wklejto.pl

Dodane przez: ~Anonim (2017-05-19 21:31) -> text
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
15.
16.
17.
18.
19.
20.
21.
22.
23.
24.
25.
26.
27.
28.
29.
30.
31.
32.
33.
34.
35.
36.
37.
38.
39.
40.
41.
42.
43.
44.
45.
46.
47.
48.
49.
50.
51.
52.
53.
54.
55.
56.
57.
58.
59.
60.
61.
62.
63.
64.
65.
66.
67.
68.
69.
70.
71.
72.
73.
74.
75.
76.
77.
78.
79.
80.
81.
82.
83.
84.
85.
86.
87.
88.
89.
90.
91.
92.
93.
94.
95.
96.
97.
98.
99.
100.
101.
102.
103.
104.
105.
106.
107.
108.
109.
110.
111.
112.
113.
114.
115.
116.
117.
118.
119.
120.
121.
122.
123.
124.
125.
126.
127.
128.
129.
130.
131.
132.
133.
134.
135.
136.
137.
138.
139.
140.
141.
142.
143.
144.
145.
146.
147.
148.
149.
150.
151.
152.
153.
154.
155.
156.
157.
158.
159.
160.
161.
162.
163.
164.
165.
166.
167.
168.
169.
170.
171.
172.
173.
174.
175.
176.
177.
178.
179.
180.
181.
182.
183.
184.
185.
186.
187.
188.
189.
190.
191.
192.
193.
194.
195.
196.
197.
198.
199.
200.
201.
202.
203.
204.
205.
206.
207.
208.
209.
210.
211.
212.
213.
214.
215.
216.
217.
218.
219.
220.
221.
222.
223.
224.
225.
226.
227.
228.
229.
230.
231.
232.
233.
234.
235.
236.
237.
238.
239.
240.
241.
242.
243.
244.
245.
246.
247.
248.
249.
250.
251.
252.
253.
254.
255.
256.
257.
258.
259.
260.
261.
262.
263.
264.
265.
266.
267.
268.
269.
270.
271.
272.
273.
274.
275.
276.
277.
278.
279.
280.
281.
282.
283.
284.
285.
286.
287.
288.
289.
290.
291.
292.
293.
294.
295.
296.
297.
298.
299.
300.
301.
302.
303.
304.
305.
306.
307.
308.
309.
310.
311.
312.
313.
314.
315.
316.
317.
318.
319.
320.
321.
322.
323.
324.
325.
326.
327.
328.
329.
330.
331.
332.
333.
334.
335.
336.
337.
338.
339.
340.
341.
342.
343.
344.
345.
346.
347.
348.
349.
350.
351.
352.
353.
354.
355.
356.
357.
358.
359.
360.
361.
362.
363.
364.
365.
366.
367.
368.
369.
370.
371.
372.
373.
374.
375.
376.
377.
378.
379.
380.
381.
382.
383.
384.
385.
386.
387.
388.
389.
390.
391.
392.
393.
394.
395.
396.
397.
398.
399.
400.
401.
402.
403.
404.
405.
406.
407.
408.
409.
410.
411.
412.
413.
414.
415.
416.
417.
418.
419.
420.
421.
422.
423.
424.
425.
426.
427.
428.
429.
430.
431.
432.
433.
434.
435.
436.
437.
438.
439.
440.
441.
442.
443.
444.
445.
446.
447.
448.
449.
450.
451.
452.
453.
454.
455.
456.
457.
458.
459.
460.
461.
462.
463.
464.
465.
466.
467.
468.
469.
470.
471.
472.
473.
474.
475.
476.
477.
478.
479.
480.
481.
482.
483.
484.
485.
486.
487.
488.
489.
490.
491.
492.
493.
494.
495.
496.
497.
498.
499.
500.
501.
502.
503.
504.
505.
506.
507.
508.
509.
510.
511.
512.
513.
514.
515.
516.
517.
518.
519.
520.
521.
522.
523.
524.
525.
526.
527.
528.
529.
530.
531.
532.
533.
534.
535.
536.
537.
538.
539.
540.
541.
542.
543.
544.
545.
546.
547.
548.
549.
550.
551.
552.
553.
554.
555.
556.
557.
558.
559.
560.
561.
562.
563.
564.
565.
566.
567.
568.
569.
570.
571.
572.
573.
574.
575.
576.
577.
578.
579.
580.
581.
582.
583.
584.
585.
586.
587.
588.
589.
590.
591.
592.
593.
594.
595.
596.
597.
598.
599.
600.
601.
602.
603.
604.
605.
606.
607.
608.
609.
610.
611.
612.
613.
614.
615.
616.
617.
618.
619.
620.
621.
622.
623.
624.
625.
626.
627.
628.
629.
630.
631.
632.
633.
634.
635.
636.
637.
638.
639.
640.
641.
642.
643.
644.
645.
646.
647.
648.
649.
650.
651.
652.
653.
654.
655.
656.
657.
658.
659.
660.
661.
662.
663.
664.
665.
666.
667.
668.
669.
670.
671.
672.
673.
674.
675.
676.
677.
678.
679.
680.
681.
682.
683.
684.
685.
686.
687.
688.
689.
690.
691.
692.
693.
694.
695.
696.
697.
698.
699.
700.
701.
702.
703.
704.
705.
706.
707.
708.
709.
710.
711.
712.
713.
714.
715.
716.
717.
718.
719.
720.
721.
722.
723.
724.
725.
726.
727.
728.
729.
730.
731.
732.
733.
734.
735.
736.
737.
738.
739.
740.
741.
742.
743.
744.
745.
746.
747.
748.
749.
750.
751.
752.
753.
754.
755.
756.
757.
758.
759.
760.
761.
762.
763.
764.
765.
766.
767.
768.
769.
770.
771.
772.
773.
774.
775.
776.
777.
778.
779.
780.
781.
782.
783.
784.
785.
786.
787.
788.
789.
790.
791.
792.
793.
794.
795.
796.
797.
798.
799.
800.
801.
802.
803.
804.
805.
806.
807.
808.
809.
810.
811.
812.
813.
814.
815.
816.
817.
818.
819.
820.
821.
822.
823.
824.
825.
826.
827.
828.
829.
830.
831.
832.
833.
834.
835.
836.
837.
838.
839.
840.
841.
842.
843.
844.
845.
846.
847.
848.
849.
850.
851.
852.
853.
854.
855.
856.
857.
858.
859.
860.
861.
862.
863.
864.
865.
866.
867.
868.
869.
870.
871.
872.
873.
874.
875.
876.
877.
878.
879.
880.
881.
882.
883.
884.
885.
886.
887.
888.
889.
890.
891.
892.
893.
894.
895.
896.
897.
898.
899.
900.
901.
902.
903.
904.
905.
906.
907.
908.
909.
910.
911.
912.
913.
914.
915.
916.
917.
918.
919.
920.
921.
922.
923.
924.
925.
926.
927.
928.
929.
930.
931.
932.
933.
934.
935.
936.
937.
938.
939.
940.
941.
942.
943.
944.
945.
946.
947.
948.
949.
950.
951.
952.
953.
954.
955.
956.
957.
958.
959.
960.
961.
962.
963.
964.
965.
966.
967.
968.
969.
970.
971.
972.
973.
974.
975.
976.
977.
978.
979.
980.
981.
982.
983.
984.
985.
986.
987.
988.
989.
990.
991.
992.
993.
994.
995.
996.
997.
998.
999.
1000.
1001.
1002.
1003.
1004.
1005.
1006.
1007.
1008.
1009.
1010.
1011.
1012.
1013.
1014.
1015.
1016.
1017.
1018.
1019.
1020.
1021.
1022.
1023.
1024.
1025.
1026.
1027.
1028.
1029.
1030.
1031.
1032.
1033.
1034.
1035.
1036.
1037.
1038.
1039.
1040.
1041.
1042.
1043.
1044.
1045.
1046.
1047.
1048.
1049.
1050.
1051.
1052.
1053.
1054.
1055.
1056.
1057.
1058.
1059.
1060.
1061.
1062.
1063.
1064.
1065.
1066.
1067.
1068.
1069.
1070.
1071.
1072.
1073.
1074.
1075.
1076.
1077.
1078.
1079.
1080.
1081.
1082.
1083.
1084.
1085.
1086.
1087.
1088.
1089.
1090.
1091.
1092.
1093.
1094.
1095.
1096.
1097.
1098.
1099.
1100.
1101.
1102.
1103.
1104.
1105.
1106.
1107.
1108.
1109.
1110.
1111.
1112.
1113.
1114.
1115.
1116.
1117.
1118.
1119.
1120.
1121.
1122.
1123.
1124.
1125.
1126.
1127.
1128.
1129.
1130.
1131.
1132.
1133.
1134.
1135.
1136.
1137.
1138.
1139.
1140.
1141.
1142.
1143.
1144.
1145.
1146.
1147.
1148.
1149.
1150.
1151.
1152.
1153.
1154.
1155.
1156.
1157.
1158.
1159.
1160.
1161.
1162.
1163.
1164.
1165.
1166.
1167.
1168.
1169.
1170.
1171.
1172.
1173.
1174.
1175.
1176.
1177.
1178.
1179.
1180.
1181.
1182.
1183.
1184.
1185.
1186.
1187.
1188.
1189.
1190.
1191.
1192.
1193.
1194.
1195.
1196.
1197.
1198.
1199.
1200.
1201.
1202.
1203.
1204.
1205.
1206.
1207.
1208.
1209.
1210.
1211.
1212.
1213.
1214.
1215.
1216.
1217.
1218.
1219.
1220.
1221.
1222.
1223.
1224.
1225.
1226.
1227.
1228.
1229.
1230.
1231.
1232.
1233.
1234.
1235.
1236.
1237.
1238.
1239.
1240.
1241.
1242.
1243.
1244.
1245.
1246.
1247.
1248.
1249.
1250.
1251.
1252.
1253.
1254.
1255.
1256.
1257.
1258.
1259.
1260.
1261.
1262.
1263.
1264.
1265.
1266.
1267.
1268.
1269.
1270.
1271.
1272.
1273.
1274.
1275.
1276.
1277.
1278.
1279.
1280.
1281.
1282.
1283.
1284.
1285.
1286.
1287.
1288.
1289.
1290.
1291.
1292.
1293.
1294.
1295.
1296.
1297.
1298.
1299.
1300.
1301.
1302.
1303.
1304.
1305.
1306.
1307.
1308.
1309.
1310.
1311.
1312.
1313.
1314.
1315.
1316.
1317.
1318.
1319.
1320.
1321.
1322.
1323.
1324.
1325.
1326.
1327.
1328.
1329.
1330.
1331.
1332.
1333.
1334.
1335.
1336.
1337.
1338.
1339.
1340.
1341.
1342.
1343.
1344.
1345.
1346.
1347.
1348.
1349.
1350.
1351.
1352.
1353.
1354.
1355.
1356.
1357.
1358.
1359.
1360.
1361.
1362.
1363.
1364.
1365.
1366.
1367.
1368.
1369.
1370.
1371.
1372.
1373.
1374.
1375.
1376.
1377.
1378.
1379.
1380.
1381.
1382.
1383.
1384.
1385.
1386.
1387.
1388.
1389.
1390.
1391.
1392.
1393.
1394.
1395.
1396.
1397.
1398.
1399.
1400.
1401.
1402.
1403.
1404.
1405.
1406.
1407.
1408.
1409.
1410.
1411.
1412.
1413.
1414.
1415.
1416.
1417.
1418.
1419.
1420.
1421.
1422.
1423.
1424.
1425.
1426.
1427.
1428.
1429.
1430.
1431.
1432.
1433.
1434.
1435.
1436.
1437.
1438.
1439.
1440.
1441.
1442.
1443.
1444.
1445.
1446.
1447.
1448.
1449.
1450.
1451.
1452.
1453.
1454.
1455.
1456.
1457.
1458.
1459.
1460.
1461.
1462.
1463.
1464.
1465.
1466.
1467.
1468.
1469.
1470.
1471.
1472.
1473.
1474.
1475.
1476.
1477.
1478.
1479.
1480.
1481.
1482.
1483.
1484.
1485.
1486.
1487.
1488.
1489.
1490.
1491.
1492.
1493.
1494.
1495.
1496.
1497.
1498.
1499.
1500.
1501.
1502.
1503.
1504.
1505.
1506.
1507.
1508.
1509.
1510.
1511.
1512.
1513.
1514.
1515.
1516.
1517.
1518.
1519.
1520.
1521.
1522.
1523.
1524.
1525.
1526.
1527.
1528.
1529.
1530.
1531.
1532.
1533.
1534.
1535.
1536.
1537.
1538.
1539.
1540.
1541.
1542.
1543.
1544.
1545.
1546.
1547.
1548.
1549.
1550.
1551.
1552.
1553.
1554.
1555.
1556.
1557.
1558.
1559.
1560.
1561.
1562.
1563.
1564.
1565.
1566.
1567.
1568.
1569.
1570.
1571.
1572.
1573.
1574.
1575.
1576.
1577.
1578.
1579.
1580.
1581.
1582.
1583.
1584.
1585.
1586.
1587.
1588.
1589.
1590.
1591.
1592.
1593.
1594.
1595.
1596.
1597.
1598.
1599.
1600.
1601.
1602.
1603.
1604.
1605.
1606.
1607.
1608.
1609.
1610.
1611.
1612.
1613.
1614.
1615.
1616.
1617.
1618.
1619.
1620.
1621.
1622.
1623.
1624.
1625.
1626.
1627.
1628.
1629.
1630.
1631.
1632.
1633.
1634.
1635.
1636.
1637.
1638.
1639.
1640.
1641.
1642.
1643.
1644.
1645.
1646.
1647.
1648.
1649.
1650.
1651.
1652.
1653.
1654.
1655.
1656.
1657.
1658.
1659.
1660.
1661.
1662.
1663.
1664.
1665.
1666.
1667.
1668.
1669.
1670.
1671.
1672.
1673.
1674.
1675.
1676.
1677.
1678.
1679.
1680.
1681.
1682.
1683.
1684.
1685.
1686.
1687.
1688.
1689.
