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.1.7601.18763_none_054d4eab00293a08\System.Windows.Forms.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_system.web.regularexpressions_b03f5f7f11d50a3a_6.1.7601.22965_none_0b1e6ef0f4c656c2\System.Web.RegularExpressions.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_system.web.regularexpressions_b03f5f7f11d50a3a_6.1.7601.18758_none_21ead132db2029f7\System.Web.RegularExpressions.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.1.7601.22965_none_95840d9ea65fae43\System.Web.Mobile.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.1.7601.18758_none_ac506fe08cb98178\System.Web.Mobile.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.1.7601.22970_none_599c221ca4861419\System.Security.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.1.7601.18764_none_70686d968ae000ef\System.Security.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_system.runtime.remoting_b77a5c561934e089_6.1.7601.22794_none_832b26c71b762358\System.Runtime.Remoting.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_system.runtime.remoting_b77a5c561934e089_6.1.7601.18586_none_99f79fd101cfdcec\System.Runtime.Remoting.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_system.drawing_b03f5f7f11d50a3a_6.1.7601.22970_none_4d284440c71977db\System.Drawing.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_system.drawing_b03f5f7f11d50a3a_6.1.7601.18763_none_63f4a682ad734b10\System.Drawing.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.1.7601.22970_none_72df1485d96450af\System.Design.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.1.7601.18763_none_89ab76c7bfbe23e4\System.Design.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_reachframework_31bf3856ad364e35_6.1.7601.23149_none_4424b8fa78f4852d\ReachFramework.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_reachframework_31bf3856ad364e35_6.1.7601.23044_none_441fb5a278f90953\ReachFramework.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_reachframework_31bf3856ad364e35_6.1.7601.18946_none_4398432f5fd9661c\ReachFramework.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_reachframework_31bf3856ad364e35_6.1.7601.18842_none_439440215fdd0399\ReachFramework.dll:$CmdTcID

@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.1.7601.23149_none_792cf75b6b708852\PresentationFramework.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.1.7601.23044_none_7927f4036b750c78\PresentationFramework.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.1.7601.18946_none_78a0819052556941\PresentationFramework.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.1.7601.18842_none_789c7e82525906be\PresentationFramework.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\vlak.scr:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\unins000.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wuwebv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wups2.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wups.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wudriver.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wucltux.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wuaueng.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wuauclt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wuapp.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wuapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wu.upgrade.ps.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wmploc.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\WMPhoto.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wmp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wmdrmsdk.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wintrust.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\winsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\WinSetupUI.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wininet.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\WindowsCodecs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\win32k.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\WebClnt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wdfcoinstaller01009.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\vbscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\usbaaplrc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\urlmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ubpm.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\TSWbPrxy.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\tspkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\tsgqec.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\termsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\sysmain.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\srcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\spwmp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\spool\prtprocs\w32x86\jnwppr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\spool\drivers\w32x86\3\jnwdui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\spool\drivers\w32x86\3\JNWDRV.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\smss.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\shell32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\setbcdlocale.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\services.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\scesrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\rstrui.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\rrinstaller.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\rpcrt4.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\rdpudd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\rdpcorets.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\RaCoInst.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\quartz.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\qdvd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\profsvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\poqexec.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\pku2u.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\pcawrk.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\pcasvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\pcalua.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\pcaevts.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\pcadm.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\packager.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\oleaut32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ole32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ntdll.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\notepad.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\nlasvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\nlaapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ncsi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msxml6r.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msxml6.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msxml3r.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msxml3.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msvcr70.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\mstscax.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\MsSpellCheckingFacility.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msscp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msrating.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msnetobj.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msmmsp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msjava.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msimsg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msihnd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msiexec.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\mshtmlmedia.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\mshtmled.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\MshtmlDac.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\mshtml.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msfeeds.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msdxm.ocx:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msctf.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\MRT.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\mfps.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\mfpmp.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\mfplat.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\mferror.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\mf.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\mcupdate_GenuineIntel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\lpk.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\KernelBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\kernel32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\jsproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\jscript9diag.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\jscript9.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\jscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\jnwmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\JavaScriptCollectionAgent.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\InkEd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\inetcpl.cpl:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\IMJP10K.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\IME\IMEJP10\imjputyc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\IME\IMEJP10\imjpuexc.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ieUnatt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ieui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\iesetup.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\iertutil.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\iernonce.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ieframe.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ieetwproxystub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ieetwcollectorres.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ieetwcollector.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\iedkcs32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ieapfltr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ie4uinit.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\gdi32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\fontsub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\FntCache.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\evr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\wucltux.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\wuaueng.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\wuapi.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\urlmon.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\mshtml.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\jscript9.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\inetcpl.cpl.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\ieframe.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\crypt32.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\ci.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\certcli.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\authui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\EncDump.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\dxtrans.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\dxtmsft.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\dxmasf.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drmv2clt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drmmgrtn.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\DriverStore\FileRepository\netr28u.inf_x86_neutral_a70721fb3916844c\RaCoInst.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\DriverStore\FileRepository\netr28u.inf_x86_neutral_a70721fb3916844c\netr28u.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\DriverStore\FileRepository\ggsomc.inf_x86_neutral_8b9b1aa7946c0b34\x86\WdfCoInstaller01009.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\DriverStore\FileRepository\ggsomc.inf_x86_neutral_8b9b1aa7946c0b34\x86\ggsomc.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\DriverStore\FileRepository\ggsomc.inf_x86_neutral_8b9b1aa7946c0b34\x86\ggflt.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\usbaapl.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\usb8023x.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\rndismpx.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\rdpvideominiport.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\PEAuth.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\netr28u.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\netaapl.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\mrxsmb20.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\mrxsmb10.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\mrxsmb.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\mrxdav.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\mountmgr.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\http.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\en-US\mountmgr.sys.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\cs-CZ\mountmgr.sys.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\cng.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\drivers\appid.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\Dism\WimProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\Dism\UnattendProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\Dism\SmiProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\Dism\OSProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\Dism\IntlProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\Dism\DmiProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\Dism\CompatProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\Dism\CbsProvider.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\dciman32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\davclnt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\d3d10warp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\csrsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\wucltux.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\wuaueng.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\wuapi.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\urlmon.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\mshtml.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\jscript9.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\inetcpl.cpl.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\ieframe.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\crypt32.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\certcli.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\authui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cryptui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cryptsvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cryptsp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cryptnet.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cryptbase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\crypt32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\consent.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\conhost.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\comctl32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\clfsw32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\clfs.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cewmdm.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\certcli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\Boot\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\Boot\en-US\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\Boot\en-US\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\Boot\cs-CZ\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\Boot\cs-CZ\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\blackbox.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\basesrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\authui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\audiosrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\AudioSes.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\AUDIOKSE.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\AudioEng.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\audiodg.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\atmlib.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\atmfd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\appinfo.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\appidsvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\appidpolicyconverter.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\appidcertstorecheck.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\appidapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\aaclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SoftwareDistribution\Download\fe99d4c9c41e3445b2e50e8054f1c601da310acd:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SoftwareDistribution\Download\f5389190106a674d6a46bdfd2ddc3af0e59bd7a3:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\notepad.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_wp.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\MSTORE.EXE:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\wpfgfx_v0300.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Users\Gordon\Desktop\OTL.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Users\Gordon\AppData\Roaming\New Version Available\AudioEditorDeluxe.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Program Files\Microsoft Office\Office12\EXCEL.EXE:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> \xampp\htdocs\CFKomora\web\wp-includes\js\jquery\jquery.serialize-object.js:$CmdTcID
@Alternate Data Stream - 64 bytes -> \xampp\htdocs\CFKomora\web\wp-includes\js\customize-loader.min.js:$CmdTcID
@Alternate Data Stream - 64 bytes -> \xampp\htdocs\CFKomora\web\wp-includes\js\customize-loader.js:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Users\Gordon\AppData\Local\Temp\is1201216051\6F27F02E_stp\JDownloaderSetup_IC.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Program Files\JDownloader\JDownloaderPortable.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Program Files\JDownloader\JDownloaderD3D.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Program Files\JDownloader\JDownloaderBETA.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Program Files\JDownloader\JDownloader.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Program Files\Common Files\Adobe\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_XSDLoader2_4.4.3.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Program Files\Common Files\Adobe\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_XSDLoader_4.4.3.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Program Files\Common Files\Adobe\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_BinaryLoader_4.4.3.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Program Files\Adobe\Adobe Bridge CS6\Photodownloader.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> \download\Flaska 2015-08-06\Project Border\Last FOP\java\bin\serialver.exe:$CmdTcID
@Alternate Data Stream - 26 bytes -> C:\Users\Gordon\Desktop\OTL.exe:$CmdZnID
@Alternate Data Stream - 26 bytes -> \Programování\export\ajax-loader.gif:$CmdZnID

