Rehber HijackThis Log Paylaşımı ve Çözümleri

1543056134722.png


Sisteminizde yaşadığınız performans düşüşü, kilitlenme, zararlı etkisi, uygulama hatalarından kaynaklanan sorunsalları analiz etmek ve performans iyileştirmesi, zararlı etkisini inaktif etmek için bize HijackThis yazılımı ile yaptığınız tarama Logunu burada paylaşmanız gerekmektedir.



Kullanımı:

1) Bir geliştirici tarafından yeni özellikler kazandırılan güncel sürümünü buradan indirip, arşiv dosyasından masaüstüne uygulamayı çıkartın.

HiJackThis

Program, zararlı temizliğinde imza veritabanı kullanmadan sezgisel tespite dayalı bir yöntemle kullanılır. Çok hızlı bir tarama ile, zararlı bulaşmamış bir sistemden farklı olarak çalışan işlemlerin bir listesini çıkartır. Bu işlemlerin tamamı...
www.technopat.net www.technopat.net

Alternatif: Download HiJackThis Fork - MajorGeeks

Eski Sürüm: HiJackThis | Free software downloads at SourceForge.net

2) Bilgisayarınızı yeniden başlatın 3 dk işlem yapmadan bekleyin.

3) HijackThis yazılımına sağ tıklayıp yönetici olarak çalıştırın (XP için geçerli değil).

1543056459730.png


4) Açılan arayüzde, "Do a system scan and save a log file" butonuna tıklayın.

1543053000396.png


5) Otomatik olarak Hijackthis taraması başlayacak, taramanın tamamlanması sürece fare ve klavyeyi kullanmayın.
1543053111358.png


6) Tarama tamamlandığında HijackThis raporunu içeren bir Log dosyası karşınıza gelecektir.

1543053449185.png



*7) Log dosyasını incelememiz için buraya cevaplama bölümünden eklemeniz gerekmektedir.

1543053710016.png

Kod'a tıklayın.

1543053809056.png


Log'da yazanları mavi bölmenin içine yapıştırıp "Devam Et" butonuna basın.

Uyarı: Sitede kod eklemede sorun yaşarsanız kod paylaşımlarını altta verilen sitelerden birine yapıştırıp linki paylaşmanız gerekmektedir. Bu durumda *7. seçeneği şu anlık kullanmayın.

Paste ofCode

8) Ayrıca sisteminizde var olan sorunu detaylıca (Performans düşüşü, Malware varlığı şüphesi vb.) belirterek konuyu cevaplayın.
(Bunu yapmayana cevap verilmeyecektir)

Fixleme:

Konuda şahsım tarafından veya uzman kişilerden geri dönüş yapıldığında Hijackthis uygulama arayüzünden söylediğimiz satırların başlarına tik işareti koyun. Ardından "Fix checked" butonuna basın.
1543054420492.png
 
Son düzenleme:
Genişletmek için tıkla...
Zararlı yönden bir sıkıntı görünmüyor illegal kullandığın uygulamalar dışında. Fences ve walpaper aracçlarını kullanmasanız daha iyi olur sadece.
Hosts dosyanız da MS servislerini almamak üzere değiştirilmiş bilginiz varsa sıkıntı yok.
 
Kod: 
Logfile of HiJackThis Fork by Alex Dragokas v.2.9.0.18

Platform:  x64 Windows 10 (Home Single Language), 10.0.19041.388 (ReleaseId: 2004), Service Pack: 0
Time:      02.08.2020 - 16:27 (UTC+03:00)
Language:  OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F)
Elevated:  Yes
Ran by:    Murat    (group: Administrator) on DESKTOP-UTVHLIJ, FirstRun: yes

Firefox: 79.0.0.7506
Edge:    11.0.19041.388
Internet Explorer: 11.0.19041.1
Default: "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Firefox)

Boot mode: Normal

Running processes:
Number | Path
   1  C:\Program Files (x86)\ASUS\AXSP\4.00.42\atkexComSvc.exe
   1  C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
   1  C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe
   1  C:\Program Files\Acer\Acer Quick Access\QAAgent.exe
   1  C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe
   1  C:\Program Files\Acer\Acer Quick Access\QASvc.exe
   1  C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
   1  C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
   2  C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
   2  C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
   1  C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
   1  C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
   1  C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2006.10-0\MsMpEng.exe
   1  C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2006.10-0\NisSrv.exe
   1  C:\Users\Murat\Desktop\HiJackThis.exe
   1  C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
   1  C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_05de635879d45aad\igfxCUIService.exe
   1  C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_05de635879d45aad\igfxEM.exe
   1  C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_05de635879d45aad\igfxext.exe
   1  C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\IntelCpHDCPSvc.exe
   1  C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\IntelCpHeciSvc.exe
   2  C:\Windows\System32\RuntimeBroker.exe
   1  C:\Windows\System32\SearchFilterHost.exe
   1  C:\Windows\System32\SearchIndexer.exe
   1  C:\Windows\System32\SearchProtocolHost.exe
   2  C:\Windows\System32\WUDFHost.exe
   1  C:\Windows\System32\audiodg.exe
   1  C:\Windows\System32\cAVS\Intel(R) Audio Service\IntelAudioService.exe
   2  C:\Windows\System32\conhost.exe
   2  C:\Windows\System32\csrss.exe
   1  C:\Windows\System32\ctfmon.exe
   1  C:\Windows\System32\dasHost.exe
   1  C:\Windows\System32\dwm.exe
   2  C:\Windows\System32\fontdrvhost.exe
   1  C:\Windows\System32\lsass.exe
   1  C:\Windows\System32\rundll32.exe
   1  C:\Windows\System32\services.exe
   1  C:\Windows\System32\sihost.exe
   1  C:\Windows\System32\smartscreen.exe
   1  C:\Windows\System32\smss.exe
   1  C:\Windows\System32\spoolsv.exe
  70  C:\Windows\System32\svchost.exe
   1  C:\Windows\System32\taskhostw.exe
   2  C:\Windows\System32\wbem\WmiPrvSE.exe
   2  C:\Windows\System32\wbem\unsecapp.exe
   1  C:\Windows\System32\wininit.exe
   1  C:\Windows\System32\winlogon.exe
   1  C:\Windows\System32\wlanext.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
   1  C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe
   1  C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.386_none_e72d64cd263a3a51\TiWorker.exe
   1  C:\Windows\explorer.exe
   1  C:\Windows\servicing\TrustedInstaller.exe
   1  D:\SteamLibrary\steamapps\common\wallpaper_engine\bin\wallpaperservice32_c.exe
   1  D:\SteamLibrary\steamapps\common\wallpaper_engine\wallpaper32.exe

O1 - Hosts.ICS: 192.168.137.1 DESKTOP-UTVHLIJ.mshome.net # 2025 8 5 1 9 56 0 884
O1 - Hosts.ICS: 27 4 952
O2 - HKLM\..\BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll
O2 - HKLM\..\BHO: IEToEdge BHO - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} - C:\Program Files (x86)\Microsoft\Edge\Application\84.0.522.52\BHO\ie_to_edge_bho_64.dll
O2 - HKLM\..\BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_201\bin\jp2ssv.dll
O2 - HKLM\..\BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_201\bin\ssv.dll
O2-32 - HKLM\..\BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
O2-32 - HKLM\..\BHO: IEToEdge BHO - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} - C:\Program Files (x86)\Microsoft\Edge\Application\84.0.522.52\BHO\ie_to_edge_bho.dll
O4 - (disabled) HKCU\..\Run-: [CCXProcess] = C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
O4 - HKCU\..\StartupApproved\Run: [IDMan] = C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot (2020/04/13)
O4 - HKCU\..\StartupApproved\Run: [Steam] = C:\Program Files (x86)\Steam\steam.exe -silent (2020/04/13)
O4 - HKCU\..\StartupApproved\Run: [uTorrent] = C:\Users\Murat\AppData\Roaming\uTorrent\uTorrent.exe /MINIMIZED (2020/04/18)
O4 - HKLM\..\Run: [RTHDVCPL] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
O4 - HKLM\..\Run: [RtHDVBg_ASC] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /ASC
O4 - HKLM\..\StartupApproved\Run: [Riot Vanguard] = C:\Program Files\Riot Vanguard\vgtray.exe (2020/08/02)
O4 - HKLM\..\StartupApproved\Run: [SecurityHealth] = C:\WINDOWS\system32\SecurityHealthSystray.exe (2020/04/13)
O4 - HKLM\..\StartupApproved\Run: [TabletDriver] = C:\PenTabletDriver\TabletDriver.exe -hide (2020/07/13)
O4-32 - (disabled) HKLM\..\Run-: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O4-32 - (disabled) HKLM\..\RunOnce-: [{9CDC7BD4-3E91-4E21-9E31-3D34AC632905}] = C:\WINDOWS\system32\cmd.exe /C start /D "C:\Users\Murat\AppData\Local\Temp" /B {9CDC7BD4-3E91-4E21-9E31-3D34AC632905}.cmd
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\IDM ile indir: (default) = C:\Program Files (x86)\Internet Download Manager\IEExt.htm
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\Tüm bağlantıları IDM ile indir: (default) = C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
O17 - DHCP DNS 1: 176.240.150.250
O17 - DHCP DNS 2: 46.197.15.60
O17 - DHCP DNS 3: 178.233.140.110
O21 - HKLM\..\ShellIconOverlayIdentifiers\            IDM Shell Extension: IDM Shell Extension - {CDC95B92-E27C-4745-A8C5-64A52A78855D} - C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\   AccExtIco1: AccExtIco1 Class - {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} - C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\   AccExtIco2: AccExtIco2 Class - {853B7E05-C47D-4985-909A-D0DC5C6D7303} - C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\   AccExtIco3: AccExtIco3 Class - {42D38F2E-98E9-4382-B546-E24E4D6D04BB} - C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive1: (no name) - {BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive2: (no name) - {5AB7172C-9C11-405C-8DD5-AF20F3606282} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive3: (no name) - {A78ED123-AB77-406B-9962-2A5D9D2F7F30} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive4: (no name) - {F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive5: (no name) - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive6: (no name) - {9AA2F32D-362A-42D9-9328-24A483E2CCC3} - (no file)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive7: (no name) - {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive1: (no name) - {BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive2: (no name) - {5AB7172C-9C11-405C-8DD5-AF20F3606282} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive3: (no name) - {A78ED123-AB77-406B-9962-2A5D9D2F7F30} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive4: (no name) - {F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive5: (no name) - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive6: (no name) - {9AA2F32D-362A-42D9-9328-24A483E2CCC3} - (no file)
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ OneDrive7: (no name) - {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} - (no file)
O22 - Task (.job): (disabled) (Not scheduled) CreateExplorerShellUnelevatedTask.job - C:\WINDOWS\explorer.exe /NOUACCHECK
O23 - Service R2: ASUS Com Service - (asComSvc) - C:\Program Files (x86)\ASUS\AXSP\4.00.42\atkexComSvc.exe
O23 - Service R2: Intel(R) Audio Service - (IntelAudioService) - C:\WINDOWS\system32\cAVS\Intel(R) Audio Service\IntelAudioService.exe
O23 - Service R2: Intel(R) Content Protection HDCP Service - (cplspcon) - C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\IntelCpHDCPSvc.exe
O23 - Service R2: Intel(R) HD Graphics Control Panel Service - (igfxCUIService2.0.0.0) - C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_05de635879d45aad\igfxCUIService.exe
O23 - Service R2: Malwarebytes Service - (MBAMService) - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
O23 - Service R2: NVIDIA Display Container LS - (NVDisplay.ContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
O23 - Service R2: NVIDIA LocalSystem Container - (NvContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
O23 - Service R2: Wallpaper Engine Service - D:\SteamLibrary\steamapps\common\wallpaper_engine\bin\wallpaperservice32_c.exe
O23 - Service R3: Intel(R) Content Protection HECI Service - (cphs) - C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\IntelCpHeciSvc.exe
O23 - Service R3: Quick Access Service - (QASvc) - C:\Program Files\Acer\Acer Quick Access\QASvc.exe
O23 - Service S2:  Microsoft Edge Güncelleştirmesi Hizmeti (edgeupdate) - (edgeupdate) - C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe /svc
O23 - Service S2: Bitdefender Product Agent Service - (ProductAgentService) - C:\Program Files\Bitdefender Agent\ProductAgentService.exe  (file missing)
O23 - Service S3:  Microsoft Edge Güncelleştirmesi Hizmeti (edgeupdatem) - (edgeupdatem) - C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe /medsvc
O23 - Service S3: Microsoft Edge Elevation Service - (MicrosoftEdgeElevationService) - C:\Program Files (x86)\Microsoft\Edge\Application\84.0.522.52\elevation_service.exe
O23 - Service S3: Office 64 Source Engine - (ose64) - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
O23 - Service S3: Quick Access Local Service - (QALSvc) - C:\Program Files\Acer\Acer Quick Access\QALSvc.exe
O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService
O23 - Service S3: VirtualBox system service - (VBoxSDS) - C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe
O26 - Debugger: HKLM\..\osppsvc.exe: [Debugger] = rundll32.exe SppExtComObjHook.dll,PatcherMain (file missing)


--
End of file - Time spent: 22,2 sec. - 24938 bytes, CRC32: FFFFFFFF. Sign: ꌄ
Kod: 
StartupList report, 2.08.2020, 16:30:29
StartupList version 2.09.18
Started from: C:\Users\Murat\Desktop\HiJackThis.exe
Detected: Windows 10 Home Single Language SP0 (Windows WinNT 10.0.19041.388)
Logged on as 'Murat' to 'DESKTOP-UTVHLIJ'
* Using default options (see end of log for possible options)
==================================================

Running processes (143):

[C:\Program Files (x86)\ASUS\AXSP\4.00.42\atkexComSvc.exe (34)]
C:\Program Files (x86)\ASUS\AXSP\4.00.42\AsIO.dll
C:\Program Files (x86)\ASUS\AXSP\4.00.42\ASUS_WMI.dll
C:\Program Files (x86)\ASUS\AXSP\4.00.42\ATKEX.dll
C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\X86\MpOav.dll
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\SYSTEM32\amsi.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\system32\version.dll
C:\WINDOWS\system32\wbem\fastprox.dll
C:\WINDOWS\system32\wbem\wbemprox.dll
C:\WINDOWS\system32\wbem\wbemsvc.dll
C:\WINDOWS\SYSTEM32\wbemcomn.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WINMM.dll
C:\WINDOWS\System32\WS2_32.dll

[C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (112)]
C:\Program Files (x86)\NVIDIA Corporation\NvAb\NvAbHubClient\NvPluginAbHubClient32.dll
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libcrypto-1_1.dll
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\MessageBus.dll
C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvABHubAPI.node
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvBackendAPINode.node
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameStreamAPINode.node
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSDKAPINode.node
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvShadowPlayAPINode.node
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvUtil.node
C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\NvGameShare.dll
C:\Program Files (x86)\NVIDIA Corporation\NvStreamSrv\NvGfeServiceBridge.dll
C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryAPI32.dll
C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryBridge32.dll
C:\Program Files (x86)\NVIDIA Corporation\ShadowPlay\IpcCommon.dll
C:\Program Files (x86)\NVIDIA Corporation\ShadowPlay\nvspapi.dll
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackendAPI32.dll
C:\WINDOWS\SYSTEM32\AcLayers.DLL
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\SYSTEM32\apphelp.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptprimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\CoreMessaging.dll
C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\SYSTEM32\CRYPTBASE.dll
C:\WINDOWS\SYSTEM32\cryptnet.dll
C:\WINDOWS\SYSTEM32\CRYPTSP.dll
C:\WINDOWS\SYSTEM32\dbghelp.dll
C:\WINDOWS\SYSTEM32\DEVOBJ.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
C:\WINDOWS\SYSTEM32\DINPUT8.DLL
C:\WINDOWS\SYSTEM32\DNSAPI.dll
C:\WINDOWS\SYSTEM32\dxcore.dll
C:\WINDOWS\SYSTEM32\dxgi.dll
C:\WINDOWS\System32\fwpuclnt.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\SYSTEM32\HID.DLL
C:\WINDOWS\System32\imagehlp.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\inputhost.dll
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\MPR.dll
C:\WINDOWS\SYSTEM32\MSASN1.dll
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\SYSTEM32\MSVCP140.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\system32\napinsp.dll
C:\WINDOWS\system32\NLAapi.dll
C:\WINDOWS\System32\Normaliz.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\system32\pnrpnsp.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\SYSTEM32\PROPSYS.dll
C:\WINDOWS\System32\PSAPI.DLL
C:\WINDOWS\SYSTEM32\qwave.dll
C:\Windows\System32\rasadhlp.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\SYSTEM32\secur32.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\SYSTEM32\sfc.dll
C:\WINDOWS\SYSTEM32\sfc_os.DLL
C:\WINDOWS\System32\SHCORE.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\SYSTEM32\SSPICLI.DLL
C:\WINDOWS\SYSTEM32\TRAFFIC.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\SYSTEM32\VCRUNTIME140.dll
C:\WINDOWS\SYSTEM32\VERSION.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\WINMM.dll
C:\WINDOWS\System32\winrnr.dll
C:\WINDOWS\SYSTEM32\WINSPOOL.DRV
C:\WINDOWS\System32\WINTRUST.DLL
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\System32\WLDAP32.dll
C:\WINDOWS\SYSTEM32\Wldp.dll
C:\WINDOWS\SYSTEM32\WMICLNT.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\system32\wshbth.dll
C:\WINDOWS\SYSTEM32\WTSAPI32.dll
C:\WINDOWS\SYSTEM32\XINPUT9_1_0.dll
C:\WINDOWS\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.388_none_429cd6de8a9002ce\gdiplus.dll

[C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe (66)]
C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MpOav.dll
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\SYSTEM32\amsi.dll
C:\WINDOWS\SYSTEM32\apphelp.dll
C:\Windows\System32\appresolver.dll
C:\Windows\System32\Bcp47Langs.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\SYSTEM32\ColorAdapterClient.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\DEVOBJ.dll
C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_05de635879d45aad\igfxexps.dll
C:\WINDOWS\SYSTEM32\DSPARSE.dll
C:\WINDOWS\SYSTEM32\edputil.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\HID.DLL
C:\WINDOWS\SYSTEM32\iertutil.dll
C:\WINDOWS\System32\imagehlp.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\mscms.dll
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreCommonProxyStub.dll
C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\POWRPROF.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\SYSTEM32\PROPSYS.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\System32\SHCORE.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\Windows\System32\SLC.dll
C:\Windows\System32\sppc.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\SYSTEM32\urlmon.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\SYSTEM32\VERSION.dll
C:\WINDOWS\system32\wbem\fastprox.dll
C:\WINDOWS\system32\wbem\wbemprox.dll
C:\WINDOWS\system32\wbem\wbemsvc.dll
C:\WINDOWS\SYSTEM32\wbemcomn.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
C:\Windows\System32\Windows.StateRepositoryPS.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\Windows\System32\wintypes.dll
C:\WINDOWS\SYSTEM32\Wldp.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\WTSAPI32.dll

[C:\Program Files\Acer\Acer Quick Access\QAAgent.exe (39)]
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\SYSTEM32\apphelp.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CoreMessaging.dll
C:\WINDOWS\System32\CoreUIComponents.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\imagehlp.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\POWRPROF.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SHCORE.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\SYSTEM32\textinputframework.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WindowsCodecs.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\WTSAPI32.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.388_none_faefa0077613d9c8\gdiplus.dll

[C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe (39)]
C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MpOav.dll
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\SYSTEM32\amsi.dll
C:\WINDOWS\SYSTEM32\apphelp.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\DSPARSE.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\imagehlp.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\system32\version.dll
C:\WINDOWS\system32\wbem\fastprox.dll
C:\WINDOWS\system32\wbem\wbemprox.dll
C:\WINDOWS\system32\wbem\wbemsvc.dll
C:\WINDOWS\SYSTEM32\wbemcomn.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\WTSAPI32.dll

[C:\Program Files\Acer\Acer Quick Access\QASvc.exe (30)]
C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MpOav.dll
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\SYSTEM32\amsi.dll
C:\WINDOWS\SYSTEM32\apphelp.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\imagehlp.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\SYSTEM32\tdh.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\system32\version.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\SYSTEM32\WTSAPI32.dll

C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

[C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (113)]
C:\Program Files\Malwarebytes\Anti-Malware\imageformats\qico.dll
C:\Program Files\Malwarebytes\Anti-Malware\imageformats\qjpeg.dll
C:\Program Files\Malwarebytes\Anti-Malware\imageformats\qsvg.dll
C:\Program Files\Malwarebytes\Anti-Malware\mbcut.dll
C:\Program Files\Malwarebytes\Anti-Malware\MSVCP140.dll
C:\Program Files\Malwarebytes\Anti-Malware\platforms\qwindows.dll
C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll
C:\Program Files\Malwarebytes\Anti-Malware\Qt5Gui.dll
C:\Program Files\Malwarebytes\Anti-Malware\Qt5Network.dll
C:\Program Files\Malwarebytes\Anti-Malware\Qt5Qml.dll
C:\Program Files\Malwarebytes\Anti-Malware\Qt5QmlModels.dll
C:\Program Files\Malwarebytes\Anti-Malware\Qt5QmlWorkerScript.dll
C:\Program Files\Malwarebytes\Anti-Malware\Qt5Quick.dll
C:\Program Files\Malwarebytes\Anti-Malware\Qt5QuickControls2.dll
C:\Program Files\Malwarebytes\Anti-Malware\Qt5QuickTemplates2.dll
C:\Program Files\Malwarebytes\Anti-Malware\Qt5Svg.dll
C:\Program Files\Malwarebytes\Anti-Malware\Qt5Widgets.dll
C:\Program Files\Malwarebytes\Anti-Malware\Qt5WinExtras.dll
C:\Program Files\Malwarebytes\Anti-Malware\QtANGLE.dll
C:\Program Files\Malwarebytes\Anti-Malware\QtQml\Models.2\modelsplugin.dll
C:\Program Files\Malwarebytes\Anti-Malware\QtQuick.2\qtquick2plugin.dll
C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Controls.2\qtquickcontrols2plugin.dll
C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Controls\qtquickcontrolsplugin.dll
C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Dialogs\dialogplugin.dll
C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Layouts\qquicklayoutsplugin.dll
C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Templates.2\qtquicktemplates2plugin.dll
C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Window.2\windowplugin.dll
C:\Program Files\Malwarebytes\Anti-Malware\styles\qwindowsvistastyle.dll
C:\Program Files\Malwarebytes\Anti-Malware\TrayPlugin.dll
C:\Program Files\Malwarebytes\Anti-Malware\VCRUNTIME140.dll
C:\ProgramData\Malwarebytes\MBAMService\IrisPlugins\TrayPlugin.EXPT-59_Test.x64.dll
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\CFGMGR32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CoreMessaging.dll
C:\WINDOWS\System32\CoreUIComponents.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
C:\WINDOWS\SYSTEM32\d3d11.dll
C:\WINDOWS\SYSTEM32\d3d9.dll
C:\WINDOWS\system32\dataexchange.dll
C:\WINDOWS\system32\dcomp.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
C:\WINDOWS\SYSTEM32\DNSAPI.dll
C:\WINDOWS\SYSTEM32\dwmapi.dll
C:\WINDOWS\system32\dwrite.dll
C:\WINDOWS\SYSTEM32\dxgi.dll
C:\WINDOWS\System32\fwpuclnt.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\iertutil.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\MPR.dll
C:\WINDOWS\SYSTEM32\MSASN1.dll
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\system32\napinsp.dll
C:\WINDOWS\SYSTEM32\NETAPI32.dll
C:\WINDOWS\System32\netprofm.dll
C:\WINDOWS\SYSTEM32\NETUTILS.DLL
C:\WINDOWS\system32\NLAapi.dll
C:\WINDOWS\System32\npmproxy.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\ondemandconnroutehelper.dll
C:\WINDOWS\system32\pnrpnsp.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\System32\PSAPI.DLL
C:\Windows\System32\rasadhlp.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\SYSTEM32\sfc.dll
C:\WINDOWS\SYSTEM32\sfc_os.DLL
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\SYSTEM32\SRVCLI.DLL
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\SYSTEM32\sxs.dll
C:\WINDOWS\SYSTEM32\textinputframework.dll
C:\WINDOWS\system32\twinapi.appcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\SYSTEM32\UxTheme.dll
C:\WINDOWS\SYSTEM32\VERSION.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\winhttp.dll
C:\WINDOWS\SYSTEM32\WININET.dll
C:\WINDOWS\SYSTEM32\WINMM.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\WINDOWS\System32\winrnr.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\SYSTEM32\Wldp.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\system32\wshbth.dll
C:\WINDOWS\SYSTEM32\WTSAPI32.dll

[C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (102)]
C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session\NvFBC\NvFBCPlugin.dll
C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session\NvProfileUpdater\NvProfileUpdaterPlugin.dll
C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session\nvxdsyncplugin.dll
C:\Program Files\NVIDIA Corporation\Display\NvUI.dll
C:\Program Files\NVIDIA Corporation\Display\nvxdapix.dll
C:\Program Files\NVIDIA Corporation\Display\nvxdbat.dll
C:\Program Files\NVIDIA Corporation\Display\nvxdplcy.dll
C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryAPI64.dll
C:\WINDOWS\System32\ADVAPI32.dll
C:\Windows\System32\ATL.DLL
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\SYSTEM32\ColorAdapterClient.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\crypt32.dll
C:\WINDOWS\SYSTEM32\cryptbase.dll
C:\WINDOWS\SYSTEM32\cryptnet.dll
C:\WINDOWS\SYSTEM32\CRYPTSP.dll
C:\WINDOWS\SYSTEM32\d3d9.dll
C:\Windows\System32\DCIMAN32.dll
C:\Windows\System32\DDRAW.dll
C:\Windows\System32\ddrawex.dll
C:\WINDOWS\SYSTEM32\DEVOBJ.dll
C:\WINDOWS\SYSTEM32\DEVRTL.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
C:\WINDOWS\SYSTEM32\DNSAPI.dll
C:\WINDOWS\SYSTEM32\DPAPI.DLL
C:\WINDOWS\SYSTEM32\drvstore.dll
C:\WINDOWS\SYSTEM32\dwmapi.dll
C:\WINDOWS\SYSTEM32\dxgi.dll
C:\Windows\System32\Dxtrans.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\Windows\System32\iertutil.dll
C:\WINDOWS\System32\imagehlp.dll
C:\WINDOWS\SYSTEM32\IMGUTIL.DLL
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\MSASN1.dll
C:\WINDOWS\SYSTEM32\mscms.dll
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\SYSTEM32\MSIMG32.dll
C:\WINDOWS\SYSTEM32\mskeyprotect.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\SYSTEM32\ncrypt.dll
C:\WINDOWS\system32\ncryptsslp.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\SYSTEM32\nvapi64.dll
C:\WINDOWS\SYSTEM32\NVSVC64.DLL
C:\WINDOWS\system32\NVSVCR.DLL
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\SYSTEM32\OLEACC.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\pngfilt.dll
C:\WINDOWS\system32\powrprof.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\System32\PSAPI.DLL
C:\Windows\System32\rasadhlp.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\system32\schannel.DLL
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.DLL
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\SYSTEM32\SPINF.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\Windows\System32\urlmon.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\SYSTEM32\VERSION.dll
C:\WINDOWS\SYSTEM32\webio.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\WINHTTP.dll
C:\WINDOWS\SYSTEM32\WINMM.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\WINDOWS\SYSTEM32\WINSPOOL.DRV
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\System32\WINTRUST.DLL
C:\WINDOWS\SYSTEM32\Wldp.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\WTSAPI32.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.19041.1_none_4b395a7b3c8e63ab\Comctl32.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_b555e41d4684ddec\COMCTL32.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.388_none_faefa0077613d9c8\gdiplus.dll

[C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (59)]
C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\DisplayDriverRAS\_DisplayDriverRAS.dll
C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\NvXDCore.dll
C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\Watchdog\NVDisplayPluginWatchdog.dll
C:\Program Files\NVIDIA Corporation\Display\nvxdbat.dll
C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MpOav.dll
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\SYSTEM32\amsi.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\crypt32.dll
C:\WINDOWS\SYSTEM32\cryptbase.dll
C:\WINDOWS\SYSTEM32\cryptnet.dll
C:\WINDOWS\SYSTEM32\CRYPTSP.dll
C:\WINDOWS\SYSTEM32\DEVOBJ.dll
C:\WINDOWS\SYSTEM32\DEVRTL.dll
C:\WINDOWS\SYSTEM32\drvstore.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\System32\imagehlp.dll
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\SYSTEM32\SPINF.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\SYSTEM32\VERSION.dll
C:\WINDOWS\system32\wbem\fastprox.dll
C:\WINDOWS\system32\wbem\wbemprox.dll
C:\WINDOWS\system32\wbem\wbemsvc.dll
C:\WINDOWS\SYSTEM32\wbemcomn.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\System32\WINTRUST.DLL
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\WTSAPI32.dll

[C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (107)]
C:\Program Files\NVIDIA Corporation\NvContainer\libcrypto-1_1.dll
C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
C:\Program Files\NVIDIA Corporation\NvContainer\libssl-1_1.dll
C:\Program Files\NVIDIA Corporation\NvContainer\MessageBus.dll
C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll
C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_NvMessageBusBroadcast.dll
C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_NvPluginNvapiMonitor.dll
C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\GameStream\Discovery\_NvMdnsPlugin.dll
C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\GameStream\Main\_NvStreamControl.dll
C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\GameStream\Pairing\_IdentityPlugin.dll
C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvTelemetry\NvTelemetry64.dll
C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\ShadowPlay\_nvspserviceplugin64.dll
C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\SWCPlugin\_ShieldWirelessControllerPlugin.dll
C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\Watchdog\NvPluginWatchdog.dll
C:\Program Files\NVIDIA Corporation\NvContainer\poco.dll
C:\Program Files\NVIDIA Corporation\NvContainer\PocoInitializer.dll
C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
C:\Program Files\NVIDIA Corporation\NvStreamSrv\rxcore.dll
C:\Program Files\NVIDIA Corporation\NvStreamSrv\rxdiag.dll
c:\program files\nvidia corporation\nvstreamsrv\rxnvgamepad.dll
C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryAPI64.dll
C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryBridge64.dll
C:\Program Files\NVIDIA Corporation\ShadowPlay\IpcCommon64.dll
C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MpOav.dll
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\SYSTEM32\amsi.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\SYSTEM32\bthprops.cpl
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\crypt32.dll
C:\WINDOWS\SYSTEM32\cryptbase.dll
C:\WINDOWS\SYSTEM32\cryptnet.dll
C:\WINDOWS\SYSTEM32\CRYPTSP.dll
C:\WINDOWS\SYSTEM32\CRYPTUI.dll
C:\WINDOWS\SYSTEM32\DEVOBJ.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
C:\WINDOWS\SYSTEM32\DNSAPI.dll
C:\WINDOWS\SYSTEM32\DPAPI.DLL
C:\WINDOWS\SYSTEM32\dxgi.dll
C:\WINDOWS\System32\fwpuclnt.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\SYSTEM32\hid.dll
C:\WINDOWS\System32\imagehlp.dll
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\MSASN1.dll
C:\WINDOWS\SYSTEM32\mskeyprotect.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\SYSTEM32\MSVCP140.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\SYSTEM32\ncrypt.dll
C:\WINDOWS\system32\ncryptprov.dll
C:\WINDOWS\system32\ncryptsslp.dll
C:\WINDOWS\SYSTEM32\NETAPI32.dll
C:\WINDOWS\SYSTEM32\NETUTILS.DLL
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\system32\nvapi64.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\POWRPROF.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\SYSTEM32\qwave.dll
C:\Windows\System32\rasadhlp.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\system32\schannel.DLL
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\SYSTEM32\SRVCLI.DLL
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\SYSTEM32\TRAFFIC.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\SYSTEM32\VCRUNTIME140.dll
C:\WINDOWS\SYSTEM32\VERSION.dll
C:\WINDOWS\SYSTEM32\webio.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\WINHTTP.dll
C:\WINDOWS\SYSTEM32\WINMM.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\System32\WINTRUST.DLL
C:\WINDOWS\SYSTEM32\WKSCLI.DLL
C:\WINDOWS\SYSTEM32\Wldp.dll
C:\WINDOWS\SYSTEM32\WMICLNT.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\WTSAPI32.dll
C:\WINDOWS\SYSTEM32\XmlLite.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_b555e41d4684ddec\comctl32.dll