1690.
1691.
1692.
1693.
1694.
1695.
1696.
1697.
1698.
1699.
1700.
1701.
1702.
1703.
1704.
1705.
1706.
1707.
1708.
1709.
1710.
1711.
1712.
1713.
1714.
1715.
1716.
1717.
1718.
1719.
1720.
1721.
1722.
1723.
1724.
1725.
1726.
1727.
1728.
1729.
1730.
1731.
1732.
1733.
1734.
1735.
1736.
1737.
1738.
1739.
1740.
1741.
1742.
1743.
1744.
1745.
1746.
1747.
1748.
1749.
1750.
1751.
1752.
1753.
1754.
1755.
1756.
1757.
1758.
1759.
1760.
1761.
1762.
1763.
1764.
1765.
1766.
1767.
1768.
1769.
1770.
1771.
1772.
1773.
1774.
1775.
1776.
1777.
1778.
1779.
1780.
1781.
1782.
1783.
1784.
1785.
1786.
1787.
1788.
1789.
1790.
1791.
1792.
1793.
1794.
1795.
1796.
1797.
1798.
1799.
1800.
1801.
1802.
1803.
1804.
1805.
1806.
1807.
1808.
1809.
1810.
1811.
1812.
1813.
1814.
1815.
1816.
1817.
1818.
1819.
1820.
1821.
1822.
1823.
1824.
1825.
1826.
1827.
1828.
1829.
1830.
1831.
1832.
1833.
1834.
1835.
1836.
1837.
1838.
1839.
1840.
1841.
1842.
1843.
1844.
1845.
1846.
1847.
1848.
1849.
1850.
1851.
1852.
1853.
1854.
1855.
1856.
1857.
1858.
1859.
1860.
1861.
1862.
1863.
1864.
1865.
1866.
1867.
1868.
1869.
1870.
1871.
1872.
1873.
1874.
1875.
1876.
1877.
1878.
1879.
1880.
1881.
1882.
1883.
1884.
1885.
1886.
1887.
1888.
1889.
1890.
1891.
1892.
1893.
1894.
1895.
1896.
1897.
1898.
1899.
1900.
1901.
1902.
1903.
1904.
1905.
1906.
1907.
1908.
1909.
1910.
1911.
1912.
1913.
1914.
1915.
1916.
1917.
1918.
1919.
1920.
1921.
1922.
1923.
1924.
1925.
1926.
1927.
1928.
1929.
1930.
1931.
1932.
1933.
1934.
1935.
1936.
1937.
1938.
1939.
1940.
1941.
1942.
1943.
1944.
1945.
1946.
1947.
1948.
1949.
1950.
1951.
1952.
1953.
1954.
1955.
1956.
1957.
1958.
1959.
1960.
1961.
1962.
1963.
1964.
1965.
1966.
1967.
1968.
1969.
1970.
1971.
1972.
1973.
1974.
1975.
1976.
1977.
1978.
1979.
1980.
1981.
1982.
1983.
1984.
1985.
1986.
1987.
1988.
1989.
1990.
1991.
1992.
1993.
1994.
1995.
1996.
1997.
1998.
1999.
2000.
2001.
2002.
2003.
2004.
2005.
2006.
2007.
2008.
2009.
2010.
2011.
2012.
2013.
2014.
2015.
2016.
2017.
2018.
2019.
2020.
2021.
2022.
2023.
2024.
2025.
2026.
2027.
2028.
2029.
2030.
2031.
2032.
2033.
2034.
2035.
2036.
2037.
2038.
2039.
2040.
2041.
2042.
2043.
2044.
2045.
2046.
2047.
2048.
2049.
2050.
2051.
2052.
2053.
2054.
2055.
2056.
2057.
2058.
2059.
2060.
2061.
2062.
2063.
2064.
2065.
2066.
2067.
2068.
2069.
2070.
2071.
2072.
2073.
2074.
2075.
2076.
2077.
2078.
2079.
2080.
2081.
2082.
2083.
2084.
2085.
2086.
2087.
2088.
2089.
2090.
2091.
2092.
2093.
2094.
2095.
2096.
2097.
2098.
2099.
2100.
2101.
2102.
2103.
2104.
2105.
2106.
2107.
2108.
2109.
2110.
2111.
2112.
2113.
2114.
2115.
2116.
2117.
2118.
2119.
2120.
2121.
2122.
2123.
2124.
2125.
2126.
2127.
2128.
2129.
2130.
2131.
2132.
2133.
2134.
2135.
2136.
2137.
2138.
2139.
2140.
2141.
2142.
2143.
2144.
2145.
2146.
2147.
2148.
2149.
2150.
2151.
2152.
2153.
2154.
2155.
2156.
2157.
2158.
2159.
2160.
2161.
2162.
2163.
2164.
2165.
2166.
2167.
2168.
2169.
2170.
2171.
2172.
2173.
2174.
2175.
2176.
2177.
2178.
2179.
2180.
2181.
2182.
2183.
2184.
2185.
2186.
2187.
2188.
2189.
2190.
2191.
2192.
2193.
2194.
2195.
2196.
2197.
2198.
2199.
2200.
2201.
2202.
2203.
2204.
2205.
2206.
2207.
2208.
2209.
2210.
2211.
2212.
2213.
2214.
2215.
2216.
2217.
2218.
2219.
2220.
2221.
2222.
2223.
2224.
2225.
2226.
2227.
2228.
2229.
2230.
2231.
2232.
2233.
2234.
2235.
2236.
2237.
2238.
2239.
2240.
2241.
2242.
2243.
2244.
2245.
2246.
2247.
2248.
2249.
2250.
2251.
2252.
2253.
2254.
2255.
2256.
2257.
2258.
2259.
2260.
2261.
2262.
2263.
2264.
2265.
2266.
2267.
2268.
2269.
2270.
2271.
2272.
2273.
2274.
2275.
2276.
2277.
2278.
2279.
2280.
2281.
2282.
2283.
2284.
2285.
2286.
2287.
2288.
2289.
2290.
2291.
2292.
2293.
2294.
2295.
2296.
2297.
2298.
2299.
2300.
2301.
2302.
2303.
2304.
2305.
2306.
2307.
2308.
2309.
2310.
2311.
2312.
2313.
2314.
2315.
2316.
2317.
2318.
2319.
2320.
2321.
2322.
2323.
2324.
2325.
2326.
2327.
2328.
2329.
2330.
2331.
2332.
2333.
2334.
2335.
2336.
2337.
2338.
2339.
2340.
2341.
2342.
2343.
2344.
2345.
2346.
2347.
2348.
2349.
2350.
2351.
2352.
2353.
2354.
2355.
2356.
2357.
2358.
2359.
2360.
2361.
2362.
2363.
2364.
2365.
2366.
2367.
2368.
2369.
2370.
2371.
2372.
2373.
2374.
2375.
2376.
2377.
2378.
2379.
2380.
2381.
2382.
2383.
2384.
2385.
2386.
2387.
2388.
2389.
2390.
2391.
2392.
2393.
2394.
2395.
2396.
2397.
2398.
2399.
2400.
2401.
2402.
2403.
2404.
2405.
2406.
2407.
2408.
2409.
2410.
2411.
2412.
2413.
2414.
2415.
2416.
2417.
2418.
2419.
2420.
2421.
2422.
2423.
2424.
2425.
2426.
2427.
2428.
2429.
2430.
2431.
2432.
2433.
2434.
2435.
2436.
2437.
2438.
2439.
2440.
2441.
2442.
2443.
2444.
2445.
2446.
2447.
2448.
2449.
2450.
2451.
2452.
2453.
2454.
2455.
2456.
2457.
2458.
2459.
2460.
2461.
2462.
2463.
2464.
2465.
2466.
2467.
2468.
2469.
2470.
2471.
2472.
2473.
2474.
2475.
2476.
2477.
2478.
2479.
2480.
2481.
2482.
2483.
2484.
2485.
2486.
2487.
2488.
2489.
2490.
2491.
2492.
2493.
2494.
2495.
2496.
2497.
2498.
2499.
2500.
2501.
2502.
2503.
2504.
2505.
2506.
2507.
2508.
2509.
2510.
2511.
2512.
2513.
2514.
2515.
2516.
2517.
2518.
2519.
2520.
2521.
2522.
2523.
2524.
2525.
2526.
2527.
2528.
2529.
2530.
2531.
2532.
2533.
2534.
2535.
2536.
2537.
2538.
2539.
2540.
2541.
2542.
2543.
2544.
2545.
2546.
2547.
2548.
2549.
2550.
2551.
2552.
2553.
2554.
2555.
2556.
2557.
2558.
2559.
2560.
2561.
2562.
2563.
2564.
2565.
2566.
2567.
2568.
2569.
2570.
2571.
2572.
2573.
2574.
2575.
2576.
2577.
2578.
2579.
2580.
2581.
2582.
2583.
2584.
2585.
2586.
2587.
2588.
2589.
2590.
2591.
2592.
2593.
2594.
2595.
2596.
2597.
2598.
2599.
2600.
2601.
2602.
2603.
2604.
2605.
2606.
2607.
2608.
2609.
2610.
2611.
2612.
2613.
2614.
2615.
2616.
2617.
2618.
2619.
2620.
2621.
2622.
2623.
2624.
2625.
2626.
2627.
2628.
2629.
2630.
2631.
2632.
2633.
2634.
2635.
2636.
2637.
2638.
2639.
2640.
2641.
2642.
2643.
2644.
2645.
2646.
2647.
2648.
2649.
2650.
2651.
2652.
2653.
2654.
2655.
2656.
2657.
2658.
2659.
2660.
2661.
2662.
2663.
2664.
2665.
2666.
2667.
2668.
2669.
2670.
2671.
2672.
2673.
2674.
2675.
2676.
2677.
2678.
2679.
2680.
2681.
2682.
2683.
2684.
2685.
2686.
2687.
2688.
2689.
2690.
2691.
2692.
2693.
2694.
2695.
2696.
2697.
2698.
2699.
2700.
2701.
2702.
2703.
2704.
2705.
2706.
2707.
2708.
2709.
2710.
2711.
2712.
2713.
2714.
2715.
2716.
2717.
2718.
2719.
2720.
2721.
2722.
2723.
2724.
2725.
2726.
2727.
2728.
2729.
2730.
2731.
2732.
2733.
2734.
2735.
2736.
2737.
2738.
2739.
2740.
2741.
2742.
2743.
2744.
2745.
2746.
2747.
2748.
2749.
2750.
2751.
2752.
2753.
2754.
2755.
2756.
2757.
2758.
2759.
2760.
2761.
2762.
2763.
2764.
2765.
2766.
2767.
2768.
2769.
2770.
2771.
2772.
2773.
2774.
2775.
2776.
2777.
2778.
2779.
2780.
2781.
2782.
2783.
2784.
2785.
2786.
2787.
2788.
2789.
2790.
2791.
2792.
2793.
2794.
2795.
2796.
2797.
2798.
2799.
2800.
2801.
2802.
2803.
2804.
2805.
2806.
2807.
2808.
2809.
2810.
2811.
2812.
2813.
2814.
2815.
2816.
2817.
2818.
2819.
2820.
2821.
2822.
2823.
2824.
2825.
2826.
2827.
2828.
2829.
2830.
2831.
2832.
2833.
2834.
2835.
2836.
2837.
2838.
2839.
2840.
2841.
2842.
2843.
2844.
2845.
2846.
2847.
2848.
2849.
2850.
2851.
2852.
2853.
2854.
2855.
2856.
2857.
2858.
2859.
2860.
2861.
2862.
2863.
2864.
2865.
2866.
2867.
2868.
2869.
2870.
2871.
2872.
2873.
2874.
2875.
2876.
2877.
2878.
2879.
2880.
2881.
2882.
2883.
2884.
2885.
2886.
2887.
2888.
2889.
2890.
2891.
2892.
2893.
2894.
2895.
2896.
2897.
2898.
2899.
2900.
2901.
2902.
2903.
2904.
2905.
2906.
2907.
2908.
2909.
2910.
2911.
2912.
2913.
2914.
2915.
2916.
2917.
2918.
2919.
2920.
2921.
2922.
2923.
2924.
2925.
2926.
2927.
2928.
2929.
2930.
2931.
2932.
2933.
2934.
2935.
2936.
2937.
2938.
2939.
2940.
2941.
2942.
2943.
2944.
2945.
2946.
2947.
2948.
2949.
2950.
2951.
2952.
2953.
2954.
2955.
2956.
2957.
2958.
2959.
2960.
2961.
2962.
2963.
2964.
2965.
2966.
2967.
2968.
2969.
2970.
2971.
2972.
2973.
2974.
2975.
2976.
2977.
2978.
2979.
2980.
2981.
2982.
2983.
2984.
2985.
2986.
2987.
2988.
2989.
2990.
2991.
2992.
2993.
2994.
2995.
2996.
2997.
2998.
2999.
3000.
3001.
3002.
3003.
3004.
3005.
3006.
3007.
3008.
3009.
3010.
3011.
3012.
3013.
3014.
3015.
3016.
3017.
3018.
3019.
3020.
3021.
3022.
3023.
3024.
3025.
3026.
3027.
3028.
3029.
3030.
3031.
3032.
3033.
3034.
3035.
3036.
3037.
3038.
3039.
3040.
3041.
3042.
3043.
3044.
3045.
3046.
3047.
3048.
3049.
3050.
3051.
3052.
3053.
3054.
3055.
3056.
3057.
3058.
3059.
3060.
3061.
3062.
3063.
3064.
3065.
3066.
3067.
3068.
3069.
3070.
3071.
3072.
3073.
3074.
3075.
3076.
3077.
3078.
3079.
3080.
3081.
3082.
3083.
3084.
3085.
3086.
3087.
3088.
3089.
3090.
3091.
3092.
3093.
3094.
3095.
3096.
3097.
3098.
3099.
3100.
3101.
3102.
3103.
3104.
3105.
3106.
3107.
3108.
3109.
3110.
3111.
3112.
3113.
3114.
3115.
3116.
3117.
3118.
3119.
3120.
3121.
3122.
3123.
3124.
3125.
3126.
3127.