< End of report >

Extras.Txt:
OTL Extras logfile created on: 16.8.2015 19:35:06 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Gordon\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17959)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,99 Gb Total Physical Memory | 1,36 Gb Available Physical Memory | 68,54% Memory free
3,98 Gb Paging File | 3,09 Gb Available in Paging File | 77,49% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 148,95 Gb Total Space | 56,38 Gb Free Space | 37,85% Space Free | Partition Type: NTFS
Drive E: | 931,48 Gb Total Space | 687,22 Gb Free Space | 73,78% Space Free | Partition Type: NTFS

Computer Name: GORDON-PC | User Name: Gordon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-339101144-130110853-2470278515-1001\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{074227D6-79C2-440C-AB72-4391098F0309}" = rport=139 | protocol=6 | dir=out | app=system |
"{0C2A6F5C-7CB0-4E56-97FA-89C617CC56C7}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{113E265C-FA72-4CEC-ADA7-7F3C4FF4F034}" = lport=445 | protocol=6 | dir=in | app=system |
"{16C341AB-6D98-4E85-8B17-8DD7E1B789CA}" = rport=445 | protocol=6 | dir=out | app=system |
"{30E05A9F-316D-40E8-95D8-FE6A138DCFAB}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{39A4CB26-9271-46E5-A90D-CDE4E0FD878B}" = lport=10243 | protocol=6 | dir=in | app=system |
"{3A63F96B-CF92-447D-84CA-8D21C2CB721D}" = rport=10243 | protocol=6 | dir=out | app=system |
"{42007107-EA3F-40A9-A11F-D43C65DE54DD}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{4743B552-BDAC-4787-A60A-BAF134DE9808}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{4798A2F0-C63D-409E-B308-A51E3D3E35D2}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{510CD884-F511-4A2C-9276-C3D81F55DCE4}" = rport=137 | protocol=17 | dir=out | app=system |
"{846029AE-5473-40F9-A2D0-A6094E488DAC}" = lport=138 | protocol=17 | dir=in | app=system |
"{9E5223AB-AEB7-4BA2-AFA0-51E8917135F1}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A4A9188C-BE9C-4A44-9F84-6F88B05B9183}" = lport=139 | protocol=6 | dir=in | app=system |
"{A665C19E-28E8-43AB-9CEB-4BFAE0BC0E95}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{AAE1348F-3158-4215-B19C-CC7C0CFA0812}" = lport=2869 | protocol=6 | dir=in | app=system |
"{ACD6B9E5-1C0E-4077-AC94-940A3A705A88}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\google\chrome\application\chrome.exe |
"{B7652FE8-A4F9-4390-A06D-9A5B5A84723C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C5182D2E-C809-4CD8-80C7-85C2655F0EC6}" = lport=5353 | protocol=17 | dir=in | app=c:\users\gordon\appdata\local\google\chrome sxs\application\chrome.exe |
"{C92F73A3-89A0-4B99-BB0F-098CD3CEEF7A}" = rport=138 | protocol=17 | dir=out | app=system |
"{E186CD53-B628-4A5D-BB0E-1D8AD6CA8F40}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{E39958C9-FA14-4A68-8130-A2D51E5BDC3B}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{EDD16E71-62A3-4482-98EB-93F7FB9C28EE}" = lport=137 | protocol=17 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03800478-8DA6-44BB-92C5-040D660ECDE0}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{159DECF8-2610-481E-AA7D-C30F0DF8CF67}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{1A1AFA22-79E0-41E9-8EA4-42CFD352FCC9}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{1A7FA230-E030-4299-B9FA-D374939A648B}" = protocol=17 | dir=in | app=c:\program files\sony mobile\update engine\sony mobile update engine.exe |
"{24B04F2F-3BAE-4BC8-A2FE-F2FD7D0D15C4}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{27507D6B-65AF-4929-9BB9-D66F760BC15A}" = protocol=17 | dir=in | app=c:\program files\lexmark\lpsu\install\x86\installgui.exe |
"{2952F443-EB3A-424A-AB57-97E58B5DB7EE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{2DB593EA-7264-4C70-B4FD-56485E310670}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{42BE7239-C3B5-4BEC-BE61-548B570B48E5}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{4BB02FC5-128C-4986-9FF8-89EA35A8493A}" = protocol=6 | dir=in | app=c:\program files\lexmark\travelprint\install\x86\installgui.exe |
"{4CF01753-67EE-4007-AE2F-B5D14867FFE3}" = protocol=17 | dir=in | app=c:\program files\lexmark\travelprint\install\x86\installgui.exe |
"{6508F051-B5A4-4F3C-B1CF-8B8D040CA002}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{7579721A-4533-45F1-AA5B-44E9513F4065}" = protocol=6 | dir=out | app=system |
"{8A6F7B36-1069-402C-BE56-D51050030FF7}" = protocol=6 | dir=in | app=c:\program files\sony mobile\update engine\sony mobile update engine.exe |
"{917CA8A5-EF4F-4B72-AA10-0432FFCE8FFB}" = protocol=6 | dir=in | app=c:\program files\lexmark\lpsu\install\x86\installgui.exe |
"{962710FB-25FA-4417-87F9-6A7F441C6531}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{9B1DB482-48B5-4FA0-84A0-03D48FE3D2AB}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{A16A7B8E-2BFB-4191-BA97-3088427191A1}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{A5C460CC-C53C-406D-87A0-5C1CDFE064E5}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B25F57F1-4A42-4273-B56D-E26C603C2003}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{C0D0C3AD-A91D-44D7-BD0C-5C425A00ED8A}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{C6FDC263-D798-4AD2-AEA4-C664CA038900}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{CFA7C657-5822-45C5-AC93-DF9D88DFD72D}" = protocol=6 | dir=in | app=c:\program files\corel\coreldraw graphics suite x7\programs\coreldrw.exe |
"{CFDBDC07-B9B9-4985-AA24-D6F45A475A0B}" = protocol=6 | dir=in | app=c:\program files\corel\coreldraw graphics suite x7\programs\corelpp.exe |
"{F72A1A05-DE49-48BE-AF8B-9EFE0CD15018}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{F9275601-DD57-4929-A768-AD7519032A45}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{B865FDD4-E96E-4166-BB69-6E8C207E3E29}" = Corel Graphics - Windows Shell Extension
"_{C5D9CECB-A66F-473F-B406-5C8C2DCA4DF0}" = CorelDRAW Graphics Suite X7
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{03077B58-6ACF-32CA-B42A-EAA458C295A1}" = Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB
"{08A60D9D-C206-46BF-9602-1F2616878CF7}" = CorelDRAW Graphics Suite X7
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A0143FF-ECB5-4960-A2E0-DC3150ABBBE0}" = CorelDRAW Graphics Suite X7 - PHOTO-PAINT
"{0FE6DE07-8CBA-3F73-86B4-51B91E506D24}" = Microsoft Visual Studio Tools for Applications 2012 x86 主控支援 - 繁體中文語言套件
"{179324FF-7B16-4BA8-9836-055CAAEE4F08}" = SDFormatter
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{246FE426-2661-4DD6-9603-DF2E6832387C}" = CorelDRAW Graphics Suite X7 - Writing Tools
"{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1" = MPC-HC 1.7.8
"{26A24AE4-039D-4CA4-87B4-2F83218025F0}" = Java 8 Update 25
"{2736B6BD-31EC-4FC8-A48C-F0A5C914C0B6}" = COMODO Internet Security Premium
"{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}" = Ralink RT2870 Wireless LAN Card
"{30FAE453-9F77-4F70-928E-042BEF00D011}" = CorelDRAW Graphics Suite X7 - Draw
"{32A3A4F4-B792-11D6-A78A-00B0D0180050}" = Java SE Development Kit 8 Update 5
"{32E05824-A0AC-4DFE-B965-5F52C28FBE9F}_is1" = EPS Viewer
"{3371699A-C1EF-3AC3-B094-D338191FA6E9}" = Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - Module linguistique Français
"{41263A64-D276-484F-9056-AD58C8995E35}" = CorelDRAW Graphics Suite X7 - EN
"{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1" = Foxit Cloud
"{4412F224-3849-4461-A3E9-DEEF8D252790}" = Visual Studio C++ 10.0 Runtime
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4C614BD3-607E-4289-BB51-4D87EC7BBD62}" = CorelDRAW Graphics Suite X7 - VideoBrowser
"{5950473A-825B-3019-AF86-55F2F9A95FCB}" = Microsoft Visual Studio Tools for Applications 2012 Finalizer
"{5D0275EA-F3CE-450A-A5A3-F852E30CA46F}" = CorelDRAW Graphics Suite X7 - Capture
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{657EAD32-8E7A-43C0-A794-3BB31B00DC34}" = CorelDRAW Graphics Suite X7 - IPM Content
"{68DC347D-C1C0-3DE2-A53E-CCC71DA53E57}" = Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7259BDDA-D888-309D-ADE1-84AA0CB24FE9}" = Microsoft Visual Studio Tools for Applications 2012 x86 托管支持 - 简体中文语言包
"{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}" = Adobe Photoshop CS6
"{7F5DE3F2-5865-4D4A-89D1-AAEFE1F96E50}" = CorelDRAW Graphics Suite X7 - FontNav
"{8246B4CB-951F-4369-934A-EE8FBFB0338C}" = Achtung 2
"{84749C5C-FA80-4779-BD96-544165A8CD31}" = CorelDRAW Graphics Suite X7 - Custom Data
"{859C7535-6862-3867-B97E-816795E8AB65}" = Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - 日本語 Language Pack
"{877522BE-A318-4603-9B00-DF319C6FA2B1}" = CorelDRAW Graphics Suite X7 - VBA
"{89ca2a32-2b52-4595-8dfd-6fe4757958d0}" = Microsoft Visual Studio Tools for Applications 2012
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8DADD35F-49CE-4D18-AE6D-135DD150E74F}" = CorelDRAW Graphics Suite X7 - Filters
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0070-0000-0000-4000000FF1CE}" = Microsoft Visual Basic for Applications 7.1 (x86)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029" = Microsoft .NET Framework 4.5 CSY Language Pack
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5
"{950055ED-DC61-4874-8EDB-E5CDE1D218CD}" = CorelDRAW Graphics Suite X7 - Photozoom Plugin
"{955E1388-E1F1-320A-A018-24616ED60F95}" = Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - 한국어 언어 팩
"{994F3055-8433-46A7-8E1F-6CC7B68B01F0}" = CorelDRAW Graphics Suite X7 - Common
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9F612429-4A00-3D44-88CF-146DA2EE1F92}" = Microsoft .NET Framework 4.5
"{A3EB1DE3-9D3F-34C2-BDE6-5A8A4B98CC37}" = Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - Paquete de idioma ESN
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{B865FDD4-E96E-4166-BB69-6E8C207E3E29}" = Corel Graphics - Windows Shell Extension
"{B8FD8F53-7E58-3DE5-A8FC-CB2B5CCF38CE}" = Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - Language Pack ITA
"{BAB89D31-4C55-472B-8909-6CBE2CC276B1}" = Microsoft Visual Basic for Applications 7.1 (x86) English
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{C5D9CECB-A66F-473F-B406-5C8C2DCA4DF0}" = CorelDRAW Graphics Suite X7 - Setup Files
"{CAAC553D-EE02-32D2-9F7E-FBC5C22E4C08}" = Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - DEU-Sprachpaket
"{CF06B8C4-F6FC-3A4B-ADD0-04A1CAC3DD86}" = Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support
"{CF2FF2C3-3013-33E4-8413-92090A340FE1}" = Microsoft .NET Framework 4.5 CSY Language Pack
"{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1" = Win32DiskImager version 0.9.5
"{D29A4F85-0FB7-4E54-B591-044652C4295F}" = CorelDRAW Graphics Suite X7 - IPM T
"{EFB8E269-0619-475B-8C5B-96F98551AA33}" = CorelDRAW Graphics Suite X7 - Connect
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.275
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F3286FA3-DF68-4948-8D1D-ED3A539077B3}" = CorelDRAW Graphics Suite X7 - Redist
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"5513-1208-7298-9440" = JDownloader 0.9
"5517-2803-0637-4585" = SoapUI 5.0.0 5.0.0
"Achtung 2" = Achtung 2 v1.3.3
"Audacity_is1" = Audacity 2.1.0
"B991B020-2968-11D8-AF23-444553540000_is1" = FreeMind
"Debian-Installer Loader" = Zavaděč instalace Debianu
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Foxit Reader_is1" = Foxit Reader
"Free Spider_is1" = Free Spider Solitaire v5.0
"GIMP-2_is1" = GIMP 2.8.14
"Google Chrome" = Google Chrome
"GPL Ghostscript 9.09" = GPL Ghostscript
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"Inkscape" = Inkscape 0.91
"IrfanView" = IrfanView (remove only)
"LAME_is1" = LAME v3.99.3 (for Windows)
"Lexmark Local Printer Settings Utility" = Lexmark Local Printer Settings Utility Uninstaller
"MyDriveConnect" = MyDriveConnect 3.3.0.1812
"Scribus 1.4.5" = Scribus 1.4.5
"Totalcmd" = Total Commander (Remove or Repair)
"Travel Print" = Lexmark Tisk na cestách Odinstalovat
"TVWiz" = Intel(R) TV Wizard
"Update Engine" = Sony Mobile Update Engine
"VirtualCloneDrive" = VirtualCloneDrive
"Vlak screen saver_is1" = Vlak 1.5
"VLC media player" = VLC media player
"WinRAR archiver" = WinRAR 5.01 (32-bit)
"xampp" = XAMPP