[C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (85)]
C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll
C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User\NvBackend\NvBackend64.dll
C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryAPI64.dll
C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryBridge64.dll
C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MpOav.dll
C:\Users\Murat\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\Ontology64.dll
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\SYSTEM32\amsi.dll
C:\WINDOWS\system32\apphelp.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\crypt32.dll
C:\WINDOWS\SYSTEM32\cryptbase.dll
C:\WINDOWS\SYSTEM32\cryptnet.dll
C:\WINDOWS\SYSTEM32\CRYPTSP.dll
C:\WINDOWS\SYSTEM32\DEVOBJ.dll
C:\WINDOWS\SYSTEM32\DEVRTL.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
C:\WINDOWS\SYSTEM32\DNSAPI.dll
C:\WINDOWS\SYSTEM32\DPAPI.DLL
C:\WINDOWS\SYSTEM32\drvstore.dll
C:\WINDOWS\SYSTEM32\dsound.dll
C:\WINDOWS\SYSTEM32\dxcore.dll
C:\WINDOWS\System32\fwpuclnt.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\System32\imagehlp.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\MSASN1.dll
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\SYSTEM32\mskeyprotect.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\system32\napinsp.dll
C:\WINDOWS\SYSTEM32\ncrypt.dll
C:\WINDOWS\system32\ncryptsslp.dll
C:\WINDOWS\system32\NLAapi.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\system32\pnrpnsp.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\Windows\System32\rasadhlp.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\system32\schannel.DLL
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\SYSTEM32\SPINF.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\SYSTEM32\VERSION.dll
C:\WINDOWS\SYSTEM32\webio.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\WINHTTP.dll
C:\WINDOWS\SYSTEM32\winmmbase.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\WINDOWS\System32\winrnr.dll
C:\WINDOWS\System32\WINTRUST.DLL
C:\WINDOWS\SYSTEM32\Wldp.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\system32\wshbth.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_b555e41d4684ddec\comctl32.dll

[C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (63)]
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\SYSTEM32\apphelp.dll
C:\WINDOWS\system32\audioeng.dll
C:\Windows\System32\AudioSes.dll
C:\WINDOWS\system32\AVRT.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\Windows\System32\CoreMessaging.dll
C:\Windows\System32\CoreUIComponents.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\SYSTEM32\DEVOBJ.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\IMM32.dll
C:\Windows\System32\InputHost.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MMDevApi.dll
C:\WINDOWS\SYSTEM32\MSASN1.dll
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\SYSTEM32\MSIMG32.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\SYSTEM32\OLEACC.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\oledlg.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\SYSTEM32\PROPSYS.dll
C:\WINDOWS\system32\RltkAPO64.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\RtkCfg64.dll
C:\WINDOWS\system32\RtkInt64.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\Windows\System32\TextInputFramework.dll
C:\WINDOWS\SYSTEM32\twinapi.appcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\SYSTEM32\UxTheme.dll
C:\WINDOWS\SYSTEM32\VERSION.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\WindowManagementAPI.dll
C:\Windows\System32\Windows.UI.dll
C:\WINDOWS\SYSTEM32\WindowsCodecs.dll
C:\WINDOWS\SYSTEM32\WINMM.dll
C:\WINDOWS\SYSTEM32\WINSPOOL.DRV
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\WTSAPI32.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_b555e41d4684ddec\COMCTL32.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.388_none_faefa0077613d9c8\gdiplus.dll

[C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (52)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\SYSTEM32\apphelp.dll
C:\WINDOWS\SYSTEM32\AUDIOSES.DLL
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\SYSTEM32\DEVOBJ.dll
C:\WINDOWS\SYSTEM32\DSOUND.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\IMM32.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MMDevApi.dll
C:\WINDOWS\SYSTEM32\MSASN1.dll
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\SYSTEM32\MSIMG32.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\SYSTEM32\OLEACC.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\oledlg.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\SYSTEM32\PROPSYS.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\SYSTEM32\UxTheme.dll
C:\WINDOWS\SYSTEM32\VERSION.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\WindowsCodecs.dll
C:\WINDOWS\SYSTEM32\WINMM.dll
C:\WINDOWS\SYSTEM32\winmmbase.dll
C:\WINDOWS\SYSTEM32\WINSPOOL.DRV
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\SYSTEM32\Wldp.dll
C:\WINDOWS\SYSTEM32\WTSAPI32.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_b555e41d4684ddec\COMCTL32.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.388_none_faefa0077613d9c8\gdiplus.dll

C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2006.10-0\MsMpEng.exe
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2006.10-0\NisSrv.exe

[C:\Users\Murat\Desktop\HiJackThis.exe (78)]
C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\X86\MpOav.dll
C:\Users\Murat\Desktop\mscomctl.ocx
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\SYSTEM32\amsi.dll
C:\WINDOWS\SYSTEM32\apphelp.dll
C:\WINDOWS\system32\asycfilt.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\comdlg32.dll
C:\WINDOWS\System32\coml2.dll
C:\WINDOWS\System32\CoreMessaging.dll
C:\WINDOWS\System32\CoreUIComponents.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\SYSTEM32\CRYPTBASE.dll
C:\WINDOWS\SYSTEM32\CRYPTSP.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
C:\WINDOWS\SYSTEM32\DNSAPI.dll
C:\WINDOWS\system32\explorerframe.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\System32\imagehlp.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\IPHlpApi.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\MSASN1.dll
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\SYSTEM32\MSVBVM60.DLL
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.DLL
C:\Windows\System32\OneCoreCommonProxyStub.dll
C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\System32\psapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\SYSTEM32\Sfc.dll
C:\WINDOWS\SYSTEM32\sfc_os.DLL
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\shell32.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\SYSTEM32\SXS.DLL
C:\WINDOWS\SYSTEM32\textinputframework.dll
C:\WINDOWS\SYSTEM32\TextShaping.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\USER32.DLL
C:\WINDOWS\SYSTEM32\Userenv.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\SYSTEM32\Verifier.dll
C:\WINDOWS\SYSTEM32\version.dll
C:\WINDOWS\system32\wbem\fastprox.dll
C:\WINDOWS\system32\wbem\wbemdisp.dll
C:\WINDOWS\system32\wbem\wbemprox.dll
C:\WINDOWS\system32\wbem\wbemsvc.dll
C:\WINDOWS\system32\wbem\wmiutils.dll
C:\WINDOWS\SYSTEM32\wbemcomn.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\WINDOWS\System32\Wintrust.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\SYSTEM32\Wldp.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll

[C:\Windows\explorer.exe (303)]
C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
C:\Program Files (x86)\Internet Download Manager\IDMNetMon64.DLL
C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll
C:\Program Files\7-Zip\7-zip.dll
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll
C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll
C:\Program Files\Windows Defender\shellext.dll
C:\Program Files\WinRAR\rarext.dll
C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\mscorlib\828ccaa50bf1ef868f4ecc1cf23f7dff\mscorlib.ni.dll
C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\System.Core\51c717074d410a0c57c8c71f559b7912\System.Core.ni.dll
C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\System.Drawing\3185f3525da31135f479b02aae951fc9\System.Drawing.ni.dll
C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\c3b48dec162e57dae7b49360c1696533\System.Xml.Linq.ni.dll
C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\System.Xml\c70d58144af24e7ea3fe080254806186\System.Xml.ni.dll
C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\System\ded0489c10175ac76b2e1eb72027b058\System.ni.dll
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
C:\Windows\ShellComponents\TaskFlowUI.dll
C:\Windows\ShellComponents\WindowsInternal.ComposableShell.Experiences.Switcher.dll
C:\Windows\ShellExperiences\TileControl.dll
C:\Windows\System32\AboveLockAppHost.dll
C:\WINDOWS\System32\Actioncenter.dll
C:\Windows\System32\ActXPrxy.dll
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\SYSTEM32\AEPIC.dll
C:\Windows\System32\AppExtension.dll
C:\WINDOWS\SYSTEM32\apphelp.dll
C:\WINDOWS\System32\ApplicationFrame.dll
C:\Windows\System32\appresolver.dll
C:\Windows\System32\AppXDeploymentClient.dll
C:\WINDOWS\SYSTEM32\atlthunk.dll
C:\WINDOWS\SYSTEM32\AUDIOSES.DLL
C:\WINDOWS\system32\authui.dll
C:\WINDOWS\system32\BatMeter.dll
C:\Windows\System32\Bcp47Langs.dll
C:\Windows\System32\bcp47mrm.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\Windows\System32\BluetoothApis.dll
C:\Windows\System32\bthprops.cpl
C:\Windows\System32\CapabilityAccessManagerClient.dll
C:\WINDOWS\system32\cdp.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\SYSTEM32\cflapi.dll
C:\WINDOWS\SYSTEM32\CHARTV.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\SYSTEM32\cldapi.dll
C:\Windows\System32\ColorAdapterClient.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\coml2.dll
C:\WINDOWS\SYSTEM32\CompPkgSup.DLL
C:\Windows\System32\comsvcs.dll
C:\WINDOWS\System32\container.dll
C:\Windows\System32\CoreMessaging.dll
C:\Windows\System32\CoreUIComponents.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
C:\WINDOWS\system32\cryptngc.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
C:\WINDOWS\SYSTEM32\cscapi.dll
C:\WINDOWS\System32\d2d1.dll
C:\WINDOWS\SYSTEM32\D3D10Warp.dll
C:\WINDOWS\system32\d3d11.dll
C:\WINDOWS\system32\dataexchange.dll
C:\WINDOWS\System32\davclnt.dll
C:\WINDOWS\System32\DAVHLPR.dll
C:\WINDOWS\SYSTEM32\daxexec.dll
C:\WINDOWS\SYSTEM32\dcomp.dll
C:\Windows\System32\DevDispItemProvider.dll
C:\WINDOWS\SYSTEM32\DEVOBJ.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
C:\WINDOWS\system32\DictationManager.dll
C:\Windows\System32\dlnashext.dll
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igc64.dll
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igd10iumd64.dll
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igdgmm64.dll
C:\WINDOWS\System32\drprov.dll
C:\WINDOWS\system32\dsreg.dll
C:\WINDOWS\SYSTEM32\DUI70.dll
C:\WINDOWS\SYSTEM32\DUser.dll
C:\Windows\System32\dusmapi.dll
C:\WINDOWS\SYSTEM32\dwmapi.dll
C:\WINDOWS\system32\DWrite.dll
C:\WINDOWS\SYSTEM32\dxcore.dll
C:\WINDOWS\SYSTEM32\dxgi.dll
C:\WINDOWS\system32\dxp.dll
C:\WINDOWS\SYSTEM32\edputil.dll
C:\Windows\System32\EhStorAPI.dll
C:\Windows\System32\EhStorShell.dll
C:\WINDOWS\system32\es.dll
C:\Windows\System32\EthernetMediaManager.dll
C:\WINDOWS\system32\execmodelproxy.dll
C:\WINDOWS\system32\explorerframe.dll
C:\WINDOWS\SYSTEM32\FLTLIB.DLL
C:\WINDOWS\System32\framedynos.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\System32\hcproviders.dll
C:\Windows\System32\HolographicExtensions.dll
C:\WINDOWS\System32\IDStore.dll
C:\Windows\System32\ieframe.dll
C:\Windows\System32\ieproxy.dll
C:\Windows\System32\iertutil.dll
C:\WINDOWS\System32\imagehlp.dll
C:\Windows\System32\imapi2.dll
C:\WINDOWS\System32\IMM32.DLL
C:\Windows\System32\InputHost.dll
C:\Windows\System32\InputSwitch.dll
C:\WINDOWS\System32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\languageoverlayutil.dll
C:\WINDOWS\SYSTEM32\LINKINFO.dll
C:\WINDOWS\SYSTEM32\MFPlat.DLL
C:\WINDOWS\SYSTEM32\MLANG.dll
C:\WINDOWS\SYSTEM32\MMDevAPI.DLL
C:\WINDOWS\System32\MobileNetworking.dll
C:\WINDOWS\SYSTEM32\MPR.dll
C:\Windows\System32\MrmCoreR.dll
C:\WINDOWS\System32\MSASN1.dll
C:\Windows\System32\mscms.dll
C:\WINDOWS\SYSTEM32\mscoree.dll
C:\WINDOWS\System32\MSCTF.dll
C:\Windows\System32\msi.dll
C:\WINDOWS\SYSTEM32\MSIMG32.dll
C:\WINDOWS\SYSTEM32\msIso.dll
C:\WINDOWS\system32\mssprxy.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\SYSTEM32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\System32\MSWB7.dll
C:\WINDOWS\system32\mswsock.dll
C:\Windows\System32\msxml6.dll
C:\WINDOWS\SYSTEM32\mtxoci.dll
C:\WINDOWS\SYSTEM32\ncrypt.dll
C:\Windows\System32\NETAPI32.dll
C:\WINDOWS\System32\netprofm.dll
C:\WINDOWS\System32\netutils.dll
C:\WINDOWS\system32\NetworkExplorer.dll
C:\Windows\System32\NetworkUXBroker.dll
C:\WINDOWS\SYSTEM32\NInput.dll
C:\Windows\System32\nlaapi.dll
C:\WINDOWS\System32\nlmproxy.dll
C:\Windows\System32\NotificationControllerPS.dll
C:\WINDOWS\System32\npmproxy.dll
C:\WINDOWS\System32\npsm.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ntlanman.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\SYSTEM32\ntshrui.dll
C:\WINDOWS\system32\nvshext.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\SYSTEM32\OLEACC.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreCommonProxyStub.dll
C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\pcacli.dll
C:\Windows\System32\PCShellCommonProxyStub.dll
C:\WINDOWS\system32\pdh.dll
C:\WINDOWS\SYSTEM32\PhotoMetadataHandler.dll
C:\Windows\System32\PlayToDevice.dll
C:\WINDOWS\System32\pnidui.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\Windows\System32\PortableDeviceApi.dll
C:\Windows\System32\PortableDeviceTypes.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\system32\prnfldr.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\SYSTEM32\PROPSYS.dll
C:\WINDOWS\System32\provsvc.dll
C:\WINDOWS\System32\PSAPI.DLL
C:\Windows\System32\ResourcePolicyClient.dll
C:\Windows\System32\RMCLIENT.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\SYSTEM32\RTWorkQ.DLL
C:\WINDOWS\System32\samcli.dll
C:\WINDOWS\System32\SAMLIB.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\SYSTEM32\Secur32.dll
C:\WINDOWS\system32\SecurityHealthProxyStub.dll
C:\WINDOWS\system32\SettingMonitor.dll
C:\WINDOWS\system32\SettingSync.dll
C:\WINDOWS\system32\SettingSyncCore.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\SYSTEM32\sfc.dll
C:\WINDOWS\SYSTEM32\sfc_os.DLL
C:\WINDOWS\System32\shacct.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\system32\SHDOCVW.dll
C:\WINDOWS\System32\SHELL32.dll
C:\Windows\System32\ShellCommonCommonProxyStub.dll
C:\WINDOWS\System32\shlwapi.dll
C:\Windows\System32\SLC.dll
C:\WINDOWS\SYSTEM32\SndVolSSO.DLL
C:\Windows\System32\sppc.dll
C:\WINDOWS\System32\srchadmin.dll
C:\WINDOWS\SYSTEM32\srvcli.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\Windows\System32\StartTileData.dll
C:\Windows\System32\StateRepository.Core.dll
C:\WINDOWS\system32\stobject.dll
C:\WINDOWS\System32\StructuredQuery.dll
C:\WINDOWS\SYSTEM32\sxs.dll
C:\WINDOWS\System32\SyncCenter.dll
C:\WINDOWS\system32\Syncreg.dll
C:\WINDOWS\SYSTEM32\SystemEventsBrokerClient.dll
C:\WINDOWS\SYSTEM32\tabbtn.dll
C:\Windows\System32\TabBtnEx.dll
C:\Windows\System32\TaskFlowDataEngine.dll
C:\WINDOWS\SYSTEM32\tdh.dll
C:\Windows\System32\TetheringStation.dll
C:\Windows\System32\TextInputFramework.dll
C:\WINDOWS\SYSTEM32\TextShaping.dll
C:\Windows\System32\thumbcache.dll
C:\Windows\System32\TileDataRepository.dll
C:\WINDOWS\system32\twext.dll
C:\WINDOWS\SYSTEM32\twinapi.appcore.dll
C:\WINDOWS\SYSTEM32\TWINAPI.dll
C:\WINDOWS\System32\twinui.appcore.dll
C:\WINDOWS\system32\twinui.dll
C:\WINDOWS\system32\twinui.pcshell.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\ucrtbase_clr0400.dll
C:\Windows\System32\UiaManager.dll
C:\WINDOWS\System32\UIAnimation.dll
C:\WINDOWS\SYSTEM32\UIAutomationCore.DLL
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\Windows\System32\urlmon.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\Windows\System32\usermgrproxy.dll
C:\WINDOWS\SYSTEM32\UxTheme.dll
C:\WINDOWS\SYSTEM32\VCRUNTIME140_CLR0400.dll
C:\Windows\System32\VERSION.dll
C:\Windows\System32\VirtualMonitorManager.dll
C:\WINDOWS\System32\wer.dll
C:\WINDOWS\System32\werconcpl.dll
C:\WINDOWS\System32\wevtapi.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\system32\wincorlib.DLL
C:\Windows\System32\WindowManagementAPI.dll
C:\Windows\System32\Windows.ApplicationModel.dll
C:\Windows\System32\Windows.CloudStore.dll
C:\Windows\System32\Windows.CloudStore.Schema.Shell.dll
C:\Windows\System32\Windows.Data.Activities.dll
C:\Windows\System32\Windows.Devices.Enumeration.dll
C:\Windows\System32\Windows.FileExplorer.Common.dll
C:\Windows\System32\windows.immersiveshell.serviceprovider.dll
C:\Windows\System32\Windows.Internal.Signals.dll
C:\Windows\System32\Windows.Media.Devices.dll
C:\Windows\System32\Windows.Networking.Connectivity.dll
C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll
C:\Windows\System32\Windows.Shell.BlueLightReduction.dll
C:\Windows\System32\Windows.StateRepository.dll
C:\Windows\System32\Windows.StateRepositoryBroker.dll
C:\Windows\System32\Windows.StateRepositoryClient.dll
C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll
C:\Windows\System32\Windows.StateRepositoryPS.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\windows.storage.search.dll
C:\Windows\System32\Windows.System.Launcher.dll
C:\Windows\System32\Windows.UI.Core.TextInput.dll
C:\Windows\System32\Windows.UI.dll
C:\Windows\System32\Windows.UI.Immersive.dll
C:\WINDOWS\System32\Windows.UI.Shell.dll
C:\Windows\System32\Windows.UI.Xaml.dll
C:\Windows\System32\Windows.Web.dll
C:\WINDOWS\system32\windowscodecs.dll
C:\WINDOWS\system32\WindowsInternal.ComposableShell.DesktopHosting.dll
C:\WINDOWS\system32\windowsudk.shellcommon.dll
C:\Windows\System32\WINHTTP.dll
C:\WINDOWS\SYSTEM32\WININET.dll
C:\WINDOWS\SYSTEM32\WINMM.dll
C:\WINDOWS\SYSTEM32\winsta.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\Windows\System32\WinTypes.dll
C:\WINDOWS\System32\wkscli.dll
C:\WINDOWS\SYSTEM32\wlanapi.dll
C:\Windows\System32\WlanMediaManager.dll
C:\WINDOWS\SYSTEM32\Wldp.dll
C:\WINDOWS\System32\wlidprov.dll
C:\WINDOWS\system32\WMICLNT.dll
C:\Windows\System32\WorkfoldersShell.dll
C:\WINDOWS\system32\wpdshext.dll
C:\WINDOWS\system32\wpdshserviceobj.dll
C:\Windows\System32\wpnapps.dll
C:\Windows\System32\wpnclient.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\WSCAPI.dll
C:\WINDOWS\System32\wscinterop.dll
C:\WINDOWS\System32\wscui.cpl
C:\WINDOWS\SYSTEM32\WTSAPI32.dll
C:\Windows\System32\XmlLite.dll
C:\WINDOWS\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_08e1c10da83fbc83\MSVCR90.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_b555e41d4684ddec\comctl32.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.388_none_faefa0077613d9c8\gdiplus.dll

[C:\Windows\explorer.exe (64)]
C:\Windows\System32\ActXPrxy.dll
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\SYSTEM32\AEPIC.dll
C:\Windows\System32\appresolver.dll
C:\Windows\System32\Bcp47Langs.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\CFGMGR32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
C:\WINDOWS\SYSTEM32\dwmapi.dll
C:\WINDOWS\SYSTEM32\dxgi.dll
C:\WINDOWS\SYSTEM32\edputil.dll
C:\WINDOWS\system32\explorerframe.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\iertutil.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\MPR.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\SYSTEM32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\NInput.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreCommonProxyStub.dll
C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\pcacli.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\SYSTEM32\PROPSYS.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\sfc_os.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\Windows\System32\SLC.dll
C:\Windows\System32\smartscreenps.dll
C:\Windows\System32\sppc.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\SYSTEM32\twinapi.appcore.dll
C:\WINDOWS\SYSTEM32\TWINAPI.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\SYSTEM32\urlmon.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\SYSTEM32\UxTheme.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\Windows.StateRepositoryPS.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\Windows\System32\Windows.UI.AppDefaults.dll
C:\WINDOWS\SYSTEM32\WININET.dll
C:\Windows\System32\wintypes.dll
C:\WINDOWS\SYSTEM32\Wldp.dll
C:\WINDOWS\SYSTEM32\WTSAPI32.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_b555e41d4684ddec\comctl32.dll

[C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (43)]
C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_tr_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll
C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\mscorlib\95ce4e7117457677f847d9f26c3bdf0b\mscorlib.ni.dll
C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\PresentationCore\bac89f8b0aabbac534dc45800029fd21\PresentationCore.ni.dll
C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\eaba072a417b685d8021d82bf91fab44\System.ServiceProcess.ni.dll
C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\System\99002e97e8ca59923d89c93aa487c336\System.ni.dll
C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\WindowsBase\0c95cce6b3ee2f5cf405045cc362c91b\WindowsBase.ni.dll
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\wpfgfx_v0300.dll
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\CRYPTBASE.dll
C:\WINDOWS\SYSTEM32\CRYPTSP.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.dll
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\MSCOREE.DLL
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\netfxperf.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SHCORE.dll
C:\WINDOWS\System32\shell32.dll
C:\WINDOWS\SYSTEM32\shfolder.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\SYSTEM32\VERSION.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\Wldp.dll
C:\WINDOWS\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_88e266cb2fac7c0d\MSVCR80.dll

[C:\Windows\System32\audiodg.exe (36)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\system32\audioeng.dll
C:\WINDOWS\System32\audiokse.dll
C:\Windows\System32\AudioSes.dll
C:\WINDOWS\system32\AVRT.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\system32\DEVOBJ.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\system32\MMDevAPI.DLL
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\system32\PROPSYS.dll
C:\WINDOWS\system32\RltkAPO64.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\Windows.Media.Devices.dll
C:\WINDOWS\system32\WINMM.dll
C:\WINDOWS\System32\WMALFXGFXDSP.dll

[C:\Windows\System32\cAVS\Intel(R) Audio Service\IntelAudioService.exe (57)]
C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\mscorlib\828ccaa50bf1ef868f4ecc1cf23f7dff\mscorlib.ni.dll
C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\System.Configuration\60c81b040b0d5a579aa8fd1ff4b6ba34\System.Configuration.ni.dll
C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\System.Core\51c717074d410a0c57c8c71f559b7912\System.Core.ni.dll
C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\System.Serv759bfb78#\205c14504ca548439e0ba5cd728c2077\System.ServiceProcess.ni.dll
C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\System.Xml\c70d58144af24e7ea3fe080254806186\System.Xml.ni.dll
C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\System\ded0489c10175ac76b2e1eb72027b058\System.ni.dll
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\SYSTEM32\AUDIOSES.DLL
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\system32\cAVS\Intel(R) Audio Service\ControlModule.dll
C:\WINDOWS\system32\cAVS\Intel(R) Audio Service\DetectionVerificationDrv.dll
C:\WINDOWS\system32\cAVS\Intel(R) Audio Service\IntelSSTPreprocStreamer.dll
C:\WINDOWS\system32\cAVS\Intel(R) Audio Service\IntelWovSDK.dll
C:\WINDOWS\system32\cAVS\Intel(R) Audio Service\MultiChannelWoV.dll
C:\WINDOWS\system32\cAVS\Intel(R) Audio Service\WppLoggerDll.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\CRYPTBASE.dll
C:\WINDOWS\SYSTEM32\CRYPTSP.dll
C:\WINDOWS\System32\DEVOBJ.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.dll
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\ksuser.dll
C:\WINDOWS\System32\MMDevApi.dll
C:\WINDOWS\SYSTEM32\MSCOREE.DLL
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\System32\psapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\SYSTEM32\RTKSpeechPP.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\shell32.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\ucrtbase_clr0400.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\SYSTEM32\VCRUNTIME140_CLR0400.dll
C:\WINDOWS\SYSTEM32\VERSION.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\Wldp.dll

[C:\Windows\System32\conhost.exe (16)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\shell32.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll

[C:\Windows\System32\conhost.exe (18)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\shell32.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\System32\win32u.dll

C:\Windows\System32\csrss.exe
C:\Windows\System32\csrss.exe

[C:\Windows\System32\ctfmon.exe (46)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\system32\Bcp47Langs.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\system32\CoreMessaging.dll
C:\WINDOWS\system32\CoreUIComponents.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\Windows\System32\iertutil.dll
C:\WINDOWS\System32\IMM32.dll
C:\WINDOWS\SYSTEM32\inputhost.dll
C:\WINDOWS\system32\InputLocaleManager.dll
C:\WINDOWS\system32\InputService.dll
C:\WINDOWS\system32\KBDTUQ.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\system32\MsCtfMonitor.DLL
C:\WINDOWS\system32\MSUTB.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\Windows\System32\mtf.dll
C:\WINDOWS\system32\MTFServer.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\system32\profapi.dll
C:\WINDOWS\SYSTEM32\PROPSYS.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SHCORE.dll
C:\WINDOWS\SYSTEM32\TextInputFramework.dll
C:\WINDOWS\system32\TextInputMethodFormatter.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\Windows.Web.dll
C:\WINDOWS\system32\WINSTA.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\dasHost.exe (50)]
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\system32\CRYPTBASE.dll
C:\WINDOWS\system32\CRYPTSP.dll
C:\WINDOWS\system32\dafupnp.dll
C:\WINDOWS\system32\DAFWSD.dll
C:\WINDOWS\system32\deviceassociation.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
C:\WINDOWS\system32\DNSAPI.dll
C:\WINDOWS\system32\FirewallAPI.dll
C:\WINDOWS\system32\fwbase.dll
C:\WINDOWS\system32\FWPolicyIOMgr.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\system32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\Windows\System32\msxml6.dll
C:\WINDOWS\System32\netprofm.dll
C:\WINDOWS\System32\npmproxy.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\system32\SSDPAPI.dll
C:\WINDOWS\system32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\system32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\system32\webio.dll
C:\WINDOWS\system32\webservices.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\system32\WINHTTP.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\system32\wsdapi.dll
C:\WINDOWS\system32\XmlLite.dll

[C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_05de635879d45aad\igfxCUIService.exe (35)]
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\SYSTEM32\DEVOBJ.dll
C:\WINDOWS\system32\es.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\SYSTEM32\sxs.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\SYSTEM32\VERSION.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\SYSTEM32\WTSAPI32.dll

[C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_05de635879d45aad\igfxEM.exe (77)]
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\SYSTEM32\apphelp.dll
C:\WINDOWS\SYSTEM32\atlthunk.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptprimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\coml2.dll
C:\WINDOWS\System32\CoreMessaging.dll
C:\WINDOWS\System32\CoreUIComponents.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\SYSTEM32\cscapi.dll
C:\WINDOWS\SYSTEM32\d3d10_1.dll
C:\WINDOWS\SYSTEM32\d3d10_1core.dll
C:\WINDOWS\SYSTEM32\d3d11.dll
C:\WINDOWS\System32\davclnt.dll
C:\WINDOWS\System32\DAVHLPR.dll
C:\WINDOWS\SYSTEM32\DEVOBJ.dll
C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_05de635879d45aad\igfxDH.dll
C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_05de635879d45aad\igfxDI.dll
C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_05de635879d45aad\igfxLHM.dll
C:\WINDOWS\System32\drprov.dll
C:\WINDOWS\SYSTEM32\dxcore.dll
C:\WINDOWS\SYSTEM32\dxgi.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\GLU32.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\LINKINFO.dll
C:\WINDOWS\SYSTEM32\MPR.dll
C:\WINDOWS\SYSTEM32\MSASN1.dll
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\system32\mssprxy.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\netutils.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ntlanman.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\system32\ntshrui.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\OPENGL32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\SYSTEM32\PROPSYS.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\system32\srvcli.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\SYSTEM32\textinputframework.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\SYSTEM32\VERSION.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\Windows.StateRepositoryPS.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\WININET.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\System32\wkscli.dll
C:\WINDOWS\SYSTEM32\Wldp.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\WTSAPI32.dll
C:\WINDOWS\SYSTEM32\XmlLite.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_b555e41d4684ddec\comctl32.DLL

[C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_05de635879d45aad\igfxext.exe (41)]
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\SYSTEM32\d3d10_1.dll
C:\WINDOWS\SYSTEM32\d3d10_1core.dll
C:\WINDOWS\SYSTEM32\d3d11.dll
C:\WINDOWS\System32\DEVOBJ.dll
C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_05de635879d45aad\igfxDH.dll
C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_05de635879d45aad\igfxDI.dll
C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_05de635879d45aad\igfxexps.dll
C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_05de635879d45aad\igfxLHM.dll
C:\WINDOWS\SYSTEM32\dxgi.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\GLU32.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\OPENGL32.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\SYSTEM32\VERSION.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\SYSTEM32\XmlLite.dll

[C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\IntelCpHDCPSvc.exe (23)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\setupapi.dll
C:\WINDOWS\SYSTEM32\sxs.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll

[C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\IntelCpHeciSvc.exe (20)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\SYSTEM32\sxs.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\System32\win32u.dll