3128.
3129.
3130.
3131.
3132.
3133.
3134.
3135.
3136.
3137.
3138.
3139.
3140.
3141.
3142.
3143.
3144.
3145.
3146.
3147.
3148.
3149.
3150.
3151.
3152.
3153.
3154.
3155.
3156.
3157.
3158.
3159.
3160.
3161.
3162.
3163.
3164.
3165.
3166.
3167.
3168.
3169.
3170.
3171.
3172.
3173.
3174.
3175.
3176.
3177.
3178.
3179.
3180.
3181.
3182.
3183.
3184.
3185.
3186.
3187.
3188.
3189.
3190.
3191.
3192.
3193.
3194.
3195.
3196.
3197.
3198.
3199.
3200.
3201.
3202.
3203.
3204.
3205.
3206.
3207.
3208.
3209.
3210.
3211.
3212.
3213.
3214.
3215.
3216.
3217.
3218.
3219.
3220.
3221.
3222.
3223.
3224.
3225.
3226.
3227.
3228.
3229.
3230.
3231.
3232.
3233.
3234.
3235.
3236.
3237.
3238.
3239.
3240.
3241.
3242.
3243.
3244.
3245.
3246.
3247.
3248.
3249.
3250.
3251.
3252.
3253.
3254.
3255.
3256.
3257.
3258.
3259.
3260.
3261.
3262.
3263.
3264.
3265.
3266.
3267.
3268.
3269.
3270.
3271.
3272.
3273.
3274.
3275.
3276.
3277.
3278.
3279.
3280.
3281.
3282.
3283.
3284.
3285.
3286.
3287.
3288.
3289.
3290.
3291.
3292.
3293.
3294.
3295.
3296.
3297.
3298.
3299.
3300.
3301.
3302.
3303.
3304.
3305.
3306.
3307.
3308.
3309.
3310.
3311.
3312.
3313.
3314.
3315.
3316.
3317.
3318.
3319.
3320.
3321.
3322.
3323.
3324.
3325.
3326.
3327.
3328.
3329.
3330.
3331.
3332.
3333.
3334.
3335.
3336.
3337.
3338.
3339.
3340.
3341.
3342.
3343.
3344.
3345.
3346.
3347.
3348.
3349.
3350.
3351.
3352.
3353.
3354.
3355.
3356.
3357.
3358.
3359.
3360.
3361.
3362.
3363.
3364.
3365.
3366.
3367.
3368.
3369.
3370.
3371.
3372.
3373.
3374.
3375.
3376.
3377.
3378.
3379.
3380.
3381.
3382.
3383.
3384.
3385.
3386.
3387.
3388.
3389.
3390.
3391.
3392.
3393.
3394.
3395.
3396.
3397.
3398.
3399.
3400.
3401.
3402.
3403.
3404.
3405.
3406.
3407.
3408.
3409.
3410.
3411.
3412.
3413.
3414.
3415.
3416.
3417.
3418.
3419.
3420.
3421.
3422.
3423.
3424.
3425.
3426.
3427.
3428.
3429.
3430.
3431.
3432.
3433.
3434.
3435.
3436.
3437.
3438.
3439.
3440.
3441.
3442.
3443.
3444.
3445.
3446.
3447.
3448.
3449.
3450.
3451.
3452.
3453.
3454.
3455.
3456.
3457.
3458.
3459.
3460.
3461.
3462.
3463.
3464.
3465.
3466.
3467.
3468.
3469.
3470.
3471.
3472.
3473.
3474.
3475.
3476.
3477.
3478.
3479.
3480.
3481.
3482.
3483.
3484.
3485.
3486.
3487.
3488.
3489.
3490.
3491.
3492.
3493.
3494.
3495.
3496.
3497.
3498.
3499.
3500.
3501.
3502.
3503.
3504.
3505.
3506.
3507.
3508.
3509.
3510.
3511.
3512.
3513.
3514.
3515.
3516.
3517.
3518.
3519.
3520.
3521.
3522.
3523.
3524.
3525.
3526.
3527.
3528.
3529.
3530.
3531.
3532.
3533.
3534.
3535.
3536.
3537.
3538.
3539.
3540.
3541.
3542.
3543.
3544.
3545.
3546.
3547.
3548.
3549.
3550.
3551.
3552.
3553.
3554.
3555.
3556.
3557.
3558.
3559.
3560.
3561.
3562.
3563.
3564.
3565.
3566.
3567.
3568.
3569.
3570.
3571.
3572.
3573.
3574.
3575.
3576.
3577.
3578.
3579.
3580.
3581.
3582.
3583.
3584.
3585.
3586.
3587.
3588.
3589.
3590.
3591.
3592.
3593.
3594.
3595.
3596.
3597.
3598.
3599.
3600.
3601.
3602.
3603.
3604.
3605.
3606.
3607.
3608.
3609.
3610.
3611.
3612.
3613.
3614.
3615.
3616.
3617.
3618.
3619.
3620.
3621.
3622.
3623.
3624.
3625.
3626.
3627.
3628.
3629.
3630.
3631.
3632.
3633.
3634.
3635.
3636.
3637.
3638.
3639.
3640.
3641.
3642.
3643.
3644.
3645.
3646.
3647.
3648.
3649.
3650.
3651.
3652.
3653.
3654.
3655.
3656.
3657.
3658.
3659.
3660.
3661.
3662.
3663.
3664.
3665.
3666.
3667.
3668.
3669.
3670.
3671.
3672.
3673.
3674.
3675.
3676.
3677.
3678.
3679.
3680.
3681.
3682.
3683.
3684.
3685.
3686.
3687.
3688.
3689.
3690.
3691.
3692.
3693.
3694.
3695.
3696.
3697.
3698.
3699.
3700.
3701.
3702.
3703.
3704.
3705.
3706.
3707.
3708.
3709.
3710.
3711.
3712.
3713.
3714.
3715.
3716.
3717.
3718.
3719.
3720.
3721.
3722.
3723.
3724.
3725.
3726.
3727.
3728.
3729.
3730.
3731.
3732.
3733.
3734.
3735.
3736.
3737.
3738.
3739.
3740.
3741.
3742.
3743.
3744.
3745.
3746.
3747.
3748.
3749.
3750.
3751.
3752.
3753.
3754.
3755.
3756.
3757.
3758.
3759.
3760.
3761.
3762.
3763.
3764.
3765.
3766.
3767.
3768.
3769.
3770.
3771.
3772.
3773.
3774.
3775.
3776.
3777.
3778.
3779.
3780.
3781.
3782.
3783.
3784.
3785.
3786.
3787.
3788.
3789.
3790.
3791.
3792.
3793.
3794.
3795.
3796.
3797.
3798.
3799.
3800.
3801.
3802.
3803.
3804.
3805.
3806.
3807.
3808.
3809.
3810.
3811.
3812.
3813.
3814.
3815.
3816.
3817.
3818.
3819.
3820.
3821.
3822.
3823.
3824.
3825.
3826.
3827.
3828.
3829.
3830.
3831.
3832.
3833.
3834.
3835.
3836.
3837.
3838.
3839.
3840.
3841.
3842.
3843.
3844.
3845.
3846.
3847.
3848.
3849.
3850.
3851.
3852.
3853.
3854.
3855.
3856.
3857.
3858.
3859.
3860.
3861.
3862.
3863.
3864.
3865.
3866.
3867.
3868.
3869.
3870.
3871.
3872.
3873.
3874.
3875.
3876.
3877.
3878.
3879.
3880.
3881.
3882.
3883.
3884.
3885.
3886.
3887.
3888.
3889.
3890.
3891.
3892.
3893.
3894.
3895.
3896.
3897.
3898.
3899.
3900.
3901.
3902.
3903.
3904.
3905.
3906.
3907.
3908.
3909.
3910.
3911.
3912.
3913.
3914.
3915.
3916.
3917.
3918.
3919.
3920.
3921.
3922.
3923.
3924.
3925.
3926.
3927.
3928.
3929.
3930.
3931.
3932.
3933.
3934.
3935.
3936.
3937.
3938.
3939.
3940.
3941.
3942.
3943.
3944.
3945.
3946.
3947.
3948.
3949.
3950.
3951.
3952.
3953.
3954.
3955.
3956.
3957.
3958.
3959.
3960.
3961.
3962.
3963.
3964.
3965.
3966.
3967.
3968.
3969.
3970.
3971.
3972.
3973.
3974.
3975.
3976.
3977.
3978.
3979.
3980.
3981.
3982.
3983.
3984.
3985.
3986.
3987.
3988.
3989.
3990.
3991.
3992.
3993.
3994.
3995.
3996.
3997.
3998.
3999.
4000.
4001.
4002.
4003.
4004.
4005.
4006.
4007.
4008.
4009.
4010.
4011.
4012.
4013.
4014.
4015.
4016.
4017.
4018.
4019.
4020.
4021.
4022.
4023.
4024.
4025.
4026.
4027.
4028.
4029.
4030.
4031.
4032.
4033.
4034.
4035.
4036.
4037.
4038.
4039.
4040.
4041.
4042.
4043.
4044.
4045.
4046.
4047.
4048.
4049.
4050.
4051.
4052.
4053.
4054.
4055.
4056.
4057.
4058.
4059.
4060.
4061.
4062.
4063.
4064.
4065.
4066.
4067.
4068.
4069.
4070.
4071.
4072.
4073.
4074.
4075.
4076.
4077.
4078.
4079.
4080.
4081.
4082.
4083.
4084.
4085.
4086.
4087.
4088.
4089.
4090.
4091.
4092.
4093.
4094.
4095.
4096.
4097.
4098.
4099.
4100.
4101.
4102.
4103.
4104.
4105.
4106.
4107.
4108.
4109.
4110.
4111.
4112.
4113.
4114.
4115.
4116.
4117.
4118.
4119.
4120.
4121.
4122.
4123.
4124.
4125.
4126.
4127.
4128.
4129.
4130.
4131.
4132.
4133.
4134.
4135.
4136.
4137.
4138.
4139.
4140.
4141.
4142.
4143.
4144.
4145.
4146.
4147.
4148.
4149.
4150.
4151.
4152.
4153.
4154.
4155.
4156.
4157.
4158.
4159.
4160.
4161.
4162.
4163.
4164.
4165.
4166.
4167.
4168.
4169.
4170.
4171.
4172.
4173.
4174.
4175.
4176.
4177.
4178.
4179.
4180.
4181.
4182.
4183.
4184.
4185.
4186.
4187.
4188.
4189.
4190.
4191.
4192.
4193.
4194.
4195.
4196.
4197.
4198.
4199.
4200.
4201.
4202.
4203.
4204.
4205.
4206.
4207.
4208.
4209.
4210.
4211.
4212.
4213.
4214.
4215.
4216.
4217.
4218.
4219.
4220.
4221.
4222.
4223.
4224.
4225.
4226.
4227.
4228.
4229.
4230.
4231.
4232.
4233.
4234.
4235.
4236.
4237.
4238.
4239.
4240.
4241.
4242.
4243.
4244.
4245.
4246.
4247.
4248.
4249.
4250.
4251.
4252.
4253.
4254.
4255.
4256.
4257.