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-339101144-130110853-2470278515-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome SxS" = Google Chrome Canary

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 27.7.2015 14:37:12 | Computer Name = Gordon-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 27.7.2015 17:24:05 | Computer Name = Gordon-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: file-ps.exe, verze: 2.8.14.0, časové razítko:
0xff9c9998 Název chybujícího modulu: libgs-8.dll, verze: 0.0.0.0, časové razítko:
0x37523742 Kód výjimky: 0xc0000005 Posun chyby: 0x000a1b47 ID chybujícího procesu:
0x15d0 Čas spuštění chybující aplikace: 0x01d0c8b28c0b2eec Cesta k chybující aplikaci:
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ps.exe Cesta k chybujícímu modulu:
C:\Program Files\GIMP 2\bin\libgs-8.dll ID zprávy: ced7a8fb-34a5-11e5-bd1d-001d924e72c4

Error - 27.7.2015 17:25:28 | Computer Name = Gordon-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: file-ps.exe, verze: 2.8.14.0, časové razítko:
0xff9c9998 Název chybujícího modulu: libgs-8.dll, verze: 0.0.0.0, časové razítko:
0x37523742 Kód výjimky: 0xc0000005 Posun chyby: 0x000a1b47 ID chybujícího procesu:
0x13f0 Čas spuštění chybující aplikace: 0x01d0c8b2be80cad1 Cesta k chybující aplikaci:
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ps.exe Cesta k chybujícímu modulu:
C:\Program Files\GIMP 2\bin\libgs-8.dll ID zprávy: 00339360-34a6-11e5-bd1d-001d924e72c4