[C:\Windows\System32\dwm.exe (88)]
C:\Windows\System32\ActXPrxy.dll
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\SYSTEM32\apphelp.dll
C:\WINDOWS\system32\avrt.dll
C:\Windows\System32\Bcp47Langs.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\system32\Cabinet.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\Windows\System32\ColorAdapterClient.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\system32\CoreMessaging.dll
C:\WINDOWS\system32\CoreUIComponents.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\system32\CRYPTBASE.dll
C:\WINDOWS\system32\CRYPTSP.dll
C:\WINDOWS\system32\d2d1.dll
C:\WINDOWS\system32\D3D10Warp.dll
C:\WINDOWS\system32\d3d11.dll
C:\WINDOWS\system32\D3DCOMPILER_47.dll
C:\WINDOWS\system32\dcomp.dll
C:\Windows\System32\DispBroker.Desktop.dll
C:\Windows\System32\DispBroker.dll
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igc64.dll
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igd10iumd64.dll
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igdgmm64.dll
C:\WINDOWS\system32\dwmapi.dll
C:\WINDOWS\system32\dwmcore.dll
C:\WINDOWS\SYSTEM32\dwmghost.dll
C:\WINDOWS\SYSTEM32\dwmredir.dll
C:\WINDOWS\SYSTEM32\dxcore.dll
C:\WINDOWS\system32\dxgi.dll
c:\windows\system32\gameinput.dll
C:\WINDOWS\System32\gdi32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\system32\HID.DLL
C:\Windows\System32\iertutil.dll
C:\WINDOWS\System32\imagehlp.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\ism.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\system32\MSASN1.dll
C:\Windows\System32\mscms.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\ncrypt.dll
C:\WINDOWS\system32\NInput.dll
C:\WINDOWS\system32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\system32\PROPSYS.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SHCORE.dll
C:\WINDOWS\System32\shell32.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\system32\TextShaping.dll
C:\Windows\System32\twinapi.appcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\udwm.dll
C:\WINDOWS\System32\UIAnimation.dll
C:\WINDOWS\system32\UMPDC.dll
C:\WINDOWS\System32\USER32.dll
C:\Windows\System32\USERENV.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\windowmanagementapi.dll
C:\Windows\System32\Windows.Gaming.Input.dll
C:\Windows\System32\Windows.Graphics.dll
C:\Windows\System32\Windows.UI.Xaml.Controls.dll
C:\Windows\System32\Windows.UI.Xaml.dll
C:\WINDOWS\system32\WindowsCodecs.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll
C:\WINDOWS\system32\wuceffects.dll
C:\WINDOWS\system32\XmlLite.dll

[C:\Windows\System32\fontdrvhost.exe (6)]
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\win32u.dll

[C:\Windows\System32\fontdrvhost.exe (6)]
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\win32u.dll

[C:\Windows\System32\lsass.exe (82)]
C:\WINDOWS\SYSTEM32\aadcloudap.dll
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\system32\AUTHZ.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptprimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\system32\cloudAP.DLL
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\system32\CRYPTBASE.dll
C:\WINDOWS\system32\cryptdll.dll
C:\Windows\System32\cryptnet.dll
C:\WINDOWS\system32\CRYPTSP.dll
C:\WINDOWS\system32\DNSAPI.dll
C:\WINDOWS\SYSTEM32\DPAPI.DLL
C:\WINDOWS\system32\dpapisrv.dll
C:\WINDOWS\system32\DSROLE.dll
C:\WINDOWS\system32\dssenh.dll
C:\WINDOWS\system32\efslsaext.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\system32\gmsaclient.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\system32\JOINUTIL.DLL
C:\WINDOWS\system32\KDCPW.DLL
C:\WINDOWS\system32\KerbClientShared.dll
C:\WINDOWS\system32\kerberos.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\system32\keyiso.dll
C:\WINDOWS\system32\logoncli.dll
C:\WINDOWS\system32\lsasrv.dll
C:\WINDOWS\SYSTEM32\MicrosoftAccountCloudAP.dll
C:\WINDOWS\system32\MSASN1.dll
C:\WINDOWS\SYSTEM32\mskeyprotect.dll
C:\WINDOWS\system32\msprivs.DLL
C:\WINDOWS\system32\msv1_0.DLL
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\SYSTEM32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\system32\ncrypt.dll
C:\WINDOWS\system32\NCRYPTPROV.DLL
C:\WINDOWS\system32\ncryptsslp.dll
C:\WINDOWS\system32\negoexts.DLL
C:\WINDOWS\system32\netlogon.DLL
C:\WINDOWS\SYSTEM32\netprovfw.dll
C:\WINDOWS\system32\netutils.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\system32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\system32\NtlmShared.dll
C:\WINDOWS\system32\pku2u.DLL
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\system32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\SYSTEM32\samsrv.dll
C:\WINDOWS\system32\scecli.DLL
C:\WINDOWS\system32\schannel.DLL
C:\WINDOWS\System32\sechost.dll
C:\Windows\System32\SecureTimeAggregator.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\system32\SspiCli.dll
C:\WINDOWS\SYSTEM32\SspiSrv.dll
C:\WINDOWS\system32\tspkg.DLL
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\system32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\system32\USERENV.dll
C:\Windows\System32\vaultsvc.dll
C:\WINDOWS\system32\wdigest.DLL
C:\WINDOWS\SYSTEM32\wevtapi.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\winsta.dll
C:\WINDOWS\SYSTEM32\wkscli.dll
C:\WINDOWS\System32\WLDAP32.dll
C:\WINDOWS\system32\Wldp.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll

[C:\Windows\System32\rundll32.exe (27)]
c:\program files\nvidia corporation\nvstreamsrv\rxdiag.dll
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\imagehlp.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\System32\Wldp.dll

[C:\Windows\System32\RuntimeBroker.exe (65)]
C:\WINDOWS\System32\advapi32.dll
C:\Windows\System32\AppExtension.dll
C:\WINDOWS\SYSTEM32\apphelp.dll
C:\Windows\System32\appresolver.dll
C:\Windows\System32\AppXDeploymentClient.dll
C:\Windows\System32\Bcp47Langs.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\CFGMGR32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\Windows\System32\CoreMessaging.dll
C:\WINDOWS\SYSTEM32\dxcore.dll
C:\WINDOWS\SYSTEM32\edputil.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\iertutil.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\LINKINFO.dll
C:\WINDOWS\SYSTEM32\MrmCoreR.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\Windows\System32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\Windows\System32\profapi.dll
C:\Windows\System32\PROPSYS.dll
C:\Windows\System32\RMCLIENT.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\SHELL32.dll
C:\Windows\System32\ShellCommonCommonProxyStub.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\system32\ShutdownUX.dll
C:\Windows\System32\SLC.dll
C:\Windows\System32\sppc.dll
C:\Windows\System32\SspiCli.dll
C:\Windows\System32\StartTileData.dll
C:\WINDOWS\System32\StructuredQuery.dll
C:\Windows\System32\twinapi.appcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\Windows\System32\UMPDC.dll
C:\Windows\System32\urlmon.dll
C:\WINDOWS\System32\user32.dll
C:\Windows\System32\USERENV.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\system32\WINBRAND.dll
C:\Windows\System32\Windows.ApplicationModel.dll
C:\Windows\System32\Windows.Services.TargetedContent.dll
C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\system32\Windows.Storage.Search.dll
C:\WINDOWS\system32\windowscodecs.dll
C:\Windows\System32\Wldp.dll
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\RuntimeBroker.exe (69)]
C:\WINDOWS\System32\advapi32.dll
C:\Windows\System32\appresolver.dll
C:\Windows\System32\Bcp47Langs.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\Windows\System32\BluetoothApis.dll
C:\WINDOWS\System32\CFGMGR32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\Windows\System32\CoreMessaging.dll
C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
C:\WINDOWS\SYSTEM32\DEVOBJ.dll
C:\Windows\System32\EthernetMediaManager.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\inputhost.dll
C:\Windows\System32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\LINKINFO.dll
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\Windows\System32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\System32\netprofm.dll
C:\Windows\System32\NetworkUXBroker.dll
C:\WINDOWS\System32\npmproxy.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\Windows\System32\PROPSYS.dll
C:\WINDOWS\SYSTEM32\REGAPI.dll
C:\Windows\System32\RMCLIENT.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\SYSTEM32\SettingsEnvironment.Desktop.dll
C:\WINDOWS\System32\SHCORE.dll
C:\WINDOWS\System32\shell32.dll
C:\Windows\System32\ShellCommonCommonProxyStub.dll
C:\WINDOWS\System32\shlwapi.dll
C:\Windows\System32\SLC.dll
C:\Windows\System32\sppc.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\Windows\System32\SystemSettings.DataModel.dll
C:\Windows\System32\TetheringStation.dll
C:\Windows\System32\twinapi.appcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\Windows\System32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\Windows\System32\USERENV.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\Windows\System32\WINHTTP.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\SYSTEM32\wlanapi.dll
C:\Windows\System32\WlanMediaManager.dll
C:\WINDOWS\system32\Wldp.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll

[C:\Windows\System32\SearchFilterHost.exe (24)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\system32\cryptdll.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\imm32.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\system32\mssprxy.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\system32\TQUERY.DLL
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\system32\Wldp.dll

[C:\Windows\System32\SearchIndexer.exe (66)]
C:\Program Files\Common Files\Microsoft Shared\Ink\IpsPlugin.dll
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\system32\Bcp47Langs.dll
C:\WINDOWS\system32\bcp47mrm.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\system32\CRYPTBASE.DLL
C:\WINDOWS\system32\cryptdll.dll
C:\WINDOWS\system32\DEVOBJ.dll
C:\WINDOWS\system32\efswrt.dll
C:\WINDOWS\SYSTEM32\elscore.dll
C:\WINDOWS\system32\ElsLad.dll
C:\WINDOWS\System32\ES.DLL
C:\WINDOWS\system32\ESENT.dll
C:\WINDOWS\SYSTEM32\feclient.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\iertutil.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\system32\MPR.dll
C:\WINDOWS\system32\mssprxy.dll
C:\WINDOWS\system32\MSSRCH.DLL
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\System32\MSWB7.dll
C:\WINDOWS\system32\netutils.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\system32\profapi.dll
C:\WINDOWS\system32\propsys.dll
C:\WINDOWS\system32\query.dll
C:\WINDOWS\SYSTEM32\rmclient.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\samcli.dll
C:\WINDOWS\system32\SAMLIB.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\system32\sspicli.dll
C:\WINDOWS\SYSTEM32\sxs.dll
C:\WINDOWS\system32\TQUERY.DLL
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\system32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\system32\USERENV.dll
C:\WINDOWS\SYSTEM32\vssapi.dll
C:\WINDOWS\system32\VssTrace.DLL
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\Windows.Globalization.dll
C:\Windows\System32\Windows.StateRepositoryPS.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\system32\WINSTA.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\system32\Wldp.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll

[C:\Windows\System32\SearchProtocolHost.exe (40)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\system32\AUTHZ.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\CFGMGR32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\Windows\System32\cldapi.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\system32\cryptdll.dll
C:\WINDOWS\system32\edputil.dll
C:\Windows\System32\FLTLIB.DLL
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\Windows\System32\iertutil.dll
C:\WINDOWS\System32\imm32.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\system32\mssph.dll
C:\WINDOWS\system32\mssprxy.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\system32\propsys.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SHCORE.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\system32\SspiCli.dll
C:\WINDOWS\system32\TQUERY.DLL
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\Windows.FileExplorer.Common.dll
C:\Windows\System32\Windows.StateRepositoryPS.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\system32\Wldp.dll

C:\Windows\System32\SecurityHealthService.exe
C:\Windows\System32\services.exe
C:\Windows\System32\SgrmBroker.exe

[C:\Windows\System32\sihost.exe (79)]
C:\WINDOWS\system32\activationmanager.dll
C:\WINDOWS\System32\advapi32.dll
C:\Windows\System32\AppContracts.dll
C:\WINDOWS\System32\AppointmentActivation.dll
C:\WINDOWS\system32\AppXDeploymentClient.dll
C:\Windows\System32\AudioSes.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\Windows\System32\ClipboardServer.dll
C:\WINDOWS\System32\combase.dll
C:\Windows\System32\container.dll
C:\WINDOWS\system32\CoreMessaging.dll
C:\WINDOWS\system32\CoreShellExtFramework.dll
C:\WINDOWS\system32\CoreUIComponents.dll
C:\WINDOWS\system32\cryptdll.dll
C:\Windows\System32\daxexec.dll
C:\WINDOWS\system32\desktopshellext.dll
C:\Windows\System32\DEVOBJ.dll
C:\WINDOWS\system32\ESENT.dll
C:\WINDOWS\system32\ExecModelClient.dll
C:\WINDOWS\system32\execmodelproxy.dll
C:\Windows\System32\FLTLIB.DLL
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\IMM32.DLL
C:\Windows\System32\InputHost.dll
C:\Windows\System32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\Windows\System32\MMDevAPI.DLL
C:\Windows\System32\modernexecserver.dll
C:\WINDOWS\system32\MPR.dll
C:\WINDOWS\system32\mssrch.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\Windows\System32\NotificationPlatformComponent.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreCommonProxyStub.dll
C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
C:\WINDOWS\system32\PackageStateChangeHandler.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\system32\profapi.dll
C:\WINDOWS\system32\PROPSYS.dll
C:\Windows\System32\RMCLIENT.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\system32\ShareHost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\system32\TQUERY.DLL
C:\WINDOWS\system32\twinapi.appcore.dll
C:\WINDOWS\System32\twinui.appcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\Windows\System32\UiaManager.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\system32\USERENV.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\Windows\System32\usermgrproxy.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\windowmanagement.dll
C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll
C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll
C:\Windows\System32\Windows.StateRepositoryPS.dll
C:\WINDOWS\system32\Windows.Storage.dll
C:\Windows\System32\Windows.System.Launcher.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\system32\Wldp.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll

[C:\Windows\System32\smartscreen.exe (76)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\Windows\System32\certca.dll
C:\Windows\System32\certenroll.dll
C:\Windows\System32\chakra.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\Windows\System32\CRYPTBASE.DLL
C:\Windows\System32\cryptnet.dll
C:\Windows\System32\CRYPTSP.dll
C:\Windows\System32\DNSAPI.dll
C:\Windows\System32\DPAPI.DLL
C:\Windows\System32\DSPARSE.dll
C:\WINDOWS\SYSTEM32\firewallapi.dll
C:\WINDOWS\SYSTEM32\fwbase.dll
C:\WINDOWS\System32\fwpuclnt.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\Windows\System32\icu.DLL
C:\Windows\System32\icuin.dll
C:\Windows\System32\icuuc.dll
C:\Windows\System32\iertutil.dll
C:\WINDOWS\System32\imagehlp.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\system32\mlang.dll
C:\Windows\System32\MSASN1.dll
C:\WINDOWS\SYSTEM32\mskeyprotect.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\Windows\System32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\Windows\System32\ncrypt.dll
C:\WINDOWS\system32\ncryptsslp.dll
C:\Windows\System32\netutils.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\ondemandconnroutehelper.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\Windows\System32\profapi.dll
C:\Windows\System32\rasadhlp.dll
C:\WINDOWS\SYSTEM32\rometadata.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\system32\schannel.DLL
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\shlwapi.dll
C:\Windows\System32\smartscreenps.dll
C:\Windows\System32\SspiCli.dll
C:\Windows\System32\tbs.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\Windows\System32\urlmon.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\Windows\System32\Windows.Web.Http.dll
C:\WINDOWS\SYSTEM32\winhttp.dll
C:\Windows\System32\WININET.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\Windows\System32\WinRtTracing.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\Windows\System32\wkscli.dll
C:\WINDOWS\System32\WLDAP32.dll
C:\Windows\System32\Wldp.dll
C:\WINDOWS\System32\WS2_32.dll

C:\Windows\System32\smss.exe

[C:\Windows\System32\spoolsv.exe (79)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\APMon.dll
C:\WINDOWS\System32\AppMon.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\System32\CRYPTBASE.dll
C:\WINDOWS\System32\CRYPTSP.dll
C:\WINDOWS\System32\cscapi.dll
C:\WINDOWS\System32\deviceassociation.dll
C:\WINDOWS\System32\DEVOBJ.dll
C:\WINDOWS\System32\DNSAPI.dll
C:\WINDOWS\System32\drvstore.dll
C:\WINDOWS\System32\DSROLE.dll
C:\WINDOWS\System32\FirewallAPI.dll
C:\WINDOWS\System32\fwbase.dll
C:\WINDOWS\System32\fwpuclnt.dll
C:\WINDOWS\System32\FXSMON.DLL
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\System32\inetpp.dll
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\localspl.dll
C:\WINDOWS\System32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\Windows\System32\msxml6.dll
C:\WINDOWS\System32\netutils.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\System32\PrintIsolationProxy.dll
C:\WINDOWS\System32\profapi.dll
C:\Windows\System32\rasadhlp.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\Secur32.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\System32\sfc_os.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\snmpapi.dll
C:\WINDOWS\system32\spool\PRTPROCS\x64\us008pc.dll
C:\WINDOWS\system32\spool\PRTPROCS\x64\winprint.dll
C:\WINDOWS\System32\SPOOLSS.DLL
C:\WINDOWS\System32\srvcli.dll
C:\WINDOWS\System32\SspiCli.dll
C:\WINDOWS\System32\tcpmon.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\UMPDC.dll
C:\WINDOWS\System32\us008lm.dll
C:\WINDOWS\System32\usbmon.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\System32\USERENV.dll
C:\WINDOWS\System32\webservices.dll
C:\WINDOWS\System32\win32spl.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\System32\WINHTTP.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\WINDOWS\system32\winspool.drv
C:\WINDOWS\System32\WINSTA.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\System32\WINUSB.DLL
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\wsdapi.dll
C:\WINDOWS\system32\WSDCHNGR.DLL
C:\WINDOWS\System32\wsnmp32.dll
C:\WINDOWS\System32\WTSAPI32.dll

C:\Windows\System32\sppsvc.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe

[C:\Windows\System32\svchost.exe (10)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\umpnpmgr.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (19)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\System32\NSI.dll
c:\windows\system32\nsisvc.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (19)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
c:\windows\system32\lmhsvc.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (19)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\combase.dll
c:\windows\system32\coremessaging.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (19)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
c:\windows\system32\trkwks.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (19)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\system32\perftrack.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\wdi.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (20)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
c:\windows\system32\themeservice.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\winsta.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (22)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
c:\windows\system32\es.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\SYSTEM32\sxs.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (22)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\combase.dll
c:\windows\system32\das.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
c:\windows\system32\profapi.dll
c:\windows\system32\RMCLIENT.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
c:\windows\system32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (22)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MPR.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\pcacli.dll
C:\WINDOWS\system32\pcadm.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\wdi.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WTSAPI32.dll

[C:\Windows\System32\svchost.exe (23)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\combase.dll
c:\windows\system32\fntcache.dll
c:\windows\system32\FontProvider.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
c:\windows\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
c:\windows\system32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (23)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\SYSTEM32\apphelp.dll
c:\windows\system32\appinfo.dll
C:\WINDOWS\SYSTEM32\appinfoext.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
c:\windows\system32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\USERENV.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (25)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
c:\windows\system32\StateRepository.Core.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
c:\windows\system32\windows.staterepository.dll
C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll
C:\Windows\System32\Windows.StateRepositoryPS.dll
C:\Windows\System32\WinTypes.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (25)]
C:\Windows\System32\ActXPrxy.dll
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
c:\windows\system32\ColorAdapterClient.dll
C:\WINDOWS\System32\combase.dll
c:\windows\system32\dispbroker.desktop.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
c:\windows\system32\mscms.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\USERENV.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (27)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\System32\DEVOBJ.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
c:\windows\system32\HID.DLL
c:\windows\system32\hidserv.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\setupapi.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\winsta.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (28)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
c:\windows\system32\HID.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\oleaut32.dll
c:\windows\system32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\SYSTEM32\sxs.dll
c:\windows\system32\tabsvc.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\USERENV.dll
C:\WINDOWS\System32\win32u.dll
c:\windows\system32\WINSTA.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
c:\windows\system32\WTSAPI32.dll

[C:\Windows\System32\svchost.exe (28)]
C:\WINDOWS\System32\advapi32.dll
c:\windows\system32\audioendpointbuilder.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
c:\windows\system32\DEVOBJ.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
c:\windows\system32\MMDevAPI.DLL
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\SYSTEM32\wtsapi32.dll

[C:\Windows\System32\svchost.exe (29)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\SYSTEM32\bi.dll
c:\windows\system32\BrokerLib.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\coml2.dll
C:\WINDOWS\system32\execmodelproxy.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\Windows\System32\OneCoreCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
c:\windows\system32\timebrokerserver.dll
C:\Windows\System32\twinapi.appcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (30)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
c:\windows\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\sspicli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\USERENV.dll
c:\windows\system32\wevtsvc.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (30)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.dll
c:\windows\system32\dusmsvc.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
c:\windows\system32\MobileNetworking.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
c:\windows\system32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
c:\windows\system32\SystemEventsBrokerClient.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\USERENV.dll
C:\WINDOWS\System32\win32u.dll
c:\windows\system32\WINNSI.DLL
c:\windows\system32\wlanapi.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
c:\windows\system32\WMICLNT.dll

[C:\Windows\System32\svchost.exe (31)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
c:\windows\system32\DSROLE.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
c:\windows\system32\gpsvc.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\mstask.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
c:\windows\system32\nlaapi.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\rmclient.dll
C:\WINDOWS\System32\RPCRT4.dll
c:\windows\system32\SAMLIB.dll
C:\WINDOWS\System32\sechost.dll
C:\Windows\System32\SspiCli.dll
c:\windows\system32\SYSNTFY.dll
C:\Windows\System32\taskschd.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (32)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\system32\AppXAllUserStore.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\combase.dll
c:\windows\system32\DEVOBJ.dll
c:\windows\system32\dwmapi.dll
C:\WINDOWS\SYSTEM32\dxgi.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
c:\windows\system32\lsm.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\system32\sspicli.dll
c:\windows\system32\SYSNTFY.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\System32\Userenv.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\system32\wshhyperv.dll

[C:\Windows\System32\svchost.exe (32)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
c:\windows\system32\DNSAPI.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
c:\windows\system32\MobileNetworking.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\Windows\System32\rasadhlp.dll
c:\windows\system32\RMCLIENT.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\wcmapi.dll
C:\WINDOWS\System32\win32u.dll
c:\windows\system32\winhttp.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (32)]
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
c:\windows\system32\DNSAPI.dll
c:\windows\system32\DPAPI.DLL
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
c:\windows\system32\HTTPAPI.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\RPCRT4.dll
c:\windows\system32\rtutils.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\system32\sspicli.dll
c:\windows\system32\sstpsvc.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\webio.dll
C:\WINDOWS\System32\win32u.dll
c:\windows\system32\WINHTTP.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll
c:\windows\system32\XmlLite.dll

[C:\Windows\System32\svchost.exe (32)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\iertutil.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\UMPDC.dll
C:\WINDOWS\System32\urlmon.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\Windows\System32\usermgrproxy.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\System32\WINHTTP.dll
C:\WINDOWS\System32\winsqlite3.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\wpncore.dll
c:\windows\system32\wpnservice.dll

[C:\Windows\System32\svchost.exe (33)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\CRYPTBASE.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
C:\WINDOWS\SYSTEM32\DNSAPI.dll
c:\windows\system32\dnsrslvr.dll
C:\WINDOWS\SYSTEM32\firewallapi.dll
C:\WINDOWS\SYSTEM32\fwbase.dll
C:\WINDOWS\SYSTEM32\Fwpuclnt.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\SYSTEM32\nrpsrv.DLL
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (33)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\system32\ES.DLL
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\system32\RasApi32.dll
C:\WINDOWS\system32\rasman.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
c:\windows\system32\sens.dll
C:\WINDOWS\SYSTEM32\sxs.dll
c:\windows\system32\SYSNTFY.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
c:\windows\system32\WINSTA.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
c:\windows\system32\WMICLNT.dll
C:\WINDOWS\System32\WS2_32.dll
c:\windows\system32\WTSAPI32.dll

[C:\Windows\System32\svchost.exe (33)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\CFGMGR32.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\System32\DEVOBJ.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\HID.DLL
C:\WINDOWS\System32\hidphone.tsp
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\kmddsp.tsp
C:\WINDOWS\System32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\RPCRT4.dll
c:\windows\system32\rtutils.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\System32\sspicli.dll
c:\windows\system32\tapisrv.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\unimdm.tsp
C:\WINDOWS\System32\uniplat.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\System32\WINMM.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (34)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
c:\windows\system32\ColorAdapterClient.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
c:\windows\system32\microsoft.graphics.display.displayenhancementservice.dll
c:\windows\system32\mscms.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
c:\windows\system32\PROPSYS.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
c:\windows\system32\SensorsNativeApi.dll
c:\windows\system32\SensorsUtilsV2.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\USERENV.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\Windows.Graphics.dll
C:\Windows\System32\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
c:\windows\system32\WppRecorderUM.dll

[C:\Windows\System32\svchost.exe (34)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\Windows\System32\DNSAPI.dll
c:\windows\system32\fdphost.dll
C:\Windows\System32\fdssdp.dll
C:\Windows\System32\fdwsd.dll
C:\Windows\System32\FirewallAPI.dll
C:\Windows\System32\fwbase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\Windows\System32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\Windows\System32\SSDPAPI.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\Windows\System32\webservices.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\WINHTTP.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll
C:\Windows\System32\wsdapi.dll

[C:\Windows\System32\svchost.exe (35)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\CRYPTBASE.dll
c:\windows\system32\dhcpcore.dll
C:\WINDOWS\system32\dhcpcore6.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
c:\windows\system32\DNSAPI.dll
C:\WINDOWS\SYSTEM32\EventAggregation.dll
C:\WINDOWS\SYSTEM32\firewallapi.dll
C:\WINDOWS\SYSTEM32\fwbase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\SYSTEM32\rmclient.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (35)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\system32\CapabilityAccessHandlers.dll
c:\windows\system32\capabilityaccessmanager.dll
C:\Windows\System32\CapabilityAccessManagerClient.dll
C:\WINDOWS\SYSTEM32\capauthz.dll
C:\WINDOWS\system32\cellulardatacapabilityhandler.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\WINDOWS\system32\wifidatacapabilityhandler.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\Windows.StateRepositoryPS.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\SYSTEM32\wwapi.dll

[C:\Windows\System32\svchost.exe (35)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\system32\BthRadioMedia.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
c:\windows\system32\DEVOBJ.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
c:\windows\system32\HID.DLL
C:\WINDOWS\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\NfcRadioMedia.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLE32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreCommonProxyStub.dll
C:\WINDOWS\system32\profapi.dll
c:\windows\system32\rmapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\wlanapi.dll
C:\WINDOWS\system32\WlanRadioManager.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\system32\WwanRadioManager.dll
C:\WINDOWS\SYSTEM32\wwapi.dll
C:\WINDOWS\system32\XboxGipRadioManager.dll

[C:\Windows\System32\svchost.exe (35)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
c:\windows\system32\deviceassociation.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\system32\DNSAPI.dll
C:\WINDOWS\system32\dtsh.dll
C:\WINDOWS\system32\FirewallAPI.dll
C:\WINDOWS\system32\fwbase.dll
C:\WINDOWS\system32\FWPolicyIOMgr.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
c:\windows\system32\ncdautosetup.dll
C:\WINDOWS\System32\netprofm.dll
C:\WINDOWS\System32\npmproxy.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (36)]
C:\WINDOWS\System32\advapi32.dll
c:\windows\system32\AppXDeploymentClient.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
c:\windows\system32\logoncli.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\OLEAUT32.dll
c:\windows\system32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
c:\windows\system32\samcli.dll
c:\windows\system32\SAMLIB.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SHCORE.dll
c:\windows\system32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\USERENV.dll
c:\windows\system32\usermgr.dll
C:\Windows\System32\usermgrproxy.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\System32\WLDAP32.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\SYSTEM32\wtsapi32.dll

[C:\Windows\System32\svchost.exe (36)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\computenetwork.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
c:\windows\system32\ncsi.dll
c:\windows\system32\netprofmsvc.dll
c:\windows\system32\netutils.dll
c:\windows\system32\nlaapi.dll
C:\WINDOWS\System32\npmproxy.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
c:\windows\system32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
c:\windows\system32\WINNSI.DLL
c:\windows\system32\wkscli.dll
c:\windows\system32\wlanapi.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (36)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\system32\CRYPTBASE.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
C:\WINDOWS\system32\DNSAPI.dll
C:\WINDOWS\system32\FirewallAPI.dll
C:\WINDOWS\system32\fwbase.dll
C:\WINDOWS\system32\FWPolicyIOMgr.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
c:\windows\system32\POWRPROF.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\System32\sechost.dll
c:\windows\system32\ssdpsrv.dll
C:\WINDOWS\system32\sspicli.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (37)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
c:\windows\system32\DSPARSE.dll
c:\windows\system32\dsreg.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\JOINUTIL.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
c:\windows\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\netjoin.dll
c:\windows\system32\netutils.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
c:\windows\system32\SspiCli.dll
C:\Windows\System32\taskschd.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\USERENV.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
c:\windows\system32\wkssvc.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (37)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
c:\windows\system32\Cabinet.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
c:\windows\system32\DPAPI.DLL
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
c:\windows\system32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\Windows\System32\SspiCli.dll
C:\Windows\System32\taskschd.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
c:\windows\system32\UpdatePolicy.dll
c:\windows\system32\UPShared.dll
C:\WINDOWS\System32\user32.dll
C:\Windows\System32\usoapi.dll
C:\Windows\System32\usocoreps.dll
c:\windows\system32\usosvc.dll
C:\WINDOWS\System32\win32u.dll
c:\windows\system32\WINHTTP.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (38)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\system32\bi.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\coml2.dll
c:\windows\system32\DEVOBJ.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreCommonProxyStub.dll
C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
c:\windows\system32\POWRPROF.dll
C:\WINDOWS\SYSTEM32\rmclient.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\system32\sspicli.dll
c:\windows\system32\sysmain.dll
C:\WINDOWS\system32\SystemEventsBrokerClient.dll
C:\Windows\System32\taskschd.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\SYSTEM32\wtsapi32.dll
C:\Windows\System32\XmlLite.dll

[C:\Windows\System32\svchost.exe (39)]
C:\WINDOWS\System32\advapi32.dll
c:\windows\system32\AUTHZ.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\system32\CRYPTBASE.dll
c:\windows\system32\CRYPTSP.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
C:\WINDOWS\SYSTEM32\DNSAPI.dll
c:\windows\system32\fwpuclnt.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
c:\windows\system32\ikeext.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
c:\windows\system32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
c:\windows\system32\ncrypt.dll
C:\WINDOWS\System32\NSI.dll
c:\windows\system32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\SYSTEM32\rmclient.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\System32\sechost.dll
c:\windows\system32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (39)]
C:\WINDOWS\System32\advapi32.dll
C:\Windows\System32\AppXDeploymentClient.dll
c:\windows\system32\bcd.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
c:\windows\system32\Cabinet.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
c:\windows\system32\DEVOBJ.dll
c:\windows\system32\FLTLIB.DLL
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\profapi.dll
C:\WINDOWS\system32\propsys.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\SYSTEM32\storageusage.dll
c:\windows\system32\storsvc.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\USERENV.dll
c:\windows\system32\wer.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\system32\windows.storage.dll
c:\windows\system32\WINHTTP.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL

[C:\Windows\System32\svchost.exe (42)]
C:\WINDOWS\System32\ADVAPI32.dll
C:\Windows\System32\ATL.DLL
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\system32\cryptdll.dll
C:\WINDOWS\SYSTEM32\deviceassociation.dll
C:\WINDOWS\system32\DEVOBJ.dll
C:\Windows\System32\fdPnp.dll
C:\Windows\System32\FunDisc.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\system32\MSASN1.dll
C:\WINDOWS\system32\msv1_0.DLL
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\system32\NtlmShared.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\system32\sspicli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\USER32.dll
c:\windows\system32\VERSION.dll
c:\windows\system32\wiaservc.dll
C:\WINDOWS\SYSTEM32\wiatrace.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\system32\WSDCHNGR.DLL
C:\Windows\System32\XmlLite.dll