S3 ALSysIO; \??\C:\Users\Kuba\AppData\Local\Temp\ALSysIO64.sys [X] <==== UWAGA
S3 dbx; system32\DRIVERS\dbx.sys [X]
S2 npf; \??\C:\Windows\system32\drivers\npf.sys [X]
Task: {2AFABEE4-D6C3-4595-90DA-F5E473637C15} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe 
Task: {46F5FB42-F153-4BD5-860F-A68ECF8D87A5} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe 
Task: {5E9338B1-B6BF-4A96-9EEE-F4BA991429BD} - System32\Tasks\{1D6AFC8C-4A62-40A0-963B-5182824EEF7B} => pcalua.exe -a "D:\Pro Evolution Soccer 6\PES6.exe" -d "D:\Pro Evolution Soccer 6"
Task: {7BE118EE-BC47-498C-9070-15DCEB20CD50} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe 
Task: {7C5580D4-CFCA-4C9C-836F-AF57481B09DD} - System32\Tasks\SentryBayUpdateTaskMachineUA => C:\Program Files (x86)\SentryBay\Update\SentryBayUpdate.exe [2016-05-09] (AOL) <==== UWAGA
Task: {A5B5EDF4-BBB6-42C7-8734-56EDF10FE2F7} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe 
Task: {ACF186DB-A279-4A4C-AB86-C2CB5548F0D8} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe 
Task: {B6AC7327-63BA-4FE4-996A-8C1D86681887} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe 
Task: {BB693CD7-5BDB-46FF-B876-2CA28AB541CD} - System32\Tasks\SentryBayUpdateTaskMachineCore => C:\Program Files (x86)\SentryBay\Update\SentryBayUpdate.exe [2016-05-09] (AOL) <==== UWAGA
Task: {F167B5F4-8BF3-4821-9BF1-6FF1DC89C338} - System32\Tasks\{861D1F1B-1EFE-4CD9-8C40-B2F06885C597} => pcalua.exe -a "D:\Pro Evolution Soccer 6\setup.exe" -d "D:\Pro Evolution Soccer 6"
Task: C:\Windows\Tasks\SentryBayUpdateTaskMachineCore.job => C:\Program Files (x86)\SentryBay\Update\SentryBayUpdate.exe <==== UWAGA
Task: C:\Windows\Tasks\SentryBayUpdateTaskMachineUA.job => C:\Program Files (x86)\SentryBay\Update\SentryBayUpdate.exe <==== UWAGA
AlternateDataStreams: C:\Windows\explorer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\hh.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\notepad.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\regedit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\splwow64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\twain_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\winhlp32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\write.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\accessibilitycpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\acledit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aclui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\acppage.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\acproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ActionCenter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ActionCenterCPL.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\activeds.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\adhapi(598).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\adhapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\adhsvc(599).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\adprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\adsldp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\adsldpc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\adsnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\advpack.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aecache.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aeinv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aelupsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aepdu.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aepic(600).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AepRoam.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aitagent.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aitstatic.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\alg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AltTab.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\amstream.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\apds.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\apphelp(601).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Apphlpdm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\appidapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\appidcertstorecheck.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\appidpolicyconverter.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\appidsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppReadiness.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\apprepapi.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\apprepsync.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\appsruprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\appwiz.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppxAllUserStore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppxApplicabilityEngine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppXDeploymentClient(603).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppXDeploymentClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppXDeploymentExtensions.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppXDeploymentServer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppxPackaging.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppxSip.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppxStreamingDataSourcePS.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AppxSysprep.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ARP.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\at.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AtBroker.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\athuwbx.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atlthunk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\attrib.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\audiodg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AudioEndpointBuilder.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AudioEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AUDIOKSE.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\audiosrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\auditcse.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\auditpol.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AuthBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AuthExt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\authfwcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AuthFWGP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AuthFWSnapin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AuthFWWizFwk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AuthHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AuthHostProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\authz(604).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\autoconv.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\autoplay.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AutoWorkplaceN.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\avicap32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\avifil32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\avrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AxInstSv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AxInstUI.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\azroles.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\azroleui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AzSqlExt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\backgroundTaskHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BackgroundTransferHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\basecsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\basesrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\batmeter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bcd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bcdboot.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bcdedit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bcdprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bcdsrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BCP47Langs(605).dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\BCP47Langs.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\bcryptprimitives(607).dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\bcryptprimitives.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\bdaplgin.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BdeHdCfgLib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bderepair.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bdesvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bdeui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BdeUISrv.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bdeunlock.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BFE(608).DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bidispl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BioCredProv.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\bisrv(609).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bisrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BitLockerDeviceEncryption.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BitLockerWizardElev.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bitsadmin.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bitsigd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bitsperf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bitsprx2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bitsprx3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bitsprx4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bitsprx5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bitsprx6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bitsprx7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\biwinrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\blackbox.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\blb_ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BluetoothApis.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bootcfg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bootim.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BootMenuUX.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bootsect.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bootux.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\brdgcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bridgeunattend.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BrokerLib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\browcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\browser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\browseui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bthci.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BthHFSrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BthMtpContextHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bthpanapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BthpanContextHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bthprops.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BthRadioMedia.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\bthserv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BthSQM.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bthudtask.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\btpanui.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Bubbles.scr:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BulkOperationHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\BWContextHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ByteCodeGenerator.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cabinet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cabview.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cacls.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\calc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CallButtons.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CallButtons.ProxyStub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CameraSettingsUIHost.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\capiprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\capisp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\catsrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\catsrvps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\catsrvut.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cca.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cdd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cdosys.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\certca.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\certCredProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\certenc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CertEnroll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CertEnrollCtrl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CertEnrollUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\certmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CertPolEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\certreq.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\certutil.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\cewmdm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cfgbkend.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cfgmgr32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cfmifs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cfmifsproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\charmap.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\chartv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\chcp.com:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CheckNetIsolation.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\chkdsk.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\chkntfs.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\chkwudrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\choice.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CHxReadingStringIME.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ci.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cic.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cipher.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CIRCoInst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\clb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\clbcatq.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cleanmgr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\clfsw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cliconfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cliconfg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\clip.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CloudNotifications.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CloudStorageWizard.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\clusapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmcfg32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmd.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmdext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmdial32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmdkey.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmdl32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmifw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmlua.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmmon32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmpbk32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmstp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmstplua.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cmutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cngcredui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cngprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cnvfat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cofire.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cofiredm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\colbact.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\COLORCNV.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\colorcpl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\colorui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\combase(610).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\comcat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\comctl32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\comdlg32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\comp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\compact.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CompMgmtLauncher.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CompPkgSup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\compstui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ComputerDefaults.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\comrepl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\comsnap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\comsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\comuid.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ConfigureExpandedStorage.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\conhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\connect.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ConnectedAccountState.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ConsentUX.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\console.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\control.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\convert.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\correngine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CPFilters.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CredentialMigrationHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CredentialUIBroker.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\credssp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\credui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\credwiz.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptbase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptcatsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptdlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptnet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CryptoWinRT.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\crypttpmeksvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cryptuiwizard.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\cryptxml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cscapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cscdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cscript.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CSystemEventsBrokerClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ctfmon.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cttune.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cttunesvr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\C_G18030.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\C_IS2022.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\C_ISCII.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d2d1(613).dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\d3d10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3d10core.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3d10warp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3d10_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3d10_1core.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3d8thk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3d9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_47.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dcsx_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dcsx_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx11_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx11_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_25.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_26.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\d3dx9_27.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_28.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_29.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_30.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_31.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dabapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DAConn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dafBth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dafupnp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dafWCN.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dafWfdProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DAFWSD.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DAMM.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DaOtpCredentialProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\das.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dasHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dataclen.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\datusage.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\davclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\davhlpr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dbgeng(614).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dbghelp(615).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dbnetlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dbnmpntw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dccw.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dciman32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dcomcnfg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dcomp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DDACLSys.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ddodiag.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DDOIProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DDORes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ddraw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ddrawex.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DefaultDeviceManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DefaultPrinterProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Defrag.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\defragproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\defragsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\delegatorprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\desk.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\deskadp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\deskmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DevDispItemProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\devenum.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\deviceaccess(616).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\deviceaccess.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\deviceassociation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DeviceCenter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DeviceDisplayStatusManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DeviceDriverRetrievalClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DeviceEject.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DeviceElementSource.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DeviceMetadataRetrievalClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DevicePairing.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DevicePairingFolder.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\DevicePairingProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DevicePairingWizard.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DeviceProperties.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\deviceregistration.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DeviceSetupManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DeviceSetupManagerAPI.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\DeviceSetupStatusProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DeviceUxRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\devinv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\devmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\devobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DevPropMgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\devrtl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dfdts.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DFDWiz.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dfp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DfpCommon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dfrgui.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dfscli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DfsShlEx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dhcpcmonitor.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dhcpcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dhcpcore6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dhcpcsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dhcpcsvc6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DHCPQEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dhcpsapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DiagCpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\diagperf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dialer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\difxapi.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\dimsjob.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dimsroam.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dinput.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dinput8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\discan.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\diskcomp.com:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\diskcopy.com:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\diskcopy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\diskpart.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\diskperf.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\diskraid.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dispci.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dispdiag.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dispex.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Display.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DisplaySwitch.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\djoin.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dllhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dllhst3g.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dlnashext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dmdlgs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dmdskmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dmintf.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\dmloader.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dmocx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DMRServer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dmsynth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dmusic.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dmutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dmvdsitf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dmview.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dnscacheugc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dnsext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dnshc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\docprop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\doskey.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dot3api.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dot3cfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Dot3Conn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dot3dlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dot3gpclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dot3gpui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dot3hc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dot3mm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dot3msm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dot3svc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dot3ui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dpapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dpapimig.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dpapiprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dpapisrv(617).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DpiScaling.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\driverquery.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drmmgrtn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drmv2clt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drt.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\drtprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drttransport.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drvcfg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drvinst.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\drvstore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dsauth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DscCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DscCoreConfProv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dsdmo.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dskquota.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dskquoui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DsmUserTask.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dsound.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dsparse.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dsprop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dsquery.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dsrole.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dssec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dssenh(618).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Dsui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dsuiext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dswave.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dtsh.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\dui70.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\duser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dvdplay.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dvdupgrd.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dwm.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dwmapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dwmcore(619).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dwmredir.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DWWIN.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxdiag.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxdiagn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxgi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxgwdi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxmasf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DXP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxpps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Dxpserver.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DxpTaskSync.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxtmsft.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxva2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Eap3Host.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eapp3hst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eappcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eappgnui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eapphost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eappprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eapprovp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EAPQEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eapsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\easconsent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EaseOfAccessDialog.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\easinvoker.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\easinvoker.proxystub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\easwrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\efsadu.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\efscore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\efslsaext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\efssvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\efsui.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\efsutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\efswrt.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\EhStorAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EhStorAuthn.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EhStorPwdMgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EhStorShell.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\els.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ELSCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\elshyph.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\elslad.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\elsTrans.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\encapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EncDec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EncDump.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\energy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\energyprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\energytask.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eqossnap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\es.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\esentprf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\esentutl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eudcedit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EventAggregation(620).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EventAggregation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eventcls.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eventcreate.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eventvwr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\expand.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ExplorerFrame.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\extrac32.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Faultrep.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fdBth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fdBthProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FdDevQuery.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fdeploy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fdPHost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fdPnp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fdprint.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fdProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FDResPub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fdSSDP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fdWCN.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fdWNet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fdWSD.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\feclient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fhautoplay.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fhcat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fhcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fhcleanup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fhcpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fhengine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fhevents.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fhlisten.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fhmanagew.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fhshl.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\fhsrchapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fhsrchph.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fhsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fhsvcctl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fhtask.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FileAppxStreamingDataSource.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\filemgmt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\find.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\findnetprinters.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\findstr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\finger.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FintekIcon1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Firewall.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FirewallAPI(621).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FirewallControlPanel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fixmapi.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fltLib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fltMC.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fmapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fmifs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fms.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Fondue.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fontext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fontsub.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\fontview.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\forfiles.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\format.com:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fphc.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\framedyn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\framedynos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\frprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fsavailux.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fsutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fsutilext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fthsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ftp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fundisc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fveapi(622).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fveapibase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fvecerts.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fvecpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fvenotify.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fveskybackup.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\fveui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fvewiz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fwcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FWPUCLNT(623).DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FwRemoteSvr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FXSAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FXSCOM.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FXSCOMEX.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FXSCOMPOSE.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FXSCOVER.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FXSMON.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FXSROUTE.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FXSST.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FXSSVC.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FXST30.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FXSTIFF.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FXSUNATD.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FXSUTILITY.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\g711codc.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\gacinstall.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\gameux.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\gcdef.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\generaltel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\GeofenceMonitorService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\getmac.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\getuname.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\glmf32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\globinputhost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\glu32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\gpapi.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\gpedit.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\gpprnext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\gpresult.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\gpsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\gptext.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\gpupdate.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Groupinghc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\grpconv.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hal.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hbaapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hcproviders.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hdwwiz.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hdwwiz.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\help.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\HelpPaneProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hgcpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hgprint.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hhctrl.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hhsetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hid.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hidphone.tsp:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hidserv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hlink.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hnetcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hnetmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\HOSTNAME.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hotplug.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hotspotauth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\httpapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\httpprxm(625).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\httpprxp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\htui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hwrcomp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hwrreg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ias.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iasacct.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\iasads.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iasdatastore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iashlpr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\IasMigPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iasnap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iaspolcy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iasrad.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iasrecst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iassam.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iassdo.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iassvcs.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\icacls.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\icfupgd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\icmui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\IconCodecService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\icsigd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\icsunattend.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\icsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\IdCtrls.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\IdListen.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\idndl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\IDStore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\IEAdvpack.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieetwcollectorres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieetwproxystub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iernonce.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iesetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iesysprep.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieUnatt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iexpress.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ifmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ifsutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ifsutilx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\igdDiag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\IKEEXT.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\imaadp32.acm:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\imagehlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\imapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\imapi2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\imapi2fs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\imgutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\imm32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\immersivetpmvscmgrsvr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\inetmib1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\inetpp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\inetppui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\InfDefaultInstall.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\InkEd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\InputSwitch.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\inseng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\intl.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ipconfig.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iphlpsvc(628).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ipnathlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iprtprio.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iprtrmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ipsecsnp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\IPSECSVC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ipsmsnap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\irclass.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\irftp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\irmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\irprops.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iscsicli.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iscsicpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iscsicpl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iscsied.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iscsium.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iscsiwmiv2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\isoburn.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\itircl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\itss.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iuilp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iyuv_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\JavaScriptCollectionAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\jnwmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\joy.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\jscript9diag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\jsproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KBDBASH.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KBDRU.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KBDRU1.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KBDRUM.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KBDTAT.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KBDTT102.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KBDYAK.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KdsCli.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\kdusb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kd_02_8086.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\keepaliveprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kerberos(629).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kernel.appcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kernel32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KernelBase(630).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kernelceip.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\keyiso.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\keymgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\klist.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kmddsp.tsp:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KMSVC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\korwbrkr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ksetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ksproxy.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kstvtune.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ksuser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Kswdmcap.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ksxbar.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ktmutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ktmw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\l2gpstore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\l2nacp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\L2SecHC.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\l3codeca.acm:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\l3codecp.acm:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\label.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LangCleanupSysprepAction.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LAPRXY.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LaunchTM.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LdaCx2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\licmgr10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\linkinfo.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ListSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\livessp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LldpNotify.