Error - 28.7.2015 13:54:06 | Computer Name = Gordon-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 2.8.2015 13:37:16 | Computer Name = Gordon-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 8.8.2015 12:07:55 | Computer Name = Gordon-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 10.8.2015 12:32:48 | Computer Name = Gordon-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 11.8.2015 12:52:27 | Computer Name = Gordon-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 12.8.2015 16:40:54 | Computer Name = Gordon-PC | Source = Application Hang | ID = 1002
Description = Program RSIT.exe verze 0.0.0.0 přestal spolupracovat se systémem Windows
a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému,
vyhledejte historii problému v ovládacím panelu Centrum akcí. ID procesu: 3dc Čas
spuštění: 01d0d53b467fe162 Čas ukončení: 0 Cesta k aplikaci: C:\download\RSIT.exe

ID
hlášení:

Error - 16.8.2015 11:37:15 | Computer Name = Gordon-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

[ COMODO Internet Security Events ]
Error - 12.12.2014 14:08:22 | Computer Name = Gordon-PC | Source = cmdagent | ID = 1
Description = Fail to open XML doc in CreateRecognizers. Error Code: 0x80070003
(The system cannot find the path specified.)

[ System Events ]
Error - 5.1.2015 17:57:38 | Computer Name = Gordon-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (22:55:45, ?5.?1.?2015) bylo neočekávané.

Error - 7.1.2015 16:31:14 | Computer Name = Gordon-PC | Source = Service Control Manager | ID = 7011
Description = Při čekání na odezvu transakce služby ShellHWDetection bylo dosaženo
časového limitu (30000 ms).

Error - 7.1.2015 18:10:36 | Computer Name = Gordon-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (23:08:31, ?7.?1.?2015) bylo neočekávané.

Error - 11.1.2015 6:22:39 | Computer Name = Gordon-PC | Source = Service Control Manager | ID = 7011
Description = Při čekání na odezvu transakce služby ShellHWDetection bylo dosaženo
časového limitu (30000 ms).

Error - 12.1.2015 16:41:25 | Computer Name = Gordon-PC | Source = DCOM | ID = 10010
Description =

Error - 18.1.2015 8:36:28 | Computer Name = Gordon-PC | Source = Service Control Manager | ID = 7011
Description = Při čekání na odezvu transakce služby ShellHWDetection bylo dosaženo
časového limitu (30000 ms).

Error - 22.1.2015 12:55:17 | Computer Name = Gordon-PC | Source = Service Control Manager | ID = 7011
Description = Při čekání na odezvu transakce služby lmhosts bylo dosaženo časového
limitu (30000 ms).

Error - 22.1.2015 12:55:19 | Computer Name = Gordon-PC | Source = DCOM | ID = 10010
Description =

Error - 22.1.2015 14:09:33 | Computer Name = Gordon-PC | Source = Microsoft-Windows-Application-Experience | ID = 205
Description = Službě Pomocník s kompatibilitou programů se nepodařilo provést inicializaci
druhé fáze.

Error - 22.1.2015 19:27:25 | Computer Name = Gordon-PC | Source = DCOM | ID = 10010
Description =

< End of report >
OTL Extras logfile created on: 16.8.2015 19:35:06 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Gordon\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17959)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,99 Gb Total Physical Memory | 1,36 Gb Available Physical Memory | 68,54% Memory free
3,98 Gb Paging File | 3,09 Gb Available in Paging File | 77,49% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 148,95 Gb Total Space | 56,38 Gb Free Space | 37,85% Space Free | Partition Type: NTFS
Drive E: | 931,48 Gb Total Space | 687,22 Gb Free Space | 73,78% Space Free | Partition Type: NTFS