[C:\Windows\System32\svchost.exe (43)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\SYSTEM32\cmintegrator.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\DNSAPI.dll
C:\WINDOWS\SYSTEM32\firewallapi.dll
C:\WINDOWS\SYSTEM32\fwbase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
c:\windows\system32\MobileNetworking.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
c:\windows\system32\nlaapi.dll
C:\WINDOWS\System32\npmproxy.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\system32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\USERENV.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\WINDOWS\system32\wcmcsp.dll
c:\windows\system32\wcmsvc.dll
C:\WINDOWS\System32\win32u.dll
c:\windows\system32\WINHTTP.dll
c:\windows\system32\WINNSI.DLL
C:\WINDOWS\system32\Wlanapi.dll
C:\WINDOWS\system32\Wlanhlp.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\system32\WMICLNT.dll
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (43)]
C:\WINDOWS\System32\advapi32.dll
C:\Windows\System32\AppXDeploymentClient.dll
C:\Windows\System32\AudioSes.dll
c:\windows\system32\audiosrv.dll
c:\windows\system32\AUDIOSRVPOLICYMANAGER.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
c:\windows\system32\CompPkgSup.DLL
C:\WINDOWS\SYSTEM32\coreaudiopolicymanagerext.dll
c:\windows\system32\DEVOBJ.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
c:\windows\system32\HrtfApo.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
c:\windows\system32\MMDevAPI.DLL
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
c:\windows\system32\POWRPROF.dll
c:\windows\system32\PROPSYS.dll
C:\WINDOWS\SYSTEM32\rmclient.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\Windows\System32\twinapi.appcore.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\Windows.ApplicationModel.dll
C:\Windows\System32\Windows.Media.Devices.dll
C:\Windows\System32\Windows.Perception.Stub.dll
C:\Windows\System32\Windows.StateRepositoryPS.dll
C:\WINDOWS\SYSTEM32\winsta.dll
C:\Windows\System32\WinTypes.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\SYSTEM32\wtsapi32.dll
c:\windows\system32\XmlLite.dll

[C:\Windows\System32\svchost.exe (44)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
c:\windows\system32\DEVOBJ.dll
C:\WINDOWS\System32\DNSAPI.dll
C:\WINDOWS\SYSTEM32\firewallapi.dll
c:\windows\system32\FVEAPI.dll
C:\WINDOWS\System32\fwbase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
c:\windows\system32\HID.DLL
C:\WINDOWS\System32\imagehlp.dll
C:\WINDOWS\System32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\System32\MSWSOCK.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\System32\ProximityCommon.dll
C:\WINDOWS\System32\ProximityCommonPal.dll
C:\Windows\System32\ProximityService.dll
C:\WINDOWS\System32\ProximityServicePAL.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
c:\windows\system32\shsvcs.dll
c:\windows\system32\tbs.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\System32\WINSTA.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll

[C:\Windows\System32\svchost.exe (44)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\system32\CRYPTBASE.dll
c:\windows\system32\CRYPTSP.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
c:\windows\system32\DNSAPI.dll
c:\windows\system32\fdrespub.dll
c:\windows\system32\FirewallAPI.dll
C:\Windows\System32\FunDisc.dll
c:\windows\system32\fwbase.dll
c:\windows\system32\FWPolicyIOMgr.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
c:\windows\system32\HTTPAPI.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
c:\windows\system32\netutils.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\webservices.dll
C:\WINDOWS\System32\win32u.dll
c:\windows\system32\WINHTTP.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
c:\windows\system32\wkscli.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll
c:\windows\system32\wsdapi.dll
C:\Windows\System32\XmlLite.dll

[C:\Windows\System32\svchost.exe (45)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\SYSTEM32\capauthz.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\system32\DNSAPI.dll
C:\WINDOWS\system32\FirewallAPI.dll
C:\WINDOWS\system32\fwbase.dll
C:\WINDOWS\system32\fwpuclnt.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
c:\windows\system32\rpcepmap.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\RpcRtRemote.dll
c:\windows\system32\rpcss.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\system32\sspicli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\system32\wshhyperv.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll

[C:\Windows\System32\svchost.exe (45)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\system32\CLUSAPI.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\system32\DNSAPI.dll
C:\WINDOWS\system32\DPAPI.DLL
c:\windows\system32\DSROLE.dll
C:\WINDOWS\system32\FirewallAPI.DLL
C:\WINDOWS\system32\fwbase.dll
C:\WINDOWS\system32\FWPolicyIOMgr.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\system32\mi.dll
C:\WINDOWS\system32\miutils.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
c:\windows\system32\netutils.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\rasadhlp.dll
C:\WINDOWS\system32\RESUTILS.DLL
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
c:\windows\system32\srvsvc.dll
C:\WINDOWS\system32\SSCORE.DLL
C:\WINDOWS\SYSTEM32\sscoreext.dll
C:\WINDOWS\system32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\USERENV.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\system32\wmidcom.dll
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (45)]
C:\WINDOWS\System32\advapi32.dll
c:\windows\system32\AEPIC.dll
c:\windows\system32\APISAMPLING.dll
c:\windows\system32\apphelp.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\system32\CRYPTBASE.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\OLEAUT32.dll
c:\windows\system32\pcasvc.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\SYSTEM32\sfc.dll
C:\WINDOWS\SYSTEM32\sfc_os.DLL
C:\WINDOWS\System32\shcore.dll
C:\Windows\System32\SspiCli.dll
C:\Windows\System32\taskschd.dll
c:\windows\system32\tdh.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\USERENV.dll
C:\WINDOWS\SYSTEM32\wer.dll
C:\WINDOWS\System32\win32u.dll
c:\windows\system32\WINHTTP.dll
c:\windows\system32\WINSTA.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
c:\windows\system32\WTSAPI32.dll
C:\Windows\System32\XmlLite.dll

[C:\Windows\System32\svchost.exe (45)]
C:\WINDOWS\System32\advapi32.dll
c:\windows\system32\bcd.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
c:\windows\system32\bdesvc.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
c:\windows\system32\DEVOBJ.dll
c:\windows\system32\dsreg.dll
c:\windows\system32\FLTLIB.DLL
c:\windows\system32\FVEAPI.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\IDStore.dll
C:\WINDOWS\System32\imagehlp.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
c:\windows\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\samcli.dll
C:\WINDOWS\System32\SAMLIB.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\sspicli.dll
C:\WINDOWS\SYSTEM32\sxs.dll
c:\windows\system32\tbs.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\VirtDisk.dll
c:\windows\system32\wevtapi.dll
C:\WINDOWS\System32\win32u.dll
c:\windows\system32\WINSTA.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\wlidprov.dll
c:\windows\system32\WTSAPI32.dll

[C:\Windows\System32\svchost.exe (47)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\Bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\SYSTEM32\bi.dll
c:\windows\system32\BrokerLib.dll
C:\WINDOWS\system32\BthRadioMedia.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\coml2.dll
C:\WINDOWS\system32\DEVOBJ.dll
C:\WINDOWS\system32\execmodelproxy.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\httpprxc.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
c:\windows\system32\ncbservice.dll
C:\WINDOWS\System32\netprofm.dll
C:\WINDOWS\System32\npmproxy.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\system32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
c:\windows\system32\SspiCli.dll
c:\windows\system32\SystemEventsBrokerClient.dll
C:\Windows\System32\twinapi.appcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.devices.radios.dll
C:\WINDOWS\SYSTEM32\wlanapi.dll
C:\WINDOWS\system32\WlanRadioManager.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (48)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
c:\windows\system32\cbdhsvc.dll
c:\windows\system32\cdp.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\coml2.dll
C:\Windows\System32\CoreMessaging.dll
c:\windows\system32\CoreUIComponents.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
c:\windows\system32\dsreg.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\Windows\System32\iertutil.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
c:\windows\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreCommonProxyStub.dll
C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
c:\windows\system32\PROPSYS.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\Windows\System32\twinapi.appcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\Windows\System32\usermgrproxy.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\windows.applicationmodel.datatransfer.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\Windows\System32\WinTypes.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (50)]
C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MpOav.dll
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\SYSTEM32\amsi.dll
C:\WINDOWS\system32\authZ.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\system32\CRYPTBASE.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\NCObjAPI.DLL
C:\WINDOWS\SYSTEM32\netutils.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\System32\PROPSYS.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\SYSTEM32\samcli.dll
C:\WINDOWS\SYSTEM32\SAMLIB.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\system32\version.dll
C:\WINDOWS\SYSTEM32\vssapi.dll
C:\WINDOWS\SYSTEM32\VssTrace.DLL
C:\WINDOWS\system32\wbem\esscli.dll
C:\WINDOWS\system32\wbem\FastProx.dll
C:\WINDOWS\system32\wbem\repdrvfs.dll
C:\WINDOWS\system32\wbem\wbemcore.dll
C:\WINDOWS\system32\wbem\wbemess.dll
C:\WINDOWS\system32\wbem\wbemsvc.dll
C:\WINDOWS\system32\wbem\wmiprvsd.dll
c:\windows\system32\wbem\wmisvc.dll
C:\WINDOWS\system32\wbem\wmiutils.dll
C:\WINDOWS\SYSTEM32\wbemcomn.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\SYSTEM32\WMICLNT.dll
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (51)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\combase.dll
c:\windows\system32\DEVOBJ.dll
c:\windows\system32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
C:\WINDOWS\SYSTEM32\DNSAPI.dll
C:\WINDOWS\System32\fwpuclnt.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\JoinUtil.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
c:\windows\system32\ncsi.dll
C:\WINDOWS\SYSTEM32\netjoin.dll
C:\WINDOWS\SYSTEM32\netutils.dll
c:\windows\system32\nlasvc.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\System32\profapi.dll
C:\Windows\System32\rasadhlp.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ssdpapi.dll
C:\WINDOWS\System32\sspicli.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\USERENV.dll
c:\windows\system32\webio.dll
C:\WINDOWS\SYSTEM32\wevtapi.dll
C:\WINDOWS\System32\win32u.dll
c:\windows\system32\WINHTTP.dll
c:\windows\system32\WINNSI.DLL
C:\WINDOWS\SYSTEM32\WINSTA.dll
c:\windows\system32\wkscli.dll
C:\WINDOWS\system32\WlanApi.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
c:\windows\system32\WMICLNT.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll

[C:\Windows\System32\svchost.exe (54)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\system32\apphelp.dll
c:\windows\system32\AUTHZ.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
c:\windows\system32\CSystemEventsBrokerClient.dll
c:\windows\system32\DABAPI.dll
c:\windows\system32\EventAggregation.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\JoinUtil.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\SYSTEM32\netjoin.dll
C:\WINDOWS\SYSTEM32\netutils.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\OLEAUT32.dll
c:\windows\system32\POWRPROF.dll
c:\windows\system32\profapi.dll
C:\WINDOWS\SYSTEM32\PROPSYS.dll
C:\WINDOWS\SYSTEM32\rmclient.dll
C:\WINDOWS\System32\RPCRT4.dll
c:\windows\system32\schedsvc.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SHCORE.DLL
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\system32\sspicli.dll
C:\WINDOWS\system32\taskcomp.dll
c:\windows\system32\TimeBrokerClient.dll
c:\windows\system32\UBPM.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\WINDOWS\SYSTEM32\wevtapi.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
c:\windows\system32\wkscli.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
c:\windows\system32\WMICLNT.dll
C:\WINDOWS\SYSTEM32\WPTaskScheduler.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll
c:\windows\system32\XmlLite.dll

[C:\Windows\System32\svchost.exe (55)]
C:\WINDOWS\system32\adhapi.dll
C:\WINDOWS\System32\advapi32.dll
c:\windows\system32\AUTHZ.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
c:\windows\system32\bfe.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
c:\windows\system32\DNSAPI.dll
C:\WINDOWS\SYSTEM32\embeddedmodesvcapi.dll
c:\windows\system32\fwbase.dll
c:\windows\system32\FWPolicyIOMgr.dll
c:\windows\system32\fwpuclnt.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\SYSTEM32\httpprxc.dll
C:\WINDOWS\SYSTEM32\iertutil.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\JoinUtil.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
c:\windows\system32\mpssvc.dll
C:\WINDOWS\SYSTEM32\mrmcorer.dll
C:\WINDOWS\System32\msvcp_win.dll
c:\windows\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\SYSTEM32\netjoin.dll
C:\WINDOWS\SYSTEM32\netutils.dll
C:\WINDOWS\System32\npmproxy.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\system32\ntmarta.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\Windows\System32\rasadhlp.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
c:\windows\system32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\wevtapi.dll
C:\WINDOWS\system32\wfapigp.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
c:\windows\system32\wkscli.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (55)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\system32\CRYPTBASE.dll
C:\Windows\System32\cryptcatsvc.dll
c:\windows\system32\CRYPTNET.dll
C:\WINDOWS\System32\CRYPTSP.dll
c:\windows\system32\cryptsvc.dll
C:\Windows\System32\crypttpmeksvc.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
C:\WINDOWS\SYSTEM32\DNSAPI.dll
C:\WINDOWS\System32\ES.DLL
C:\WINDOWS\system32\ESENT.dll
C:\WINDOWS\System32\fwpuclnt.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\netprofm.dll
C:\WINDOWS\system32\netutils.dll
C:\WINDOWS\System32\npmproxy.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\OLEAUT32.dll
c:\windows\system32\profapi.dll
C:\WINDOWS\System32\PROPSYS.dll
C:\Windows\System32\rasadhlp.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\system32\samcli.dll
C:\WINDOWS\system32\SAMLIB.dll
C:\WINDOWS\System32\sechost.dll
c:\windows\system32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\vssapi.dll
C:\WINDOWS\system32\VssTrace.DLL
C:\Windows\System32\webauthn.dll
c:\windows\system32\webio.dll
C:\WINDOWS\System32\win32u.dll
c:\windows\system32\WINHTTP.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (56)]
C:\WINDOWS\System32\advapi32.dll
C:\Windows\System32\AppExtension.dll
C:\Windows\System32\AppXDeploymentClient.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\system32\CoreMessaging.dll
C:\WINDOWS\system32\CoreUIComponents.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\System32\IDStore.dll
C:\Windows\System32\iertutil.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
c:\windows\system32\logoncli.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
c:\windows\system32\netutils.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\OLEAUT32.dll
c:\windows\system32\profapi.dll
c:\windows\system32\profsvc.dll
C:\WINDOWS\SYSTEM32\profsvcext.dll
C:\Windows\System32\PROPSYS.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\SAMLIB.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\system32\SettingSync.dll
C:\WINDOWS\System32\shacctprofile.dll
C:\WINDOWS\System32\SHCORE.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\system32\SLC.dll
C:\WINDOWS\system32\sppc.dll
c:\windows\system32\SspiCli.dll
c:\windows\system32\SYSNTFY.dll
C:\Windows\System32\twinapi.appcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\Windows\System32\urlmon.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\USERENV.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\WINDOWS\system32\wevtapi.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\Windows.CloudStore.dll
C:\Windows\System32\Windows.StateRepositoryPS.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
c:\windows\system32\wkscli.dll
C:\WINDOWS\System32\WLDAP32.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (56)]
C:\WINDOWS\system32\adhsvc.dll
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\SYSTEM32\authz.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPTBASE.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
c:\windows\system32\DNSAPI.dll
c:\windows\system32\FirewallAPI.dll
c:\windows\system32\fwbase.dll
c:\windows\system32\FWPolicyIOMgr.dll
c:\windows\system32\fwpuclnt.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\SYSTEM32\httpprxc.dll
C:\WINDOWS\system32\httpprxm.dll
c:\windows\system32\IPHLPAPI.DLL
c:\windows\system32\iphlpsvc.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\logoncli.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
c:\windows\system32\MSWSOCK.dll
C:\WINDOWS\System32\netprofm.dll
c:\windows\system32\NetSetupApi.dll
C:\WINDOWS\System32\netutils.dll
C:\WINDOWS\System32\npmproxy.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\System32\sechost.dll
c:\windows\system32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\System32\WINHTTP.dll
c:\windows\system32\WINNSI.DLL
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\System32\wkscli.dll
C:\WINDOWS\System32\WLDAP32.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
c:\windows\system32\WMICLNT.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll

[C:\Windows\System32\svchost.exe (57)]
C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MpOav.dll
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\SYSTEM32\amsi.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\SYSTEM32\Cabinet.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\system32\CRYPTBASE.DLL
C:\WINDOWS\SYSTEM32\cryptsp.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
c:\windows\system32\ESENT.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\Windows\System32\msxml6.dll
C:\WINDOWS\System32\netprofm.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
c:\windows\system32\profapi.dll
C:\WINDOWS\SYSTEM32\rmclient.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
C:\Windows\System32\UpdatePolicy.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\USERENV.dll
C:\WINDOWS\system32\version.dll
C:\WINDOWS\system32\wbem\fastprox.dll
C:\WINDOWS\system32\wbem\wbemprox.dll
C:\WINDOWS\system32\wbem\wbemsvc.dll
C:\WINDOWS\SYSTEM32\wbemcomn.dll
C:\WINDOWS\SYSTEM32\wevtapi.dll
C:\WINDOWS\System32\win32u.dll
c:\windows\system32\WINHTTP.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll
c:\windows\system32\wuaueng.dll
C:\Windows\System32\wups.dll
C:\WINDOWS\SYSTEM32\wuuhext.dll
C:\WINDOWS\SYSTEM32\wuuhosdeployment.dll

[C:\Windows\System32\svchost.exe (59)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\System32\CRYPTBASE.dll
C:\Windows\System32\cryptnet.dll
C:\WINDOWS\System32\CRYPTSP.dll
C:\Windows\System32\DevDispItemProvider.dll
c:\windows\system32\DEVOBJ.dll
C:\WINDOWS\system32\DEVRTL.dll
C:\WINDOWS\System32\DPAPI.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\System32\imagehlp.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\Windows\System32\MFPlat.DLL
C:\WINDOWS\System32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
c:\windows\system32\ncrypt.dll
C:\WINDOWS\system32\NEWDEV.dll
c:\windows\system32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLE32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
c:\windows\system32\profapi.dll
C:\Windows\System32\PROPSYS.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\Windows\System32\RTWorkQ.DLL
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\SHLWAPI.dll
c:\windows\system32\tbs.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\wbiosrvc.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\winbio.dll
C:\WINDOWS\SYSTEM32\winbioext.dll
C:\WINDOWS\SYSTEM32\WINBIOPLUGINS\EGISTOUCHFPENGINE.DLL
C:\WINDOWS\SYSTEM32\WINBIOPLUGINS\EGISTOUCHFPSENSOR.DLL
C:\WINDOWS\SYSTEM32\WINBIOPLUGINS\FACEBOOTSTRAPADAPTER.DLL
C:\WINDOWS\SYSTEM32\WINBIOPLUGINS\NUIVOICEWBSADAPTERS.DLL
C:\WINDOWS\SYSTEM32\WINBIOPLUGINS\WINBIOSTORAGEADAPTER.DLL
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\system32\WTSAPI32.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.388_none_faefa0077613d9c8\gdiplus.dll

[C:\Windows\System32\svchost.exe (60)]
C:\WINDOWS\System32\advapi32.dll
C:\Windows\System32\AppContracts.dll
C:\Windows\System32\AppXDeploymentClient.dll
C:\WINDOWS\SYSTEM32\bcp47mrm.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\Windows\System32\CoreMessaging.dll
C:\Windows\System32\CoreUIComponents.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\IDStore.dll
C:\WINDOWS\SYSTEM32\iertutil.dll
C:\Windows\System32\InputHost.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\mrmcorer.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
c:\windows\system32\OnDemandBrokerClient.dll
C:\Windows\System32\OneCoreCommonProxyStub.dll
C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\Windows\System32\PROPSYS.dll
c:\windows\system32\RMCLIENT.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\samcli.dll
C:\WINDOWS\System32\SAMLIB.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\Windows\System32\TextInputFramework.dll
c:\windows\system32\TOKENBINDING.dll
c:\windows\system32\tokenbroker.dll
C:\Windows\System32\twinapi.appcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\Windows\System32\vaultcli.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\WindowManagementAPI.dll
C:\Windows\System32\Windows.ApplicationModel.dll
C:\Windows\System32\Windows.StateRepositoryBroker.dll
C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll
C:\Windows\System32\Windows.StateRepositoryPS.dll
C:\WINDOWS\system32\windows.storage.dll
C:\Windows\System32\Windows.UI.dll
C:\WINDOWS\system32\windowscodecs.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\wlidprov.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll

[C:\Windows\System32\svchost.exe (62)]
C:\Windows\System32\AccountAccessor.dll
C:\WINDOWS\System32\advapi32.dll
C:\Windows\System32\APHostClient.dll
c:\windows\system32\aphostservice.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\Windows\System32\CEMAPI.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\system32\cryptdll.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
c:\windows\system32\DMCfgUtils.dll
c:\windows\system32\DMCmnUtils.dll
c:\windows\system32\dmxmlhelputils.dll
C:\Windows\System32\dsclient.dll
C:\WINDOWS\system32\execmodelproxy.dll
C:\WINDOWS\System32\FlightSettings.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
c:\windows\system32\iertutil.dll
C:\WINDOWS\System32\IMM32.DLL
c:\windows\system32\InprocLogger.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\Windows\System32\MCCSEngineShared.dll
c:\windows\system32\MCCSPal.dll
C:\WINDOWS\system32\msv1_0.DLL
C:\WINDOWS\System32\msvcp_win.dll
c:\windows\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
c:\windows\system32\NetworkHelper.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\system32\NtlmShared.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreCommonProxyStub.dll
C:\Windows\System32\PhoneUtil.dll
C:\Windows\System32\PIMSTORE.dll
c:\windows\system32\policymanager.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
c:\windows\system32\profapi.dll
C:\WINDOWS\SYSTEM32\rmclient.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\Windows\System32\SyncController.dll
c:\windows\system32\SYNCUTIL.dll
C:\Windows\System32\SystemEventsBrokerClient.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\Windows\System32\UserDataLanguageUtil.dll
c:\windows\system32\UserDataPlatformHelperUtil.dll
C:\Windows\System32\UserDataTypeHelperUtil.dll
c:\windows\system32\VAULTCLI.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
c:\windows\system32\XmlLite.dll

[C:\Windows\System32\svchost.exe (63)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\system32\BthRadioMedia.dll
C:\Windows\System32\CapabilityAccessManagerClient.dll
c:\windows\system32\cdp.dll
c:\windows\system32\cdpusersvc.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\system32\CRYPTBASE.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
C:\WINDOWS\system32\DEVOBJ.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
c:\windows\system32\dsreg.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
c:\windows\system32\iertutil.dll
C:\WINDOWS\System32\IMM32.DLL
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
c:\windows\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
c:\windows\system32\ncrypt.dll
C:\WINDOWS\system32\ncryptprov.dll
C:\WINDOWS\System32\npmproxy.dll
C:\WINDOWS\System32\NSI.dll
c:\windows\system32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\system32\profapi.dll
c:\windows\system32\PROPSYS.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SHCORE.dll
C:\WINDOWS\System32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\Windows\System32\vaultcli.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\Windows.Devices.Radios.dll
C:\Windows\System32\Windows.Networking.Connectivity.dll
C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll
c:\windows\system32\WINHTTP.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
c:\windows\system32\winsqlite3.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\SYSTEM32\wlanapi.dll
C:\WINDOWS\system32\WlanRadioManager.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\svchost.exe (64)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\appsruprov.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\System32\CRYPTBASE.DLL
C:\WINDOWS\System32\DEVOBJ.dll
C:\WINDOWS\system32\diagperf.dll
c:\windows\system32\dps.dll
C:\WINDOWS\System32\eeprov.dll
C:\WINDOWS\System32\energyprov.dll
C:\WINDOWS\System32\ESENT.dll
C:\WINDOWS\System32\FlightSettings.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\System32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\System32\ncuprov.dll
C:\WINDOWS\System32\nduprov.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\system32\pnpts.dll
C:\WINDOWS\System32\POWRPROF.dll
C:\WINDOWS\System32\profapi.dll
C:\WINDOWS\system32\radardt.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\System32\srumapi.dll
C:\WINDOWS\System32\srumsvc.dll
C:\WINDOWS\System32\SspiCli.dll
C:\Windows\System32\taskschd.dll
C:\WINDOWS\System32\tdh.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\VERSION.dll
C:\WINDOWS\System32\vfuprov.dll
c:\windows\system32\wdi.dll
C:\WINDOWS\system32\whealogr.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\System32\WINNSI.DLL
C:\WINDOWS\System32\WINSTA.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\System32\wlanapi.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\wpnsruprov.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll
C:\WINDOWS\System32\wwapi.dll

[C:\Windows\System32\svchost.exe (67)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\system32\BthRadioMedia.dll
C:\Windows\System32\CapabilityAccessManagerClient.dll
c:\windows\system32\cdp.dll
c:\windows\system32\cdpsvc.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\coml2.dll
C:\WINDOWS\system32\CoreMessaging.dll
C:\WINDOWS\system32\CoreUIComponents.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\system32\CRYPTBASE.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
C:\WINDOWS\system32\DEVOBJ.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
c:\windows\system32\dsreg.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
c:\windows\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
c:\windows\system32\ncrypt.dll
C:\WINDOWS\system32\ncryptprov.dll
C:\WINDOWS\System32\npmproxy.dll
C:\WINDOWS\System32\NSI.dll
c:\windows\system32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\system32\profapi.dll
c:\windows\system32\PROPSYS.dll
C:\WINDOWS\System32\RPCRT4.dll
c:\windows\system32\sbservicetrigger.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\system32\ShareHost.dll
C:\WINDOWS\System32\SHCORE.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\Windows.Devices.Radios.dll
C:\Windows\System32\Windows.Networking.Connectivity.dll
C:\WINDOWS\system32\Windows.Storage.dll
c:\windows\system32\WINHTTP.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\SYSTEM32\wlanapi.dll
C:\WINDOWS\system32\WlanRadioManager.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\wshBth.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll

[C:\Windows\System32\svchost.exe (71)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\System32\CRYPTSP.dll
C:\WINDOWS\System32\DEVOBJ.dll
C:\WINDOWS\System32\dhcpcsvc.DLL
C:\WINDOWS\System32\DMCmnUtils.dll
C:\WINDOWS\System32\dmEnrollEngine.DLL
C:\WINDOWS\System32\DMProcessXMLFiltered.dll
c:\windows\system32\DNSAPI.dll
C:\WINDOWS\System32\DSROLE.dll
C:\WINDOWS\System32\eappcfg.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\FirewallAPI.dll
c:\windows\system32\fwbase.dll
c:\windows\system32\FWPolicyIOMgr.dll
c:\windows\system32\fwpuclnt.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\system32\kerberos.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\logoncli.dll
C:\WINDOWS\System32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
c:\windows\system32\ncrypt.dll
C:\WINDOWS\System32\netprofm.dll
C:\WINDOWS\System32\netutils.dll
C:\WINDOWS\System32\npmproxy.dll
C:\WINDOWS\System32\NSI.dll
c:\windows\system32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
c:\windows\system32\RASAPI32.dll
C:\WINDOWS\System32\raschap.dll
C:\WINDOWS\system32\rascustom.dll
c:\windows\system32\rasman.dll
c:\windows\system32\rasmans.dll
C:\WINDOWS\system32\rasppp.dll
C:\WINDOWS\System32\rastapi.DLL
C:\WINDOWS\SYSTEM32\rmclient.dll
C:\WINDOWS\System32\RPCRT4.dll
c:\windows\system32\rtutils.dll
C:\WINDOWS\System32\SAMLIB.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\System32\SspiCli.dll
C:\WINDOWS\SYSTEM32\tapi32.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\USERENV.dll
C:\WINDOWS\system32\vpnike.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\System32\WINHTTP.dll
c:\windows\system32\WINNSI.DLL
C:\WINDOWS\System32\wkscli.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\XmlLite.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_b555e41d4684ddec\comctl32.dll

[C:\Windows\System32\svchost.exe (80)]
C:\WINDOWS\System32\advapi32.dll
c:\windows\system32\AUTHZ.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\system32\CellularAPI.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\System32\CRYPTBASE.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
C:\WINDOWS\system32\DEVOBJ.dll
C:\Windows\System32\DEVRTL.dll
c:\windows\system32\dhcpcsvc.DLL
c:\windows\system32\dhcpcsvc6.DLL
c:\windows\system32\DNSAPI.dll
C:\WINDOWS\System32\DPAPI.DLL
c:\windows\system32\DSROLE.dll
c:\windows\system32\eappprxy.dll
C:\WINDOWS\system32\FirewallAPI.dll
C:\WINDOWS\system32\fwbase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\system32\kerberos.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\MobileNetworking.dll
C:\WINDOWS\system32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
c:\windows\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\MSWSOCK.dll
C:\Windows\System32\msxml6.dll
c:\windows\system32\ncrypt.dll
C:\Windows\System32\NetSetupApi.dll
C:\Windows\System32\NetSetupShim.dll
C:\WINDOWS\SYSTEM32\nlaapi.dll
C:\WINDOWS\System32\NSI.dll
c:\windows\system32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
c:\windows\system32\OneX.DLL
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\system32\rilProxy.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\setupapi.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\system32\SspiCli.dll
c:\windows\system32\SYSNTFY.dll
C:\WINDOWS\SYSTEM32\SystemEventsBrokerClient.dll
C:\WINDOWS\System32\TetheringIeProvider.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\WINDOWS\System32\WiFiDisplay.dll
C:\WINDOWS\SYSTEM32\wifinetworkmanager.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\SYSTEM32\wlanapi.dll
c:\windows\system32\WLANMSM.DLL
c:\windows\system32\WLANSEC.dll
c:\windows\system32\wlansvc.dll
C:\WINDOWS\System32\wlansvcpal.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\SYSTEM32\wlgpclnt.dll
c:\windows\system32\WMICLNT.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll
C:\WINDOWS\SYSTEM32\wwapi.dll

[C:\Windows\System32\svchost.exe (84)]
C:\WINDOWS\System32\advapi32.dll
C:\Windows\System32\AppXDeploymentClient.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\SYSTEM32\bitsigd.dll
c:\windows\system32\bitsperf.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\coml2.dll
C:\Windows\System32\CoreMessaging.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\System32\CRYPTBASE.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
c:\windows\system32\DNSAPI.dll
C:\Windows\System32\DSROLE.dll
C:\WINDOWS\System32\ES.DLL
c:\windows\system32\ESENT.dll
C:\Windows\System32\execmodelclient.dll
C:\WINDOWS\system32\execmodelproxy.dll
c:\windows\system32\FirewallAPI.dll
C:\WINDOWS\System32\FlightSettings.dll
c:\windows\system32\fwbase.dll
C:\WINDOWS\System32\fwpuclnt.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\system32\iertutil.dll
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\Windows\System32\mi.dll
C:\Windows\System32\miutils.dll
C:\WINDOWS\System32\msvcp_win.dll
c:\windows\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\Windows\System32\msxml6.dll
C:\WINDOWS\System32\netprofm.dll
C:\Windows\System32\netutils.dll
C:\WINDOWS\System32\npmproxy.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreCommonProxyStub.dll
C:\Windows\System32\pcwum.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
c:\windows\system32\profapi.dll
C:\Windows\System32\PROPSYS.dll
c:\windows\system32\qmgr.dll
C:\Windows\System32\rasadhlp.dll
C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll
C:\WINDOWS\SYSTEM32\rmclient.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\SYSTEM32\samcli.dll
C:\WINDOWS\SYSTEM32\SAMLIB.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\system32\SSDPAPI.dll
C:\Windows\System32\SspiCli.dll
C:\WINDOWS\SYSTEM32\sxs.dll
C:\Windows\System32\twinapi.appcore.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
C:\WINDOWS\system32\upnp.dll
C:\WINDOWS\system32\urlmon.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\system32\Userenv.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\WINDOWS\SYSTEM32\vssapi.DLL
C:\WINDOWS\SYSTEM32\VssTrace.DLL
C:\WINDOWS\system32\webio.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\system32\WINHTTP.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\Windows\System32\wkscli.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll
C:\Windows\System32\WSMAUTO.DLL
C:\Windows\System32\WsmSvc.DLL
c:\windows\system32\XmlLite.dll