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lltdapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lltdsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lmhsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\loadperf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\localsec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\localui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LocationApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LocationNotifications.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Locator.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LockScreenContent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LockScreenContentHost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LockScreenContentServer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lodctr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\logagent.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\loghours.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LogiLDA.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\logman.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\logoncli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LogonUI.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lpk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lpkinstall.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lpksetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lpksetupproxyserv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lpremove.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lsass.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\lsm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lsmproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\luainstall.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Magnification.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Magnify.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\main.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MaintenanceUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\makecab.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\manage-bde.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mapistub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MbaeApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MbaeApiPublic.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MbaeParserTask.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MbaeXmlParser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mblctr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mbsmsapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mbussdapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mcbuilder.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mciavi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mcicda.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mciqtz32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mciseq.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mciwave.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mcupdate_GenuineIntel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\McxDriv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MDEServer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MDMAgent.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mdminst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mdmregistration.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MdRes.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MdSched.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MemoryDiagnostic.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mf3216.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfAACEnc.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\mfasfsrcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MFCaptureEngine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfcsubs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfds.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfdvdec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfh264enc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MFMediaEngine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfmpeg2srcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfnetcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfnetsrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MFPlay.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfpmp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfreadwrite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfsrcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mftranscode.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfvdsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MFWMAAEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mgmtapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mibincodec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Microsoft.Management.Infrastructure.Native.Unmanaged.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MicrosoftAccountTokenProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\midimap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\migflt.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\miguiresource.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mimefilt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mimofcodec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MirrorDrvCompat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\miutils.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mlang.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\mmc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mmcbase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mmci.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mmcico.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mmcndmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mmcshext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mmcss.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MMDevAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mmsys.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mobsync.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mode.com:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\modemui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\montr_ci.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\more.com:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mountvol.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP3DMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP43DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP4SDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Mpeg2Data.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mpg2splt.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MPG4DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mpnotify.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mpr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mprapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mprddm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mprdim.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mprext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mprmsg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MPSSVC(632).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MRINFO.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MrmCoreR(633).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MrmIndexer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msaatext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSAC3ENC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msacm32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msacm32.drv:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msadp32.acm:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msasn1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSAudDecMFT.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msaudite.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\msauserext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mscandui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mscat32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msched.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSchedExe.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msconfig.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msctfime.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MsCtfMonitor.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msctfp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msctfui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msctfuimanager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msdadiag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msdart.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\msdelta.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msdmo.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msdri.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msdrm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msdt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msdtc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msdtckrm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msdtclog.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msdtctm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msdtcuiu.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSDvbNP.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msdxm.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msfeedsbs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msfeedssync.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msftedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msg711.acm:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msgsm32.acm:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mshta.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MshtmlDac.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MsiCofire.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msidcrl40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msident.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msidle.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msieftp.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\msihnd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msiltcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msimg32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msimtf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msinfo32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msisip.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msiwer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mskeyprotcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mskeyprotect.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\msls31.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msmpeg2adec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSMPEG2ENC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msmpeg2vdec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msnetobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSNP.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msoeacct.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msoert2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mspaint.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mspatcha.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mspatchc.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\msports.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\msra.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msrahc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msrating.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msrdc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MsRdpWebAccess.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msrle32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msscntrs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msscp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mssha.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msshooks.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mssign32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mssip32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mssitlb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MsSpellCheckingFacility.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MsSpellCheckingHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mssph.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mssphtb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mssprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mssrch.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mssvp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mstask.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msTextPrediction.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mstsc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mstscax.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msutb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msvcirt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msvcp110.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msvcp120_clr0400.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msvcp60.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msvcr110.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msvcr120_clr0400(634).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msvcr120_clr0400.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msvcrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msvfw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msvidc32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSVideoDSP.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\msvproc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSWB7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSWB70011.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSWB7001E.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSWB70404.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSWB70804.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mswmdm.dll:$CmdTcID [32]
AlternateDataStreams: C:\Windows\system32\mswsock.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msxml6(635).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msyuv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mtstocom.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mtxclu.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mtxdm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mtxex.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mtxoci.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\muifontsetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MUILanguageCleanup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MuiUnattend.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MultiDigiMon.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mycomput.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mydocs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Mystify.scr:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\napdsnap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NapiNSP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\napipsec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NAPMONTR.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NAPSTAT.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Narrator.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NaturalLanguage6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nbtstat.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NcaApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NcaSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ncbservice.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NcdAutoSetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NcdProp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nci.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ncobjapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ncpa.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ncrypt(637).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ncrypt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ncryptprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ncsi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ncuprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ndadmin.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nddeapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ndfapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ndfetw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ndfhcdiscovery.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\ndiscapCfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ndishc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NdisImPlatform.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ndproxystub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nduprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\negoexts.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\net.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\net1.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netbios.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netbtugc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netcenter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netcfg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netcfgx(639).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netcorehc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netdiagfx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NetEvtFwdr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netid.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netiohlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netiougc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netjoin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netman.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netplwiz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Netplwiz.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netprofm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netprofmsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netprovisionsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NetSetupApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netsh.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netshell.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NETSTAT.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nettrace.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\netutils.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NetVscCoinstall.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\networkexplorer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\networkitemfactory.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NetworkStatus.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\newdev.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\newdev.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ninput.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NL7Data0011.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NL7Data001E.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NL7Data0404.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NL7Data0804.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nlaapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nlahc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nlasvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nlhtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nlmgp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nlmproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nlmsprep.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0000.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0002.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0003.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0007.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0009.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData000a.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData000c.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\NlsData000d.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData000f.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0010.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0018.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData001a.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData001b.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData001d.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0020.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0021.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0022.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0024.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0026.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0027.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData002a.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0039.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData003e.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0045.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0046.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0047.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0049.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData004a.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData004b.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData004c.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData004e.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0414.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0416.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0816.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData081a.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsData0c1a.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Nlsdl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\NlsLexicons0009.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nltest.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\normaliz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\notepad.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\npmproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nrpsrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nshhttp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nshipsec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nshwfp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nsi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nsisvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nslookup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntasn1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntdsapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntlanman.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntlanui2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntmarta.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntprint.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntprint.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntvdm64.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\nvdispco6436822.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\nvdispgenco6436822.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\nvhdagenco64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\objsel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\occache.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ocsetapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\odbc32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\odbcad32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\odbcbcp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\odbcconf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\odbcconf.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\odbccp32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\odbccr32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\odbccu32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\odbctrac.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OEMLicense.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\offfilt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ogldrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\oleacc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\oleacchooks.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\oledlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\oleprn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OnDemandConnRouteHelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\onex.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\onexui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OobeFldr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OpcServices.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\openfiles.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\opengl32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OpenWith.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OptionalFeatures.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\osbaseln.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\osk.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\OskSupport.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\osuninst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\P2P.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\P2PGraph.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\p2pnetsh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\p2psvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\packager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PackageStateRoaming.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\panmap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PasswordOnWakeSettingFlyout.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PATHPING.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pautoenr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcacli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcadm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcalua.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcasvc(643).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcaui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcaui.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PCPKsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PCPTpm12.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcsvDevice.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcwrun.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pcwutl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pdhui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\perfctrs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\perfdisk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\perfmon.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\perfnet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\perfos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\perfproc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\perftrack.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\perfts.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PhotoMetadataHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PhotoScreensaver.scr:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\photowiz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PickerHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pid.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PING.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PkgMgr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pku2u.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pla.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\plasrv.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\playlistfolder.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PlaySndSrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PlayToManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PlayToStatusProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ploptin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pngfilt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pnpclean.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pnppolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pnpts.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pnpui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PnPUnattend.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PnPutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PNPXAssoc.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\PNPXAssocPrx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pnrpauto.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Pnrphc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pnrpnsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pnrpsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\polstore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\poqexec.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PortableDeviceApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PortableDeviceClassExtension.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PortableDeviceConnectApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PortableDeviceStatus.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PortableDeviceSyncProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PortableDeviceTypes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PortableDeviceWiaCompat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PortableDeviceWMDRM.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pots.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\powercfg.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\powercfg.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\powercpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\powrprof.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\PresentationNative_v0300.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\prevhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\print.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PrintDialogHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PrintDialogs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\printfilterpipelineprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\printfilterpipelinesvc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PrintIsolationHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PrintIsolationProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\printui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\printui.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\prncache.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\prnfldr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\prnntfy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\prntvpt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\procinst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\profapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\profext.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\profprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\profsvc(647).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\profsvcext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\propsys.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\proquota.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\provcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\provsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\provthrd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ProximityCommon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ProximityCommonPal.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ProximityRtapiPal.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ProximityService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ProximityServicePal.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ProximityUxHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\prvdmofcomp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\psapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\psisdecd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\psisrndr.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PSModuleDiscoveryProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\psmsrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\psr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pstask.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pstorec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\puiapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PurchaseWindowsLicense.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PurchaseWindowsLicense.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pwlauncher.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pwlauncher.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pwrshplugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pwsso.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\QAGENT.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\QAGENTRT.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qasf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\QCLIPROV.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qdv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qmgrprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\QSHVHOST.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\QSVRMGMT.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Query.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\QUTIL.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\qwave.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RacEngn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\racpldlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\radardt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\radarrs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RADCUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasadhlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasapi32(648).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasauto.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\rasautou.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rascfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\raschap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\raschapext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasctrs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rascustom.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasdiag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasdial.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasdlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\raserver.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasgcw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasman(649).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasmans.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasmbmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RASMM.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasmontr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasmxs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasphone.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasplap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasppp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rasser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rastls.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rastlsext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdbui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdpcfgex.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdpclip.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdpcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdpencom.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdpendp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdpinput.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RdpSa.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RdpSaProxy.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RdpSaPs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RdpSaUacHelper.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdrleakdiag.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RDSAppXHelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdsdwmdr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RDSPnf.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdvidcrl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdvvmtransport.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ReAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ReAgentc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ReAgentTask.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\recimg.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\recover.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\recovery.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RecoveryDrive.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\reg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\regapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RegCtrl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\regedt32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\regidle.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\regini.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Register-CimProvider.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\regsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\regsvr32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ReInfo.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rekeywiz.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\relog.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RelPost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\remotepg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\remotesp.tsp:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RemoveDeviceContextHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RemoveDeviceElevated.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\repair-bde.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\replace.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RESAMPLEDMO.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\reseteng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\resmon.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RestoreOptIn.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\resutils.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rfxvmt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rgb9rast.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Ribbons.scr:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\riched20.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\riched32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RMActivate.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RMActivate_isv.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RMActivate_ssp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RMActivate_ssp_isv.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RMapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RmClient.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\rmttpmvscmgrsvr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rnr20.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RoamingSecurity.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Robocopy.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RotMgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ROUTE.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RpcEpMap.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\rpchttp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RpcNs4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rpcnsh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RpcPing.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rpcrt4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RpcRtRemote.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rpcss(650).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rrinstaller.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rsaenh(651).dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\rshx32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RstrtMgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rstrui.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rtffilt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rtm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rtutils.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RTWorkQ.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\runas.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rundll32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RunLegacyCPLElevated.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\runonce.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RuntimeBroker.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\samcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sas.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sbe.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sbeio.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\scansetting.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\SCardDlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SCardSvr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\scavengeui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sccls.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\scecli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\scesrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\scext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\schedcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\scksp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\scripto.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\scrnsave.scr:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\scrobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\scrrun.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sdbinst.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sdchange.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sdclt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sdhcinst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sdiageng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sdiagnhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sdiagprv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sdiagschd.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\sdohlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SearchFilterHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SearchFolder.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SearchIndexer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SearchProtocolHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SecEdit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sechost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\secinit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\seclogon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\secproc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\secproc_isv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\secproc_ssp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\secproc_ssp_isv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\secur32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sendmail.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Sens.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SensApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SensorsApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SensorsClassExtension.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SensorsCpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sensrsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\serialui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\services.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\serwvdrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sessionmsg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\setbcdlocale.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sethc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SetNetworkLocation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SetProxyCredential.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\setspn.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SettingMonitor.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SettingsHandlers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SettingSync.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SettingSyncCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SettingSyncHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SettingSyncPolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\setupapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\setupcln.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\setupugc.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\setx.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sfc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sfc_os.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shacct.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sharemediacpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SHCore(652).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shdocvw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shfolder.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shgina.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shimeng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shimgvw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shlwapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shpafact.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shrpubw.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shunimpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shutdown.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shwebsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\signdrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sigverif.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SimAuth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SimCfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sisbkup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SkyDrive.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SkyDriveShell.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SkyDriveTelemetry.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SlideToShutDown.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\slpts.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SmartcardCredentialProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SmartCardSimulator.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SmartScreenSettings.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SMBHelperClass.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\smbwmiv2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\smphost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SmsDeviceAccessRevocation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SMSRouter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SndVol.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SndVolSSO.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SnippingTool.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\snmpapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\snmptrap.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SNTSearch.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\softkbd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\softpub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sort.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SortServer2003Compat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SortWindows61.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SortWindows6Compat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SoundRecorder.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SpaceAgent.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SpaceControl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\spbcd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\spfileq.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SPInf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\spmpm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\spnet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\spoolss.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\spoolsv(654).exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\spopk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\spp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sppnp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\spwinsat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\spwizeng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\spwmp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sqlcecompact40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sqlceoledb40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sqlceqp40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sqlcese40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sqlsrv32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sqmapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\srchadmin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\srclient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\srcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SRH.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\srhelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\srrstr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SrTasks.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\srumapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\srumsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\srvcli.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\srvsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\srwmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sscore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sscoreext.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\ssdpapi.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\ssdpsrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sspisrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SSShim.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ssText3d.scr:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sstpsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Startupscan.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\stclient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sti.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\StikyNot.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sti_ci.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\stobject.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\StorageContextHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\storagewmi_passthru.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\storewuauth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Storprop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\StorSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\streamci.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\StructuredQuery.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SubscriptionMgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\subst.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sud.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\svchost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\svsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\swprv.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\sxproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sxs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sxshared.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sxssrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sxsstore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sxstrace.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SyncCenter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\synceng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SyncEngine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SyncHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SyncHostps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SyncInfrastructure.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SyncInfrastructureps.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Syncreg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\syncui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sysclass.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sysdm.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SysFxUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\syskey.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sysmain.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sysmon.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sysntfy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SysResetErr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\syssetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\systemcpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemEventsBrokerClient.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\SystemEventsBrokerServer(655).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\systeminfo.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemPropertiesAdvanced.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemPropertiesComputerName.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemPropertiesDataExecutionPrevention.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemPropertiesHardware.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemPropertiesPerformance.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemPropertiesProtection.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemPropertiesRemote.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\systemreset.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\SystemSettings.Handlers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemSettingsAdminFlows.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemSettingsAdminFlowUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemSettingsDatabase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemSettingsRemoveDevice.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\systray.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\t2embed.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Tabbtn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TabbtnEx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tabcal.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TabletPC.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TabSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\takeown.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tapi3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tapilua.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TapiMigPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tapiperf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tapisrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TapiSysprep.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\TapiUnattend.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\taskbarcpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\taskcomp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\taskhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\taskhostex.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\taskkill.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tasklist.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Taskmgr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\taskschd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TaskSchdPS.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tbs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tcmsetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tcpipcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TcpipSetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tcpmib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tcpmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tcpmonui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TCPSVCS.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tdc.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tdh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\telephon.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\termmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\termsrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TetheringIeProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TetheringMgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TetheringStation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\themecpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\themeservice.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\themeui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\threadpoolwinrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\thumbcache.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ThumbnailExtractionHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TimeBrokerClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TimeBrokerServer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\timedate.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TimeDateMUICallback.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\timeout.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TimeSyncTask.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tlscsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tpmcompc.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\TpmInit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tpmvsc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tpmvscmgr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tpmvscmgrsvr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tquery.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tracerpt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TRACERT.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\traffic.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tree.com:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\trkwks.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tsbyuv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TSChannel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tsgqec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tsmf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TSpkg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TSTheme.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TsUsbGDCoInstaller.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TSWbPrxy.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TSWorkspace.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TsWpfWrp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TtlsAuth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TtlsCfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TtlsExt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tvratings.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\twext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\twinapi(656).dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\twinapi.appcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\twinapi.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\twinui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\txflog.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\txfw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\typeperf.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tzsync.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tzutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ubpm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ucmhc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\udhisapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\uDWM.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\uexfat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ufat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UI0Detect.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UIAutomationCore(657).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\uicom.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\uireng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UIRibbon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UIRibbonRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ulib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\umb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\umdmxfrm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\umpnpmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\umpo.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\umpoext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\umpowmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\umrdp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\unattend.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\unimdm.tsp:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\unimdmat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\uniplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\unlodctr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\unregmp2.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\untfs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\upnp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\upnpcont.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\upnphost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ureg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\url.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\usbceip.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\usbmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\usbperf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\usbui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UserAccountBroker.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UserAccountControlSettings.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UserAccountControlSettings.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\usercpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\userenv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\userinit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\userinitext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UserLanguageProfileCallback.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UserLanguagesCpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\usp10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ustprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\utildll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Utilman.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\uudf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UXInit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\uxlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\uxtheme.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\VAN.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Vault.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vaultcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\VaultCmd.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\VaultRoaming.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vaultsvc.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\VBICodec.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vbisurf.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vccorlib110.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vds.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vdsbas.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vdsdyn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vdsldr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vdsutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vdsvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vds_ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\verclsid.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\verifier.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\verifier.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\version.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vfwwdm32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vidcap.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\VIDRESZR.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\virtdisk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\VmApplicationHealthMonitorProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vmbuspipe.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\VmdCoinstall.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vmictimeprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vorbis.acm:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vpnike.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vpnikeapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\VscMgrPS.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vssadmin.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\vssapi(659).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vsstrace(660).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\VSSVC.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vss_ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\w32time.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\w32tm.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\w32topl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WABSyncProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\waitfor.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WallpaperHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WavDest.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wavemsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wbadmin.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wbemcomn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wbiosrvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wcmapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wcmcsp.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\wcmsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WcnApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wcncsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WcnEapAuthProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WcnEapPeerProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WcnNetsh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wcnwiz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WcsPlugInService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wdc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wdi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wdiasqmmodule.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wdigest.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wdmaud.drv:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wdscore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WebcamUi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WebClnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\webio.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\webservices.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Websocket.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wecapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wecsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wecutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wephostsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\werconcpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wercplsupport.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\werdiagcontroller.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WerFault.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WerFaultSecure.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wermgr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wersvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\werui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wevtapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wevtfwd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wevtsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wevtutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wextract.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wfapigp(662).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wfdprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WfHC.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WFS.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\where.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\whhelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\whoami.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wiaacmgr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wiaaut.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wiadefui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wiadss.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wiarpc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wiascanprofiles.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wiaservc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wiashext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wiatrace.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WiFiDisplay.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wimgapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wimserv.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winbici.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winbio.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winbrand.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wincorlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wincredprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.ApplicationModel.Background.TimeBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.ApplicationModel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.ApplicationModel.Store.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Background.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Background.ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Bluetooth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Custom.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Custom.ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Enumeration.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Enumeration.ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Geolocation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.PointOfService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Portable.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Printers.Extensions.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Scanners.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Sensors.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.SmartCards.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.Usb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Devices.WiFiDirect.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Globalization.Fontgroups.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Graphics.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Graphics.Printing.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\windows.immersiveshell.serviceprovider.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Windows.Management.Workplace.WorkplaceSettings.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.Devices.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.MediaControl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.Renewal.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.SpeechSynthesis.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Media.Streaming.ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Networking.BackgroundTransfer.ContentPrefetchTask.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Networking.Connectivity.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Networking.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Networking.HostName.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Networking.Proximity.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Networking.Sockets.PushEnabledApplication.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Networking.Vpn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Security.Credentials.UI.CredentialPicker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Shell.Search.UriHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Storage.ApplicationData.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Storage.Compression.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.System.Display.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.System.Profile.HardwareId.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.System.Profile.SystemManufacturers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.System.RemoteDesktop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Immersive.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Input.Inking.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Search.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Xaml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Web.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.Web.Http.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WindowsCodecsExt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\windowslivelogin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winethc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WinFax.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winhttp(663).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wininitext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winipsec.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Winlangdb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winlogon(665).exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winlogonext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winmm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winmmbase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WinMsoIrmProtector.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winnsi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WinOpcIrmProtector.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winrnr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winrs.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winrscmd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winrshost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winrssrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WinRtTracing.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WinSAT.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WinSATAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WinSetupUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winshfhc.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\winsku.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winsockhc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WINSRPC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winsrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winsta.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\WinSyncMetastore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WinSyncProviders.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WinTypes(666).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winusb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winver.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wisp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\witnesswmiv2provider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wkscli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wkspbroker.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wkspbrokerAx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wksprt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wksprtPS.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wkssvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlanapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlancfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WLanConn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlandlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlanext.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlangpui.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\WLanHC.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlanhlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlaninst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WlanMM.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlanmsm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlanpref.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WlanRadioManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlansec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlansvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlansvcpal.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\wlanui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Wldap32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wldp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlgpclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlidcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlidcredprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlidfdp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlidnsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlidprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlidsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wlrmdr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WlS0WndH.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMADMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMADMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMALFXGFXDSP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMASF.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmcodecdspps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmdmlog.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmdmps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmdrmdev.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmdrmnet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmdrmsdk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmiclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmicmiplugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmidcom.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmidx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmiprop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmitomi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WmJoyFrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMNetMgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMPDMC.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WmpDui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmpdxm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmpeffects.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMPhoto.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmpmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmpps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmpshell.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmsgapi(667).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmsgapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMSPDMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMSPDMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVCORE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVDECOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmvdspa.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVENCOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVSDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVSENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVXENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WofTasks.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WofUtil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\workerdd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WorkFolders.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WorkfoldersControl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WorkFoldersGPExt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WorkFoldersShell.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\workfolderssvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wow64cpu(669).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wow64cpu.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wowreg32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Wpc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wpccpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WpcMon.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wpcsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WpcWebSync.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wpdbusenum.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WpdMtp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WpdMtpUS.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wpdshext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WPDShextAutoplay.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WPDShServiceObj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WPDSp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wpd_ci.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wpnapps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wpncore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wpninprc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wpnpinst.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wpnprv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wpnsruprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\write.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ws2help.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ws2_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wscapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wscinterop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wscisvif.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\WSClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSCollect.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wscproxystub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wscript.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wscsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wscui.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSDApi(670).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsdchngr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSDMon(671).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSDPrintProxy.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSDScanProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsecedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsepno.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wshbth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wshcon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wshelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wshext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wship6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wshirda.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wshnetbs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wshom.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wshqos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wshrm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSHTCPIP.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSManHTTPConfig.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSManMigrationPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmAuto.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsmplpxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsmprovhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WsmWmiPl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsnmp32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsock32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wsqmcons.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSReset.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSShared.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSSync.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSTPager.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wtsapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wu.upgrade.ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wuaext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WUDFCoinstaller.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WUDFHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WUDFPlatform.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WUDFSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WUDFx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WUDFx02000.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wups(672).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wups.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wups2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wusa.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WwaApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WWAHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WWanAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wwancfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WWanHC.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wwaninst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Wwanpref.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wwanprotdim.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WwanRadioManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wwansvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wwapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\x3daudio1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\x3daudio1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_4.dll:$CmdTcID [32]
AlternateDataStreams: C:\Windows\system32\xactengine3_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xcopy.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xinput1_2.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\xinput1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XInput1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XInput9_1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xmlfilter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xmllite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xmlprovi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XpsFilt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XpsGdiConverter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XpsPrint.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XpsRasterService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xpsrchvw.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xpsservices.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XPSSHHDR.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xpssvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xwizard.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xwizards.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xwreg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xwtpdui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xwtpw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\zipfldr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\accessibilitycpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\acledit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aclui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\acppage.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ActionCenter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ActionCenterCPL.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\activeds.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\adprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\adsldp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\adsldpc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\adsnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\advpack.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\amstream.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\apds.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\apphelp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Apphlpdm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\appidapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\apprepapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\apprepsync.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\appwiz.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AppxAllUserStore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AppxApplicabilityEngine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AppXDeploymentClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AppxPackaging.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AppxSip.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ARP.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\at.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AtBroker.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atlthunk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\attrib.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\audiodev.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AudioEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AUDIOKSE.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AudioSes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\auditpol.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AuthBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AuthExt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\authfwcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AuthFWGP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AuthFWSnapin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AuthFWWizFwk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\authz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\autoconv.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\autoplay.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\avicap32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\avifil32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\avrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\azroles.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\azroleui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\AzSqlExt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\backgroundTaskHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\BackgroundTransferHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\basecsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\batmeter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bcd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\BCP47Langs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bcryptprimitives(673).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bcryptprimitives.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bdaplgin.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bidispl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\BioCredProv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bitsadmin.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bitsperf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bitsprx2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bitsprx3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bitsprx4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bitsprx5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bitsprx6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bitsprx7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\biwinrt.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\blackbox.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\BluetoothApis.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bootcfg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\browcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\browseui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bthprops.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bthudtask.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\btpanui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Bubbles.scr:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\BWContextHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ByteCodeGenerator.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cabinet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cabview.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cacls.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\calc.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\CallButtons.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CallButtons.ProxyStub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CameraSettingsUIHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\capiprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\capisp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\catsrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\catsrvps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\catsrvut.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cca.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cdosys.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\certca.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\certCredProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\certenc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CertEnroll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CertEnrollCtrl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CertEnrollUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\certmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CertPolEng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\certreq.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\certutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cewmdm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cfgbkend.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cfgmgr32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cfmifs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cfmifsproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\charmap.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\chartv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\chcp.com:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CheckNetIsolation.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\chkdsk.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\chkntfs.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\choice.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CHxReadingStringIME.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cic.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cipher.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\clb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\clbcatq.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cleanmgr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\clfsw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cliconfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cliconfg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\clip.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CloudNotifications.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CloudStorageWizard.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\clusapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cmcfg32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cmd.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cmdext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cmdial32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cmdkey.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cmdl32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cmifw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cmlua.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cmmon32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cmpbk32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cmstp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cmstplua.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cmutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cngcredui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cngprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cnvfat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\colbact.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\COLORCNV.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\colorcpl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\colorui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\combase(674).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\comcat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\comctl32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\comdlg32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\comp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\compact.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CompPkgSup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\compstui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ComputerDefaults.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\comrepl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\comsnap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\comsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\comuid.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ConfigureExpandedStorage.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\connect.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ConnectedAccountState.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\console.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\control.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\convert.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CPFilters.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CredentialMigrationHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CredentialUIBroker.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\credssp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\credui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\credwiz.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptbase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptdlg.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\cryptdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptnet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CryptoWinRT.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\crypttpmeksvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptuiwizard.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cryptxml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cscapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cscdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cscript.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ctfmon.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cttune.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cttunesvr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\C_G18030.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\C_IS2022.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\C_ISCII.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d2d1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3d10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3d10core.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3d10warp.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3d10_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3d10_1core.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3d8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3d8thk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3d9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_36.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_38.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_42.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_47.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dcsx_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dcsx_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dim.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dim700.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dramp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx11_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx11_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_24.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_25.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_26.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_27.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_28.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_29.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_30.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_31.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dxof.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dabapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DaOtpCredentialProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dataclen.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\davclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\davhlpr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dbgeng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dbghelp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dbnetlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dbnmpntw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dccw.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dciman32.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\dcomcnfg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dcomp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DDACLSys.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ddodiag.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DDOIProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DDORes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ddraw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ddrawex.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DefaultDeviceManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DefaultPrinterProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\delegatorprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\desk.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\deskadp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\deskmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DevDispItemProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\devenum.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\deviceaccess.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\deviceassociation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DeviceCenter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DeviceDisplayStatusManager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DevicePairing.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\DevicePairingFolder.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DevicePairingProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DevicePairingWizard.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DeviceProperties.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DeviceUxRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\devmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\devobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\devrtl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dfrgui.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dfscli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DfsShlEx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dhcpcmonitor.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dhcpcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dhcpcore6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dhcpcsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dhcpcsvc6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DHCPQEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dhcpsapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dialer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\difxapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dimsjob.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dimsroam.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dinput.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dinput8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\diskcomp.com:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\diskcopy.com:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\diskcopy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\diskpart.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\diskperf.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\diskraid.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dispex.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Display.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DisplaySwitch.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dllhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dllhst3g.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dlnashext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dmband.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dmcompos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dmdlgs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dmdskmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dmime.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dmintf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dmloader.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dmocx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dmscript.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dmstyle.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dmsynth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dmusic.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dmutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dmvdsitf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dmview.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\docprop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\doskey.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dot3api.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dot3cfg.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\dot3dlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dot3gpclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dot3gpui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dot3hc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dot3msm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dot3ui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dpapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dpapimig.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dpapiprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DpiScaling.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\driverquery.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drmmgrtn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drmv2clt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drtprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drttransport.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drvinst.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\drvstore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dsauth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dsdmo.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dskquota.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dskquoui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dsound.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dsparse.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dsprop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dsquery.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dsrole.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dssec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dssenh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Dsui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dsuiext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dswave.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dtsh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dui70.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\duser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dvdplay.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dvdupgrd.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dwmapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dwmcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DWWIN.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dxdiag.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dxdiagn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dxgi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dxmasf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DxpTaskSync.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dxtmsft.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dxva2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eapp3hst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eappcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eappgnui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eapphost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eappprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eapprovp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\EAPQEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\EaseOfAccessDialog.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\easwrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\efsadu.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\efscore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\efsui.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\efsutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\efswrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\EhStorAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\EhStorAuthn.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\EhStorPwdMgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\els.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ELSCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\elshyph.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\elslad.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\elsTrans.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\encapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\EncDec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eqossnap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\es.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\esentprf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\esentutl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eudcedit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eventcls.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eventcreate.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eventvwr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\expand.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\explorer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ExplorerFrame.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\extrac32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Faultrep.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fdBth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fdBthProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FdDevQuery.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fdeploy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fdPnp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fdprint.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fdProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fdSSDP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fdWCN.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fdWNet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fdWSD.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\feclient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\filemgmt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\find.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\findnetprinters.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\findstr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\finger.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FirewallAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FirewallControlPanel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fixmapi.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fltLib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fltMC.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fmifs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fms.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Fondue.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fontext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fontsub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fontview.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\forfiles.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\format.com:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fphc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\framedyn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\framedynos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\frprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fsutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fsutilext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ftp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fundisc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fwcfg.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\FWPUCLNT.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FwRemoteSvr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FXSAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FXSCOM.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FXSCOMEX.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FXSEXT32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FXSXP32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\g711codc.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\gameux.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\gcdef.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\GeofenceMonitorService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\getmac.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\getuname.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\glmf32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\globinputhost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\glu32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\gpapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\gpedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\gpprnext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\gpresult.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\gptext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\gpupdate.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\grpconv.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hbaapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hcproviders.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hdwwiz.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hdwwiz.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\help.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\HelpPaneProxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hgcpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hh.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hhctrl.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hhsetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hid.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hidphone.tsp:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hidserv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hlink.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hnetcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hnetmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\HOSTNAME.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\httpapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\htui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ias.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iasacct.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iasads.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iasdatastore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iashlpr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\IasMigPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iasnap.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\iaspolcy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iasrad.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iasrecst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iassam.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iassdo.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iassvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\icacls.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iccvid.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\icmui.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\IconCodecService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\icsigd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\icsunattend.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\IdCtrls.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\idndl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\IDStore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\IEAdvpack.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieetwproxystub.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\iernonce.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iesetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iesysprep.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieUnatt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iexpress.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ifmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ifsutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ifsutilx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\imaadp32.acm:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\imagehlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\imapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\imapi2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\imapi2fs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\imgutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\imm32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\inetmib1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\InfDefaultInstall.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\InkEd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\InputSwitch.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\inseng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\instnm.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\intl.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ipconfig.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iprop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iprtprio.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iprtrmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ipsecsnp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ipsmsnap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ir32_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ir41_32.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ir41_qc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ir41_qcx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ir50_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ir50_qc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ir50_qcx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\irclass.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\irprops.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iscsicli.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iscsicpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iscsicpl.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iscsied.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iscsium.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iscsiwmiv2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\isoburn.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\itircl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\itss.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iyuv_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\joy.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\jscript9diag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\jsproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KBDBASH.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KBDRU.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KBDRU1.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KBDRUM.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KBDTAT.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KBDTT102.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KBDYAK.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\kerberos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\kernel.appcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\kernel32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KernelBase(677).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\keyiso.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\keymgr.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\kmddsp.tsp:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\korwbrkr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ksproxy.ax:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\kstvtune.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ksuser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Kswdmcap.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ksxbar.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ktmutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ktmw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\l2gpstore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\l2nacp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\L2SecHC.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\l3codeca.acm:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\l3codecp.acm:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\label.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\LAPRXY.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\LaunchTM.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\licmgr10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\linkinfo.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\loadperf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\localsec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\LocationApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\LocationNotifications.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\lodctr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\logagent.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\loghours.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\logman.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\logoncli.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\lpk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\lsmproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\luainstall.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Magnification.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Magnify.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\main.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\makecab.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mapistub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MbaeApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MbaeApiPublic.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mbsmsapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mbussdapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mcbuilder.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mciavi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mcicda.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\mciqtz32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mciseq.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mciwave.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mdminst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mdmregistration.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mf3216.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfAACEnc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfasfsrcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MFCaptureEngine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfcsubs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfds.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfdvdec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfh264enc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MFMediaEngine.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfmpeg2srcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfnetcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfnetsrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MFPlay.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfpmp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfreadwrite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfsrcsnk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mftranscode.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfvdsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MFWMAAEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mgmtapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mibincodec.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\Microsoft.Management.Infrastructure.Native.Unmanaged.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MicrosoftAccountTokenProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\midimap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\miguiresource.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mimefilt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mimofcodec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MirrorDrvCompat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\miutils.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mlang.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mmc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mmcbase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mmci.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mmcico.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mmcndmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mmcshext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MMDevAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mmsys.cpl:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\mobsync.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mode.com:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\modemui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\more.com:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mountvol.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP3DMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP43DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP4SDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Mpeg2Data.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mpg2splt.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MPG4DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mpr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mprapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mprddm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mprdim.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mprext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mprmsg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MRINFO.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MrmCoreR.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MrmIndexer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msaatext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSAC3ENC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msacm32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msacm32.drv:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msadp32.acm:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msasn1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSAudDecMFT.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msaudite.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\mscandui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mscat32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mscpxl32.dLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msctfime.ime:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MsCtfMonitor.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msctfp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msctfui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msctfuimanager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msdadiag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msdart.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msdelta.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msdmo.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msdrm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msdt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msdtcuiu.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSDvbNP.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msdxm.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msfeedsbs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msfeedssync.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\msftedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msg711.acm:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msgsm32.acm:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mshta.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msidcrl40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msident.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msidle.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msieftp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msihnd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msiltcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msimg32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msimtf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msinfo32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msisip.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msiwer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mskeyprotcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mskeyprotect.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msls31.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2adec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSMPEG2ENC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2vdec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msnetobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSNP.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msoeacct.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msoert2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msorcl32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mspaint.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mspatcha.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mspatchc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msports.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msra.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msrating.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msrdc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MsRdpWebAccess.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msrle32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msscntrs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msscp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msscript.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mssha.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msshooks.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mssign32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mssip32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mssitlb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MsSpellCheckingFacility.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MsSpellCheckingHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mssph.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mssphtb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mssprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mssrch.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mssvp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mstask.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mstsc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mstscax.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msutb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msvcirt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msvcp120_clr0400.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msvcp60.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msvcr120_clr0400.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msvcrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msvfw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msvidc32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSVideoDSP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msvproc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSWB7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSWB70011.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSWB7001E.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSWB70404.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSWB70804.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\mswmdm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mswsock.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msxml6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msyuv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mtstocom.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mtxclu.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mtxdm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mtxex.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mtxlegih.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mtxoci.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\muachost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\muifontsetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MuiUnattend.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mycomput.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mydocs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Mystify.scr:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\napdsnap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NapiNSP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\napipsec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NAPMONTR.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NAPSTAT.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Narrator.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NaturalLanguage6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NcaApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NcdProp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nci.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ncobjapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ncpa.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ncrypt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ncryptprov.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\ndadmin.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nddeapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ndfapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ndfetw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ndfhcdiscovery.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ndiscapCfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ndishc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ndproxystub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\negoexts.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\net.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\net1.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netbios.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netbtugc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netcenter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netcfgx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netcorehc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netdiagfx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netid.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netiohlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netiougc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netjoin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netplwiz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Netplwiz.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netprofm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netprovisionsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netsh.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netshell.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NETSTAT.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\netutils.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\networkexplorer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\networkitemfactory.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\newdev.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\newdev.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ninput.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NL7Data0011.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NL7Data001E.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NL7Data0404.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NL7Data0804.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nlaapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nlhtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nlmgp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nlmproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nlmsprep.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0000.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0002.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0003.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0007.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0009.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData000a.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData000c.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData000d.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData000f.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0010.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0018.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData001a.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData001b.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData001d.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0020.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0021.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0022.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0024.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0026.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0027.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData002a.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0039.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData003e.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0045.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0046.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0047.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0049.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData004a.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData004b.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData004c.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData004e.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0414.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0416.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0816.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData081a.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsData0c1a.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Nlsdl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\NlsLexicons0009.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\normaliz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\notepad.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\npmproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nshhttp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nshipsec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nshwfp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nsi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nslookup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntasn1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntdll(678).dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntdsapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntlanman.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntlanui2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntmarta.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntprint.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntprint.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntvdm64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\objsel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\occache.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ocsetapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\odbc32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\odbcad32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\odbcbcp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\odbcconf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\odbcconf.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\odbccp32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\odbccr32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\odbccu32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\odbcji32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\odbcjt32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\odbctrac.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\oddbse32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\odexl32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\odfox32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\odpdx32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\odtext32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OEMLicense.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\offfilt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ogldrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\oleacc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\oleacchooks.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\olecli32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\oledlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\oleprn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\olesvr32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\olethk32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OnDemandConnRouteHelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\onex.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\onexui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OobeFldr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OpcServices.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\openfiles.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\opengl32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OpenWith.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\osbaseln.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\osk.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\OskSupport.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\osuninst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\P2P.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\P2PGraph.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\p2pnetsh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\packager.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PackageStateRoaming.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\panmap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PasswordOnWakeSettingFlyout.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PATHPING.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pautoenr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pcacli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pcaui.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\pcaui.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PCPKsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PCPTpm12.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pdhui.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\perfctrs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\perfdisk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\perfmon.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\perfnet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\perfos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\perfproc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\perfts.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PhotoMetadataHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PhotoScreensaver.scr:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\photowiz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PickerHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pid.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PING.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PkgMgr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pku2u.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pla.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\playlistfolder.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PlaySndSrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PlayToManager.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\PlayToStatusProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pngfilt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pnrpnsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\polstore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\poqexec.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PortableDeviceApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PortableDeviceClassExtension.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PortableDeviceConnectApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PortableDeviceStatus.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\PortableDeviceSyncProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PortableDeviceTypes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PortableDeviceWiaCompat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PortableDeviceWMDRM.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pots.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\powercfg.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\powercfg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\powercpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\powrprof.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\PresentationNative_v0300.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\prevhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\print.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PrintConfig.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PrintDialogs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\printui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\printui.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\prncache.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\prnfldr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\prnntfy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\prntvpt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\profapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\profext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\propsys.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\proquota.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\provcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\provsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\provthrd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ProximityCommon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ProximityCommonPal.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ProximityRtapiPal.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\prvdmofcomp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\psapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\psisdecd.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\psisrndr.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PSModuleDiscoveryProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\psr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pstorec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\puiapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\puiobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pwrshplugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\QAGENT.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qasf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\QCLIPROV.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qdv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qmgrprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\QSHVHOST.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\QSVRMGMT.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Query.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\QUTIL.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qwave.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RacEngn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\racpldlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\radardt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\radarrs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RADCUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rasadhlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rasapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rasautou.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rascfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\raschap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\raschapext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rasctrs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rasdiag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rasdial.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rasdlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\raserver.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rasgcw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rasman.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rasmontr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rasmxs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rasphone.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rasplap.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rasppp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rasser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rastls.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rastlsext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rdpcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rdpencom.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rdpendp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RdpSa.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RdpSaProxy.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RdpSaPs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RdpSaUacHelper.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rdrleakdiag.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rdvidcrl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rdvvmtransport.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ReAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ReAgentc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\recover.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\reg.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\regapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RegCtrl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\regedit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\regedt32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\regini.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Register-CimProvider.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\regsvr32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ReInfo.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rekeywiz.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\relog.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\remotepg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\remotesp.tsp:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RemoveDeviceContextHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RemoveDeviceElevated.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\replace.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RESAMPLEDMO.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\resmon.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RestoreOptIn.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\resutils.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rgb9rast.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Ribbons.scr:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\riched20.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\riched32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RMActivate.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RMActivate_isv.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RMActivate_ssp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RMActivate_ssp_isv.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RmClient.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rnr20.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Robocopy.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ROUTE.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rpchttp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RpcNs4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rpcnsh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RpcPing.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rpcrt4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RpcRtRemote.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rrinstaller.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rsaenh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rshx32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RstrtMgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rtffilt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rtm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rtutils.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\RTWorkQ.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\runas.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rundll32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RunLegacyCPLElevated.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\runonce.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\samcli.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\sas.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sbe.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\sbeio.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\scansetting.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\SCardDlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\scecli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\scesrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\schedcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\scksp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\scripto.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\scrnsave.scr:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\scrobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\scrrun.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sdbinst.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sdchange.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sdiageng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sdiagnhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sdiagprv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sdohlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SearchFilterHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SearchFolder.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SearchIndexer.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\SearchProtocolHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SecEdit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sechost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\secinit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\secproc.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\secproc_isv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\secproc_ssp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\secproc_ssp_isv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\secur32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sendmail.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SensApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SensorsApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SensorsCpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\serialui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\serwvdrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sethc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SettingMonitor.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SettingSync.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SettingSyncCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SettingSyncHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SettingSyncPolicy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\setup16.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\setupapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\setupcln.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\setupugc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\setx.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sfc.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sfc_os.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shacct.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SHCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shdocvw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shfolder.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shgina.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shimeng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shimgvw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shlwapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shpafact.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shrpubw.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shunimpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shutdown.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shwebsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\signdrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SimAuth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SimCfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sisbkup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SkyDriveShell.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\slpts.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SmartcardCredentialProvider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SmartScreenSettings.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SMBHelperClass.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\smphost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SndVol.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SndVolSSO.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\snmpapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\softkbd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\softpub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sort.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SortServer2003Compat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SortWindows61.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SortWindows6Compat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\spbcd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\spfileq.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SPInf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\spnet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\spopk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\spp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\spwinsat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\spwizeng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\spwmp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sqlcecompact40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sqlceoledb40.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\sqlceqp40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sqlcese40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sqlsrv32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sqmapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\srchadmin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\srclient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SRH.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\srumapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\srumsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\srvcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sscore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ssdpapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SSShim.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ssText3d.scr:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Startupscan.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\stclient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sti.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\stobject.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\StorageContextHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\storagewmi_passthru.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\Storprop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\StorSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\StructuredQuery.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\subst.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\sud.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\svchost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sxproxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sxs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sxshared.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\sxsstore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sxstrace.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SyncCenter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\synceng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SyncHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SyncHostps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SyncInfrastructure.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\SyncInfrastructureps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Syncreg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\syncui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SYNSOEMU.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sysdm.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\syskey.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sysmon.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\syssetup.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\systemcpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SystemEventsBrokerClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\systeminfo.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SystemPropertiesAdvanced.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SystemPropertiesComputerName.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SystemPropertiesDataExecutionPrevention.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SystemPropertiesHardware.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SystemPropertiesPerformance.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SystemPropertiesProtection.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SystemPropertiesRemote.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\systray.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\t2embed.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\takeown.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tapi3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\tapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TapiMigPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tapiperf.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\tapisrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TapiSysprep.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TapiUnattend.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\taskcomp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\taskkill.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tasklist.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Taskmgr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\taskschd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TaskSchdPS.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tbs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tcmsetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tcpipcfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tcpmib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tcpmonui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TCPSVCS.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tdc.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tdh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\telephon.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\termmgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\themecpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\themeui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\threadpoolwinrt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\thumbcache.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ThumbnailExtractionHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TimeBrokerClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\timedate.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TimeDateMUICallback.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\timeout.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tlscsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tpmcompc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TpmInit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tquery.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tracerpt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TRACERT.EXE:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\traffic.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tree.com:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tsbyuv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TSChannel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tsgqec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tsmf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TSpkg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TSTheme.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TSWorkspace.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TsWpfWrp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TtlsAuth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TtlsCfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TtlsExt.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\tvratings.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\twext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\twinapi.appcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\twinapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\twinui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\txflog.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\txfw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\typeperf.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tzutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ucmhc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\udhisapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\uexfat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ufat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UIAutomationCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\uicom.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\uireng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UIRibbon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UIRibbonRes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ulib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\umdmxfrm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\unimdm.tsp:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\unimdmat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\uniplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\unlodctr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\unregmp2.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\untfs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\upnp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\upnpcont.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\upnphost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ureg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\url.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\usbceip.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\usbperf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\usbui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\user.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UserAccountBroker.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UserAccountControlSettings.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UserAccountControlSettings.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\usercpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\userenv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\userinit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\userinitext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UserLanguageProfileCallback.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UserLanguagesCpl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\usp10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ustprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\utildll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Utilman.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\uudf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\UXInit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\uxlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\uxtheme.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\VAN.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Vault.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vaultcli.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\VBICodec.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vbisurf.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vdmdbg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vds_ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\verclsid.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\verifier.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\verifier.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\version.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vfwwdm32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vidcap.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\VIDRESZR.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\virtdisk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vorbis.acm:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vpnikeapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\VscMgrPS.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vssadmin.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vssapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vsstrace.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vss_ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\w32tm.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\w32topl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WABSyncProvider.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\waitfor.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wavemsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wbemcomn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wcmapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WcnApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wcnwiz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WcsPlugInService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wdc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wdi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wdigest.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wdmaud.drv:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wdscore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WebcamUi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WebClnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\webio.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\webservices.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Websocket.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wecapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wecutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\werdiagcontroller.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WerFault.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WerFaultSecure.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wermgr.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\werui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wevtapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wevtfwd.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\wevtutil.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wextract.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wfapigp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wfdprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WfHC.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\where.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\whhelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\whoami.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wiaacmgr.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\wiaaut.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wiadefui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wiadss.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wiascanprofiles.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wiashext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wiatrace.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wimgapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winbio.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winbrand.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wincorlib.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wincredprovider.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.ApplicationModel.Background.TimeBroker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.ApplicationModel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Background.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Background.ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Custom.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Custom.ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Enumeration.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Enumeration.ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Geolocation.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.PointOfService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Portable.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Printers.Extensions.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Scanners.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Sensors.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.SmartCards.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.Usb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Devices.WiFiDirect.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Globalization.Fontgroups.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Graphics.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Graphics.Printing.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Management.Workplace.WorkplaceSettings.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.Devices.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.MediaControl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.SpeechSynthesis.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Media.Streaming.ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Networking.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Networking.HostName.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Networking.NetworkOperators.HotspotAuthentication.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Networking.Proximity.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Networking.Sockets.PushEnabledApplication.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Security.Credentials.UI.CredentialPicker.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Security.Credentials.UI.UserConsentVerifier.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Storage.Compression.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.System.Display.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.System.Profile.HardwareId.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.System.Profile.SystemManufacturers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.System.RemoteDesktop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Immersive.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Search.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Xaml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Web.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Web.Http.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WindowsCodecsExt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\windowslivelogin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WinFax.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winhttp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wininitext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winipsec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Winlangdb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winmm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winmmbase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WinMsoIrmProtector.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\winnsi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WinOpcIrmProtector.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\winrnr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winrs.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winrscmd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winrshost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winrssrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WinRtTracing.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WinSATAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winshfhc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winsku.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winsockhc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WINSRPC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winsta.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WinSyncMetastore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WinSyncProviders.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WinTypes.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winusb.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winver.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wisp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wkscli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wkspbrokerAx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wksprtPS.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlanapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlancfg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WLanConn.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlandlg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlanext.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlangpui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlanhlp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlaninst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WlanMM.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlanmsm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlanpref.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlansec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlanui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Wldap32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlgpclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlidcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlidcredprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlidfdp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlidnsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wlidprov.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WlS0WndH.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMADMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMADMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMASF.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmcodecdspps.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\wmdmlog.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmdmps.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\wmdrmdev.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmdrmnet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmdrmsdk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmiclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmidcom.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmidx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmiprop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmitomi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WmJoyF32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMNetMgr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMPDMC.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WmpDui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmpdxm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmpeffects.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMPhoto.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmpps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmpshell.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmsgapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVCORE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVDECOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmvdspa.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVENCOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVSDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVSENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVXENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wow32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wowreg32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Wpc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wpcsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wpdshext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WPDShextAutoplay.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WPDShServiceObj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WPDSp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wpnapps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\write.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ws2help.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ws2_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wscapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wscinterop.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wscisvif.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSClient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wscproxystub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wscript.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wscui.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSDApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wsdchngr.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\wsecedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wshbth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wshcon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wshelper.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wshext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wship6.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\wshirda.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wshom.ocx:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\wshqos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wshrm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSHTCPIP.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmAgent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSManHTTPConfig.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSManMigrationPlugin.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmAuto.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wsmplpxy.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\wsmprovhost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmSvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WsmWmiPl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wsnmp32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wsock32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSShared.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSSync.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\WSTPager.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wtsapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wups.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wusa.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WwaApi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WWAHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WWanAPI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wwapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\x3daudio1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\x3daudio1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xcopy.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XInput1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XInput9_1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xmlfilter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xmllite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xmlprovi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XpsFilt.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XpsGdiConverter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XpsPrint.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\XpsRasterService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xpsrchvw.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xpsservices.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XPSSHHDR.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xpssvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xwizard.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xwizards.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xwreg.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xwtpdui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\xwtpw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\zipfldr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\acpi.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\afd.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\agilevpn.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ahcache.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\appid.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\athurx.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\athuwbx.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\bridge.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\bthhfenum.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\cfosspeed6.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\Classpnp.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\drmk.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\drmkaud.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\dumpsd.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\fltMgr.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\fsdepends.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\fvevol.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\hdaudbus.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\hidclass.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\hidusb.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\I2cHkBurn.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\i8042prt.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\intelpep.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\IPMIDrv.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\jswpslwfx.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\kbdclass.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\kbdhid.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ks.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ksecpkg.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\LGBusEnum.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\LGJoyXlCore.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\LGVirHid.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mouclass.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mouhid.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\mountmgr.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mpsdrv.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\msgpioclx.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mslldp.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ndiscap.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\NdisImPlatform.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ndistapi.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ndproxy.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\Ndu.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\netbios.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\netbt.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\netio.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\netvsc63.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\nsiproxy.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ntfs.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\nwifi.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\pacer.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\partmgr.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\pci.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\pdc.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\portcls.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\qwavedrv.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\rasacd.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\rassstp.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\rdpvideominiport.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\revoflt.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\rmcast.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\rootmdm.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\sdbus.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\sermouse.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\serscan.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\swenum.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\tbs.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\tcpipreg.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\tdx.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\TeeDriverW8x64.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\TsUsbGD.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\UCX01000.SYS:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\usbccgp.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\usbcir.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\usbd.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\usbehci.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\usbhub.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\USBHUB3.SYS:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\usbport.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\usbscan.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\USBSTOR.SYS:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\usbuhci.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\USBXHCI.SYS:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\vmbkmcl.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\vmbus.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\vmstorfl.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\volmgr.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\volsnap.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\vpci.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\wanarp.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\wfplwfs.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\wimmount.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\winhv.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\WmBEnum.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\WmFilter.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\WmHidLo.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\WmVirHid.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\WmXlCore.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\wof.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\wpcfltr.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\WUDFPf.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\WUDFRd.sys:$CmdTcID [64]
AlternateDataStreams: C:\ProgramData\TEMP:C31F31E6 [244]
AlternateDataStreams: C:\Users\Julia\Desktop\setup.exe:$CmdTcID [130]
AlternateDataStreams: C:\Users\Julia\Downloads\364.72-desktop-win8-win7-winvista-64bit-international-whql.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Julia\Downloads\364.72-desktop-win8-win7-winvista-64bit-international-whql.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Julia\Downloads\d3dx9_31.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Julia\Downloads\OriginThinSetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Julia\Downloads\OriginThinSetup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Julia\Downloads\Thesm4gettgthrpc.part1.rar:$CmdZnID [26]
AlternateDataStreams: C:\Users\Julia\Downloads\Thesm4gettgthrpc.part2.rar:$CmdZnID [26]
AlternateDataStreams: C:\Users\Kuba\Desktop\comment_UtgeIMUbpiDFAF6EekeTuLGklbkCIrgz,w400.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Kuba\Desktop\maptools.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Kuba\Desktop\maptools.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Kuba\Downloads\audioclip-1463232645.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Kuba\Downloads\winrar-x64-531pl.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\22- OCH JAK BARDZO CI- KOCHAM - 1994r. [OFFICIAL AUDIO]2013r Autor- Janusz Laskowski.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\502016807_P_cnt_1_r480P.mp4:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Abba - Chiquitita.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Abba - Mamma Mia.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\AKCENT - Czekam na Ciebie !!NOWOŚĆ!! (Ostróda 2016) (1).mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\AKCENT - Czekam na Ciebie !!NOWOŚĆ!! (Ostróda 2016).mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Akcent - Czekam Na Ciebie NOWOŚĆ 2016 - Wersja Studyjna.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Akcent - Przez Twe Oczy Zielone & Przekorny Los (Ostróda 2016  - Dzień drugi).mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Akcent - Przez Twe Oczy Zielone (official video) (1).mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Akcent - Przez Twe Oczy Zielone (official video).mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Akcent - To właśnie ja (Sala Kongresowa Warszawa 1995).mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Andrzej Rybinski - Nie licz- godzin i lat.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Bee Gees - I've Gotta Get A Message To You (Live in Las Vegas, 1997 - One Night Only).mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\bi12_40_Mt_P_05.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\bi12_P (1).mobi:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\bi12_P.mobi:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\bi12_P.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Bia-e -ab-dzie.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Bohdan Smolen i Krzysztof Krawczyk Dziewczyny które mam na my-li Recydywi-ci.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Byle by-o tak - Krzysztof Krawczyk.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Classic- To nie przyja-- tylko mi-o--..mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Czarne Oczy - hit cyga-skiej muzyki, 2012.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Czerwona Jarz-bina.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Córka grabarza - Mariusz Gabrych - (Orygina- 1973).mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Defis - Niespotykany Kolor (Official video).mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Dni których nie znamy - Marek Grechuta.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\DWA SERCA JAK POCI-GI DWA.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Eleni - Troszeczk- ziemi troszeczk- s-o-ca.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\file_C_SAFO.ZSI_ERP_TMP_00063116P.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\GANG MARCELA  - Ojciec -y- tak jak chcia-.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Gdzie si- podzia-y tamte prywatki.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Happy End-Jak siÄ- masz kochanie.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\INSTRUKCJA-UZYTKOWANIA-I-MONTAZU-Sejfu-Guest.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Jurij Shatunov - Bielyje rozy (1).mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Jurij Shatunov - Bielyje rozy.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Kolor -  Moja matko ja wiem (oryginalny teledysk).mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Krzysztof Krawczyk - Ostatni raz zata-czysz ze mna.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Masters - -ono moja (1).mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Masters - -ono moja.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\MATKO MOJA JA WIEM.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Mi-a moja.-top-one.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Nie by-o Ciebie tyle lat.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\potwierdzenie (1).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\potwierdzenie.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Tango Tysiące Lamp (strój naturalny 432Hz) Jan Taratajcio i Agata Majewska.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\TOP ONE - Z-oty Kr--ek (HD).mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Top One- Granica.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Weekend - Dałem Ci kwiaty - Official Video - NOWOŚĆ 2016 (1).mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Weekend - Dałem Ci kwiaty - Official Video - NOWOŚĆ 2016.mp3:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Wyniki_egzaminu_GK-15-05.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Mirek\Downloads\Z-oty kr--ek.mp3:$CmdZnID [26]
HKU\S-1-5-21-3936607428-886409252-2913394289-1001\Software\Classes\regfile: regedit.exe "%1" <===== UWAGA
FirewallRules: [TCP Query User{8BBF0AEB-4FFC-4939-9DC6-C1C1B088443B}C:\users\kuba\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\kuba\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{D5E976A1-6523-41F4-B500-7BADE990D2D9}C:\users\kuba\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\kuba\appdata\local\akamai\netsession_win.exe
C:\users\kuba\appdata\local\akamai\netsession_win.exe
EmptyTemp:
Wygenerowano w 0.421s, przy pomocy GeSHi 1.0.8
'
Podziel się na Facebook Podziel się na BLIP Podziel się na Twitter Podziel się na Buzz Podziel się na Flaker Dodaj zakładkę Google Podziel się na Delicious Wykop to!

Nowy Komentarz:

Komentarze:

Brak Komentarzy!