Computer Name: GORDON-PC | User Name: Gordon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-339101144-130110853-2470278515-1001\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{074227D6-79C2-440C-AB72-4391098F0309}" = rport=139 | protocol=6 | dir=out | app=system |
"{0C2A6F5C-7CB0-4E56-97FA-89C617CC56C7}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{113E265C-FA72-4CEC-ADA7-7F3C4FF4F034}" = lport=445 | protocol=6 | dir=in | app=system |
"{16C341AB-6D98-4E85-8B17-8DD7E1B789CA}" = rport=445 | protocol=6 | dir=out | app=system |
"{30E05A9F-316D-40E8-95D8-FE6A138DCFAB}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{39A4CB26-9271-46E5-A90D-CDE4E0FD878B}" = lport=10243 | protocol=6 | dir=in | app=system |
"{3A63F96B-CF92-447D-84CA-8D21C2CB721D}" = rport=10243 | protocol=6 | dir=out | app=system |
"{42007107-EA3F-40A9-A11F-D43C65DE54DD}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{4743B552-BDAC-4787-A60A-BAF134DE9808}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{4798A2F0-C63D-409E-B308-A51E3D3E35D2}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{510CD884-F511-4A2C-9276-C3D81F55DCE4}" = rport=137 | protocol=17 | dir=out | app=system |
"{846029AE-5473-40F9-A2D0-A6094E488DAC}" = lport=138 | protocol=17 | dir=in | app=system |
"{9E5223AB-AEB7-4BA2-AFA0-51E8917135F1}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A4A9188C-BE9C-4A44-9F84-6F88B05B9183}" = lport=139 | protocol=6 | dir=in | app=system |
"{A665C19E-28E8-43AB-9CEB-4BFAE0BC0E95}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{AAE1348F-3158-4215-B19C-CC7C0CFA0812}" = lport=2869 | protocol=6 | dir=in | app=system |
"{ACD6B9E5-1C0E-4077-AC94-940A3A705A88}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\google\chrome\application\chrome.exe |
"{B7652FE8-A4F9-4390-A06D-9A5B5A84723C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C5182D2E-C809-4CD8-80C7-85C2655F0EC6}" = lport=5353 | protocol=17 | dir=in | app=c:\users\gordon\appdata\local\google\chrome sxs\application\chrome.exe |
"{C92F73A3-89A0-4B99-BB0F-098CD3CEEF7A}" = rport=138 | protocol=17 | dir=out | app=system |
"{E186CD53-B628-4A5D-BB0E-1D8AD6CA8F40}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{E39958C9-FA14-4A68-8130-A2D51E5BDC3B}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{EDD16E71-62A3-4482-98EB-93F7FB9C28EE}" = lport=137 | protocol=17 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03800478-8DA6-44BB-92C5-040D660ECDE0}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{159DECF8-2610-481E-AA7D-C30F0DF8CF67}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{1A1AFA22-79E0-41E9-8EA4-42CFD352FCC9}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{1A7FA230-E030-4299-B9FA-D374939A648B}" = protocol=17 | dir=in | app=c:\program files\sony mobile\update engine\sony mobile update engine.exe |
"{24B04F2F-3BAE-4BC8-A2FE-F2FD7D0D15C4}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{27507D6B-65AF-4929-9BB9-D66F760BC15A}" = protocol=17 | dir=in | app=c:\program files\lexmark\lpsu\install\x86\installgui.exe |
"{2952F443-EB3A-424A-AB57-97E58B5DB7EE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{2DB593EA-7264-4C70-B4FD-56485E310670}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{42BE7239-C3B5-4BEC-BE61-548B570B48E5}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{4BB02FC5-128C-4986-9FF8-89EA35A8493A}" = protocol=6 | dir=in | app=c:\program files\lexmark\travelprint\install\x86\installgui.exe |
"{4CF01753-67EE-4007-AE2F-B5D14867FFE3}" = protocol=17 | dir=in | app=c:\program files\lexmark\travelprint\install\x86\installgui.exe |
"{6508F051-B5A4-4F3C-B1CF-8B8D040CA002}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{7579721A-4533-45F1-AA5B-44E9513F4065}" = protocol=6 | dir=out | app=system |
"{8A6F7B36-1069-402C-BE56-D51050030FF7}" = protocol=6 | dir=in | app=c:\program files\sony mobile\update engine\sony mobile update engine.exe |
"{917CA8A5-EF4F-4B72-AA10-0432FFCE8FFB}" = protocol=6 | dir=in | app=c:\program files\lexmark\lpsu\install\x86\installgui.exe |
"{962710FB-25FA-4417-87F9-6A7F441C6531}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{9B1DB482-48B5-4FA0-84A0-03D48FE3D2AB}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{A16A7B8E-2BFB-4191-BA97-3088427191A1}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{A5C460CC-C53C-406D-87A0-5C1CDFE064E5}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B25F57F1-4A42-4273-B56D-E26C603C2003}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{C0D0C3AD-A91D-44D7-BD0C-5C425A00ED8A}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{C6FDC263-D798-4AD2-AEA4-C664CA038900}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{CFA7C657-5822-45C5-AC93-DF9D88DFD72D}" = protocol=6 | dir=in | app=c:\program files\corel\coreldraw graphics suite x7\programs\coreldrw.exe |
"{CFDBDC07-B9B9-4985-AA24-D6F45A475A0B}" = protocol=6 | dir=in | app=c:\program files\corel\coreldraw graphics suite x7\programs\corelpp.exe |
"{F72A1A05-DE49-48BE-AF8B-9EFE0CD15018}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{F9275601-DD57-4929-A768-AD7519032A45}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{B865FDD4-E96E-4166-BB69-6E8C207E3E29}" = Corel Graphics - Windows Shell Extension
"_{C5D9CECB-A66F-473F-B406-5C8C2DCA4DF0}" = CorelDRAW Graphics Suite X7
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{03077B58-6ACF-32CA-B42A-EAA458C295A1}" = Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB
"{08A60D9D-C206-46BF-9602-1F2616878CF7}" = CorelDRAW Graphics Suite X7
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A0143FF-ECB5-4960-A2E0-DC3150ABBBE0}" = CorelDRAW Graphics Suite X7 - PHOTO-PAINT
"{0FE6DE07-8CBA-3F73-86B4-51B91E506D24}" = Microsoft Visual Studio Tools for Applications 2012 x86 主控支援 - 繁體中文語言套件
"{179324FF-7B16-4BA8-9836-055CAAEE4F08}" = SDFormatter
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{246FE426-2661-4DD6-9603-DF2E6832387C}" = CorelDRAW Graphics Suite X7 - Writing Tools
"{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1" = MPC-HC 1.7.8
"{26A24AE4-039D-4CA4-87B4-2F83218025F0}" = Java 8 Update 25
"{2736B6BD-31EC-4FC8-A48C-F0A5C914C0B6}" = COMODO Internet Security Premium
"{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}" = Ralink RT2870 Wireless LAN Card
"{30FAE453-9F77-4F70-928E-042BEF00D011}" = CorelDRAW Graphics Suite X7 - Draw
"{32A3A4F4-B792-11D6-A78A-00B0D0180050}" = Java SE Development Kit 8 Update 5
"{32E05824-A0AC-4DFE-B965-5F52C28FBE9F}_is1" = EPS Viewer
"{3371699A-C1EF-3AC3-B094-D338191FA6E9}" = Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - Module linguistique Français
"{41263A64-D276-484F-9056-AD58C8995E35}" = CorelDRAW Graphics Suite X7 - EN
"{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1" = Foxit Cloud
"{4412F224-3849-4461-A3E9-DEEF8D252790}" = Visual Studio C++ 10.0 Runtime
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4C614BD3-607E-4289-BB51-4D87EC7BBD62}" = CorelDRAW Graphics Suite X7 - VideoBrowser
"{5950473A-825B-3019-AF86-55F2F9A95FCB}" = Microsoft Visual Studio Tools for Applications 2012 Finalizer
"{5D0275EA-F3CE-450A-A5A3-F852E30CA46F}" = CorelDRAW Graphics Suite X7 - Capture
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{657EAD32-8E7A-43C0-A794-3BB31B00DC34}" = CorelDRAW Graphics Suite X7 - IPM Content
"{68DC347D-C1C0-3DE2-A53E-CCC71DA53E57}" = Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7259BDDA-D888-309D-ADE1-84AA0CB24FE9}" = Microsoft Visual Studio Tools for Applications 2012 x86 托管支持 - 简体中文语言包
"{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}" = Adobe Photoshop CS6
"{7F5DE3F2-5865-4D4A-89D1-AAEFE1F96E50}" = CorelDRAW Graphics Suite X7 - FontNav
"{8246B4CB-951F-4369-934A-EE8FBFB0338C}" = Achtung 2
"{84749C5C-FA80-4779-BD96-544165A8CD31}" = CorelDRAW Graphics Suite X7 - Custom Data
"{859C7535-6862-3867-B97E-816795E8AB65}" = Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - 日本語 Language Pack
"{877522BE-A318-4603-9B00-DF319C6FA2B1}" = CorelDRAW Graphics Suite X7 - VBA
"{89ca2a32-2b52-4595-8dfd-6fe4757958d0}" = Microsoft Visual Studio Tools for Applications 2012
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8DADD35F-49CE-4D18-AE6D-135DD150E74F}" = CorelDRAW Graphics Suite X7 - Filters
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0070-0000-0000-4000000FF1CE}" = Microsoft Visual Basic for Applications 7.1 (x86)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029" = Microsoft .NET Framework 4.5 CSY Language Pack
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5
"{950055ED-DC61-4874-8EDB-E5CDE1D218CD}" = CorelDRAW Graphics Suite X7 - Photozoom Plugin
"{955E1388-E1F1-320A-A018-24616ED60F95}" = Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - 한국어 언어 팩
"{994F3055-8433-46A7-8E1F-6CC7B68B01F0}" = CorelDRAW Graphics Suite X7 - Common
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9F612429-4A00-3D44-88CF-146DA2EE1F92}" = Microsoft .NET Framework 4.5
"{A3EB1DE3-9D3F-34C2-BDE6-5A8A4B98CC37}" = Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - Paquete de idioma ESN
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{B865FDD4-E96E-4166-BB69-6E8C207E3E29}" = Corel Graphics - Windows Shell Extension
"{B8FD8F53-7E58-3DE5-A8FC-CB2B5CCF38CE}" = Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - Language Pack ITA
"{BAB89D31-4C55-472B-8909-6CBE2CC276B1}" = Microsoft Visual Basic for Applications 7.1 (x86) English
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{C5D9CECB-A66F-473F-B406-5C8C2DCA4DF0}" = CorelDRAW Graphics Suite X7 - Setup Files
"{CAAC553D-EE02-32D2-9F7E-FBC5C22E4C08}" = Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - DEU-Sprachpaket
"{CF06B8C4-F6FC-3A4B-ADD0-04A1CAC3DD86}" = Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support
"{CF2FF2C3-3013-33E4-8413-92090A340FE1}" = Microsoft .NET Framework 4.5 CSY Language Pack
"{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1" = Win32DiskImager version 0.9.5
"{D29A4F85-0FB7-4E54-B591-044652C4295F}" = CorelDRAW Graphics Suite X7 - IPM T
"{EFB8E269-0619-475B-8C5B-96F98551AA33}" = CorelDRAW Graphics Suite X7 - Connect
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.275
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F3286FA3-DF68-4948-8D1D-ED3A539077B3}" = CorelDRAW Graphics Suite X7 - Redist
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"5513-1208-7298-9440" = JDownloader 0.9
"5517-2803-0637-4585" = SoapUI 5.0.0 5.0.0
"Achtung 2" = Achtung 2 v1.3.3
"Audacity_is1" = Audacity 2.1.0
"B991B020-2968-11D8-AF23-444553540000_is1" = FreeMind
"Debian-Installer Loader" = Zavaděč instalace Debianu
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Foxit Reader_is1" = Foxit Reader
"Free Spider_is1" = Free Spider Solitaire v5.0
"GIMP-2_is1" = GIMP 2.8.14
"Google Chrome" = Google Chrome
"GPL Ghostscript 9.09" = GPL Ghostscript
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"Inkscape" = Inkscape 0.91
"IrfanView" = IrfanView (remove only)
"LAME_is1" = LAME v3.99.3 (for Windows)
"Lexmark Local Printer Settings Utility" = Lexmark Local Printer Settings Utility Uninstaller
"MyDriveConnect" = MyDriveConnect 3.3.0.1812
"Scribus 1.4.5" = Scribus 1.4.5
"Totalcmd" = Total Commander (Remove or Repair)
"Travel Print" = Lexmark Tisk na cestách Odinstalovat
"TVWiz" = Intel(R) TV Wizard
"Update Engine" = Sony Mobile Update Engine
"VirtualCloneDrive" = VirtualCloneDrive
"Vlak screen saver_is1" = Vlak 1.5
"VLC media player" = VLC media player
"WinRAR archiver" = WinRAR 5.01 (32-bit)
"xampp" = XAMPP