[C:\Windows\System32\svchost.exe (90)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\SYSTEM32\aepic.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\Windows\System32\Cabinet.dll
C:\Windows\System32\CapabilityAccessManagerClient.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\System32\CRYPTBASE.DLL
C:\WINDOWS\System32\cryptnet.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
C:\WINDOWS\System32\dbgcore.DLL
C:\WINDOWS\system32\dbghelp.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
c:\windows\system32\diagtrack.dll
C:\WINDOWS\SYSTEM32\DNSAPI.dll
C:\WINDOWS\System32\DPAPI.DLL
C:\WINDOWS\System32\drvstore.dll
C:\WINDOWS\SYSTEM32\DSREG.DLL
C:\Windows\System32\dusmapi.dll
C:\WINDOWS\System32\FlightSettings.dll
C:\WINDOWS\System32\fwpuclnt.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\Windows\System32\iertutil.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
c:\windows\system32\logoncli.dll
C:\WINDOWS\System32\MSASN1.dll
C:\WINDOWS\SYSTEM32\mskeyprotect.dll
C:\WINDOWS\System32\msvcp_win.dll
c:\windows\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\ncrypt.dll
C:\WINDOWS\system32\ncryptsslp.dll
C:\WINDOWS\SYSTEM32\Netapi32.dll
C:\WINDOWS\System32\netutils.dll
C:\WINDOWS\System32\npmproxy.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\System32\profapi.dll
C:\Windows\System32\rasadhlp.dll
C:\WINDOWS\SYSTEM32\rmclient.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\system32\schannel.DLL
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\Windows\System32\taskschd.dll
C:\Windows\System32\twinapi.appcore.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
C:\Windows\System32\UpdatePolicy.dll
C:\WINDOWS\System32\user32.dll
c:\windows\system32\USERENV.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
c:\windows\system32\webio.dll
c:\windows\system32\wer.dll
c:\windows\system32\WerEtw.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\Windows.Networking.Connectivity.dll
C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll
C:\Windows\System32\Windows.Web.dll
c:\windows\system32\WindowsPerformanceRecorderControl.dll
c:\windows\system32\WINHTTP.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
c:\windows\system32\winsqlite3.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\Windows\System32\WinTypes.dll
C:\WINDOWS\System32\wkscli.dll
C:\WINDOWS\SYSTEM32\wlanapi.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\Windows\System32\wosc.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\system32\wshhyperv.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll
c:\windows\system32\XmlLite.dll

[C:\Windows\System32\svchost.exe (96)]
C:\WINDOWS\System32\advapi32.dll
C:\Windows\System32\AppExtension.dll
C:\Windows\System32\appresolver.dll
C:\Windows\System32\AppXDeploymentClient.dll
C:\Windows\System32\Bcp47Langs.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\Windows\System32\CapabilityAccessManagerClient.dll
C:\Windows\System32\cdp.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\Windows\System32\ContentDeliveryManager.Utilities.dll
C:\Windows\System32\CoreMessaging.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
c:\windows\system32\dbgcore.DLL
c:\windows\system32\dbghelp.dll
C:\Windows\System32\dcomp.dll
C:\Windows\System32\dsreg.dll
C:\WINDOWS\SYSTEM32\dwmapi.dll
C:\Windows\System32\DWrite.dll
C:\Windows\System32\execmodelclient.dll
C:\WINDOWS\system32\execmodelproxy.dll
c:\windows\system32\faultrep.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
c:\windows\system32\iertutil.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\Windows\System32\msxml6.dll
C:\Windows\System32\NotificationController.dll
C:\Windows\System32\NotificationControllerPS.dll
C:\WINDOWS\System32\npmproxy.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreCommonProxyStub.dll
C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\Windows\System32\PROPSYS.dll
C:\Windows\System32\QuietHours.dll
C:\Windows\System32\RMCLIENT.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\SHELL32.dll
C:\Windows\System32\ShellCommonCommonProxyStub.dll
C:\WINDOWS\System32\shlwapi.dll
C:\Windows\System32\SLC.dll
C:\Windows\System32\sppc.dll
C:\Windows\System32\StateRepository.Core.dll
C:\Windows\System32\threadpoolwinrt.dll
C:\Windows\System32\TileDataRepository.dll
C:\WINDOWS\SYSTEM32\twinapi.appcore.dll
C:\WINDOWS\system32\twinapi.dll
C:\Windows\System32\twinui.pcshell.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\UMPDC.dll
C:\WINDOWS\System32\urlmon.dll
C:\WINDOWS\System32\user32.dll
C:\Windows\System32\USERENV.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\wincorlib.DLL
C:\Windows\System32\Windows.CloudStore.dll
C:\Windows\System32\Windows.CloudStore.Schema.Shell.dll
C:\Windows\System32\Windows.Networking.Connectivity.dll
C:\Windows\System32\Windows.StateRepository.dll
C:\Windows\System32\Windows.StateRepositoryClient.dll
C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll
C:\Windows\System32\Windows.StateRepositoryPS.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\System32\WINHTTP.dll
C:\Windows\System32\WININET.dll
C:\WINDOWS\System32\winsqlite3.dll
C:\WINDOWS\SYSTEM32\winsta.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\SYSTEM32\wlanapi.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\Windows\System32\wpnapps.dll
C:\Windows\System32\wpnclient.dll
C:\WINDOWS\System32\wpncore.dll
c:\windows\system32\wpnuserservice.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll
C:\Windows\System32\XmlLite.dll

[C:\Windows\System32\svchost.exe (98)]
C:\Windows\System32\ACPBackgroundManagerPolicy.dll
C:\WINDOWS\System32\advapi32.dll
C:\Windows\System32\AppExtension.dll
C:\WINDOWS\system32\apphelp.dll
C:\Windows\System32\AppXDeploymentClient.dll
C:\WINDOWS\System32\BackgroundMediaPolicy.dll
C:\Windows\System32\Bcp47Langs.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\SYSTEM32\bi.dll
C:\WINDOWS\SYSTEM32\bisrv.dll
c:\windows\system32\BrokerLib.dll
C:\WINDOWS\SYSTEM32\capauthz.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\coml2.dll
C:\Windows\System32\CoreMessaging.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
C:\WINDOWS\SYSTEM32\CRYPTSP.dll
c:\windows\system32\CSystemEventsBrokerClient.dll
c:\windows\system32\DAB.dll
c:\windows\system32\dxgi.dll
C:\WINDOWS\SYSTEM32\embeddedmodesvcapi.dll
c:\windows\system32\EventAggregation.dll
C:\Windows\System32\execmodelclient.dll
C:\WINDOWS\system32\execmodelproxy.dll
C:\WINDOWS\System32\gdi32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\gpapi.dll
C:\WINDOWS\SYSTEM32\HID.DLL
C:\Windows\System32\iertutil.dll
c:\windows\system32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
C:\WINDOWS\System32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\Windows\System32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreCommonProxyStub.dll
C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
c:\windows\system32\profapi.dll
C:\Windows\System32\PROPSYS.dll
C:\WINDOWS\SYSTEM32\psmserviceexthost.dll
c:\windows\system32\psmsrv.dll
c:\windows\system32\ResourcePolicyClient.dll
C:\WINDOWS\SYSTEM32\resourcepolicyserver.dll
c:\windows\system32\RMCLIENT.dll
C:\WINDOWS\System32\RPCRT4.dll
c:\windows\system32\rpcss.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\system32\SebBackgroundManagerPolicy.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\SYSTEM32\slc.dll
C:\WINDOWS\system32\SmartCardBackgroundPolicy.dll
c:\windows\system32\sppc.dll
C:\WINDOWS\system32\srumapi.DLL
c:\windows\system32\SspiCli.dll
C:\Windows\System32\StartTileData.dll
c:\windows\system32\systemeventsbrokerserver.dll
C:\WINDOWS\SYSTEM32\tdh.dll
C:\Windows\System32\twinapi.appcore.dll
C:\WINDOWS\System32\ucrtbase.dll
c:\windows\system32\UMPDC.dll
c:\windows\system32\umpo.dll
C:\WINDOWS\SYSTEM32\umpoext.dll
C:\WINDOWS\system32\umpo-overrides.dll
C:\Windows\System32\urlmon.dll
C:\WINDOWS\System32\USER32.dll
C:\Windows\System32\USERENV.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\Windows\System32\usermgrproxy.dll
c:\windows\system32\wer.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\Windows.CloudStore.dll
C:\Windows\System32\Windows.CloudStore.Schema.Shell.dll
C:\Windows\System32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll
C:\Windows\System32\Windows.StateRepositoryPS.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\SYSTEM32\WLDP.DLL
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll

[C:\Windows\System32\taskhostw.exe (48)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\system32\AUDIOSES.DLL
C:\WINDOWS\system32\AVRT.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\system32\CRYPTBASE.DLL
C:\WINDOWS\SYSTEM32\DEVOBJ.dll
C:\WINDOWS\system32\ESENT.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\system32\iertutil.dll
C:\WINDOWS\System32\imm32.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\system32\ksuser.dll
C:\WINDOWS\system32\midimap.dll
C:\WINDOWS\SYSTEM32\MMDevAPI.DLL
C:\WINDOWS\system32\MSACM32.dll
C:\WINDOWS\system32\msacm32.drv
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\system32\MsCtfMonitor.dll
C:\WINDOWS\system32\MSUTB.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\PlaySndSrv.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SHCORE.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\system32\wdmaud.drv
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\system32\wininet.dll
C:\WINDOWS\System32\WINMM.dll
C:\WINDOWS\SYSTEM32\winmmbase.dll
C:\WINDOWS\system32\WINSTA.dll
C:\WINDOWS\system32\Wldp.dll

[C:\Windows\System32\wbem\unsecapp.exe (22)]
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\system32\wbem\fastprox.dll
C:\WINDOWS\system32\wbem\wbemsvc.dll
C:\WINDOWS\SYSTEM32\wbemcomn.dll
C:\WINDOWS\System32\win32u.dll

[C:\Windows\System32\wbem\unsecapp.exe (22)]
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\system32\wbem\fastprox.dll
C:\WINDOWS\system32\wbem\wbemsvc.dll
C:\WINDOWS\SYSTEM32\wbemcomn.dll
C:\WINDOWS\System32\win32u.dll

[C:\Windows\System32\wbem\WmiPrvSE.exe (33)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\NCObjAPI.DLL
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\system32\wbem\esscli.dll
C:\WINDOWS\system32\wbem\FastProx.dll
C:\WINDOWS\system32\wbem\stdprov.dll
C:\WINDOWS\system32\wbem\wbemprox.dll
C:\WINDOWS\system32\wbem\wbemsvc.dll
C:\WINDOWS\system32\wbem\wmiprov.dll
C:\WINDOWS\system32\wbem\wmiutils.dll
C:\WINDOWS\SYSTEM32\wbemcomn.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WMICLNT.dll
C:\WINDOWS\System32\WS2_32.dll

[C:\Windows\System32\wbem\WmiPrvSE.exe (61)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\cscapi.dll
C:\WINDOWS\SYSTEM32\DEVOBJ.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
C:\WINDOWS\SYSTEM32\DNSAPI.dll
C:\WINDOWS\System32\dskquota.dll
C:\WINDOWS\SYSTEM32\DSROLE.DLL
C:\WINDOWS\SYSTEM32\framedynos.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\logoncli.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\NCObjAPI.DLL
C:\WINDOWS\SYSTEM32\NETAPI32.DLL
C:\WINDOWS\System32\netutils.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\perfos.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\samcli.dll
C:\WINDOWS\system32\schannel.DLL
C:\WINDOWS\SYSTEM32\SCHEDCLI.DLL
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\Secur32.dll
C:\WINDOWS\SYSTEM32\SECURITY.DLL
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\SYSTEM32\SRVCLI.DLL
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\system32\wbem\cimwin32.dll
C:\WINDOWS\system32\wbem\FastProx.dll
C:\WINDOWS\system32\wbem\wbemprox.dll
C:\WINDOWS\system32\wbem\wbemsvc.dll
C:\WINDOWS\system32\wbem\wmipcima.dll
C:\WINDOWS\system32\wbem\wmiutils.dll
C:\WINDOWS\SYSTEM32\wbemcomn.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\winbrand.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\SYSTEM32\WKSCLI.DLL
C:\WINDOWS\SYSTEM32\WMI.DLL
C:\WINDOWS\SYSTEM32\wmiclnt.DLL
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\wtsapi32.dll

C:\Windows\System32\wininit.exe

[C:\Windows\System32\winlogon.exe (47)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\system32\apphelp.dll
C:\WINDOWS\System32\Bcrypt.dll
C:\WINDOWS\System32\bcryptprimitives.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\system32\CRYPTBASE.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
C:\WINDOWS\system32\DNSAPI.dll
C:\WINDOWS\system32\DPAPI.dll
C:\WINDOWS\system32\dsreg.dll
C:\WINDOWS\system32\dwmapi.dll
C:\WINDOWS\SYSTEM32\dwminit.dll
C:\WINDOWS\SYSTEM32\firewallapi.dll
C:\WINDOWS\system32\fwbase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\system32\MPR.dll
C:\WINDOWS\system32\MSASN1.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\system32\profapi.dll
C:\WINDOWS\SYSTEM32\profext.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\system32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\system32\UMPDC.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\system32\USERENV.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\WINDOWS\SYSTEM32\uxinit.dll
C:\WINDOWS\system32\UxTheme.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\winsta.dll

[C:\Windows\System32\wlanext.exe (15)]
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\system32\IntelWifiIhv04.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\system32\sspicli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\System32\win32u.dll

[C:\Windows\System32\WUDFHost.exe (22)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\combase.dll
C:\Windows\System32\dbghelp.dll
C:\WINDOWS\SYSTEM32\DEVOBJ.dll
c:\windows\system32\drivers\umdf\detectionverificationdrv.dll
C:\Windows\System32\IntelSSTPreprocStreamer.dll
C:\Windows\System32\IntelWovSDK.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcrt.dll
C:\Windows\System32\MultiChannelWoV.dll
C:\Windows\System32\MultichannelWoVCfg.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\WUDFPlatform.dll
C:\Windows\System32\WUDFx02000.dll

[C:\Windows\System32\WUDFHost.exe (32)]
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\DEVOBJ.dll
c:\windows\system32\drivers\umdf\egistouchfp.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\Powrprof.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SETUPAPI.dll
C:\WINDOWS\System32\SHLWAPI.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\Windows\System32\UMPDC.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\WINUSB.DLL
C:\Windows\System32\WTSAPI32.dll
C:\WINDOWS\SYSTEM32\WUDFPlatform.dll
C:\Windows\System32\WUDFx.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.388_none_faefa0077613d9c8\gdiplus.dll

[C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe (163)]
C:\Windows\System32\aadWamExtension.dll
C:\Windows\System32\ActXPrxy.dll
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\SYSTEM32\AudioSes.DLL
C:\WINDOWS\SYSTEM32\Bcp47Langs.dll
C:\WINDOWS\SYSTEM32\bcp47mrm.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\Windows\System32\biwinrt.dll
C:\WINDOWS\SYSTEM32\Cabinet.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\SYSTEM32\chakra.dll
C:\WINDOWS\System32\combase.dll
C:\Windows\System32\ConstraintIndex.Search.dll
C:\WINDOWS\SYSTEM32\CoreMessaging.dll
C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\SYSTEM32\CRYPTBASE.dll
C:\WINDOWS\SYSTEM32\cryptdll.dll
C:\WINDOWS\SYSTEM32\cryptsp.dll
C:\WINDOWS\SYSTEM32\d2d1.dll
C:\WINDOWS\SYSTEM32\d3d11.dll
C:\WINDOWS\system32\DataExchange.dll
C:\WINDOWS\SYSTEM32\dcomp.dll
C:\WINDOWS\SYSTEM32\DEVOBJ.dll
C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
C:\WINDOWS\SYSTEM32\DictationManager.dll
C:\WINDOWS\system32\directmanipulation.dll
C:\WINDOWS\SYSTEM32\DNSAPI.dll
C:\WINDOWS\SYSTEM32\DPAPI.DLL
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igc64.dll
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igd10iumd64.dll
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igdgmm64.dll
C:\WINDOWS\SYSTEM32\dwmapi.dll
C:\WINDOWS\SYSTEM32\dwrite.dll
C:\WINDOWS\SYSTEM32\dxcore.dll
C:\WINDOWS\SYSTEM32\dxgi.dll
C:\WINDOWS\SYSTEM32\edgehtml.dll
C:\WINDOWS\SYSTEM32\edgeIso.dll
C:\WINDOWS\SYSTEM32\EdgeManager.dll
C:\WINDOWS\system32\execmodelproxy.dll
C:\WINDOWS\SYSTEM32\FirewallAPI.dll
C:\WINDOWS\System32\FlightSettings.dll
C:\WINDOWS\SYSTEM32\fontgroupsoverride.dll
C:\WINDOWS\SYSTEM32\fwbase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\globinputhost.dll
C:\WINDOWS\SYSTEM32\icu.DLL
C:\WINDOWS\SYSTEM32\icuin.dll
C:\WINDOWS\SYSTEM32\icuuc.dll
C:\WINDOWS\SYSTEM32\iertutil.dll
C:\WINDOWS\System32\imagehlp.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\InputHost.dll
C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\languageoverlayutil.dll
C:\WINDOWS\SYSTEM32\logoncli.dll
C:\WINDOWS\system32\mlang.dll
C:\WINDOWS\SYSTEM32\MMDevAPI.DLL
C:\Windows\System32\MrmCoreR.dll
C:\WINDOWS\SYSTEM32\MSASN1.dll
C:\WINDOWS\System32\msctf.dll
C:\WINDOWS\SYSTEM32\msftedit.dll
C:\WINDOWS\system32\msimtf.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\SYSTEM32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\System32\MSWB7.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\SYSTEM32\ncrypt.dll
C:\WINDOWS\SYSTEM32\ninput.dll
C:\WINDOWS\System32\NSI.dll
C:\WINDOWS\SYSTEM32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\ondemandconnroutehelper.dll
C:\Windows\System32\OneCoreCommonProxyStub.dll
C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\SYSTEM32\profext.dll
C:\WINDOWS\SYSTEM32\PROPSYS.dll
C:\Windows\System32\rasadhlp.dll
C:\WINDOWS\SYSTEM32\RMCLIENT.dll
C:\WINDOWS\SYSTEM32\RoMetadata.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\shell32.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\SYSTEM32\slc.dll
C:\WINDOWS\System32\Speech_OneCore\Common\sapi_onecore.dll
C:\WINDOWS\SYSTEM32\sppc.dll
C:\WINDOWS\SYSTEM32\srpapi.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\System32\StructuredQuery.dll
C:\Windows\System32\SystemSettings.DataModel.dll
C:\WINDOWS\SYSTEM32\TextInputFramework.dll
C:\WINDOWS\SYSTEM32\TextShaping.dll
C:\Windows\System32\threadpoolwinrt.dll
C:\WINDOWS\SYSTEM32\TOKENBINDING.dll
C:\WINDOWS\system32\tquery.dll
C:\Windows\System32\twinapi.appcore.dll
C:\Windows\System32\twinapi.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\Windows\System32\UiaManager.dll
C:\WINDOWS\SYSTEM32\uiautomationcore.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\SYSTEM32\urlmon.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\SYSTEM32\uxtheme.dll
C:\Windows\System32\vaultcli.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\wincorlib.DLL
C:\WINDOWS\SYSTEM32\WindowManagementAPI.dll
C:\Windows\System32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
C:\Windows\System32\Windows.ApplicationModel.dll
C:\Windows\System32\Windows.Cortana.ProxyStub.dll
C:\Windows\System32\Windows.Globalization.dll
C:\Windows\System32\Windows.Globalization.Fontgroups.dll
C:\Windows\System32\Windows.Graphics.dll
C:\Windows\System32\Windows.Internal.SecurityMitigationsBroker.dll
C:\Windows\System32\windows.internal.shell.broker.dll
C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll
C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll
C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll
C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll
C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll
C:\Windows\System32\Windows.StateRepositoryPS.dll
C:\Windows\System32\Windows.Storage.ApplicationData.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\windows.ui.core.textinput.dll
C:\Windows\System32\Windows.UI.dll
C:\Windows\System32\Windows.UI.Immersive.dll
C:\Windows\System32\Windows.UI.Input.Inking.dll
C:\WINDOWS\SYSTEM32\Windows.UI.Xaml.Controls.dll
C:\Windows\System32\Windows.UI.Xaml.dll
C:\Windows\System32\Windows.Web.dll
C:\Windows\System32\Windows.Web.Http.dll
C:\WINDOWS\system32\windowsudk.shellcommon.dll
C:\WINDOWS\SYSTEM32\WINHTTP.dll
C:\WINDOWS\SYSTEM32\WININET.dll
C:\WINDOWS\SYSTEM32\winmmbase.dll
C:\WINDOWS\SYSTEM32\WINNSI.DLL
C:\WINDOWS\System32\WINTRUST.dll
C:\Windows\System32\WinTypes.dll
C:\WINDOWS\SYSTEM32\Wldp.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\XmlLite.dll
C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\BingConfigurationClient.dll
C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\Search.Core.dll
C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApi.dll
C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.19041.1_none_4b395a7b3c8e63ab\comctl32.dll

[C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (113)]
C:\Windows\System32\ActXPrxy.dll
C:\WINDOWS\System32\advapi32.dll
C:\Windows\System32\appresolver.dll
C:\WINDOWS\SYSTEM32\Bcp47Langs.dll
C:\WINDOWS\SYSTEM32\bcp47mrm.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\Windows\System32\biwinrt.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\CoreMessaging.dll
C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
C:\WINDOWS\SYSTEM32\CRYPTBASE.dll
C:\WINDOWS\SYSTEM32\d2d1.dll
C:\WINDOWS\SYSTEM32\d3d11.dll
C:\WINDOWS\system32\DataExchange.dll
C:\WINDOWS\SYSTEM32\dcomp.dll
C:\WINDOWS\system32\directmanipulation.dll
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igc64.dll
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igd10iumd64.dll
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igdgmm64.dll
C:\WINDOWS\SYSTEM32\dwmapi.dll
C:\WINDOWS\SYSTEM32\dwrite.dll
C:\WINDOWS\SYSTEM32\dxcore.dll
C:\WINDOWS\SYSTEM32\dxgi.dll
C:\WINDOWS\system32\execmodelproxy.dll
C:\WINDOWS\SYSTEM32\fontgroupsoverride.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\iertutil.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\InputHost.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\languageoverlayutil.dll
C:\WINDOWS\SYSTEM32\logoncli.dll
C:\Windows\System32\MrmCoreR.dll
C:\WINDOWS\System32\msctf.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\SYSTEM32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ncrypt.dll
C:\WINDOWS\SYSTEM32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\PhotoMetadataHandler.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\SYSTEM32\PROPSYS.dll
C:\WINDOWS\SYSTEM32\RMCLIENT.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\Windows\System32\RTMediaFrame.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\shell32.dll
C:\Windows\System32\ShellCommonCommonProxyStub.dll
C:\Windows\System32\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\SYSTEM32\SLC.dll
C:\WINDOWS\SYSTEM32\sppc.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\SYSTEM32\StartTileData.dll
C:\WINDOWS\SYSTEM32\StateRepository.Core.dll
C:\WINDOWS\SYSTEM32\TextInputFramework.dll
C:\WINDOWS\SYSTEM32\TextShaping.dll
C:\Windows\System32\threadpoolwinrt.dll
C:\Windows\System32\TileDataRepository.dll
C:\Windows\System32\twinapi.appcore.dll
C:\WINDOWS\system32\twinapi.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\Windows\System32\UiaManager.dll
C:\WINDOWS\SYSTEM32\urlmon.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\SYSTEM32\usermgrcli.dll
C:\Windows\System32\usermgrproxy.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\wincorlib.DLL
C:\WINDOWS\SYSTEM32\WindowManagementAPI.dll
C:\Windows\System32\Windows.ApplicationModel.dll
C:\Windows\System32\Windows.CloudStore.dll
C:\Windows\System32\Windows.CloudStore.Schema.Shell.dll
C:\Windows\System32\Windows.Globalization.dll
C:\Windows\System32\Windows.Globalization.Fontgroups.dll
C:\Windows\System32\Windows.Graphics.dll
C:\Windows\System32\windows.internal.shell.broker.dll
C:\Windows\System32\Windows.Services.TargetedContent.dll
C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll
C:\WINDOWS\SYSTEM32\Windows.StateRepository.dll
C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll
C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll
C:\Windows\System32\Windows.StateRepositoryPS.dll
C:\Windows\System32\Windows.Storage.ApplicationData.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\windows.ui.core.textinput.dll
C:\Windows\System32\Windows.UI.dll
C:\Windows\System32\Windows.UI.Immersive.dll
C:\WINDOWS\SYSTEM32\Windows.UI.Xaml.Controls.dll
C:\Windows\System32\Windows.UI.Xaml.dll
C:\WINDOWS\system32\windowscodecs.dll
C:\WINDOWS\SYSTEM32\WININET.dll
C:\WINDOWS\SYSTEM32\winsta.dll
C:\Windows\System32\WinTypes.dll
C:\WINDOWS\SYSTEM32\Wldp.dll
C:\Windows\System32\wpnclient.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\wuceffects.dll
C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartUI.dll

[C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe (92)]
C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.27810.0_x64__8wekyb3d8bbwe\MSVCP140_APP.dll
C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.27810.0_x64__8wekyb3d8bbwe\vccorlib140_app.DLL
C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.27810.0_x64__8wekyb3d8bbwe\VCRUNTIME140_1_APP.dll
C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.27810.0_x64__8wekyb3d8bbwe\VCRUNTIME140_APP.dll
C:\WINDOWS\System32\advapi32.dll
C:\WINDOWS\SYSTEM32\Bcp47Langs.dll
C:\WINDOWS\SYSTEM32\bcp47mrm.dll
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\SYSTEM32\CoreMessaging.dll
C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
C:\WINDOWS\SYSTEM32\CRYPTBASE.dll
C:\WINDOWS\SYSTEM32\d2d1.dll
C:\WINDOWS\SYSTEM32\d3d11.dll
C:\WINDOWS\system32\DataExchange.dll
C:\WINDOWS\SYSTEM32\dcomp.dll
C:\WINDOWS\SYSTEM32\DictationManager.dll
C:\WINDOWS\system32\directmanipulation.dll
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igc64.dll
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igd10iumd64.dll
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igdgmm64.dll
C:\WINDOWS\SYSTEM32\DWrite.dll
C:\WINDOWS\SYSTEM32\dxcore.dll
C:\WINDOWS\SYSTEM32\dxgi.dll
C:\WINDOWS\system32\execmodelproxy.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\SYSTEM32\iertutil.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\SYSTEM32\InputHost.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\Windows\System32\MrmCoreR.dll
C:\WINDOWS\System32\msctf.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\SYSTEM32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ncrypt.dll
C:\WINDOWS\SYSTEM32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\SYSTEM32\profext.dll
C:\WINDOWS\SYSTEM32\PROPSYS.dll
C:\WINDOWS\SYSTEM32\RMCLIENT.dll
C:\WINDOWS\SYSTEM32\rometadata.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\shell32.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\SYSTEM32\TextInputFramework.dll
C:\WINDOWS\SYSTEM32\TextShaping.dll
C:\Windows\System32\twinapi.appcore.dll
C:\Windows\System32\twinapi.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\Windows\System32\UiaManager.dll
C:\WINDOWS\SYSTEM32\uiautomationcore.dll
C:\WINDOWS\SYSTEM32\urlmon.dll
C:\WINDOWS\System32\user32.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\WindowManagementAPI.dll
C:\Windows\System32\Windows.ApplicationModel.dll
C:\Windows\System32\Windows.Globalization.dll
C:\Windows\System32\Windows.Graphics.dll
C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll
C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll
C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll
C:\Windows\System32\Windows.Storage.ApplicationData.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\WINDOWS\SYSTEM32\windows.ui.core.textinput.dll
C:\Windows\System32\Windows.UI.dll
C:\Windows\System32\Windows.UI.Immersive.dll
C:\Windows\System32\Windows.UI.Xaml.dll
C:\Windows\System32\Windows.Web.dll
C:\WINDOWS\system32\windowsudk.shellcommon.dll
C:\WINDOWS\SYSTEM32\WinLangdb.dll
C:\Windows\System32\WinTypes.dll
C:\WINDOWS\SYSTEM32\Wldp.dll
C:\WINDOWS\System32\WS2_32.dll
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\InputApp.dll
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\LayoutData.dll
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInput.dll

[D:\SteamLibrary\steamapps\common\wallpaper_engine\bin\wallpaperservice32_c.exe (14)]
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\system32\apphelp.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\profapi.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\USERENV.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\SYSTEM32\WTSAPI32.dll

[D:\SteamLibrary\steamapps\common\wallpaper_engine\wallpaper32.exe (74)]
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\SYSTEM32\AUDIOSES.DLL
C:\WINDOWS\System32\bcrypt.dll
C:\WINDOWS\System32\bcryptPrimitives.dll
C:\WINDOWS\System32\cfgmgr32.dll
C:\WINDOWS\System32\clbcatq.dll
C:\WINDOWS\System32\combase.dll
C:\Windows\System32\CoreMessaging.dll
C:\Windows\System32\CoreUIComponents.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
C:\WINDOWS\SYSTEM32\d3d11.dll
C:\WINDOWS\SYSTEM32\dbghelp.dll
C:\WINDOWS\System32\DEVOBJ.dll
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igc32.dll
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igd10iumd32.dll
C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\igdgmm32.dll
C:\WINDOWS\SYSTEM32\dwmapi.dll
C:\WINDOWS\SYSTEM32\dxcore.dll
C:\WINDOWS\SYSTEM32\dxgi.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\IMM32.DLL
C:\Windows\System32\InputHost.dll
C:\WINDOWS\SYSTEM32\kernel.appcore.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MMDevApi.dll
C:\WINDOWS\SYSTEM32\MSASN1.dll
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\SYSTEM32\MSIMG32.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\SYSTEM32\MSVCP140.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ncrypt.dll
C:\WINDOWS\SYSTEM32\NTASN1.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\SYSTEM32\ntmarta.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\SYSTEM32\powrprof.dll
C:\Windows\System32\PROPSYS.dll
C:\WINDOWS\System32\PSAPI.DLL
C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\SHCORE.dll
C:\WINDOWS\System32\SHELL32.dll
C:\WINDOWS\System32\shlwapi.dll
C:\WINDOWS\SYSTEM32\SspiCli.dll
C:\Windows\System32\TextInputFramework.dll
C:\WINDOWS\SYSTEM32\twinapi.appcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\SYSTEM32\UMPDC.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\SYSTEM32\VCRUNTIME140.dll
C:\WINDOWS\SYSTEM32\VERSION.dll
C:\WINDOWS\System32\win32u.dll
C:\Windows\System32\WindowManagementAPI.dll
C:\WINDOWS\SYSTEM32\windows.storage.dll
C:\Windows\System32\Windows.UI.dll
C:\WINDOWS\SYSTEM32\WINMM.dll
C:\WINDOWS\SYSTEM32\WINSTA.dll
C:\WINDOWS\System32\WINTRUST.dll
C:\WINDOWS\SYSTEM32\wintypes.dll
C:\WINDOWS\SYSTEM32\Wldp.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\SYSTEM32\WTSAPI32.dll
D:\SteamLibrary\steamapps\common\wallpaper_engine\bin\CUESDK_2015.dll
D:\SteamLibrary\steamapps\common\wallpaper_engine\bin\FreeImage32.dll
D:\SteamLibrary\steamapps\common\wallpaper_engine\bin\resourceutil32.dll
D:\SteamLibrary\steamapps\common\wallpaper_engine\bin\scenescript32.dll
D:\SteamLibrary\steamapps\common\wallpaper_engine\plugins\led\ledextensions32.dll

--------------------

Task Scheduler jobs:

[Jobs (1)]
CreateExplorerShellUnelevatedTask.job

--------------------

Explorer.exe clones:

C:\WINDOWS\explorer.exe
C:\WINDOWS\syswow64\explorer.exe

--------------------

Browser Helper Objects (5):

IDM Helper = {0055C089-8582-441B-A0BF-17B458C2A3A8} = C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll
IEToEdge BHO = {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} = C:\Program Files (x86)\Microsoft\Edge\Application\84.0.522.52\BHO\ie_to_edge_bho_64.dll
Java(tm) Plug-In 2 SSV Helper = {DBC80044-A445-435b-BC74-9C25C1C588A9} = C:\Program Files\Java\jre1.8.0_201\bin\jp2ssv.dll
Java(tm) Plug-In SSV Helper = {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} = C:\Program Files\Java\jre1.8.0_201\bin\ssv.dll
URLRedirectionBHO = {B4F3A835-0E21-4959-BA22-42B3008E02FF} = C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL

--------------------

IE Toolbars:

[This user]
* ShellBrowser (1) *
(no name) - ITBar7Layout - (no file)


--------------------

IE menu extensions:

[This user (3)]
IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEExt.htm
Microsoft Excel'e &Ver -
Tüm bağlantıları IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm

--------------------

IE Bands (1):

 - {EFA24E64-B078-11D0-89E4-00C04FC9E26E} -

--------------------

ActiveX objects (7):

(no name) - {9459C573-B17A-45AE-9F64-1857B5D58CEE} - "C:\Program Files (x86)\Microsoft\Edge\Application\84.0.522.52\Installer\setup.exe" --configure-user-settings --verbose-logging --system-level
BASEIE40_W2K - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
DOTNETFRAMEWORKS - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
IE4_SHELLID - {89820200-ECBD-11cf-8B85-00AA005B4340} - U
Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - C:\WINDOWS\system32\unregmp2.exe /FirstLogon
Theme Component - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - /UserInstall
WMPACCESS - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\system32\unregmp2.exe /ShowWMP

--------------------

URL Search Hooks:

[This user (1)]
Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll

--------------------

Registry-mapped .ini files:

System NT shell = explorer.exe

--------------------

On-reboot actions:

[Wininit.ini]
[Rename]
NUL=C:\Windows\SysWow64\vulkaninfo.exe
NUL=C:\Windows\System32\vulkaninfo.exe
NUL=C:\Windows\SysWow64\vulkan-1.dll
NUL=C:\Windows\System32\vulkan-1.dll

BootExecute = autocheck autochk *

--------------------

Shell commands:

[All users]
.bat 'edit' - Windows Batch File - C:\WINDOWS\System32\NOTEPAD.EXE %1
.bat 'open' - Windows Batch File - "%1" %*
.bat 'print' - Windows Batch File - C:\WINDOWS\System32\NOTEPAD.EXE /p %1
.bat 'runas' - Windows Batch File - C:\WINDOWS\System32\cmd.exe /C "%1" %*
.cmd 'edit' - Windows Command Script - C:\WINDOWS\System32\NOTEPAD.EXE %1
.cmd 'open' - Windows Command Script - "%1" %*
.cmd 'print' - Windows Command Script - C:\WINDOWS\System32\NOTEPAD.EXE /p %1
.cmd 'runas' - Windows Command Script - C:\WINDOWS\System32\cmd.exe /C "%1" %*
.com 'open' - MS-DOS Application - "%1" %*
.exe 'open' - Application - "%1" %*
.exe 'runas' - Application - "%1" %*
.hta 'Open' - HTML Application - C:\Windows\SysWOW64\mshta.exe "%1" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}%U{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5} %*
.js 'Edit' - JavaScript File - C:\Windows\System32\Notepad.exe %1
.js 'Open' - JavaScript File - C:\Windows\System32\WScript.exe "%1" %*
.js 'Open2' - JavaScript File - C:\Windows\System32\CScript.exe "%1" %*
.js 'Print' - JavaScript File - C:\Windows\System32\Notepad.exe /p %1
.jse 'Edit' - JScript Encoded File - C:\Windows\System32\Notepad.exe %1
.jse 'Open' - JScript Encoded File - C:\Windows\System32\WScript.exe "%1" %*
.jse 'Open2' - JScript Encoded File - C:\Windows\System32\CScript.exe "%1" %*
.jse 'Print' - JScript Encoded File - C:\Windows\System32\Notepad.exe /p %1
.pif 'open' - Shortcut to MS-DOS Program - "%1" %*
.scr 'config' - Screen saver - "%1"
.scr 'install' - Screen saver - rundll32.exe desk.cpl,InstallScreenSaver %l
.scr 'open' - Screen saver - "%1" /S
.txt 'open' - Text Document - C:\WINDOWS\system32\NOTEPAD.EXE %1
.txt 'print' - Text Document - C:\WINDOWS\system32\NOTEPAD.EXE /p %1
.txt 'printto' - Text Document - C:\WINDOWS\system32\notepad.exe /pt "%1" "%2" "%3" "%4"
.vbe 'Edit' - VBScript Encoded File - "C:\WINDOWS\System32\Notepad.exe" %1
.vbe 'Open' - VBScript Encoded File - "C:\WINDOWS\System32\WScript.exe" "%1" %*
.vbe 'Open2' - VBScript Encoded File - "C:\WINDOWS\System32\CScript.exe" "%1" %*
.vbe 'Print' - VBScript Encoded File - "C:\WINDOWS\System32\Notepad.exe" /p %1
.vbs 'Edit' - VBScript Script File - "C:\WINDOWS\System32\Notepad.exe" %1
.vbs 'Open' - VBScript Script File - "C:\WINDOWS\System32\WScript.exe" "%1" %*
.vbs 'Open2' - VBScript Script File - "C:\WINDOWS\System32\CScript.exe" "%1" %*
.vbs 'Print' - VBScript Script File - "C:\WINDOWS\System32\Notepad.exe" /p %1
.wsf 'Edit' - Windows Script File - "C:\WINDOWS\System32\Notepad.exe" %1
.wsf 'Open' - Windows Script File - "C:\WINDOWS\System32\WScript.exe" "%1" %*
.wsf 'Open2' - Windows Script File - "C:\WINDOWS\System32\CScript.exe" "%1" %*
.wsf 'Print' - Windows Script File - "C:\WINDOWS\System32\Notepad.exe" /p %1
.wsh 'Open' - Windows Script Host Settings File - "C:\WINDOWS\System32\WScript.exe" "%1" %*
.wsh 'Open2' - Windows Script Host Settings File - "C:\WINDOWS\System32\CScript.exe" "%1" %*

--------------------

Services:

[NT Services (74)]
 Microsoft Edge Güncelleştirmesi Hizmeti (edgeupdate) = C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
Ağ Depo Arabirimi Hizmeti = C:\WINDOWS\system32\svchost.exe
Ağ Konumu Tanıma = C:\WINDOWS\System32\svchost.exe
Ana Bilgisayarı Eşitle = C:\WINDOWS\system32\svchost.exe
Arka Plan Akıllı Aktarım Hizmeti = C:\WINDOWS\System32\svchost.exe
Arka Plan Görevleri Altyapı Hizmeti = C:\WINDOWS\system32\svchost.exe
ASUS Com Service = C:\Program Files (x86)\ASUS\AXSP\4.00.42\atkexComSvc.exe
Aygıt İlişkisi Hizmeti = C:\WINDOWS\system32\svchost.exe
Bağlı Cihazlar Platformu Hizmeti = C:\WINDOWS\system32\svchost.exe
Bağlı Cihazlar Platformu Kullanıcı Hizmeti = C:\WINDOWS\system32\svchost.exe
Bağlı Kullanıcı Deneyimleri ve Telemetrisi = C:\WINDOWS\System32\svchost.exe
Bitdefender Product Agent Service = C:\Program Files\Bitdefender Agent\ProductAgentService.exe
CDPUserSvc_4df4b = C:\WINDOWS\system32\svchost.exe
COM+ Olay Sistemi = C:\WINDOWS\system32\svchost.exe
CoreMessaging = C:\WINDOWS\system32\svchost.exe
Dağıtılmış Bağlantı İzleme İstemcisi = C:\WINDOWS\System32\svchost.exe
DCOM Sunucusu İşlem Başlatıcısı = C:\WINDOWS\system32\svchost.exe
Depolama Hizmeti = C:\WINDOWS\System32\svchost.exe
DHCP İstemcisi = C:\WINDOWS\system32\svchost.exe
DNS İstemcisi = C:\WINDOWS\system32\svchost.exe
Dokunmatik Klavyeyi ve El Yazısı Paneli Hizmeti = C:\WINDOWS\System32\svchost.exe
Görev Zamanlayıcı = C:\WINDOWS\system32\svchost.exe
Grup İlkesi İstemcisi = C:\WINDOWS\system32\svchost.exe
Güç = C:\WINDOWS\system32\svchost.exe
Güvenlik Hesapları Yöneticisi = C:\WINDOWS\system32\lsass.exe
Güvenlik Merkezi = C:\WINDOWS\System32\svchost.exe
IKE ve AuthIP IPsec Anahtarlama Modülleri = C:\WINDOWS\system32\svchost.exe
İlke Hizmetini Görüntüle = C:\WINDOWS\system32\svchost.exe
İndirilen Haritalar Yöneticisi = C:\WINDOWS\System32\svchost.exe
Intel(R) Audio Service = C:\WINDOWS\system32\cAVS\Intel(R) Audio Service\IntelAudioService.exe
Intel(R) Content Protection HDCP Service = C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\IntelCpHDCPSvc.exe
Intel(R) HD Graphics Control Panel Service = C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_05de635879d45aad\igfxCUIService.exe
IP Yardımcısı = C:\WINDOWS\System32\svchost.exe
İş İstasyonu = C:\WINDOWS\System32\svchost.exe
Kablosuz Yerel Ağ Otomatik Yapılandırma = C:\WINDOWS\system32\svchost.exe
Kabuk Donanım Algılaması = C:\WINDOWS\System32\svchost.exe
Kullanıcı Profili Hizmeti = C:\WINDOWS\system32\svchost.exe
Kullanıcı Yöneticisi = C:\WINDOWS\system32\svchost.exe
Malwarebytes Service = C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
Microsoft Defender Virüsten Koruma Hizmeti = C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MsMpEng.exe
NVIDIA Display Container LS = C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
NVIDIA LocalSystem Container = C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
OneSyncSvc_4df4b = C:\WINDOWS\system32\svchost.exe
Orchestrator Hizmeti'ni Güncelleştir = C:\WINDOWS\system32\svchost.exe
RPC Bitiş Noktası Eşleştiricisi = C:\WINDOWS\system32\svchost.exe
Sistem Etkinlikleri Aracısı = C:\WINDOWS\system32\svchost.exe
Sistem Olay Bildirim Hizmeti = C:\WINDOWS\system32\svchost.exe
Sunucu = C:\WINDOWS\system32\svchost.exe
SysMain = C:\WINDOWS\system32\svchost.exe
System Guard Çalışma Zamanı İzleyicisi Aracısı = C:\WINDOWS\system32\SgrmBroker.exe
Şifreleme Hizmetleri = C:\WINDOWS\system32\svchost.exe
Tanı İlkesi Hizmeti = C:\WINDOWS\System32\svchost.exe
Temalar = C:\WINDOWS\System32\svchost.exe
Temel Filtre Altyapısı = C:\WINDOWS\system32\svchost.exe
Uzaktan Erişim Bağlantı Yöneticisi = C:\WINDOWS\System32\svchost.exe
Uzaktan Yordam Çağrısı (RPC) = C:\WINDOWS\system32\svchost.exe
Veri Kullanımı = C:\WINDOWS\System32\svchost.exe
Wallpaper Engine Service = D:\SteamLibrary\steamapps\common\wallpaper_engine\bin\wallpaperservice32_c.exe
Windows Anında İletme Bildirimleri Hizmeti = C:\WINDOWS\system32\svchost.exe
Windows Anında İletme Bildirimleri Kullanıcı Hizmeti = C:\WINDOWS\system32\svchost.exe
Windows Bağlantı Yöneticisi = C:\WINDOWS\system32\svchost.exe
Windows Biyometrik Hizmeti = C:\WINDOWS\system32\svchost.exe
Windows Defender Güvenlik Duvarı = C:\WINDOWS\system32\svchost.exe
Windows Olay Günlüğü = C:\WINDOWS\System32\svchost.exe
Windows Resim Alma (WIA) = C:\WINDOWS\system32\svchost.exe
Windows Search = C:\WINDOWS\system32\SearchIndexer.exe
Windows Ses = C:\WINDOWS\System32\svchost.exe
Windows Ses Bitiş Noktası Oluşturucu = C:\WINDOWS\System32\svchost.exe
Windows Yazı Tipi Önbelleği Hizmeti = C:\WINDOWS\system32\svchost.exe
Windows Yönetim Yardımcıları = C:\WINDOWS\system32\svchost.exe
WpnUserService_4df4b = C:\WINDOWS\system32\svchost.exe
Yazdırma Biriktiricisi = C:\WINDOWS\System32\spoolsv.exe
Yazılım Koruması = C:\WINDOWS\system32\sppsvc.exe
Yerel Oturum Yöneticisi = C:\WINDOWS\system32\svchost.exe

[SafeBoot services (Minimal boot)]
* CD-ROM Drive *
{4D36E965-E325-11CE-BFC1-08002BE10318}

* DiskDrive *
{4D36E967-E325-11CE-BFC1-08002BE10318}

* Driver *
Ahcache.sys
BasicDisplay.sys
BasicRender.sys
dxgkrnl.sys
FsDepends.sys
HdAudAddService.Sys
HdAudBus.Sys
iai2c.sys
SerCx2.sys
sermouse.sys
SpbCx.sys
uefi.sys
usbaudio.sys
volmgr.sys
volmgrx.sys
WudfPf
WudfRd

* Driver Group *
Base
Boot Bus Extender
Boot file system
File system
Filter
PCI Configuration
PNP Filter
Primary disk
SCSI Class
System Bus Extender

* Enhanced Storage Devices *
{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}

* Firmware *
{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}

* Floppy disk drive *
{4D36E980-E325-11CE-BFC1-08002BE10318}

* Hdc *
{4D36E96A-E325-11CE-BFC1-08002BE10318}

* Human Interface Devices *
{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}

* IEEE 1394 Bus host controllers *
{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}

* Keyboard *
{4D36E96B-E325-11CE-BFC1-08002BE10318}

* Media *
{4D36E96C-E325-11CE-BFC1-08002BE10318}

* Mouse *
{4D36E96F-E325-11CE-BFC1-08002BE10318}

* PCMCIA Adapters *
{4D36E977-E325-11CE-BFC1-08002BE10318}

* SBP2 IEEE 1394 Devices *
{D48179BE-EC20-11D1-B6B8-00C04FA372A7}

* SCSIAdapter *
{4D36E97B-E325-11CE-BFC1-08002BE10318}

* SDA Standard Compliant SD Host Controller *
{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}

* SecurityDevices *
{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}

* Service *
AppInfo
AppMgmt
AudioEndpointBuilder
AudioSrv
BrokerInfrastructure
CBDHSvc
CoreMessagingRegistrar
CryptSvc
DcomLaunch
DeviceInstall
EFS
EventLog
HelpSvc
KeyIso
LSM
MBAMService
Netlogon
NgcCtnrSvc
NgcSvc
NTDS
PlugPlay
Power
ProfSvc
RpcEptMapper
RpcSs
sacsvr
StateRepository
SWPRV
SystemEventsBroker
TabletInputService
TBS
TrustedInstaller
UserManager
VDS
vmms
WinDefend
WinMgmt

* Standard floppy disk controller *
{4D36E969-E325-11CE-BFC1-08002BE10318}

* System *
{4D36E97D-E325-11CE-BFC1-08002BE10318}

* Universal Serial Bus controllers *
{36FC9E60-C465-11CF-8056-444553540000}

* Volume *
{71A27CDD-812A-11D0-BEC7-08002BE2092F}

* Volume shadow copy *
{533C5B84-EC70-11D2-9505-00C04F79DEAF}


[SafeBoot services (Minimal boot + network support)]
* CD-ROM Drive *
{4D36E965-E325-11CE-BFC1-08002BE10318}

* DiskDrive *
{4D36E967-E325-11CE-BFC1-08002BE10318}

* Driver *
Ahcache.sys
BasicDisplay.sys
BasicRender.sys
bowser
dfsc
dxgkrnl.sys
FsDepends.sys
HdAudAddService.Sys
HdAudBus.Sys
ipnat.sys
MPSDrv
mrxsmb
mrxsmb10
mrxsmb20
MsQuic
ndiscap
nsiproxy.sys
rdbss
rdpencdd.sys
SerCx2.sys
sermouse.sys
SmartcardSimulator
SpbCx.sys
uefi.sys
usbaudio.sys
VirtualSmartcardReader
volmgr.sys
volmgrx.sys
WudfPf
WudfRd
WudfUsbccidDriver

* Driver Group *
Base
Boot Bus Extender
Boot file system
File system
Filter
NDIS
NDIS Wrapper
NetBIOSGroup
NetDDEGroup
Network
NetworkProvider
PCI Configuration
PNP Filter
PNP_TDI
Primary disk
SCSI Class
Streams Drivers
System Bus Extender
TDI

* Enhanced Storage Devices *
{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}

* Firmware *
{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}

* Floppy disk drive *
{4D36E980-E325-11CE-BFC1-08002BE10318}

* Hdc *
{4D36E96A-E325-11CE-BFC1-08002BE10318}

* Human Interface Devices *
{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}

* IEEE 1394 Bus host controllers *
{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}

* Keyboard *
{4D36E96B-E325-11CE-BFC1-08002BE10318}

* Media *
{4D36E96C-E325-11CE-BFC1-08002BE10318}

* Mouse *
{4D36E96F-E325-11CE-BFC1-08002BE10318}

* Net *
{4D36E972-E325-11CE-BFC1-08002BE10318}

* NetClient *
{4D36E973-E325-11CE-BFC1-08002BE10318}

* NetService *
{4D36E974-E325-11CE-BFC1-08002BE10318}

* NetTrans *
{4D36E975-E325-11CE-BFC1-08002BE10318}

* PCMCIA Adapters *
{4D36E977-E325-11CE-BFC1-08002BE10318}

* SBP2 IEEE 1394 Devices *
{D48179BE-EC20-11D1-B6B8-00C04FA372A7}

* SCSIAdapter *
{4D36E97B-E325-11CE-BFC1-08002BE10318}

* SDA Standard Compliant SD Host Controller *
{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}

* SecurityDevices *
{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}

* Service *
AFD
AppInfo
AppMgmt
AudioEndpointBuilder
AudioSrv
BFE
BrokerInfrastructure
Browser
CBDHSvc
CoreMessagingRegistrar
CryptSvc
DcomLaunch
DeviceInstall
Dhcp
DnsCache
Dot3Svc
Eaphost
EFS
EventLog
HelpSvc
IKEEXT
KeyIso
LanmanServer
LanmanWorkstation
LmHosts
LSM
MBAMService
Messenger
MPSSvc
NativeWifiP
Ndisuio
NetBIOS
NetBT
Netlogon
NetMan
netprofm
NetSetupSvc
NgcCtnrSvc
NgcSvc
NlaSvc
Nsi
NTDS
PlugPlay
PolicyAgent
Power
ProfSvc
rdsessmgr
RpcEptMapper
RpcSs
sacsvr
SCardSvr
SharedAccess
StateRepository
SWPRV
SystemEventsBroker
TabletInputService
TBS
Tcpip
TrustedInstaller
UserManager
VaultSvc
VDS
vmms
Wcmsvc
WinDefend
WinMgmt
Wlansvc

* Smart card readers *
{50DD5230-BA8A-11D1-BF5D-0000F805F530}

* Standard floppy disk controller *
{4D36E969-E325-11CE-BFC1-08002BE10318}

* System *
{4D36E97D-E325-11CE-BFC1-08002BE10318}

* Universal Serial Bus controllers *
{36FC9E60-C465-11CF-8056-444553540000}

* Volume *
{71A27CDD-812A-11D0-BEC7-08002BE2092F}

* Volume shadow copy *
{533C5B84-EC70-11D2-9505-00C04F79DEAF}


[SafeBoot: Alternate shell]
cmd.exe (not enabled)

--------------------

Driver Filters:

[Class filters]
* (no name) *
- Lower filters
fvevol.sys
iorate.sys
rdyboost.sys



--------------------

Drivers32 libraries (42):

aux = wdmaud.drv
aux1 = wdmaud.drv
aux2 = wdmaud.drv
aux3 = wdmaud.drv
midi = wdmaud.drv
midi1 = wdmaud.drv
midi2 = wdmaud.drv
midi3 = wdmaud.drv
midi4 = wdmaud.drv
midimapper = midimap.dll
mixer = wdmaud.drv
mixer1 = wdmaud.drv
mixer2 = wdmaud.drv
mixer3 = wdmaud.drv
mixer4 = wdmaud.drv
mixer5 = wdmaud.drv
mixer6 = wdmaud.drv
msacm.imaadpcm = imaadp32.acm
msacm.l3acm = C:\Windows\SysWOW64\l3codeca.acm
msacm.msadpcm = msadp32.acm
msacm.msg711 = msg711.acm
msacm.msgsm610 = msgsm32.acm
vidc.cvid = iccvid.dll
VIDC.FPS1 = frapsvid.dll
vidc.i420 = iyuv_32.dll
vidc.iyuv = iyuv_32.dll
vidc.mrle = msrle32.dll
vidc.msvc = msvidc32.dll
VIDC.RTV1 = rtvcvfw32.dll
vidc.uyvy = msyuv.dll
vidc.XVID = xvidvfw.dll
vidc.yuy2 = msyuv.dll
vidc.yvu9 = tsbyuv.dll
vidc.yvyu = msyuv.dll
wave = wdmaud.drv
wave1 = wdmaud.drv
wave2 = wdmaud.drv
wave3 = wdmaud.drv
wave4 = wdmaud.drv
wave5 = wdmaud.drv
wave6 = wdmaud.drv
wavemapper = msacm32.drv

--------------------

Print Monitors (7):

Appmon - AppMon.dll
Local Port - localspl.dll
Microsoft Shared Fax Monitor - FXSMON.DLL
Standard TCP/IP Port - tcpmon.dll
us008 Langmon - us008lm.dll
USB Monitor - usbmon.dll
WSD Port - APMon.dll

--------------------

Winlogon autostarts:

UserInit = C:\Windows\system32\userinit.exe,
VmApplet = SystemPropertiesPerformance.exe /pagefile

[Group policy extensions (24)]
Wireless Group Policy = wlgpclnt.dll
Central Access Policy Configuration = auditcse.dll
Folder Redirection = fdeploy.dll
Microsoft Disk Quota = C:\WINDOWS\System32\dskquota.dll
QoS Packet Scheduler = gptext.dll
Remote Desktop USB Redirection = C:\WINDOWS\System32\TsUsbRedirectionGroupPolicyExtension.dll
Internet Explorer Zonemapping = C:\Windows\System32\iedkcs32.dll
 = C:\Windows\System32\tsworkspace.dll
Work Folders = WorkFoldersGPExt.dll
MDM Policy = dmenrollengine.dll
Windows Search Group Policy Extension = C:\WINDOWS\System32\srchadmin.dll
Internet Explorer User Accelerators = C:\Windows\System32\iedkcs32.dll
Security = scecli.dll
Deployed Printer Connections = C:\WINDOWS\system32\gpprnext.dll
802.3 Group Policy = dot3gpclnt.dll
Windows To Go Startup Options = pwlauncher.dll
Windows To Go Hibernate Options = pwlauncher.dll
TCPIP = gptext.dll
Internet Explorer Machine Accelerators = C:\Windows\System32\iedkcs32.dll
Delivery Optimization GP extension = C:\WINDOWS\system32\domgmt.dll
IP Security = C:\WINDOWS\System32\polstore.dll
Audit Policy Configuration = auditcse.dll
Enterprise QoS = gptext.dll
CP = gptext.dll

--------------------

LSA packages:

[Authentication Packages (1)]
msv1_0.dll

[Notification Packages (1)]
scecli.dll

[Security Packages (1)]
"".dll

--------------------

Policies:

[This user]
* Primary policies *
- Software\Policies\Microsoft\Office\14.0\Common\Security\Trusted Protocols\All Applications\malwarebytes: (1)
@ =

- Software\Policies\Microsoft\TabletPC (1)
TurnOffPenFeedback = dword: 1

-  (2)
Model = dword: 151
Therad = dword: 32



[All users]
* Primary policies *
- Software\Policies\Microsoft\Peernet (1)
Disabled = dword: 0

- Software\Policies\Microsoft\SystemCertificates\Root\ProtectedRoots (1)
Flags = dword: 1

- Software\Policies\Microsoft\TabletPC (1)
TurnOffPenFeedback = dword: 1

- Software\Policies\Microsoft\TPM (1)
OSManagedAuthLevel = dword: 5

- Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings (1)
CallLegacyWCMPolicies = dword: 0

- Software\Policies\Microsoft\Windows\DriverSearching (1)
DriverUpdateWizardWuSearchEnabled = dword: 1

- Software\Policies\Microsoft\Windows\EnhancedStorageDevices (1)
TCGSecurityActivationDisabled = dword: 0

- Software\Policies\Microsoft\Windows\Network Connections (1)
NC_PersonalFirewallConfig = dword: 0

- Software\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator (1)
@ =

- Software\Policies\Microsoft\Windows\OneDrive (1)
DisableFileSyncNGSC = dword: 0

- Software\Policies\Microsoft\Windows\safer\codeidentifiers (1)
authenticodeenabled = dword: 0

- Software\Policies\Microsoft\Windows\SettingSync (1)
EnableBackupForWin8Apps = dword: 1

- Software\Policies\Microsoft\Windows\WcmSvc\Local (1)
WCMPresent = dword: 1

- Software\Policies\Microsoft\Windows\WorkplaceJoin (1)
@ =

- Software\Policies\Microsoft\Windows NT\Terminal Services\Client (3)
fEnableUsbBlockDeviceBySetupClass = dword: 1
fEnableUsbNoAckIsochWriteToDevice = dword: 80
fEnableUsbSelectDeviceByInterface = dword: 1

- Software\Policies\Microsoft\Windows NT\Terminal Services\Client\UsbBlockDeviceBySetupClasses (1)
1000 = {3376f4ce-ff8d-40a2-a80f-bb4359d1415c}

- Software\Policies\Microsoft\Windows NT\Terminal Services\Client\UsbSelectDeviceByInterfaces (1)
1000 = {6bdd1fc6-810f-11d0-bec7-08002be2092f}

- Software\Policies\Microsoft\Windows NT\Windows File Protection (1)
KnownDllList = nlhtml.dll

* Alternate policies *
- Software\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop (2)
NoAddingComponents = dword: 1
NoComponents = dword: 1

- Software\Microsoft\Windows\CurrentVersion\policies\Attachments (1)
ScanWithAntiVirus = dword: 3

- Software\Microsoft\Windows\CurrentVersion\policies\DataCollection (2)
AllowTelemetry = dword: 1
MaxTelemetryAllowed = dword: 1

- Software\Microsoft\Windows\CurrentVersion\policies\Explorer (4)
ForceActiveDesktopOn = dword: 0
NoActiveDesktop = dword: 1
NoActiveDesktopChanges = dword: 1
NoRecentDocsHistory = dword: 0

- Software\Microsoft\Windows\CurrentVersion\policies\Ext\CLSID (1)
{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} = 1

- Software\Microsoft\Windows\CurrentVersion\policies\NonEnum (3)
{0DF44EAA-FF21-4412-828E-260A8728E7F1} = dword: 32
{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} = dword: 1073741857
{BDEADF00-C265-11D0-BCED-00A0C90AB50F} = dword: 1

- Software\Microsoft\Windows\CurrentVersion\policies\Servicing (1)
CountryCode = TR

- Software\Microsoft\Windows\CurrentVersion\policies\System (21)
ConsentPromptBehaviorUser = dword: 3
DSCAutomationHostEnabled = dword: 2
EnableCursorSuppression = dword: 1
EnableFullTrustStartupTasks = dword: 2
EnableInstallerDetection = dword: 1
EnableLUA = dword: 1
EnableSecureUIAPaths = dword: 1
EnableUIADesktopToggle = dword: 0
EnableUwpStartupTasks = dword: 2
EnableVirtualization = dword: 1
PromptOnSecureDesktop = dword: 1
SupportFullTrustStartupTasks = dword: 1
SupportUwpStartupTasks = dword: 1
ValidateAdminCodeSignatures = dword: 0
ConsentPromptBehaviorAdmin = dword: 2
dontdisplaylastusername = dword: 0
legalnoticecaption =
legalnoticetext =
scforceoption = dword: 0
shutdownwithoutlogon = dword: 1
undockwithoutlogon = dword: 1

- Software\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats (7)
CF_BITMAP = dword: 2
CF_DIB = dword: 8
CF_DIBV5 = dword: 17
CF_OEMTEXT = dword: 7
CF_PALETTE = dword: 9
CF_TEXT = dword: 1
CF_UNICODETEXT = dword: 13



--------------------

Image File Execution (1):

osppsvc.exe = rundll32.exe SppExtComObjHook.dll,PatcherMain

--------------------

Contextmenu Handlers:

[* (12)]
7-Zip = {23170F69-40C1-278A-1000-000100020000} = C:\Program Files\7-Zip\7-zip.dll
AccExt = {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} = C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
EPP = {09A47860-11B0-4DA5-AFA5-26D86198A780} = C:\Program Files\Windows Defender\shellext.dll
LEContextMenuHandler.FileContextMenuExt = {C52B9871-E5E9-41FD-B84D-C5ACADBEC7AE} = mscoree.dll
ModernSharing = {e2bf9676-5f8f-435c-97eb-11607a5bedf7} = C:\WINDOWS\system32\ntshrui.dll
Open With = {09799AFB-AD67-11d1-ABCD-00C04FC30936} = C:\WINDOWS\system32\shell32.dll
Open With EncryptionMenu = {A470F8CF-A1E8-4f65-8335-227475AA5C46} = C:\WINDOWS\system32\shell32.dll
Sharing = {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} = C:\WINDOWS\system32\ntshrui.dll
Start Menu Pin = {a2a9545d-a0c2-42b4-9708-a0b2badd77c8} = C:\WINDOWS\system32\shell32.dll
Taskband Pin = {90AA3A4E-1CBA-4233-B8BB-535773D48449} = C:\WINDOWS\system32\shell32.dll
WinRAR = {B41DB860-64E4-11D2-9906-E49FADC173CA} = C:\Program Files\WinRAR\rarext.dll
WorkFolders = {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} = C:\Windows\System32\WorkfoldersShell.dll

[Drive (6)]
EnhancedStorageShell = {2854F705-3548-414C-A113-93E27C808C85} = C:\Windows\System32\EhStorShell.dll
EPP = {09A47860-11B0-4DA5-AFA5-26D86198A780} = C:\Program Files\Windows Defender\shellext.dll
Portable Devices Menu = {D6791A63-E7E2-4fee-BF52-5DED8E86E9B8} = C:\WINDOWS\system32\wpdshext.dll
Previous Versions Property Page = {596AB062-B4D2-4215-9F74-E9109B0A8153} = C:\WINDOWS\system32\twext.dll
Sharing = {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} = C:\WINDOWS\system32\ntshrui.dll
ShellFolder for CD Burning = {fbeb8a05-beee-4442-804e-409d6c4515e9} = C:\WINDOWS\system32\shell32.dll

[Folder (7)]
7-Zip = {23170F69-40C1-278A-1000-000100020000} = C:\Program Files\7-Zip\7-zip.dll
AccExt = {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} = C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
Library Location = {3dad6c5d-2167-4cae-9914-f99e41c12cfa} = C:\WINDOWS\system32\shell32.dll
MBAMShlExt = {57CE581A-0CB6-4266-9CA0-19364C90A0B3} = C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll
PintoStartScreen = {470C0EBD-5D73-4d58-9CED-E91E22E23282} = C:\Windows\System32\appresolver.dll
Start Menu Pin = {a2a9545d-a0c2-42b4-9708-a0b2badd77c8} = C:\WINDOWS\system32\shell32.dll
WinRAR = {B41DB860-64E4-11D2-9906-E49FADC173CA} = C:\Program Files\WinRAR\rarext.dll

[CompressedFolder (1)]
Compressed (zipped) Folder Context Menu = {b8cdcb65-b1bf-4b42-9428-1dfdb7ee92af} = C:\WINDOWS\system32\zipfldr.dll

[Directory (6)]
7-Zip = {23170F69-40C1-278A-1000-000100020000} = C:\Program Files\7-Zip\7-zip.dll
EncryptionMenu = {A470F8CF-A1E8-4f65-8335-227475AA5C46} = C:\WINDOWS\system32\shell32.dll
EPP = {09A47860-11B0-4DA5-AFA5-26D86198A780} = C:\Program Files\Windows Defender\shellext.dll
Previous Versions Property Page = {596AB062-B4D2-4215-9F74-E9109B0A8153} = C:\WINDOWS\system32\twext.dll
Sharing = {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} = C:\WINDOWS\system32\ntshrui.dll
WorkFolders = {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} = C:\Windows\System32\WorkfoldersShell.dll

[Directory\Background (4)]
New = {D969A300-E7FF-11d0-A93B-00A0C90F2719} = C:\WINDOWS\system32\shell32.dll
NvCplDesktopContext = {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} = C:\WINDOWS\system32\nvshext.dll
Sharing = {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} = C:\WINDOWS\system32\ntshrui.dll
WorkFolders = {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} = C:\Windows\System32\WorkfoldersShell.dll

[InternetShortcut (1)]
Internet Shortcut = {FBF23B40-E3F0-101B-8488-00AA003E56F8} = C:\Windows\System32\ieframe.dll

[AllFileSystemObjects (6)]
CopyAsPathMenu = {f3d06e7c-1e45-4a26-847e-f9fcdee59be0} = C:\WINDOWS\system32\shell32.dll
HashCheck Shell Extension = {705977C7-86CB-4743-BFAF-6908BD19B7B0} = C:\Windows\system32\ShellExt\HashCheck.dll
MBAMShlExt = {57CE581A-0CB6-4266-9CA0-19364C90A0B3} = C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll
Previous Versions Property Page = {596AB062-B4D2-4215-9F74-E9109B0A8153} = C:\WINDOWS\system32\twext.dll
SendTo = {7BA4C740-9E81-11CF-99D3-00AA004AE837} = C:\WINDOWS\system32\shell32.dll
Start Menu Pin = {a2a9545d-a0c2-42b4-9708-a0b2badd77c8} = C:\WINDOWS\system32\shell32.dll

--------------------

Approved Shell Extensions:

[All users (25)]
.contact shell extension handler - {8082C5E6-4C27-48ec-A809-B8E1122E8F97} - C:\Program Files\Common Files\System\wab32.dll
.group shell extension handler - {4F58F63F-244B-4c07-B29F-210BE59BE9B4} - C:\Program Files\Common Files\System\wab32.dll
7-Zip Shell Extension - {23170F69-40C1-278A-1000-000100020000} - C:\Program Files\7-Zip\7-zip.dll
Code Download Agent - {7D559C10-9FE9-11d0-93F7-00AA0059CE02} - C:\Windows\System32\webcheck.dll
contact_wab_auto_file - {CF67796C-F57F-45F8-92FB-AD698826C602} - C:\Program Files\Common Files\System\wab32.dll
Contacts folder - {0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48} -
DLNA Namespace Extension - {289AF617-1CC3-42A6-926C-E6A863F0E3BA} - C:\Windows\System32\dlnashext.dll
group_wab_auto_file - {16C2C29D-0E5F-45f3-A445-03E03F587B7D} - C:\Program Files\Common Files\System\wab32.dll
HashCheck Shell Extension - {705977C7-86CB-4743-BFAF-6908BD19B7B0} - C:\Windows\system32\ShellExt\HashCheck.dll
Microsoft Camera Raw Property Store - {3DBEE9A1-C471-4B95-BBCA-F39310064458} - C:\Windows\System32\WindowsCodecsRaw.dll
Microsoft Office Metadata Handler - {993BE281-6695-4BA5-8A2A-7AACBFAAB69E} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll
Microsoft Office Thumbnail Handler - {C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll
Microsoft Outlook Custom Icon Handler - {0006F045-0000-0000-C000-000000000046} -
Microsoft Windows Mail Html Preview Handler - {92dbad9f-5025-49b0-9078-2d78f935e341} - C:\Windows\System32\inetcomm.dll
Microsoft Windows Mail Html Preview Handler - {b9815375-5d7f-4ce2-9245-c9d4da436930} - C:\Windows\System32\inetcomm.dll
Microsoft Windows Mail Html Preview Handler - {BFD468D2-D0A0-4bdc-878C-E69C2F5B435D} - C:\Windows\System32\inetcomm.dll
Microsoft Windows Mail Html Preview Handler - {f8b8412b-dea3-4130-b36c-5e8be73106ac} - C:\Windows\System32\inetcomm.dll
Nameext - {7CCA70DB-DE7A-4FB7-9B2B-52E2335A3B5A} -
Shell extensions for Windows Script Host - {60254CA5-953B-11CF-8C96-00AA00B8708C} - C:\Windows\System32\wshext.dll
Subscription Folder - {F5175861-2688-11d0-9C5E-00AA00A45957} - C:\Windows\System32\webcheck.dll
Subscription Mgr - {ABBE31D0-6DAE-11D0-BECA-00C04FD940BE} - C:\Windows\System32\webcheck.dll
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} -
WebCheck SyncMgr Handler - {7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB} - C:\Windows\System32\webcheck.dll
WebCheckWebCrawler - {08165EA0-E946-11CF-9C87-00AA005127ED} - C:\Windows\System32\webcheck.dll
Windows Contact Preview Handler - {13D3C4B8-B179-4ebb-BF62-F704173E7448} - C:\Program Files\Common Files\System\wab32.dll

--------------------

Registry 'Run' keys:

[User Run]
IDMan = C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
Steam = "C:\Program Files (x86)\Steam\steam.exe" -silent
uTorrent = "C:\Users\Murat\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED

--------------------

Protocol/Filter handlers:

[Pluggable MIME filters (4)]
application/octet-stream = {1E66F26B-79EE-11D2-8710-00C04F79ED0D} = C:\Windows\System32\mscoree.dll
application/x-complus = {1E66F26B-79EE-11D2-8710-00C04F79ED0D} = C:\Windows\System32\mscoree.dll
application/x-msdownload = {1E66F26B-79EE-11D2-8710-00C04F79ED0D} = C:\Windows\System32\mscoree.dll
text/xml = {807573E5-5146-11D5-A672-00B0D022E945} = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

[Protocol handlers (20)]
about = {3050F406-98B5-11CF-BB82-00AA00BDCE0B} = C:\Windows\System32\mshtml.dll
cdl = {3dd53d40-7b8b-11D0-b013-00aa0059ce02} = C:\Windows\System32\urlmon.dll
dvd = {12D51199-0DB5-46FE-A120-47A3D7D937CC} = C:\Windows\System32\msvidctl.dll
file = {79eac9e7-baf9-11ce-8c82-00aa004ba90b} = C:\Windows\System32\urlmon.dll
ftp = {79eac9e3-baf9-11ce-8c82-00aa004ba90b} = C:\Windows\System32\urlmon.dll
http = {79eac9e2-baf9-11ce-8c82-00aa004ba90b} = C:\Windows\System32\urlmon.dll
https = {79eac9e5-baf9-11ce-8c82-00aa004ba90b} = C:\Windows\System32\urlmon.dll
its = {9D148291-B9C8-11D0-A4CC-0000F80149F6} = C:\Windows\System32\itss.dll
javascript = {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} = C:\Windows\System32\mshtml.dll
local = {79eac9e7-baf9-11ce-8c82-00aa004ba90b} = C:\Windows\System32\urlmon.dll
mailto = {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} = C:\Windows\System32\mshtml.dll
mhtml = {05300401-BCBC-11d0-85E3-00C04FD85AB4} = C:\Windows\System32\inetcomm.dll
mk = {79eac9e6-baf9-11ce-8c82-00aa004ba90b} = C:\Windows\System32\urlmon.dll
ms-help = {314111c7-a502-11d2-bbca-00c04f8ec294} = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
ms-its = {9D148291-B9C8-11D0-A4CC-0000F80149F6} = C:\Windows\System32\itss.dll
res = {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} = C:\Windows\System32\mshtml.dll
tbauth = {14654CA6-5711-491D-B89A-58E571679951} = C:\Windows\System32\tbauth.dll
tv = {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} = C:\Windows\System32\msvidctl.dll
vbscript = {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} = C:\Windows\System32\mshtml.dll
windows.tbauth = {14654CA6-5711-491D-B89A-58E571679951} = C:\Windows\System32\tbauth.dll

--------------------

WOW compatibility:

[KnownDlls (32-bit) (32)]
advapi32.dll
clbcatq.dll
combase.dll
COMDLG32.dll
coml2.dll
difxapi.dll
gdi32.dll
gdiplus.dll
IMAGEHLP.dll
IMM32.dll
kernel32.dll
MSCTF.dll
MSVCRT.dll
NORMALIZ.dll
NSI.dll
ole32.dll
OLEAUT32.dll
PSAPI.DLL
rpcrt4.dll
sechost.dll
Setupapi.dll
SHCORE.dll
SHELL32.dll
SHLWAPI.dll
user32.dll
WLDAP32.dll
wow64.dll
wow64cpu.dll
wow64win.dll
wowarmhw.dll
WS2_32.dll
xtajit.dll

--------------------

Security Providers (1):

credssp.dll

--------------------

Application Paths (39):

7zFM.exe - C:\Program Files\7-Zip\7zFM.exe
cmmgr32.exe -
dfshim.dll -
excel.exe - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
firefox.exe - C:\Program Files\Mozilla Firefox\firefox.exe
FSCapture.exe - C:\Program Files (x86)\FastStone Capture\FSCapture.exe
fsquirt.exe -
IEDIAG.EXE - C:\Program Files\Internet Explorer\IEDIAGCMD.EXE
IEDIAGCMD.EXE - C:\Program Files\Internet Explorer\IEDIAGCMD.EXE
IEXPLORE.EXE - C:\Program Files\Internet Explorer\IEXPLORE.EXE
Illustrator.exe - C:\Program Files\Adobe\Adobe Illustrator 2020\Support Files\Contents\Windows\Illustrator.exe
install.exe -
javaws.exe - C:\Program Files\Java\jre1.8.0_201\bin\javaws.exe
licensemanagershellext.exe - C:\WINDOWS\System32\licensemanagershellext.exe
mip.exe - C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe
mplayer2.exe - C:\Program Files (x86)\Windows Media Player\wmplayer.exe
MSACCESS.EXE - C:\Program Files\Microsoft Office\Office14\MSACCESS.EXE
msedge.exe - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
MsoHtmEd.exe -
msoxmled.exe - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE
MSPUB.EXE - C:\Program Files\Microsoft Office\Office14\MSPUB.EXE
pbrush.exe - C:\WINDOWS\System32\mspaint.exe
PhotoScape.exe - "C:\Program Files (x86)\PhotoScape\PhotoScape.exe"
Photoshop.exe - C:\Program Files\Adobe\Adobe Photoshop 2020\Photoshop.exe
PotPlayerMini64.exe - "C:\Program Files\DAUM\PotPlayer\PotPlayerMini64.exe"
powerpnt.exe - C:\Program Files\Microsoft Office\Office14\POWERPNT.EXE
PowerShell.exe - C:\WINDOWS\system32\WindowsPowerShell\v1.0\PowerShell.exe
setup.exe -
SnippingTool.exe - C:\WINDOWS\system32\SnippingTool.exe
table30.exe -
TabTip.exe - C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
vstoee.dll -
wab.exe - C:\Program Files\Windows Mail\wab.exe
wabmig.exe - C:\Program Files\Windows Mail\wabmig.exe
WinRAR.exe - C:\Program Files\WinRAR\WinRAR.exe
Winword.exe - C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
wmplayer.exe - C:\Program Files (x86)\Windows Media Player\wmplayer.exe
WORDPAD.EXE - "C:\Program Files\Windows NT\Accessories\WORDPAD.EXE"
WRITE.EXE - "C:\Program Files\Windows NT\Accessories\WORDPAD.EXE"

--------------------

Winsock LSPs:

[Protocols (12)]
MSAFD Tcpip [TCP/IP] - {E70F1AA0-AB8B-11CF-8CA3-00805F48A192} - C:\WINDOWS\system32\mswsock.dll
MSAFD Tcpip [UDP/IP] - {E70F1AA0-AB8B-11CF-8CA3-00805F48A192} - C:\WINDOWS\system32\mswsock.dll
MSAFD Tcpip [TCP/IPv6] - {F9EAB0C0-26D4-11D0-BBBF-00AA006C34E4} - C:\WINDOWS\system32\mswsock.dll
MSAFD Tcpip [UDP/IPv6] - {F9EAB0C0-26D4-11D0-BBBF-00AA006C34E4} - C:\WINDOWS\system32\mswsock.dll
AF_UNIX - {A00943D9-9C2E-4633-9B59-0057A3160994} - C:\WINDOWS\system32\mswsock.dll
RSVP TCPv6 Servis Sağlayıcısı - {9D60A9E0-337A-11D0-BD88-0000C082E69A} - C:\WINDOWS\system32\mswsock.dll
RSVP TCP Servis Sağlayıcısı - {9D60A9E0-337A-11D0-BD88-0000C082E69A} - C:\WINDOWS\system32\mswsock.dll
RSVP UDPv6 Servis Sağlayıcısı - {9D60A9E0-337A-11D0-BD88-0000C082E69A} - C:\WINDOWS\system32\mswsock.dll
RSVP UDP Servis Sağlayıcısı - {9D60A9E0-337A-11D0-BD88-0000C082E69A} - C:\WINDOWS\system32\mswsock.dll
Hyper-V RAW - {1234191B-4BF7-4CA7-86E0-DFD7C32B5445} - C:\WINDOWS\system32\mswsock.dll
MSAFD L2CAP [Bluetooth] - {9FC48064-7298-43E4-B7BD-181F2089792A} - C:\WINDOWS\system32\mswsock.dll
MSAFD RfComm [Bluetooth] - {9FC48064-7298-43E4-B7BD-181F2089792A} - C:\WINDOWS\system32\mswsock.dll

[Namespace Providers (7)]
E-posta Adlandırma Shim Sağlayıcısı - {964ACBA2-B2BC-40EB-8C6A-A6DB40161CAE} - C:\WINDOWS\system32\napinsp.dll
PNRP Bulut Ad Alanı Sağlayıcısı - {03FE89CE-766D-4976-B9C1-BB9BC42C7B4D} - C:\WINDOWS\system32\pnrpnsp.dll
PNRP Ad Ad Alanı Sağlayıcısı - {03FE89CD-766D-4976-B9C1-BB9BC42C7B4D} - C:\WINDOWS\system32\pnrpnsp.dll
Bluetooth Namespace - {06AA63E0-7D60-41FF-AFB2-3EE6D2D9392D} - C:\WINDOWS\system32\wshbth.dll
Ağ Konumu Tanıma Eski (NLAv1) Ad Alanı - {6642243A-3BA8-4AA6-BAA5-2E0BD71FDD83} - C:\WINDOWS\system32\NLAapi.dll
Tcpip - {22059D40-7E9E-11CF-AE5A-00AA00A7112B} - C:\WINDOWS\System32\mswsock.dll
NTDS - {3B2637EE-E580-11CF-A555-00C04FD8D4AC} - C:\WINDOWS\System32\winrnr.dll

--------------------

Hijack points:

[Reset Web Settings URLs]
SearchAssistant =
CustomizeSearch =
START_PAGE_URL =
SEARCH_PAGE_URL =
MS_START_PAGE_URL =

[Internet Explorer URLs]
* This user *
- Internet Explorer\Main (3)
Local Page = %11%\blank.htm
Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
Start Page = http://go.microsoft.com/fwlink/?LinkId=625119&clocalename=tr-TR

* All users *
- Internet Explorer\Main (5)
Default_Page_Url = http://go.microsoft.com/fwlink/p/?LinkId=255141
Default_Search_Url = http://go.microsoft.com/fwlink/?LinkId=54896
Local Page = C:\Windows\System32\blank.htm
Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141

- Internet Explorer\AboutURLs (5)
blank = res://mshtml.dll/blank.htm
DesktopItemNavigationFailure = res://ieframe.dll/navcancl.htm
NavigationCanceled = res://ieframe.dll/navcancl.htm
NavigationFailure = res://ieframe.dll/navcancl.htm
PostNotCached = res://ieframe.dll/repost.htm



[Default URL prefixes]
default = http://
ftp = ftp://
home = http://
mosaic = http://
www = http://

[Hosts file path]
DatabasePath = C:\WINDOWS\System32\drivers\etc\hosts

--------------------

Protection & disabled items:

[ActiveX kill bits (147)]
&Address - {01E04581-4EEE-11d0-BFE9-00AA005B4383} - C:\WINDOWS\system32\explorerframe.dll
(no name) - {35cec8a3-2be6-11d2-8773-92e220524153} - C:\WINDOWS\system32\stobject.dll
(no name) - {53C74826-AB99-4D33-ACA4-3117F51D3788} - C:\WINDOWS\system32\shell32.dll
(no name) - {b4b3aecb-dfd6-11d1-9daa-00805f85cfe3} - C:\WINDOWS\system32\clbcatq.dll
(no name) - {e846f0a0-d367-11d1-8286-00a0c9231c29} - C:\Windows\System32\catsrvut.dll
(no name) - {FEF10FA2-355E-4E06-9381-9B24D7F7CC88} - C:\WINDOWS\system32\shell32.dll
ACM Class Manager - {33d9a761-90c8-11d0-bd43-00a0c911ce86} - C:\Windows\System32\devenum.dll
ActiveMovie Filter Class Manager - {083863F1-70DE-11d0-BD40-00A0C911CE86} - C:\Windows\System32\devenum.dll
ADODB.Stream - {00000566-0000-0010-8000-00AA006D2EA4} - C:\Program Files\Common Files\System\ado\msado15.dll
Analog Audio Component Type - {28AB0005-E845-4FFA-AA9B-F4665236141C} - C:\Windows\System32\msvidctl.dll
ATSC Tune Request Location Information - {8872FF1B-98FA-4D7A-8D93-C9F1055F85BB} - C:\Windows\System32\msvidctl.dll
Audio Renderers Collection Class - {C5702CCF-9B79-11D3-B654-00C04F79498E} - C:\Windows\System32\msvidctl.dll
BDA Data Services Feature Segment - {334125C0-77E5-11d3-B653-00C04F79498E} - C:\Windows\System32\msvidctl.dll
BDA Tuner Device Segment - {A2E3074E-6C3D-11D3-B653-00C04F79498E} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model Analog Locator - {49638B91-48AB-48B7-A47A-7D0E75A08EDE} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model Analog Radio Tuning Space - {8A674B4C-1F63-11D3-B64C-00C04F79498E} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model Analog TV Tuning Space - {8A674B4D-1F63-11D3-B64C-00C04F79498E} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model ATSC Channel Tune Request - {0369B4E6-45B6-11D3-B650-00C04F79498E} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model ATSC Component Type Class (Broadcast Substream Type) - {A8DCF3D5-0780-4EF4-8A83-2CFFAACB8ACE} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model ATSC Tuning Space - {A2E30750-6C3D-11D3-B653-00C04F79498E} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model Auxiliary Inputs Tuning Space - {F9769A06-7ACA-4E39-9CFB-97BB35F0E77E} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model Channel ID Tune Request - {3A9428A7-31A4-45E9-9EFB-E055BF7BB3DB} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model Channel ID Tuning Space - {CC829A2F-3365-463F-AF13-81DBB6F3A555} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model Channel Tune Request - {0369B4E5-45B6-11D3-B650-00C04F79498E} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model Component Class(Broadcast Substream) - {59DC47A8-116C-11D3-9D8E-00C04F72D980} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model Component Type Class (Broadcast Substream Type) - {823535A0-0318-11D3-9D8E-00C04F72D980} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model Digital Cable Locator - {03C06416-D127-407A-AB4C-FDD279ABBE5D} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model Digital Cable Tune Request - {26EC0B63-AA90-458A-8DF4-5659F2C8A18A} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model Digital Cable Tuning Space - {D9BB4CEE-B87A-47F1-AC92-B08D9C7813FC} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model DVB Cable Locator - {C531D9FD-9685-4028-8B68-6E1232079F1E} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model DVB Satellite Locator - {1DF7D126-4050-47F0-A7CF-4C4CA9241333} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model DVB Terrestrial Locator - {9CD64701-BDF3-4D14-8E03-F12983D86664} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model DVB Tune Request - {15D6504A-5494-499C-886C-973C9E53B9F1} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model DVB Tuning Space - {C6B14B32-76AA-4A86-A7AC-5C79AAF58DA7} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model DVB-Satellite Tuning Space - {B64016F3-C9A2-4066-96F0-BD9563314726} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model Language Component Type Class (Broadcast Substream Type) - {1BE49F30-0E1B-11D3-9D8E-00C04F72D980} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model MPEG2 Component Class (Broadcast Substream) - {055CB2D7-2969-45CD-914B-76890722F112} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model MPEG2 Component Type Class (Broadcast Substream Type) - {418008F3-CF67-4668-9628-10DC52BE1D08} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model MPEG2 Tune Request - {0955AC62-BF2E-4CBA-A2B9-A63F772D46CF} - C:\Windows\System32\msvidctl.dll
BDA Tuning Model MPEG2 Tune Request Factory - {2C63E4EB-4CEA-41B8-919C-E947EA19A77C} - C:\Windows\System32\msvidctl.dll
cfw Class - {ECABAFC0-7F19-11D2-978E-0000F8757E2A} - C:\Windows\System32\comsvcs.dll
Closed Captions Analysis Feature Segment - {86151827-E47B-45EE-8421-D10E6E690979} - C:\Windows\System32\msvidctl.dll
Collection of all the available BDA Tuning Model Tuning Space objects on this system - {D02AAC50-027E-11D3-9D8E-00C04F72D980} - C:\Windows\System32\msvidctl.dll
Collection of BDA Tuning Model Component Types(Broadcast Substream Types) - {A1A2B1C4-0E3A-11D3-9D8E-00C04F72D980} - C:\Windows\System32\msvidctl.dll
Collection of BDA Tuning Model Components(Broadcast Substreams) - {809B6661-94C4-49E6-B6EC-3F0F862215AA} - C:\Windows\System32\msvidctl.dll
Custom Composition Segment from Data Services to Time Shift Sink - {38F03426-E83B-4E68-B65B-DCAE73304838} - C:\Windows\System32\msvidctl.dll
Custom Composition Segment from Encoder to Time Shift Sink - {A0B9B497-AFBC-45AD-A8A6-9B077C40D4F2} - C:\Windows\System32\msvidctl.dll
Custom Composition Segment from iTV to Stream Buffer Source - {92B94828-1AF7-4E6E-9EBF-770657F77AF5} - C:\Windows\System32\msvidctl.dll
Custom Composition Segment from Legacy Analog Tv Tuner Device Segment to Data Services Feature Segment - {C5702CD6-9B79-11D3-B654-00C04F79498E} - C:\Windows\System32\msvidctl.dll
Custom Composition Segment from Legacy Analog Tv Tuner Device Segment to Standard Video Renderer Device Segment - {E18AF75A-08AF-11D3-B64A-00C04F79498E} - C:\Windows\System32\msvidctl.dll
Custom Composition Segment from WebDVD Device Segment to Standard Video Renderer Device Segment - {267DB0B3-55E3-4902-949B-DF8F5CEC0191} - C:\Windows\System32\msvidctl.dll
DigitalCable Class - {ABBA001B-3075-11D6-88A4-00B0D0200F88} - C:\Windows\System32\psisdecd.dll
DirectX Transform Wrapper Property Page - {1B544C24-FD0B-11CE-8C63-00AA0044B520} - C:\Windows\System32\qedit.dll
Encoder Feature Segment - {BB530C63-D9DF-4B49-9439-63453962E598} - C:\Windows\System32\msvidctl.dll
Features Collection Class - {C5702CD0-9B79-11D3-B654-00C04F79498E} - C:\Windows\System32\msvidctl.dll
File Playback Device Segment - {37B0353C-A4C8-11D2-B634-00C04F79498E} - C:\Windows\System32\msvidctl.dll
Generic Graph Composition Segment - {2764BCE5-CC39-11D2-B639-00C04F79498E} - C:\Windows\System32\msvidctl.dll
Generic Sink Segment - {4A5869CF-929D-4040-AE03-FCAFC5B9CD42} - C:\Windows\System32\msvidctl.dll
HHCtrl Object - {41B23C28-488E-4E5C-ACE2-BB0BBABE99E8} - C:\Windows\System32\hhctrl.ocx
HHCtrl Object - {ADB880A6-D8FF-11CF-9377-00AA003B7A11} - C:\Windows\System32\hhctrl.ocx
IAVIStream & IAVIFile Proxy - {0002000D-0000-0000-C000-000000000046} - C:\Windows\System32\avifil32.dll
ICM Class Manager - {33d9a760-90c8-11d0-bd43-00a0c911ce86} - C:\Windows\System32\devenum.dll
Input Devices Collection Class - {C5702CCC-9B79-11D3-B654-00C04F79498E} - C:\Windows\System32\msvidctl.dll
iTV Capture Feature Segment - {5740A302-EF0B-45CE-BF3B-4470A14A8980} - C:\Windows\System32\msvidctl.dll
iTV Playback Feature Segment - {9E797ED0-5253-4243-A9B7-BD06C58F8EF3} - C:\Windows\System32\msvidctl.dll
Legacy Analog TV Tuner Device Segment - {1C15D484-911D-11D2-B632-00C04F79498E} - C:\Windows\System32\msvidctl.dll
LW Identities - {A9AE6C91-1D1B-11D2-B21A-00C04FA357FA} - C:\WINDOWS\system32\msident.dll
Media Streaming Dynamic Terminal - {AED6483F-3304-11D2-86F1-006008B0E5D2} - C:\Windows\System32\termmgr.dll
MessageMover Class - {ecabb0bf-7f19-11d2-978e-0000f8757e2a} - C:\Windows\System32\comsvcs.dll
Microsoft Common Browser Architecture - {AF604EFE-8897-11D1-B944-00A0C90312E1} - C:\WINDOWS\system32\explorerframe.dll
Microsoft DocHost User Interface Handler - {7057e952-bd1b-11d1-8919-00c04fc2c836} - C:\Windows\System32\ieframe.dll
Microsoft HTA Document 6.0 - {3050F5C8-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
Microsoft Html Document for Popup Window - {3050F67D-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
Microsoft Html Popup Window - {3050f667-98b5-11cf-bb82-00aa00bdce0b} - C:\Windows\System32\mshtml.dll
Microsoft HTML Window Security Proxy - {3050F391-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
Microsoft RDP Client Control (redistributable) - version 3 - {9059f30f-4eb1-4bd2-9fdc-36f43a218f4a} - C:\WINDOWS\system32\mstscax.dll
Microsoft RDP Client Control (redistributable) - version 4 - {7584c670-2274-4efb-b00b-d6aaba6d3850} - C:\WINDOWS\system32\mstscax.dll
Microsoft RDP Client Control (redistributable) - version 5 - {4EDCB26C-D24C-4e72-AF07-B576699AC0DE} - C:\WINDOWS\system32\mstscax.dll
Microsoft WBEM Event Subsystem - {5d08b586-343a-11d0-ad46-00c04fd8fdff} - C:\WINDOWS\system32\wbem\wbemess.dll
MidiOut Class Manager - {4efe2452-168a-11d1-bc76-00c04fb9453b} - C:\Windows\System32\devenum.dll
MMStream Class - {49C47CE5-9BA4-11D0-8212-00C04FC32C45} - C:\Windows\System32\amstream.dll
MS TV Video Control - {B0EDF163-910A-11D2-B632-00C04F79498E} - C:\Windows\System32\msvidctl.dll
MS Video Control Closed Captioning Feature Segment - {7F9CB14D-48E4-43B6-9346-1AEBC39C64D3} - C:\Windows\System32\msvidctl.dll
MS Video Control Closed Captioning SI Feature Segment - {92ED88BF-879E-448F-B6B6-A385BCEB846D} - C:\Windows\System32\msvidctl.dll
MSP Class - {4DDB6D36-3BC1-11D2-86F2-006008B0E5D2} - C:\Windows\System32\wavemsp.dll
MSVidCtl Analog Capture to Encoder Composition Segment - {28953661-0231-41DB-8986-21FF4388EE9B} - C:\Windows\System32\msvidctl.dll
MSVidCtl Analog Capture to XDS Composition Segment - {3540D440-5B1D-49CB-821A-E84B8CF065A7} - C:\Windows\System32\msvidctl.dll
MSVidCtl Analog TV to StreamBufferSource Composition Segment - {9F50E8B1-9530-4DDC-825E-1AF81D47AED6} - C:\Windows\System32\msvidctl.dll
MSVidCtl CC to Audio Renderer Composition Segment - {D76334CA-D89E-4BAF-86AB-DDB59372AFC2} - C:\Windows\System32\msvidctl.dll
MSVidCtl CC to Video Renderer Composition Segment - {C4BF2784-AE00-41BA-9828-9C953BD3C54A} - C:\Windows\System32\msvidctl.dll
MSVidCtl Digital TV to CCA Composition Segment - {73D14237-B9DB-4EFA-A6DD-84350421FB2F} - C:\Windows\System32\msvidctl.dll
MSVidCtl Digital TV to iTV Composition Segment - {5D8E73F7-4989-4AC8-8A98-39BA0D325302} - C:\Windows\System32\msvidctl.dll
MSVidCtl Digital TV to StreamBufferSource Composition Segment - {ABE40035-27C3-4A2F-8153-6624471608AF} - C:\Windows\System32\msvidctl.dll
MSVidCtl DVD to Audio Renderer Composition Segment - {8D04238E-9FD1-41C6-8DE3-9E1EE309E935} - C:\Windows\System32\msvidctl.dll
MSVidCtl Enhanced Video Renderer(DX10) Segment - {C45268A2-FA81-4E19-B1E3-72EDBD60AEDA} - C:\Windows\System32\msvidctl.dll
MSVidCtl FilePlayback to Audio Renderer Composition Segment - {CC23F537-18D4-4ECE-93BD-207A84726979} - C:\Windows\System32\msvidctl.dll
MSVidCtl FilePlayback to Video Renderer Composition Segment - {B401C5EB-8457-427F-84EA-A4D2363364B0} - C:\Windows\System32\msvidctl.dll
MSVidCtl MPEG2 Decoder to Closed Captioning Composition Segment - {6AD28EE1-5002-4E71-AAF7-BD077907B1A4} - C:\Windows\System32\msvidctl.dll
MSVidCtl SBE Source to Closed Caption Composition Segment - {9193A8F9-0CBA-400E-AA97-EB4709164576} - C:\Windows\System32\msvidctl.dll
MSVidCtl SBE Source to iTV Composition Segment - {2291478C-5EE3-4BEF-AB5D-B5FF2CF58352} - C:\Windows\System32\msvidctl.dll
MSVidCtl SBE Source to Video Mixing Renderer Composition Segment - {3C4708DC-B181-46A8-8DA8-4AB0371758CD} - C:\Windows\System32\msvidctl.dll
MSVidCtl Stream Buffer Source To Generic Sink Composition segment - {991DA7E5-953F-435B-BE5E-B92A05EDFC42} - C:\Windows\System32\msvidctl.dll
MTSEvents Class - {ECABB0AB-7F19-11D2-978E-0000F8757E2A} - C:\Windows\System32\comsvcs.dll
Network Connections - {7007acc7-3202-11d1-aad2-00805fc1270e} - C:\WINDOWS\System32\netshell.dll
Network Connections - {992cffa0-f557-101a-88ec-00dd010ccc48} - C:\WINDOWS\System32\netshell.dll
Output Devices Collection Class - {C5702CCD-9B79-11D3-B654-00C04F79498E} - C:\Windows\System32\msvidctl.dll
PostBootReminder object - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll
PSDispatch - {00020420-0000-0000-c000-000000000046} - C:\Windows\System32\oleaut32.dll
PSEnumVariant - {00020421-0000-0000-C000-000000000046} - C:\Windows\System32\oleaut32.dll
PSOAInterface - {00020424-0000-0000-c000-000000000046} - C:\Windows\System32\oleaut32.dll
PSSupportErrorInfo - {DF0B3D60-548F-101B-8E65-08002B2BD119} - C:\Windows\System32\oleaut32.dll
PSTypeComp - {00020425-0000-0000-C000-000000000046} - C:\Windows\System32\oleaut32.dll
PSTypeInfo - {00020422-0000-0000-C000-000000000046} - C:\Windows\System32\oleaut32.dll
PSTypeLib - {00020423-0000-0000-C000-000000000046} - C:\Windows\System32\oleaut32.dll
Queued Components Recorder - {ecabafc2-7f19-11d2-978e-0000f8757e2a} - C:\Windows\System32\comsvcs.dll
Script Encoder Object - {32DA2B15-CFED-11D1-B747-00C04FC2B085} - C:\Windows\System32\scrrun.dll
ShellFolder for CD Burning - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll
Shortcut - {00021401-0000-0000-C000-000000000046} - C:\Windows\System32\windows.storage.dll
SpSharedRecoContext Class - {47206204-5ECA-11D2-960F-00C04F8EE628} - C:\WINDOWS\System32\Speech\Common\sapi.dll
SpSharedRecognizer Class - {3BEE4890-4FE9-4A37-8C1E-5E7E12791C1F} - C:\WINDOWS\System32\Speech\Common\sapi.dll
Standard Audio Renderer Device Segment - {37B03544-A4C8-11D2-B634-00C04F79498E} - C:\Windows\System32\msvidctl.dll
Standard Video Renderer Device Segment - {37B03543-A4C8-11D2-B634-00C04F79498E} - C:\Windows\System32\msvidctl.dll
Stream Buffer Recording Control Object - {CAAFDD83-CEFC-4E3D-BA03-175F17A24F91} - C:\Windows\System32\msvidctl.dll
Stream Buffer Sink Segment - {9E77AAC4-35E5-42A1-BDC2-8F3FF399847C} - C:\Windows\System32\msvidctl.dll
Stream Buffer Source - {AD8E510D-217F-409B-8076-29C5E73B98E8} - C:\Windows\System32\msvidctl.dll
Stream Buffer V2 Source - {FD351EA1-4173-4AF4-821D-80D4AE979048} - C:\Windows\System32\MSVidCtl.dll
System Monitor Source Properties - {0CF32AA1-7571-11D0-93C4-00AA00A3DDEA} - C:\WINDOWS\System32\sysmon.ocx
Tablet Tip Soft Keyboard Skin Class - {E94137E0-92ED-4579-9251-18AF2A08CCD1} - C:\Program Files\Common Files\microsoft shared\ink\tabskb.dll
Trident HTMLEditor - {3050F4F5-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtmled.dll
Trun Gateway Protocol Class - {37de7045-5056-456f-8409-c871e0f8b0e0} - C:\WINDOWS\system32\msdtctm.dll
Utility Object for Binding Events SubObjects in Script Variables - {577FAA18-4518-445E-8F70-1473F8CF4BA4} - C:\Windows\System32\msvidctl.dll
VFW Capture Class Manager - {860bb310-5d01-11d0-bd3b-00a0c911ce86} - C:\Windows\System32\devenum.dll
Video Effect (1 input) Class Manager - {cc7bfb42-f175-11d1-a392-00e0291f3959} - C:\Windows\System32\qedit.dll
Video Effect (2 input) Class Manager - {cc7bfb43-f175-11d1-a392-00e0291f3959} - C:\Windows\System32\qedit.dll
Video Mixing Renderer 9 - {51B4ABF3-748F-4E3B-A276-C828330E926A} - C:\Windows\System32\quartz.dll
Video Mixing Renderer 9 Device Segment - {24DC3975-09BF-4231-8655-3EE71F43837D} - C:\Windows\System32\msvidctl.dll
Video Render Dynamic Terminal - {AED6483E-3304-11D2-86F1-006008B0E5D2} - C:\Windows\System32\termmgr.dll
Video Renderers Collection Class - {C5702CCE-9B79-11D3-B654-00C04F79498E} - C:\Windows\System32\msvidctl.dll
VMR Allocator Presenter 9 - {2D2E24CB-0CD5-458F-86EA-3E6FA22C8E64} - C:\Windows\System32\quartz.dll
VMR ImageSync 9 - {E4979309-7A32-495E-8A92-7B014AAD4961} - C:\Windows\System32\quartz.dll
WaveIn Class Manager - {33D9A762-90C8-11d0-BD43-00A0C911CE86} - C:\Windows\System32\devenum.dll
WaveOut and DSound Class Manager - {e0f158e1-cb04-11d0-bd4e-00a0c911ce86} - C:\Windows\System32\devenum.dll
WDM Instance Provider - {d2d588b5-d081-11d0-99e0-00c04fc2f8ec} - C:\WINDOWS\system32\wbem\wmiprov.dll
WebDVD Adminitration class - {FA7C375B-66A7-4280-879D-FD459C84BB02} - C:\Windows\System32\msvidctl.dll
WebDVD Device Segment - {011B3619-FE63-4814-8A84-15A194CE9CE3} - C:\Windows\System32\msvidctl.dll
Win32_EncryptableVolumeProvider Class - {F198A89A-5042-4294-ADF1-CB163E549798} - C:\Windows\System32\wbem\Win32_EncryptableVolume.dll
XDS Feature Segment - {0149EEDF-D08F-4142-8D73-D23903D21E90} - C:\Windows\System32\msvidctl.dll

[Msconfig 9x/ME disabled items]
* User Run (1) *
CCXProcess = "C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe"

* System Run (1) *
SunJavaUpdateSched = "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"


[Stopped/disabled services]
* Stopped (200) *
 Microsoft Edge Güncelleştirmesi Hizmeti (edgeupdatem) = C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 = C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\NisSrv.exe
@%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 = C:\Program Files\Windows Media Player\wmpnetwk.exe
@%SystemRoot%\servicing\TrustedInstaller.exe,-100 = C:\WINDOWS\servicing\TrustedInstaller.exe
@%SystemRoot%\system32\AarSvc.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\AJRouter.dll,-2 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\Alg.exe,-112 = C:\WINDOWS\System32\alg.exe
@%systemroot%\system32\appidsvc.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\appinfo.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\AppReadiness.dll,-1000 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\appxdeploymentserver.dll,-1 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\autotimesvc.dll,-6 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\AxInstSV.dll,-103 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\BcastDVRUserService.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\bdesvc.dll,-100 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\BTAGService.dll,-101 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\BthAvctpSvc.dll,-101 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\bthserv.dll,-101 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\CapabilityAccessManager.dll,-1 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\CaptureService.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\cbdhsvc.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\certprop.dll,-11 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\certprop.dll,-13 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\ClipSVC.dll,-103 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\ConsentUxClient.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 = C:\WINDOWS\system32\CredentialEnrollmentManager.exe
@%SystemRoot%\system32\defragsvc.dll,-101 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\deviceaccess.dll,-107 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\DeviceSetupManager.dll,-1000 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\DevicesFlowBroker.dll,-103 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\DevQueryBroker.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\DiagSvc.dll,-100 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 = C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
@%SystemRoot%\system32\dmwappushsvc.dll,-200 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\dosvc.dll,-100 = C:\WINDOWS\System32\svchost.exe
@%systemroot%\system32\dot3svc.dll,-1102 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\dssvc.dll,-10003 = C:\WINDOWS\System32\svchost.exe
@%systemroot%\system32\eapsvc.dll,-1 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\efssvc.dll,-100 = C:\WINDOWS\System32\lsass.exe
@%SystemRoot%\system32\embeddedmodesvc.dll,-201 = C:\WINDOWS\System32\svchost.exe
@%systemroot%\system32\fdPHost.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\fdrespub.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\fhsvc.dll,-101 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\flightsettings.dll,-103 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\FrameServer.dll,-100 = C:\WINDOWS\System32\svchost.exe
@%systemroot%\system32\fxsresm.dll,-118 = C:\WINDOWS\system32\fxssvc.exe
@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\System32\hidserv.dll,-101 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\hvhostsvc.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\icsvc.dll,-101 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\icsvc.dll,-201 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\icsvc.dll,-301 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\icsvc.dll,-401 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\icsvc.dll,-801 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\icsvc.dll,-901 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\icsvcext.dll,-501 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\icsvcext.dll,-601 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\InstallService.dll,-200 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\ipnathlp.dll,-106 = C:\WINDOWS\System32\svchost.exe
@%Systemroot%\system32\ipxlatcfg.dll,-500 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\iscsidsc.dll,-5000 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\LanguageOverlayServer.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\lfsvc.dll,-1 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\licensemanagersvc.dll,-200 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\lltdres.dll,-1 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\lmhsvc.dll,-101 = C:\WINDOWS\System32\svchost.exe
@%systemroot%\system32\Locator.exe,-2 = C:\WINDOWS\system32\locator.exe
@%SystemRoot%\system32\lpasvc.dll,-1000 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\MessagingService.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\Microsoft.Graphics.Display.DisplayEnhancementService.dll,-1000 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\MitigationClient.dll,-103 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\MixedRealityRuntime.dll,-101 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\msimsg.dll,-27 = C:\WINDOWS\system32\msiexec.exe
@%systemroot%\system32\NaturalAuth.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\ncasvc.dll,-3009 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\ncbservice.dll,-500 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\NcdAutoSetup.dll,-100 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\System32\netlogon.dll,-102 = C:\WINDOWS\system32\lsass.exe
@%SystemRoot%\system32\netman.dll,-109 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\netprofmsvc.dll,-202 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\NetSetupSvc.dll,-3 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\System32\NgcCtnrSvc.dll,-1 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\ngcsvc.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\p2psvc.dll,-8006 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\pcasvc.dll,-1 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 = C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe
@%SystemRoot%\system32\PhoneserviceRes.dll,-10000 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\pla.dll,-500 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\pnrpauto.dll,-8002 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\pnrpsvc.dll,-8000 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\pnrpsvc.dll,-8004 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\System32\polstore.dll,-5010 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\PresentationHost.exe,-3309 = C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
@%SystemRoot%\system32\PrintWorkflowService.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\pushtoinstall.dll,-200 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\qwave.dll,-1 = C:\WINDOWS\system32\svchost.exe
@%Systemroot%\system32\rasauto.dll,-200 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\System32\RDXService.dll,-256 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\RMapi.dll,-1001 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\System32\SCardSvr.dll,-1 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\ScDeviceEnum.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\sdrsvc.dll,-107 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\seclogon.dll,-7001 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\SecurityHealthAgent.dll,-1002 = C:\WINDOWS\system32\SecurityHealthService.exe
@%SystemRoot%\System32\SEMgrSvc.dll,-1001 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\SensorDataService.exe,-101 = C:\WINDOWS\System32\SensorDataService.exe
@%SystemRoot%\System32\sensorservice.dll,-1000 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\sensrsvc.dll,-1000 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\SessEnv.dll,-1026 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\SharedRealitySvc.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\smphost.dll,-102 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\System32\SmsRouterSvc.dll,-10001 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\spectrum.exe,-101 = C:\WINDOWS\system32\spectrum.exe
@%systemroot%\system32\ssdpsrv.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\sstpsvc.dll,-200 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\svsvc.dll,-101 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\swprv.dll,-103 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\tapisrv.dll,-10100 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\System32\termsrv.dll,-268 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\System32\tetheringservice.dll,-4097 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\TieringEngineService.exe,-702 = C:\WINDOWS\system32\TieringEngineService.exe
@%systemroot%\system32\tokenbroker.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\umpnpmgr.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\umpnpmgr.dll,-200 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\umrdp.dll,-1000 = C:\WINDOWS\System32\svchost.exe
@%systemroot%\system32\upnphost.dll,-213 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\UserDataAccessRes.dll,-10003 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\UserDataAccessRes.dll,-14001 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\UserDataAccessRes.dll,-15001 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\vac.dll,-200 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\vaultsvc.dll,-1003 = C:\WINDOWS\system32\lsass.exe
@%SystemRoot%\system32\vds.exe,-100 = C:\WINDOWS\System32\vds.exe
@%systemroot%\system32\vssvc.exe,-102 = C:\WINDOWS\system32\vssvc.exe
@%SystemRoot%\system32\w32time.dll,-200 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\WalletService.dll,-1000 = C:\WINDOWS\System32\svchost.exe
@%Systemroot%\system32\wbem\wmiapsrv.exe,-110 = C:\WINDOWS\system32\wbem\WmiApSrv.exe
@%systemroot%\system32\wbengine.exe,-104 = C:\WINDOWS\system32\wbengine.exe
@%SystemRoot%\system32\wcncsvc.dll,-3 = C:\WINDOWS\System32\svchost.exe
@%systemroot%\system32\wdi.dll,-500 = C:\WINDOWS\System32\svchost.exe
@%systemroot%\system32\wdi.dll,-502 = C:\WINDOWS\System32\svchost.exe
@%systemroot%\system32\webclnt.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\wecsvc.dll,-200 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\wephostsvc.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\wercplsupport.dll,-101 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\System32\wersvc.dll,-100 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\System32\wfdsconmgrsvc.dll,-9000 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\wiarpc.dll,-2 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\Windows.Internal.Management.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\Windows.Management.Service.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\windows.staterepository.dll,-1 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\Windows.WARP.JITService.dll,-100 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\windowsudk.shellcommon.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\winhttp.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\wlidsvc.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\workfolderssvc.dll,-102 = C:\WINDOWS\System32\svchost.exe
@%systemroot%\system32\WpcRefreshTask.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\system32\wpdbusenum.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%Systemroot%\system32\wsmsvc.dll,-101 = C:\WINDOWS\System32\svchost.exe
@%systemroot%\system32\wuaueng.dll,-105 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\wwansvc.dll,-257 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\XblAuthManager.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\XblGameSave.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\xboxgipsvc.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\system32\XboxNetApiSvc.dll,-100 = C:\WINDOWS\system32\svchost.exe
@%systemroot%\sysWow64\perfhost.exe,-2 = C:\WINDOWS\SysWow64\perfhost.exe
@%windir%\system32\TimeBrokerServer.dll,-1001 = C:\WINDOWS\system32\svchost.exe
@C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll,-1 = C:\WINDOWS\system32\svchost.exe
@comres.dll,-2797 = C:\WINDOWS\System32\msdtc.exe
@comres.dll,-2946 = C:\WINDOWS\System32\svchost.exe
@comres.dll,-947 = C:\WINDOWS\system32\dllhost.exe
@EnterpriseAppMgmtSvc.dll,-1 = C:\WINDOWS\system32\svchost.exe
@firewallapi.dll,-50323 = C:\WINDOWS\System32\snmptrap.exe
@keyiso.dll,-100 = C:\WINDOWS\system32\lsass.exe
@WaaSMedicSvc.dll,-100 = C:\WINDOWS\system32\svchost.exe
AarSvc_4df4b = C:\WINDOWS\system32\svchost.exe
BcastDVRUserService_4df4b = C:\WINDOWS\system32\svchost.exe
BluetoothUserService_4df4b = C:\WINDOWS\system32\svchost.exe
CaptureService_4df4b = C:\WINDOWS\system32\svchost.exe
cbdhsvc_4df4b = C:\WINDOWS\system32\svchost.exe
ConsentUxUserSvc_4df4b = C:\WINDOWS\system32\svchost.exe
CredentialEnrollmentManagerUserSvc_4df4b = C:\WINDOWS\system32\CredentialEnrollmentManager.exe
DeviceAssociationBrokerSvc_4df4b = C:\WINDOWS\system32\svchost.exe
DevicePickerUserSvc_4df4b = C:\WINDOWS\system32\svchost.exe
DevicesFlowUserSvc_4df4b = C:\WINDOWS\system32\svchost.exe
Intel(R) Content Protection HECI Service = C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bc91783da83242fc\IntelCpHeciSvc.exe
MessagingService_4df4b = C:\WINDOWS\system32\svchost.exe
Microsoft Edge Elevation Service = C:\Program Files (x86)\Microsoft\Edge\Application\84.0.522.52\elevation_service.exe
Office 64 Source Engine = C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
Office Software Protection Platform = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
PimIndexMaintenanceSvc_4df4b = C:\WINDOWS\system32\svchost.exe
PrintWorkflowUserSvc_4df4b = C:\WINDOWS\system32\svchost.exe
Quick Access Local Service = C:\Program Files\Acer\Acer Quick Access\QALSvc.exe
Quick Access Service = C:\Program Files\Acer\Acer Quick Access\QASvc.exe
Steam Client Service = C:\Program Files (x86)\Common Files\Steam\SteamService.exe
UdkUserSvc_4df4b = C:\WINDOWS\system32\svchost.exe
UnistoreSvc_4df4b = C:\WINDOWS\System32\svchost.exe
UserDataSvc_4df4b = C:\WINDOWS\system32\svchost.exe
VirtualBox system service = C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe

* Stopped & disabled (14) *
@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8201 = C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
@%Systemroot%\system32\mprdim.dll,-200 = C:\WINDOWS\System32\svchost.exe
@%SystemRoot%\system32\tzautoupdate.dll,-200 = C:\WINDOWS\system32\svchost.exe
@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100 = C:\WINDOWS\System32\svchost.exe
@regsvc.dll,-1 = C:\WINDOWS\system32\svchost.exe
BattlEye Service = C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
EasyAntiCheat = C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
Intel(R) Extreme Tuning Utility Service = C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe
Mozilla Maintenance Service = C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
OpenSSH Authentication Agent = C:\WINDOWS\System32\OpenSSH\ssh-agent.exe
Origin Client Service = C:\Program Files (x86)\Origin\OriginClientService.exe
Origin Web Helper Service = C:\Program Files (x86)\Origin\OriginWebHelperService.exe
SetupARService = C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe
vgc = C:\Program Files\Riot Vanguard\vgc.exe


[Windows Security Center]
* Windows Firewall exceptions *
Network domain mode
Standalone mode

* System Restore *
- All users
SRInitDone = dword: 1



==================================================
= Other users on this computer: Default user =
==================================================
--------------------

Policies:

[Primary policies]
* Software\Policies\Microsoft\Office\14.0\Common\Security\Trusted Protocols\All Applications\malwarebytes: (1) *
@ =



==================================================
= Other users on this computer: Local Service =
==================================================
--------------------

URL Search Hooks (1):

Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll

--------------------

Policies:

[Primary policies]
* Software\Policies\Microsoft\Office\14.0\Common\Security\Trusted Protocols\All Applications\malwarebytes: (1) *
@ =


--------------------

Registry 'Run' keys:

[User Run]
OneDriveSetup = C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup

--------------------

Hijack points:

[Internet Explorer URLs]
* Internet Explorer\Main (2) *
Local Page = %11%\blank.htm
Search Page = http://go.microsoft.com/fwlink/?LinkId=54896



==================================================
= Other users on this computer: NETWORK SERVICE =
==================================================
--------------------

URL Search Hooks (1):

Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll

--------------------

Policies:

[Primary policies]
* Software\Policies\Microsoft\Office\14.0\Common\Security\Trusted Protocols\All Applications\malwarebytes: (1) *
@ =


--------------------

Registry 'Run' keys:

[User Run]
OneDriveSetup = C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup

--------------------

Hijack points:

[Internet Explorer URLs]
* Internet Explorer\Main (2) *
Local Page = %11%\blank.htm
Search Page = http://go.microsoft.com/fwlink/?LinkId=54896



==================================================
= Other users on this computer: SYSTEM =
==================================================
--------------------

Policies:

[Primary policies]
* Software\Policies\Microsoft\Office\14.0\Common\Security\Trusted Protocols\All Applications\malwarebytes: (1) *
@ =



--------------------------------------------------
End of report, 312.993 bytes

Commandline options:
   /showempty      - Show empty sections
   /showcmts       - Show comments in .bat files
   /noshowclsids   - Hide class IDs
   /noshowprivate  - Hide usernames and computer name
   /noshowusers    - Hide entries from other users
   /noshowhardware - Hide entries from other hardware configurations
   /showlargehosts - Show hosts file even when more than 1000 lines are in it
   /showlargezones - Show Zones even when more than 1000 domains are in them
   /autosave       - Run hidden, automatically save a report and quit
   /autosavepath:  - Specify where to save log, when using /autosave.
                     Use surrounding quotes for paths with spaces.
 
Zararlıya yönelik bir şey gözükmüyor rehberi doğru okumadınzı heralde ne için paylşatığınzıı sorununuzu belirtmemişsiniz. Alttaki hangi yazılımın sonucu onu da belirtmemişsiniz ve sizden bu konuda sadece rehberdeki yazılım sonucu istenmiş.

Bunları fixleyin yine de:
Kod: 
O1 - Hosts.ICS: 192.168.137.1 DESKTOP-UTVHLIJ.mshome.net # 2025 8 5 1 9 56 0 884
O1 - Hosts.ICS: 27 4 952
O4-32 - (disabled) HKLM\..\Run-: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O4-32 - (disabled) HKLM\..\RunOnce-: [{9CDC7BD4-3E91-4E21-9E31-3D34AC632905}] = C:\WINDOWS\system32\cmd.exe /C start /D "C:\Users\Murat\AppData\Local\Temp" /B {9CDC7BD4-3E91-4E21-9E31-3D34AC632905}.cmd
O17 - DHCP DNS 1: 176.240.150.250
O17 - DHCP DNS 2: 46.197.15.60
O17 - DHCP DNS 3: 178.233.140.110
O26 - Debugger: HKLM\..\osppsvc.exe: [Debugger] = rundll32.exe SppExtComObjHook.dll,PatcherMain (file missing)
 
Kusura bakmayın. Sadece ne var ne yok diye paylaştım. Elimden geldiğince her hafta virus taraması yapmaya çalışıyorum. ESET'i silip Malwarebytes ile tarama yaptıktan sonra Kaspersky'e geçtim. Biraz da bunla tarama yapayım. En son Bitdefender'de bulacağım yolumu.

01 - olanlar internet paylaşımı özelliğinden gelenler.
04-32 - Java olan ise Java'nın güncellemesi.
04-32 - CMD'li olan ise KVRT'nin bıraktığı artık.
017 - olanlar Kablonet(UyduNet)'in DNS adresleri.
026 - arattığıma göre Office 2010'la ilgili lisans dosyası fakat bu bende nedense eksikmiş. Doğrusunu söylersem tek ilaçlı kullandığım yazılım olabilir.
 
Genel bir temizlik yapmak istiyorum. Hangilerini fixlemeliyim? Yarımcı olabilirseniz sevinirim.

Kod: 
Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 14:51:51, on 7.8.2020
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.18362.0001)


Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Users\LENOVO\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
C:\Users\LENOVO\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
C:\Users\LENOVO\Downloads\HijackThis (2).exe
C:\WINDOWS\SysWOW64\DllHost.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [URL='http://go.microsoft.com/fwlink/p/?LinkId=255141']MSN Türkiye | Hava Durumu, Son Dakika Haber, Hotmail Aç, Outlook Giriş[/URL]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [URL='http://go.microsoft.com/fwlink/?LinkId=54896']Günün Giriş Sayfası[/URL]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [URL='http://go.microsoft.com/fwlink/?LinkId=54896']Günün Giriş Sayfası[/URL]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [URL='http://go.microsoft.com/fwlink/p/?LinkId=255141']MSN Türkiye | Hava Durumu, Son Dakika Haber, Hotmail Aç, Outlook Giriş[/URL]
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
F2 - REG:system.ini: UserInit=
O1 - Hosts: 0.0.0.1 mssplus.mcafee.com
O2 - BHO: True Key Helper - {0F4B8786-5502-4803-8EBC-F652A1153BB6} - C:\Program Files\McAfee\TrueKey\MSIE\truekey_ie.dll
O3 - Toolbar: True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\McAfee\TrueKey\MSIE\truekey_ie.dll
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [uTorrent] "C:\Users\LENOVO\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
O4 - HKCU\..\Run: [Web Companion] C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
O4 - HKCU\..\RunOnce: [Application Restart #4] C:\Users\LENOVO\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\LENOVO\AppData\Local\SweetLabs App Platform\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session
O4 - HKCU\..\RunOnce: [Application Restart #3] C:\Users\LENOVO\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\LENOVO\AppData\Local\SweetLabs App Platform\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'Local Service')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2236764777-317347431-1782305066-1001\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2236764777-317347431-1782305066-1001\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'UpdatusUser')
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://*.webcompanion.com
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 (CredentialEnrollmentManagerUserSvc) - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: CredentialEnrollmentManagerUserSvc_71936 - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: @C:\WINDOWS\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\WINDOWS\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google LLC - C:\Program Files (x86)\Google\Chrome\Application\84.0.4147.105\elevation_service.exe
O23 - Service: Google Güncelleme Hizmeti (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Güncelleme Hizmeti (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @oem90.inf,%SERVICE_NAME%;Intel Bluetooth Service (ibtsiva) - Unknown owner - C:\WINDOWS\system32\ibtsiva (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Lenovo EasyPlus Hotspot - Lenovo - C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe
O23 - Service: Lenovo System Agent Service - LENOVO INCORPORATED. - C:\Program Files\Lenovo\iMController\SystemAgentService.exe
O23 - Service: Lenovo WiFiHotspot Service (LenovoWiFiHotspotSvr) - Unknown owner - C:\Windows\System32\LenovoWiFiHotspotSvr.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Maxthon Core Update Service (MaxthonUpdateSvc) - Maxthon - C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, LLC - C:\Program Files\McAfee Security Scan\3.11.1719\McCHSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 (perceptionsimulation) - Unknown owner - C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe (file missing)
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Conexant SmartAudio service (SAService) - Conexant Systems, Inc. - C:\WINDOWS\system32\SAsrv.exe
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @firewallapi.dll,-50323 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: McAfee True Key (TrueKey) - McAfee, LLC. - C:\Program Files\McAfee\TrueKey\McAfee.TrueKey.Service.exe
O23 - Service: McAfee True Key Scheduler (TrueKeyScheduler) - McAfee, LLC. - C:\Program Files\McAfee\TrueKey\McTkSchedulerService.exe
O23 - Service: McAfee True Key Helper Service (TrueKeyServiceHelper) - McAfee, LLC. - C:\Program Files\McAfee\TrueKey\McAfee.TrueKey.ServiceHelper.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: WC Assistant (WCAssistantService) - Unknown owner - C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14597 bytes
 
Bunları fixleyin:
Kod: 
F2 - REG:system.ini: UserInit=
O1 - Hosts: 0.0.0.1 mssplus.mcafee.com
O2 - BHO: True Key Helper - {0F4B8786-5502-4803-8EBC-F652A1153BB6} - C:\Program Files\McAfee\TrueKey\MSIE\truekey_ie.dll
O3 - Toolbar: True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\McAfee\TrueKey\MSIE\truekey_ie.dll
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKCU\..\Run: [uTorrent] "C:\Users\LENOVO\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
O4 - HKCU\..\Run: [Web Companion] C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
O4 - HKCU\..\RunOnce: [Application Restart #4] C:\Users\LENOVO\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\LENOVO\AppData\Local\SweetLabs App Platform\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session
O4 - HKCU\..\RunOnce: [Application Restart #3] C:\Users\LENOVO\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\LENOVO\AppData\Local\SweetLabs App Platform\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'Local Service')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2236764777-317347431-1782305066-1001\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2236764777-317347431-1782305066-1001\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'UpdatusUser')
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O23 - Service: Lenovo EasyPlus Hotspot - Lenovo - C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe
O23 - Service: Lenovo System Agent Service - LENOVO INCORPORATED. - C:\Program Files\Lenovo\iMController\SystemAgentService.exe
O23 - Service: Lenovo WiFiHotspot Service (LenovoWiFiHotspotSvr) - Unknown owner - C:\Windows\System32\LenovoWiFiHotspotSvr.exe (file missing)
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, LLC - C:\Program Files\McAfee Security Scan\3.11.1719\McCHSvc.exe
Lavasoft, Mcafee kaldırın sağlam bir AV kurun.
Lenovo araçlarını kaldırın, Onedrive kullanmıyorsanız kaldırın.
 
Rica etsem şuna da el atabilir misiniz ?


Kod: 
Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 14:19:24, on 8.8.2020
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)


Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Users\Casper\AppData\Local\Temp\scoped_dir4712_1600499741\HijackThis.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.joygame.com/games.aspx?g=2001
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O4 - HKLM\..\Run: [Opera Browser Assistant] C:\Program Files\Opera\assistant\browser_assistant.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Browser Manager] C:\Users\Casper\AppData\Local\Yandex\BrowserManager\MBLauncher.exe
O4 - HKCU\..\Run: [DriverAgentPlusHelper] C:\ProgramData\DriverAgentPlus\DriverAgentPlusHelper\DriverAgentPlusHelper.exe
O4 - HKCU\..\Run: [EpicGamesLauncher] "C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe" -silent
O4 - HKCU\..\Run: [com.blitz.app] C:\Users\Casper\AppData\Local\Programs\Blitz\Blitz.exe --hidden
O4 - HKCU\..\Run: [FACEIT] "C:\Users\Casper\AppData\Local\FACEITApp\update.exe" --processStart "FACEIT.exe"
O4 - HKCU\..\Run: [Discord] C:\Users\Casper\AppData\Local\Discord\app-0.0.307\Discord.exe
O4 - HKCU\..\Run: [Spotify] C:\Users\Casper\AppData\Roaming\Spotify\Spotify.exe --autostart --minimized
O4 - Startup: Twitch.lnk = C:\Users\Casper\AppData\Roaming\Twitch\Bin\Twitch.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{2F58D8E5-6999-4E8C-B6B0-54C54FC8001B}: NameServer = 209.244.0.3,209.244.0.4
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google LLC - C:\Program Files (x86)\Google\Chrome\Application\84.0.4147.105\elevation_service.exe
O23 - Service: Google Güncelleme Hizmeti (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Güncelleme Hizmeti (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: POSHXService - Unknown owner - C:\Program Files (x86)\POSHEX\POSHXMain.exe
O23 - Service: Rockstar Game Library Service (Rockstar Service) - Rockstar Games - C:\Program Files\Rockstar Games\Launcher\RockstarService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.6 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: vgc - Riot Games, Inc. - C:\Program Files\Riot Vanguard\vgc.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7573 bytes
 
DMRGNR dedi:
Rica etsem şuna da el atabilir misiniz ?
Genişletmek için tıkla...
Rehberi niye okumadınız? Sorun belli değil neyine bakacam?
Zararlı kaynaklı olarak görünen yok. Sürücü bulucu kullanmışsın kaldır bir daha bu tür şeyler kullanma.
 

Benzer konular

taylaan
HijackThis Log Paylaşımı
Mesaj
0
Görüntüleme
543
taylaan
taylaan
Niyazi Taşcı
Android Silinmeyen Trojan Virüsü Temizleme
Mesaj
5
Görüntüleme
5.684
quarest
quarest
Egeeymen
Kaspersky silinmeyen trojan
Mesaj
2
Görüntüleme
999
acv
A
B
Kaspersky Security Cloud trojan buldu
2 3
Mesaj
21
Görüntüleme
3.002
Murat5038
Murat5038
2
  • Makale
Rehber  Kaspersky Virus Removal Tool ile Zararlı Yazılım Temizliği
Mesaj
7
Görüntüleme
14.503
Windows 11 Bükücü
Windows 11 Bükücü

Technopat Haberler

Yeni konular

Yeni mesajlar

Geri
Yukarı