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-339101144-130110853-2470278515-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome SxS" = Google Chrome Canary

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 27.7.2015 14:37:12 | Computer Name = Gordon-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 27.7.2015 17:24:05 | Computer Name = Gordon-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: file-ps.exe, verze: 2.8.14.0, časové razítko:
0xff9c9998 Název chybujícího modulu: libgs-8.dll, verze: 0.0.0.0, časové razítko:
0x37523742 Kód výjimky: 0xc0000005 Posun chyby: 0x000a1b47 ID chybujícího procesu:
0x15d0 Čas spuštění chybující aplikace: 0x01d0c8b28c0b2eec Cesta k chybující aplikaci:
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ps.exe Cesta k chybujícímu modulu:
C:\Program Files\GIMP 2\bin\libgs-8.dll ID zprávy: ced7a8fb-34a5-11e5-bd1d-001d924e72c4

Error - 27.7.2015 17:25:28 | Computer Name = Gordon-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: file-ps.exe, verze: 2.8.14.0, časové razítko:
0xff9c9998 Název chybujícího modulu: libgs-8.dll, verze: 0.0.0.0, časové razítko:
0x37523742 Kód výjimky: 0xc0000005 Posun chyby: 0x000a1b47 ID chybujícího procesu:
0x13f0 Čas spuštění chybující aplikace: 0x01d0c8b2be80cad1 Cesta k chybující aplikaci:
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ps.exe Cesta k chybujícímu modulu:
C:\Program Files\GIMP 2\bin\libgs-8.dll ID zprávy: 00339360-34a6-11e5-bd1d-001d924e72c4

Error - 28.7.2015 13:54:06 | Computer Name = Gordon-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 2.8.2015 13:37:16 | Computer Name = Gordon-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 8.8.2015 12:07:55 | Computer Name = Gordon-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 10.8.2015 12:32:48 | Computer Name = Gordon-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 11.8.2015 12:52:27 | Computer Name = Gordon-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 12.8.2015 16:40:54 | Computer Name = Gordon-PC | Source = Application Hang | ID = 1002
Description = Program RSIT.exe verze 0.0.0.0 přestal spolupracovat se systémem Windows
a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému,
vyhledejte historii problému v ovládacím panelu Centrum akcí. ID procesu: 3dc Čas
spuštění: 01d0d53b467fe162 Čas ukončení: 0 Cesta k aplikaci: C:\download\RSIT.exe

ID
hlášení:

Error - 16.8.2015 11:37:15 | Computer Name = Gordon-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

[ COMODO Internet Security Events ]
Error - 12.12.2014 14:08:22 | Computer Name = Gordon-PC | Source = cmdagent | ID = 1
Description = Fail to open XML doc in CreateRecognizers. Error Code: 0x80070003
(The system cannot find the path specified.)

[ System Events ]
Error - 5.1.2015 17:57:38 | Computer Name = Gordon-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (22:55:45, ?5.?1.?2015) bylo neočekávané.

Error - 7.1.2015 16:31:14 | Computer Name = Gordon-PC | Source = Service Control Manager | ID = 7011
Description = Při čekání na odezvu transakce služby ShellHWDetection bylo dosaženo
časového limitu (30000 ms).

Error - 7.1.2015 18:10:36 | Computer Name = Gordon-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (23:08:31, ?7.?1.?2015) bylo neočekávané.

Error - 11.1.2015 6:22:39 | Computer Name = Gordon-PC | Source = Service Control Manager | ID = 7011
Description = Při čekání na odezvu transakce služby ShellHWDetection bylo dosaženo
časového limitu (30000 ms).

Error - 12.1.2015 16:41:25 | Computer Name = Gordon-PC | Source = DCOM | ID = 10010
Description =

Error - 18.1.2015 8:36:28 | Computer Name = Gordon-PC | Source = Service Control Manager | ID = 7011
Description = Při čekání na odezvu transakce služby ShellHWDetection bylo dosaženo
časového limitu (30000 ms).

Error - 22.1.2015 12:55:17 | Computer Name = Gordon-PC | Source = Service Control Manager | ID = 7011
Description = Při čekání na odezvu transakce služby lmhosts bylo dosaženo časového
limitu (30000 ms).

Error - 22.1.2015 12:55:19 | Computer Name = Gordon-PC | Source = DCOM | ID = 10010
Description =

Error - 22.1.2015 14:09:33 | Computer Name = Gordon-PC | Source = Microsoft-Windows-Application-Experience | ID = 205
Description = Službě Pomocník s kompatibilitou programů se nepodařilo provést inicializaci
druhé fáze.

Error - 22.1.2015 19:27:25 | Computer Name = Gordon-PC | Source = DCOM | ID = 10010
Description =

< End of report >

Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner[C?].txt ). Ten mi sem zkopirujte.

Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=144868 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

AdwCleaner

# AdwCleaner v5.000 - Logfile created 17/08/2015 at 21:38:15
# Updated 14/08/2015 by Xplode
# Database : 2015-08-16.2 [Server]
# Operating system : Windows 7 Ultimate Service Pack 1 (x86)
# Username : Gordon - GORDON-PC
# Running from : C:\Users\Gordon\Desktop\adwcleaner_5.000.exe
# Option : Cleaning

***** [ Services ] *****

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\WebProtectorPlus
[-] Folder Deleted : C:\Users\Gordon\AppData\Roaming\pdfforge
[-] Folder Deleted : C:\Users\Gordon\AppData\Roaming\WebExtend

***** [ Files ] *****

[-] File Deleted : C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[-] File Deleted : C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
[-] File Deleted : C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage
[-] File Deleted : C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal
[-] File Deleted : C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.bitchcrawler.com_0.localstorage
[-] File Deleted : C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.bitchcrawler.com_0.localstorage-journal
[-] File Deleted : C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage
[-] File Deleted : C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage-journal

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

[-] Task Deleted : LaunchPreSignup

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Google\Chrome\Extensions\kfecnpmgnlnbmipaogfhoacoioifjgko
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\kfecnpmgnlnbmipaogfhoacoioifjgko
[-] Key Deleted : HKCU\Software\PRODUCTSETUP
[-] Key Deleted : HKLM\SOFTWARE\istartsurfSoftware
[-] Key Deleted : HKLM\SOFTWARE\WebProtector
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

***** [ Web browsers ] *****

[-] [C:\Users\Gordon\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://www.istartsurf.com/?type=hp&ts=14350045 ... 6162461624

*************************

:: Proxy settings cleared
:: Winsock settings cleared

*************************

C:\AdwCleaner[C1].txt - [2726 octets] - [17/08/2015 21:38:15]
C:\AdwCleaner[S1].txt - [2989 octets] - [17/08/2015 21:34:23]

########## EOF - C:\AdwCleaner[C1].txt - [2852 octets] ##########

Fajn, tak jeste ten MBAM a podle vysledku se zaridime dale.

Scan trval trochu déle proto přikládám až teď, omlouvám se.

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 18.8.2015
Čas skenování: 18:36
Protokol: mbam-log.txt
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.08.18.05
Databáze rootkitů: v2015.08.16.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: Gordon

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 528835
Uplynulý čas: 4 hod, 44 min, 38 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 2
PUP.Optional.InstallcoreCh, C:\Users\Gordon\AppData\Roaming\New Version Available\AudioEditorDeluxe.exe, , [79d4050524678bab2dea8108f510a55b],
PUP.Optional.Installcore, C:\download\Old-Town.exe, , [50fd4dbd117ae84eb57e1d6c9c69867a],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)

(end)

Nalezy nechte odstranit, pak muzete MBAM odinstalovat.

Jak je to s legalitou systemu? Ultimate neni zrovna bezna domaci verze

Dejte novy log z RSIT

VIRY.CZ

Prosím o kontrolu logu

Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu