From b27f6bec3c06f4a98fd4c95ceeabb6f081c64a11 Mon Sep 17 00:00:00 2001 From: ili101 Date: Mon, 26 Aug 2019 14:34:05 +0300 Subject: [PATCH 01/14] Module.Template 2.0.2 --- .gitignore | 1 - .vscode/launch.json | 56 ++++ Compare-WorkSheet.ps1 | 286 ++++++++++++++++++ DoTests.ps1 | 28 -- .../TryMultiplePivotTablesFromOneSheet.ps1 | 2 +- ImportExcel.psm1 | 2 +- Install.ps1 | 238 ++++++++++----- InstallModule.ps1 | 3 - README.md | 12 +- __tests__/CI.ps1 | 132 ++++++++ __tests__/Compare-WorkSheet.tests.ps1 | 4 +- .../ConvertFromExcelToSQLInsert.tests.ps1 | 4 +- __tests__/FunctionAlias.tests.ps1 | 4 +- __tests__/ImportExcelTests/Simple.tests.ps1 | 2 +- __tests__/InstallPowerShell.ps1 | 26 ++ __tests__/Publish.ps1 | 105 +++++++ __tests__/Remove-WorkSheet.tests.ps1 | 3 +- appveyor.yml | 72 ++++- azure-pipelines.yml | 125 +++++--- 19 files changed, 922 insertions(+), 183 deletions(-) create mode 100644 .vscode/launch.json create mode 100644 Compare-WorkSheet.ps1 delete mode 100644 DoTests.ps1 delete mode 100644 InstallModule.ps1 create mode 100644 __tests__/CI.ps1 create mode 100644 __tests__/InstallPowerShell.ps1 create mode 100644 __tests__/Publish.ps1 diff --git a/.gitignore b/.gitignore index 84a681b..7a4ebe0 100644 --- a/.gitignore +++ b/.gitignore @@ -60,7 +60,6 @@ test.xlsx testCCFMT.ps1 testHide.ps1 ImportExcel.zip -.vscode/launch.json .vscode/settings.json ~$* diff --git a/.vscode/launch.json b/.vscode/launch.json new file mode 100644 index 0000000..2d3f445 --- /dev/null +++ b/.vscode/launch.json @@ -0,0 +1,56 @@ +{ + // Use IntelliSense to learn about possible attributes. + // Hover to view descriptions of existing attributes. + // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387 + "version": "0.2.0", + "configurations": [ + { + "type": "PowerShell", + "request": "launch", + "name": "PowerShell Pester Tests", + "script": "Import-Module -Name '.\\' -Force ; Invoke-Pester", // Change to '.\\ModuleName.psd1' if Git name different + "args": [""], + "cwd": "${workspaceFolder}" + }, + { + "type": "PowerShell", + "request": "launch", + "name": "PowerShell Launch Current File", + "script": "${file}", + "args": [], + "cwd": "${file}" + }, + { + "type": "PowerShell", + "request": "launch", + "name": "PowerShell Launch Current File in Temporary Console", + "script": "${file}", + "args": [], + "cwd": "${file}", + "createTemporaryIntegratedConsole": true + }, + { + "type": "PowerShell", + "request": "launch", + "name": "PowerShell Launch Current File w/Args Prompt", + "script": "${file}", + "args": [ + "${command:SpecifyScriptArgs}" + ], + "cwd": "${file}" + }, + { + "type": "PowerShell", + "request": "attach", + "name": "PowerShell Attach to Host Process", + "processId": "${command:PickPSHostProcess}", + "runspaceId": 1 + }, + { + "type": "PowerShell", + "request": "launch", + "name": "PowerShell Interactive Session", + "cwd": "" + } + ] +} \ No newline at end of file diff --git a/Compare-WorkSheet.ps1 b/Compare-WorkSheet.ps1 new file mode 100644 index 0000000..fb8edf6 --- /dev/null +++ b/Compare-WorkSheet.ps1 @@ -0,0 +1,286 @@ +Function Compare-WorkSheet { +<# + .Synopsis + Compares two worksheets and shows the differences. + .Description + This command takes two file names, one or two worksheet names and a name + for a "key" column. It reads the worksheet from each file and decides the + column names and builds a hashtable of the key-column values and the + rows in which they appear. + It then uses PowerShell's Compare-Object command to compare the sheets + (explicitly checkingall the column names which have not been excluded). + For the difference rows it adds the row number for the key of that row - + we have to add the key after doing the comparison, otherwise identical + rows at different positions in the file will not be considered a match. + We also add the name of the file and sheet in which the difference occurs. + If -BackgroundColor is specified the difference rows will be changed to + that background in the orginal file. + .Example + Compare-WorkSheet -Referencefile 'Server56.xlsx' -Differencefile 'Server57.xlsx' -WorkSheetName Products -key IdentifyingNumber -ExcludeProperty Install* | Format-Table + + The two workbooks in this example contain the result of redirecting a subset + of properties from Get-WmiObject -Class win32_product to Export-Excel. + The command compares the "Products" pages in the two workbooks, but we + don't want to register a difference if the software was installed on a + different date or from a different place, and excluding Install* removes + InstallDate and InstallSource. This data doesn't have a "Name" column, so + we specify the "IdentifyingNumber" column as the key. + The results will be presented as a table. + .Example + Compare-WorkSheet "Server54.xlsx" "Server55.xlsx" -WorkSheetName Services -GridView + + This time two workbooks contain the result of redirecting the command + Get-WmiObject -Class win32_service to Export-Excel. Here the -Differencefile + and -Referencefile parameter switches are assumed and the default setting for + -Key ("Name") works for services. This will display the differences between + the "Services" sheets using a grid view + .Example + Compare-WorkSheet 'Server54.xlsx' 'Server55.xlsx' -WorkSheetName Services -BackgroundColor lightGreen + + This version of the command outputs the differences between the "services" pages and highlights any different rows in the spreadsheet files. + .Example + Compare-WorkSheet 'Server54.xlsx' 'Server55.xlsx' -WorkSheetName Services -BackgroundColor lightGreen -FontColor Red -Show + + This example builds on the previous one: this time where two changed rows have + the value in the "Name" column (the default value for -Key), this version adds + highlighting of the changed cells in red; and then opens the Excel file. + .Example + Compare-WorkSheet 'Pester-tests.xlsx' 'Pester-tests.xlsx' -WorkSheetName 'Server1','Server2' -Property "full Description","Executed","Result" -Key "full Description" + + This time the reference file and the difference file are the same file and + two different sheets are used. Because the tests include the machine name + and time the test was run, the command specifies that a limited set of + columns should be used. + .Example + Compare-WorkSheet 'Server54.xlsx' 'Server55.xlsx' -WorkSheetName general -Startrow 2 -Headername Label,value -Key Label -GridView -ExcludeDifferent + + The "General" page in the two workbooks has a title and two unlabelled columns + with a row each for CPU, Memory, Domain, Disk and so on. So the command is + told to start at row 2 in order to skip the title and given names for the + columns: the first is "label" and the second "Value"; the label acts as the key. + This time we are interested in those rows which are the same in both sheets, + and the result is displayed using grid view. + Note that grid view works best when the number of columns is small. + .Example + Compare-WorkSheet 'Server1.xlsx' 'Server2.xlsx' -WorkSheetName general -Startrow 2 -Headername Label,value -Key Label -BackgroundColor White -Show -AllDataBackgroundColor LightGray + + This version of the previous command highlights all the cells in LightGray + and then sets the changed rows back to white. + Only the unchanged rows are highlighted. +#> + [cmdletbinding(DefaultParameterSetName)] + [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSAvoidUsingWriteHost', '', Justification="Write host used for sub-warning level message to operator which does not form output")] + [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseDeclaredVarsMoreThanAssignments', '', Justification="False positives when initializing variable in begin block")] + Param( + #First file to compare. + [parameter(Mandatory=$true,Position=0)] + $Referencefile , + #Second file to compare. + [parameter(Mandatory=$true,Position=1)] + $Differencefile , + #Name(s) of worksheets to compare. + $WorkSheetName = "Sheet1", + #Properties to include in the comparison - supports wildcards, default is "*". + $Property = "*" , + #Properties to exclude from the comparison - supports wildcards. + $ExcludeProperty , + #Specifies custom property names to use, instead of the values defined in the starting row of the sheet. + [Parameter(ParameterSetName='B', Mandatory)] + [String[]]$Headername, + #Automatically generate property names (P1, P2, P3 ...) instead of the using the values the starting row of the sheet. + [Parameter(ParameterSetName='C', Mandatory)] + [switch]$NoHeader, + #The row from where we start to import data: all rows above the start row are disregarded. By default, this is the first row. + [int]$Startrow = 1, + #If specified, highlights all the cells - so you can make Equal cells one color, and Different cells another. + $AllDataBackgroundColor, + #If specified, highlights the rows with differences. + $BackgroundColor, + #If specified identifies the tabs which contain difference rows (ignored if -BackgroundColor is omitted). + $TabColor, + #Name of a column which is unique and will be used to add a row to the DIFF object, defaults to "Name". + $Key = "Name" , + #If specified, highlights the DIFF columns in rows which have the same key. + $FontColor, + #If specified, opens the Excel workbooks instead of outputting the diff to the console (unless -PassThru is also specified). + [Switch]$Show, + #If specified, the command tries to the show the DIFF in a Grid-View and not on the console. (unless-PassThru is also specified). This works best with few columns selected, and requires a key. + [switch]$GridView, + #If specifieda full set of DIFF data is returned without filtering to the specified properties. + [Switch]$PassThru, + #If specified the result will include equal rows as well. By default only different rows are returned. + [Switch]$IncludeEqual, + #If specified, the result includes only the rows where both are equal. + [Switch]$ExcludeDifferent + ) + + #if the filenames don't resolve, give up now. + try { $oneFile = ((Resolve-Path -Path $Referencefile -ErrorAction Stop).path -eq (Resolve-Path -Path $Differencefile -ErrorAction Stop).path)} + Catch { Write-Warning -Message "Could not Resolve the filenames." ; return } + + #If we have one file , we must have two different worksheet names. If we have two files we can have a single string or two strings. + if ($onefile -and ( ($WorkSheetName.count -ne 2) -or $WorkSheetName[0] -eq $WorkSheetName[1] ) ) { + Write-Warning -Message "If both the Reference and difference file are the same then worksheet name must provide 2 different names" + return + } + if ($WorkSheetName.count -eq 2) {$worksheet1 = $WorkSheetName[0] ; $workSheet2 = $WorkSheetName[1]} + elseif ($WorkSheetName -is [string]) {$worksheet1 = $workSheet2 = $WorkSheetName} + else {Write-Warning -Message "You must provide either a single worksheet name or two names." ; return } + + $params= @{ ErrorAction = [System.Management.Automation.ActionPreference]::Stop } + foreach ($p in @("HeaderName","NoHeader","StartRow")) {if ($PSBoundParameters[$p]) {$params[$p] = $PSBoundParameters[$p]}} + try { + $sheet1 = Import-Excel -Path $Referencefile -WorksheetName $WorkSheet1 @params + $sheet2 = Import-Excel -Path $Differencefile -WorksheetName $WorkSheet2 @Params + } + Catch {Write-Warning -Message "Could not read the worksheet from $Referencefile and/or $Differencefile." ; return } + + #Get Column headings and create a hash table of Name to column letter. + $headings = $Sheet1[-1].psobject.Properties.name # This preserves the sequence - using get-member would sort them alphabetically! + $headings | ForEach-Object -Begin {$columns = @{} ; $i= 1 } -Process {$Columns[$_] = [OfficeOpenXml.ExcelAddress]::GetAddress(1,($i ++)) -replace "\d","" } + + #Make a list of property headings using the Property (default "*") and ExcludeProperty parameters + if ($Key -eq "Name" -and $NoHeader) {$Key = "p1"} + $propList = @() + foreach ($p in $Property) {$propList += ($headings.where({$_ -like $p}) )} + foreach ($p in $ExcludeProperty) {$propList = $propList.where({$_ -notlike $p}) } + if (($headings -contains $key) -and ($propList -notcontains $Key)) {$propList += $Key} + $propList = $propList | Select-Object -Unique + if ($propList.Count -eq 0) {Write-Warning -Message "No Columns are selected with -Property = '$Property' and -excludeProperty = '$ExcludeProperty'." ; return} + + #Add RowNumber, Sheetname and file name to every row + $firstDataRow = $startRow + 1 + if ($Headername -or $NoHeader) {$firstDataRow -- } + $i = $firstDataRow ; foreach ($row in $Sheet1) {Add-Member -InputObject $row -MemberType NoteProperty -Name "_Row" -Value ($i ++) + Add-Member -InputObject $row -MemberType NoteProperty -Name "_Sheet" -Value $worksheet1 + Add-Member -InputObject $row -MemberType NoteProperty -Name "_File" -Value $Referencefile} + $i = $firstDataRow ; foreach ($row in $Sheet2) {Add-Member -InputObject $row -MemberType NoteProperty -Name "_Row" -Value ($i ++) + Add-Member -InputObject $row -MemberType NoteProperty -Name "_Sheet" -Value $worksheet2 + Add-Member -InputObject $row -MemberType NoteProperty -Name "_File" -Value $Differencefile} + + if ($ExcludeDifferent -and -not $IncludeEqual) {$IncludeEqual = $true} + #Do the comparison and add file,sheet and row to the result - these are prefixed with "_" to show they are added the addition will fail if the sheet has these properties so split the operations + [PSCustomObject[]]$diff = Compare-Object -ReferenceObject $Sheet1 -DifferenceObject $Sheet2 -Property $propList -PassThru -IncludeEqual:$IncludeEqual -ExcludeDifferent:$ExcludeDifferent | + Sort-Object -Property "_Row","File" + + #if BackgroundColor was specified, set it on extra or extra or changed rows + if ($diff -and $BackgroundColor) { + #Differences may only exist in one file. So gather the changes for each file; open the file, update each impacted row in the shee, save the file + $updates = $diff.where({$_.SideIndicator -ne "=="}) | Group-object -Property "_File" + foreach ($file in $updates) { + try {$xl = Open-ExcelPackage -Path $file.name } + catch {Write-warning -Message "Can't open $($file.Name) for writing." ; return} + if ($PSBoundParameters.ContainsKey("AllDataBackgroundColor")) { + $file.Group._sheet | Sort-Object -Unique | ForEach-Object { + $ws = $xl.Workbook.Worksheets[$_] + if ($headerName) {$range = "A" + $startrow + ":" + $ws.dimension.end.address} + else {$range = "A" + ($startrow + 1) + ":" + $ws.dimension.end.address} + Set-Format -WorkSheet $ws -BackgroundColor $AllDataBackgroundColor -Range $Range + } + } + foreach ($row in $file.group) { + $ws = $xl.Workbook.Worksheets[$row._Sheet] + $range = $ws.Dimension -replace "\d+",$row._row + Set-Format -WorkSheet $ws -Range $range -BackgroundColor $BackgroundColor + } + if ($PSBoundParameters.ContainsKey("TabColor")) { + if ($TabColor -is [string]) {$TabColor = [System.Drawing.Color]::$TabColor } + foreach ($tab in ($file.group._sheet | Select-Object -Unique)) { + $xl.Workbook.Worksheets[$tab].TabColor = $TabColor + } + } + $xl.save() ; $xl.Stream.Close() ; $xl.Dispose() + } + } + #if font color was specified, set it on changed properties where the same key appears in both sheets. + if ($diff -and $FontColor -and (($propList -contains $Key) -or ($key -is [hashtable])) ) { + $updates = $diff.where({$_.SideIndicator -ne "=="}) | Group-object -Property $Key | Where-Object {$_.count -eq 2} + if ($updates) { + $XL1 = Open-ExcelPackage -path $Referencefile + if ($oneFile ) {$xl2 = $xl1} + else {$xl2 = Open-ExcelPackage -path $Differencefile } + foreach ($u in $updates) { + foreach ($p in $propList) { + if ($u.group[0]._file -eq $Referencefile) { + $ws1 = $xl1.Workbook.Worksheets[$u.Group[0]._sheet] + $ws2 = $xl2.Workbook.Worksheets[$u.Group[1]._sheet] + } + else { + $ws1 = $xl2.Workbook.Worksheets[$u.Group[0]._sheet] + $ws2 = $xl1.Workbook.Worksheets[$u.Group[1]._sheet] + } + if($u.Group[0].$p -ne $u.Group[1].$p ) { + Set-Format -WorkSheet $ws1 -Range ($Columns[$p] + $u.Group[0]._Row) -FontColor $FontColor + Set-Format -WorkSheet $ws2 -Range ($Columns[$p] + $u.Group[1]._Row) -FontColor $FontColor + } + } + } + $xl1.Save() ; $xl1.Stream.Close() ; $xl1.Dispose() + if (-not $oneFile) {$xl2.Save() ; $xl2.Stream.Close() ; $xl2.Dispose()} + } + } + elseif ($diff -and $FontColor) {Write-Warning -Message "To match rows to set changed cells, you must specify -Key and it must match one of the included properties." } + + #if nothing was found write a message which will not be redirected + if (-not $diff) {Write-Host "Comparison of $Referencefile::$worksheet1 and $Differencefile::$WorkSheet2 returned no results." } + + if ($Show) { + Start-Process -FilePath $Referencefile + if (-not $oneFile) { Start-Process -FilePath $Differencefile } + if ($GridView) { Write-Warning -Message "-GridView is ignored when -Show is specified" } + } + elseif ($GridView -and $propList -contains $key) { + + + if ($IncludeEqual -and -not $ExcludeDifferent) { + $GroupedRows = $diff | Group-Object -Property $key + } + else { #to get the right now numbers on the grid we need to have all the rows. + $GroupedRows = Compare-Object -ReferenceObject $Sheet1 -DifferenceObject $Sheet2 -Property $propList -PassThru -IncludeEqual | + Group-Object -Property $key + } + #Additions, deletions and unchanged rows will give a group of 1; changes will give a group of 2 . + + #If one sheet has extra rows we can get a single "==" result from compare, but with the row from the reference sheet + #but the row in the other sheet might so we will look up the row number from the key field build a hash table for that + $Sheet2 | ForEach-Object -Begin {$Rowhash = @{} } -Process {$Rowhash[$_.$key] = $_._row } + + $ExpandedDiff = ForEach ($g in $GroupedRows) { + #we're going to create a custom object from a hash table. We want the fields to be ordered + $hash = [ordered]@{} + foreach ($result IN $g.Group) { + # if result indicates equal or "in Reference" set the reference side row. If we did that on a previous result keep it. Otherwise set to "blank" + if ($result.sideindicator -ne "=>") {$hash["Row"] = $Rowhash[$g.Name] + #position the key as the next field (only appears once) + $Hash[$key] = $g.Name + #For all the other fields we care about create <=FieldName and/or =>FieldName + foreach ($p in $propList.Where({$_ -ne $key})) { + if ($result.SideIndicator -eq "==") {$hash[("=>$P")] = $hash[("<=$P")] =$result.$P} + else {$hash[($result.SideIndicator+$P)] =$result.$P} + } + } + [Pscustomobject]$hash + } + + #Sort by reference row number, and fill in any blanks in the difference-row column + $ExpandedDiff = $ExpandedDiff | Sort-Object -Property "row") {$ExpandedDiff[$i].">row" = $ExpandedDiff[$i-1].">row" } } + #Sort by difference row number, and fill in any blanks in the reference-row column + $ExpandedDiff = $ExpandedDiff | Sort-Object -Property ">row" + for ($i = 1; $i -lt $ExpandedDiff.Count; $i++) {if (-not $ExpandedDiff[$i]."row" } + elseif ( $IncludeEqual) {$ExpandedDiff = $ExpandedDiff | Sort-Object -Property "row" } + else {$ExpandedDiff = $ExpandedDiff.where({$_.side -ne "=="}) | Sort-Object -Property "row" } + $ExpandedDiff | Update-FirstObjectProperties | Out-GridView -Title "Comparing $Referencefile::$worksheet1 (<=) with $Differencefile::$WorkSheet2 (=>)" + } + elseif ($GridView ) {Write-Warning -Message "To use -GridView you must specify -Key and it must match one of the included properties." } + elseif (-not $PassThru) {return ($diff | Select-Object -Property (@(@{n="_Side";e={$_.SideIndicator}},"_File" ,"_Sheet","_Row") + $propList))} + if ( $PassThru) {return $diff } +} diff --git a/DoTests.ps1 b/DoTests.ps1 deleted file mode 100644 index c55ff58..0000000 --- a/DoTests.ps1 +++ /dev/null @@ -1,28 +0,0 @@ -param( - [Switch]$DontCreateZip -) - -## -# Used in Appveyor.yml -## - -$PSVersionTable.PSVersion - -## Create the zip before the tests run -## Otherwise the EPPlus.dll is in use after the Pester run -$ModuleVersion = (Invoke-Command -ScriptBlock ([scriptblock]::Create((Get-Content -Raw .\ImportExcel.psd1)))).moduleVersion - -if (!$DontCreateZip) { - $dest = "ImportExcel-{0}-{1}.zip" -f $ModuleVersion, (Get-Date).ToString("yyyyMMddHHmmss") - Compress-Archive -Path . -DestinationPath .\$dest -} - -if ($null -eq (Get-Module -ListAvailable pester)) { - Install-Module -Name Pester -Repository PSGallery -Force -Scope CurrentUser -} - -$result = Invoke-Pester -Script $PSScriptRoot\__tests__ -Verbose -PassThru - -if ($result.FailedCount -gt 0) { - throw "$($result.FailedCount) tests failed." -} \ No newline at end of file diff --git a/Examples/TryMultiplePivotTablesFromOneSheet.ps1 b/Examples/TryMultiplePivotTablesFromOneSheet.ps1 index 3993ebc..1533a78 100644 --- a/Examples/TryMultiplePivotTablesFromOneSheet.ps1 +++ b/Examples/TryMultiplePivotTablesFromOneSheet.ps1 @@ -1,4 +1,4 @@ -Import-Module ..\ImportExcel.psd1 -Force +try {. $PSScriptRoot\..\..\LoadPSD1.ps1} catch {} $file = "C:\Temp\test.xlsx" diff --git a/ImportExcel.psm1 b/ImportExcel.psm1 index 4bdbb55..7baf5b0 100644 --- a/ImportExcel.psm1 +++ b/ImportExcel.psm1 @@ -5,7 +5,7 @@ Add-Type -Path "$($PSScriptRoot)\EPPlus.dll" . $PSScriptRoot\Charting.ps1 . $PSScriptRoot\ColorCompletion.ps1 . $PSScriptRoot\ConvertExcelToImageFile.ps1 -. $PSScriptRoot\compare-workSheet.ps1 +. $PSScriptRoot\Compare-WorkSheet.ps1 . $PSScriptRoot\ConvertFromExcelData.ps1 . $PSScriptRoot\ConvertFromExcelToSQLInsert.ps1 . $PSScriptRoot\ConvertToExcelXlsx.ps1 diff --git a/Install.ps1 b/Install.ps1 index 6b367dd..1c96619 100644 --- a/Install.ps1 +++ b/Install.ps1 @@ -1,104 +1,174 @@ <# .SYNOPSIS - Download the module files from GitHub. - - .DESCRIPTION - Download the module files from GitHub to the local client in the module folder. + Installs module from Git clone or directly from GitHub. + File must not have BOM for GitHub deploy to work. #> - -[CmdLetBinding()] +[CmdletBinding(DefaultParameterSetName = 'Default')] Param ( + # Path to install the module to, if not provided -Scope used. + [Parameter(Mandatory, ParameterSetName = 'ModulePath')] [ValidateNotNullOrEmpty()] - [String]$ModuleName = 'ImportExcel', - [String]$InstallDirectory, + [String]$ModulePath, + + # Path to install the module to, PSModulePath "CurrentUser" or "AllUsers", if not provided "CurrentUser" used. + [Parameter(Mandatory, ParameterSetName = 'Scope')] + [ValidateSet('CurrentUser', 'AllUsers')] + [string] + $Scope = 'CurrentUser', + + # Get module from GitHub instead of local Git clone, for example "https://raw.githubusercontent.com/ili101/Module.Template/master/Install.ps1" [ValidateNotNullOrEmpty()] - [String]$GitPath = 'https://raw.github.com/dfinke/ImportExcel/master' + [Uri]$FromGitHub +) +# Set Files and Folders patterns to Include/Exclude. +$IncludeFiles = @( + '*.dll', + '*.psd1', + '*.psm1', + '*.ps1', + 'BinFolder*' +) +$ExcludeFiles = @( + 'Install.ps1' ) -Begin { - Try { - Write-Verbose "$ModuleName module installation started" - $Files = @( - 'AddConditionalFormatting.ps1', - 'Charting.ps1', - 'ColorCompletion.ps1', - 'ConvertFromExcelData.ps1', - 'ConvertFromExcelToSQLInsert.ps1', - 'ConvertExcelToImageFile.ps1', - 'ConvertToExcelXlsx.ps1', - 'Copy-ExcelWorkSheet.ps1', - 'EPPlus.dll', - 'Export-charts.ps1', - 'Export-Excel.ps1', - 'Export-ExcelSheet.ps1', - 'formatting.ps1', - 'Get-ExcelColumnName.ps1', - 'Get-ExcelSheetInfo.ps1', - 'Get-ExcelWorkbookInfo.ps1', - 'Get-HtmlTable.ps1', - 'Get-Range.ps1', - 'Get-XYRange.ps1', - 'Import-Html.ps1', - 'ImportExcel.psd1', - 'ImportExcel.psm1', - 'InferData.ps1', - 'Invoke-Sum.ps1', - 'New-ConditionalFormattingIconSet.ps1', - 'New-ConditionalText.ps1', - 'New-ExcelChart.ps1', - 'New-PSItem.ps1', - 'Open-ExcelPackage.ps1', - 'Pivot.ps1', - 'plot.ps1', - 'Send-SqlDataToExcel.ps1', - 'Set-CellStyle.ps1', - 'Set-Column.ps1', - 'Set-Row.ps1', - 'SetFormat.ps1', - 'TrackingUtils.ps1', - 'Update-FirstObjectProperties.ps1' - ) +function Invoke-MultiLike { + [alias("LikeAny")] + [CmdletBinding()] + param + ( + $InputObject, + [Parameter(Mandatory)] + [String[]]$Filters, + [Switch]$Not + ) + $FiltersRegex = foreach ($Filter In $Filters) { + $Filter = [regex]::Escape($Filter) + if ($Filter -match "^\\\*") { + $Filter = $Filter.Remove(0, 2) + } + else { + $Filter = '^' + $Filter + } + if ($Filter -match "\\\*$") { + $Filter = $Filter.Substring(0, $Filter.Length - 2) + } + else { + $Filter = $Filter + '$' + } + $Filter } - Catch { - throw "Failed installing the module in the install directory '$InstallDirectory': $_" + if ($Not) { + $InputObject -notmatch ($FiltersRegex -join '|').replace('\*', '.*').replace('\?', '.') + } + else { + $InputObject -match ($FiltersRegex -join '|').replace('\*', '.*').replace('\?', '.') } } -Process { - Try { - if (-not $InstallDirectory) { - Write-Verbose "$ModuleName no installation directory provided" +Try { + Write-Verbose -Message 'Module installation started' - $PersonalModules = Join-Path -Path ([Environment]::GetFolderPath('MyDocuments')) -ChildPath WindowsPowerShell\Modules - - if (($env:PSModulePath -split ';') -notcontains $PersonalModules) { - Write-Warning "$ModuleName personal module path '$PersonalModules' not found in '`$env:PSModulePath'" - } - - if (-not (Test-Path $PersonalModules)) { - Write-Error "$ModuleName path '$PersonalModules' does not exist" - } - - $InstallDirectory = Join-Path -Path $PersonalModules -ChildPath $ModuleName - Write-Verbose "$ModuleName default installation directory is '$InstallDirectory'" + if (!$ModulePath) { + if ($Scope -eq 'CurrentUser') { + $ModulePathIndex = 0 } - - if (-not (Test-Path $InstallDirectory)) { - $null = New-Item -Path $InstallDirectory -ItemType Directory -EA Stop - Write-Verbose "$ModuleName created module folder '$InstallDirectory'" + else { + $ModulePathIndex = 1 } - - $WebClient = New-Object System.Net.WebClient - - $Files | ForEach-Object { - $WebClient.DownloadFile("$GitPath/$_","$installDirectory\$_") - Write-Verbose "$ModuleName installed module file '$_'" + if ($IsLinux -or $IsMacOS) { + $ModulePathSeparator = ':' } - - Write-Verbose "$ModuleName module installation successful" + else { + $ModulePathSeparator = ';' + } + $ModulePath = ($env:PSModulePath -split $ModulePathSeparator)[$ModulePathIndex] } - Catch { - throw "Failed installing the module in the install directory '$InstallDirectory': $_" + + # Get $ModuleName, $TargetPath, [$Links] + if ($FromGitHub) { + # Fix Could not create SSL/TLS secure channel + #$SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol + #[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 + + $WebClient = [System.Net.WebClient]::new() + $GitUri = $FromGitHub.AbsolutePath.Split('/')[1, 2] -join '/' + $GitBranch = $FromGitHub.AbsolutePath.Split('/')[3] + $Links = (Invoke-RestMethod -Uri "https://api.github.com/repos/$GitUri/contents" -Body @{ref = $GitBranch }) | Where-Object { (LikeAny $_.name $IncludeFiles) -and (LikeAny $_.name $ExcludeFiles -Not) } + + $ModuleName = [System.IO.Path]::GetFileNameWithoutExtension(($Links | Where-Object { $_.name -like '*.psm1' }).name) + $ModuleVersion = (. ([Scriptblock]::Create((Invoke-WebRequest -Uri ($Links | Where-Object { $_.name -eq "$ModuleName.psd1" }).download_url)))).ModuleVersion } + else { + $ModuleName = [System.IO.Path]::GetFileNameWithoutExtension((Get-ChildItem -File -Filter *.psm1 -Name -Path $PSScriptRoot)) + $ModuleVersion = (. ([Scriptblock]::Create((Get-Content -Path (Join-Path $PSScriptRoot "$ModuleName.psd1") | Out-String)))).ModuleVersion + } + $TargetPath = Join-Path -Path $ModulePath -ChildPath $ModuleName + $TargetPath = Join-Path -Path $TargetPath -ChildPath $ModuleVersion + + # Create Directory + if (-not (Test-Path -Path $TargetPath)) { + $null = New-Item -Path $TargetPath -ItemType Directory -ErrorAction Stop + Write-Verbose -Message ('Created module folder: "{0}"' -f $TargetPath) + } + + # Copy Files + if ($FromGitHub) { + foreach ($Link in $Links) { + $TargetPathItem = Join-Path -Path $TargetPath -ChildPath $Link.name + if ($Link.type -ne 'dir') { + $WebClient.DownloadFile($Link.download_url, $TargetPathItem) + Write-Verbose -Message ('Installed module file: "{0}"' -f $Link.name) + } + else { + if (-not (Test-Path -Path $TargetPathItem)) { + $null = New-Item -Path $TargetPathItem -ItemType Directory -ErrorAction Stop + Write-Verbose -Message 'Created module folder: "{0}"' -f $TargetPathItem + } + $SubLinks = (Invoke-RestMethod -Uri $Link.git_url -Body @{recursive = '1' }).tree + foreach ($SubLink in $SubLinks) { + $TargetPathSub = Join-Path -Path $TargetPathItem -ChildPath $SubLink.path + if ($SubLink.'type' -EQ 'tree') { + if (-not (Test-Path -Path $TargetPathSub)) { + $null = New-Item -Path $TargetPathSub -ItemType Directory -ErrorAction Stop + Write-Verbose -Message 'Created module folder: "{0}"' -f $TargetPathSub + } + } + else { + $WebClient.DownloadFile( + ('https://raw.githubusercontent.com/{0}/{1}/{2}/{3}' -f $GitUri, $GitBranch, $Link.name, $SubLink.path), + $TargetPathSub + ) + } + } + } + } + } + else { + Get-ChildItem -Path $PSScriptRoot -Exclude $ExcludeFiles | Where-Object { LikeAny $_.Name $IncludeFiles } | ForEach-Object { + if ($_.Attributes -ne 'Directory') { + Copy-Item -Path $_ -Destination $TargetPath + Write-Verbose -Message ('Installed module file "{0}"' -f $_) + } + else { + Copy-Item -Path $_ -Destination $TargetPath -Recurse -Force + Write-Verbose -Message ('Installed module folder "{0}"' -f $_) + } + } + } + + # Import Module + Write-Verbose -Message "$ModuleName module installation successful to $TargetPath" + Import-Module -Name $ModuleName -Force + Write-Verbose -Message "Module installed" +} +Catch { + throw ('Failed installing module "{0}". Error: "{1}" in Line {2}' -f $ModuleName, $_, $_.InvocationInfo.ScriptLineNumber) +} +finally { + #if ($FromGitHub) { + # [Net.ServicePointManager]::SecurityProtocol = $SecurityProtocol + #} + Write-Verbose -Message 'Module installation end' } \ No newline at end of file diff --git a/InstallModule.ps1 b/InstallModule.ps1 deleted file mode 100644 index 1b78852..0000000 --- a/InstallModule.ps1 +++ /dev/null @@ -1,3 +0,0 @@ -$fullPath = 'C:\Program Files\WindowsPowerShell\Modules\ImportExcel' - -Robocopy . $fullPath /mir /XD .vscode .git examples testimonials images spikes /XF appveyor.yml .gitattributes .gitignore \ No newline at end of file diff --git a/README.md b/README.md index 4261f31..a3d0b1e 100644 --- a/README.md +++ b/README.md @@ -15,11 +15,13 @@ If this project helped you reduce the time to get your job done, let me know.

-|CI System |OS|Status| -|---|---|---| -|Azure DevOps|Windows|[![Build status](https://dougfinke.visualstudio.com/ImportExcel/_apis/build/status/ImportExcel-CI)](https://dougfinke.visualstudio.com/ImportExcel/_build/latest?definitionId=10)| -|Azure DevOps|Windows, Linux, Mac|[![Build Status](https://dougfinke.visualstudio.com/ImportExcel/_apis/build/status/dfinke.ImportExcel?branchName=master)](https://dougfinke.visualstudio.com/ImportExcel/_build/latest?definitionId=20&branchName=master)| -|Appveyor|Windows|[![Build Status](https://ci.appveyor.com/api/projects/status/21hko6eqtpccrkba/branch/master?svg=true)](https://ci.appveyor.com/project/dfinke/importexcel/branch/master)| +| CI System | Environment | Status | +|--------------|-------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| AppVeyor | Windows, Core preview, Ubuntu | [![Build status](https://ci.appveyor.com/api/projects/status/7c0s1g5rgdx1bbts/branch/master?svg=true)](https://ci.appveyor.com/project/ili101/Module-Template) | +| Azure DevOps | Windows | [![Build Status](https://dev.azure.com/ili101/ImportExcel/_apis/build/status/ili101.ImportExcel?branchName=master&jobName=Windows)](https://dev.azure.com/ili101/ImportExcel/_build/latest?definitionId=1&branchName=master) | +| Azure DevOps | Windows (Core) | [![Build Status](https://dev.azure.com/ili101/ImportExcel/_apis/build/status/ili101.ImportExcel?branchName=master&jobName=WindowsPSCore)](https://dev.azure.com/ili101/ImportExcel/_build/latest?definitionId=1&branchName=master) | +| Azure DevOps | Ubuntu | [![Build Status](https://dev.azure.com/ili101/ImportExcel/_apis/build/status/ili101.ImportExcel?branchName=master&jobName=Ubuntu)](https://dev.azure.com/ili101/ImportExcel/_build/latest?definitionId=1&branchName=master) | +| Azure DevOps | macOS | [![Build Status](https://dev.azure.com/ili101/ImportExcel/_apis/build/status/ili101.ImportExcel?branchName=master&jobName=macOS)](https://dev.azure.com/ili101/ImportExcel/_build/latest?definitionId=1&branchName=master) | diff --git a/__tests__/CI.ps1 b/__tests__/CI.ps1 new file mode 100644 index 0000000..55e90a5 --- /dev/null +++ b/__tests__/CI.ps1 @@ -0,0 +1,132 @@ +<# + .SYNOPSIS + Handel Continuous Integration Testing in AppVeyor and Azure DevOps Pipelines. +#> +param +( + # AppVeyor Only - Update AppVeyor build name. + [Switch]$Initialize, + # Installs the module and invoke the Pester tests with the current version of PowerShell. + [Switch]$Test, + # AppVeyor Only - Upload results to AppVeyor "Tests" tab. + [Switch]$Finalize, + # AppVeyor and Azure - Upload module as AppVeyor Artifact. + [Switch]$Artifact +) +$ErrorActionPreference = 'Stop' +if ($Initialize) { + $Psd1 = (Get-ChildItem -File -Filter *.psd1 -Name -Path (Split-Path $PSScriptRoot)).PSPath + $ModuleVersion = (. ([Scriptblock]::Create((Get-Content -Path $Psd1 | Out-String)))).ModuleVersion + Update-AppveyorBuild -Version "$ModuleVersion ($env:APPVEYOR_BUILD_NUMBER) $env:APPVEYOR_REPO_BRANCH" +} +if ($Test) { + function Get-EnvironmentInfo { + if ($null -eq $IsWindows -or $IsWindows) { + # Get Windows Version + try { + $WinRelease, $WinVer = Get-ItemPropertyValue "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" ReleaseId, CurrentMajorVersionNumber, CurrentMinorVersionNumber, CurrentBuildNumber, UBR + $WindowsVersion = "$($WinVer -join '.') ($WinRelease)" + } + catch { + $WindowsVersion = [System.Environment]::OSVersion.Version + } + + # Get .Net Version + # https://stackoverflow.com/questions/3487265/powershell-script-to-return-versions-of-net-framework-on-a-machine + $Lookup = @{ + 378389 = [version]'4.5' + 378675 = [version]'4.5.1' + 378758 = [version]'4.5.1' + 379893 = [version]'4.5.2' + 393295 = [version]'4.6' + 393297 = [version]'4.6' + 394254 = [version]'4.6.1' + 394271 = [version]'4.6.1' + 394802 = [version]'4.6.2' + 394806 = [version]'4.6.2' + 460798 = [version]'4.7' + 460805 = [version]'4.7' + 461308 = [version]'4.7.1' + 461310 = [version]'4.7.1' + 461808 = [version]'4.7.2' + 461814 = [version]'4.7.2' + 528040 = [version]'4.8' + 528049 = [version]'4.8' + } + + # For One True framework (latest .NET 4x), change the Where-Object match + # to PSChildName -eq "Full": + $DotNetVersion = Get-ChildItem 'HKLM:\SOFTWARE\Microsoft\NET Framework Setup\NDP' -Recurse | + Get-ItemProperty -name Version, Release -EA 0 | + Where-Object { $_.PSChildName -eq "Full" } | + Select-Object @{name = ".NET Framework"; expression = { $_.PSChildName } }, + @{name = "Product"; expression = { $Lookup[$_.Release] } }, + Version, Release + + # Output + [PSCustomObject]($PSVersionTable + @{ + ComputerName = $env:Computername + WindowsVersion = $WindowsVersion + '.Net Version' = '{0} (Version: {1}, Release: {2})' -f $DotNetVersion.Product, $DotNetVersion.Version, $DotNetVersion.Release + #EnvironmentPath = $env:Path + }) + } + else { + # Output + [PSCustomObject]($PSVersionTable + @{ + ComputerName = $env:Computername + #EnvironmentPath = $env:Path + }) + } + } + + '[Info] Testing On:' + Get-EnvironmentInfo + '[Progress] Installing Module.' + . .\Install.ps1 + '[Progress] Invoking Pester.' + Invoke-Pester -OutputFile ('TestResultsPS{0}.xml' -f $PSVersionTable.PSVersion) +} +if ($Finalize) { + '[Progress] Finalizing.' + $Failure = $false + $AppVeyorResultsUri = 'https://ci.appveyor.com/api/testresults/nunit/{0}' -f $env:APPVEYOR_JOB_ID + foreach ($TestResultsFile in Get-ChildItem -Path 'TestResultsPS*.xml') { + $TestResultsFilePath = $TestResultsFile.FullName + "[Info] Uploading Files: $AppVeyorResultsUri, $TestResultsFilePath." + # Add PowerShell version to test results + $PSVersion = $TestResultsFile.Name.Replace('TestResults', '').Replace('.xml', '') + [Xml]$Xml = Get-Content -Path $TestResultsFilePath + Select-Xml -Xml $Xml -XPath '//test-case' | ForEach-Object { $_.Node.name = "$PSVersion " + $_.Node.name } + $Xml.OuterXml | Out-File -FilePath $TestResultsFilePath + + #Invoke-RestMethod -Method Post -Uri $AppVeyorResultsUri -Body $Xml + [Net.WebClient]::new().UploadFile($AppVeyorResultsUri, $TestResultsFilePath) + + if ($Xml.'test-results'.failures -ne '0') { + $Failure = $true + } + } + if ($Failure) { + throw 'Tests failed.' + } +} +if ($Artifact) { + # Get Module Info + $ModuleName = [System.IO.Path]::GetFileNameWithoutExtension((Get-ChildItem -File -Filter *.psm1 -Name -Path (Split-Path $PSScriptRoot))) + $ModulePath = (Get-Module -Name $ModuleName -ListAvailable).ModuleBase | Split-Path + $VersionLocal = ((Get-Module -Name $ModuleName -ListAvailable).Version | Measure-Object -Maximum).Maximum + "[Progress] Artifact Start for Module: $ModuleName, Version: $VersionLocal." + if ($env:APPVEYOR) { + $ZipFileName = "{0} {1} {2} {3:yyyy-MM-dd HH-mm-ss}.zip" -f $ModuleName, $VersionLocal, $env:APPVEYOR_REPO_BRANCH, (Get-Date) + $ZipFileFullPath = Join-Path -Path $PSScriptRoot -ChildPath $ZipFileName + "[Info] Artifact. $ModuleName, ZipFileName: $ZipFileName." + #Compress-Archive -Path $ModulePath -DestinationPath $ZipFileFullPath + [System.IO.Compression.ZipFile]::CreateFromDirectory($ModulePath, $ZipFileFullPath, [System.IO.Compression.CompressionLevel]::Optimal, $true) + Push-AppveyorArtifact $ZipFileFullPath -DeploymentName $ModuleName + } + elseif ($env:AGENT_NAME) { + #Write-Host "##vso[task.setvariable variable=ModuleName]$ModuleName" + Copy-Item -Path $ModulePath -Destination $env:Build_ArtifactStagingDirectory -Recurse + } +} \ No newline at end of file diff --git a/__tests__/Compare-WorkSheet.tests.ps1 b/__tests__/Compare-WorkSheet.tests.ps1 index e3c300e..a8114e4 100644 --- a/__tests__/Compare-WorkSheet.tests.ps1 +++ b/__tests__/Compare-WorkSheet.tests.ps1 @@ -1,7 +1,5 @@ #Requires -Modules Pester -if ($PSVersionTable.os -and $PSVersionTable.os -notMatch 'Windows' ) {return} #Currently this test outputs windows services so only run on Windows. -if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() } -Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force +#Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force if ($PSVersionTable.PSVersion.Major -gt 5) { Write-Warning "Can't test grid view on V6 and later" } else {Add-Type -AssemblyName System.Windows.Forms } Describe "Compare Worksheet" { diff --git a/__tests__/ConvertFromExcelToSQLInsert.tests.ps1 b/__tests__/ConvertFromExcelToSQLInsert.tests.ps1 index bda8890..b5b13f9 100644 --- a/__tests__/ConvertFromExcelToSQLInsert.tests.ps1 +++ b/__tests__/ConvertFromExcelToSQLInsert.tests.ps1 @@ -1,5 +1,5 @@ -Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force -if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() -replace "/$","" } +#Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force + $xlFile = "$env:TEMP\testSQL.xlsx" Describe "ConvertFrom-ExcelToSQLInsert" { diff --git a/__tests__/FunctionAlias.tests.ps1 b/__tests__/FunctionAlias.tests.ps1 index 02bd6e4..86fbe10 100644 --- a/__tests__/FunctionAlias.tests.ps1 +++ b/__tests__/FunctionAlias.tests.ps1 @@ -1,6 +1,6 @@ #Requires -Modules Pester -remove-module importExcel -erroraction silentlyContinue -Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force +#remove-module importExcel -erroraction silentlyContinue +#Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force Describe "Check if Function aliases exist" { diff --git a/__tests__/ImportExcelTests/Simple.tests.ps1 b/__tests__/ImportExcelTests/Simple.tests.ps1 index 7248b07..46f8d07 100644 --- a/__tests__/ImportExcelTests/Simple.tests.ps1 +++ b/__tests__/ImportExcelTests/Simple.tests.ps1 @@ -1,4 +1,4 @@ -Import-Module $PSScriptRoot\..\..\ImportExcel.psd1 +#Import-Module $PSScriptRoot\..\..\ImportExcel.psd1 Describe "Tests" { BeforeAll { diff --git a/__tests__/InstallPowerShell.ps1 b/__tests__/InstallPowerShell.ps1 new file mode 100644 index 0000000..b4f3cc7 --- /dev/null +++ b/__tests__/InstallPowerShell.ps1 @@ -0,0 +1,26 @@ +<# + .SYNOPSIS + Installs PowerShell Core on Windows. +#> +[CmdLetBinding()] +Param +( + # Version to install in the format from the .msi, for example "7.0.0-preview.1" + [Parameter(Mandatory)] + [String]$Version +) +$ErrorActionPreference = 'Stop' + +'[Progress] Downloading PowerShell Core.' +$MsiPath = Join-Path $env:TEMP "PowerShell-$Version-win-x64.msi" +[System.Net.WebClient]::new().DownloadFile("https://github.com/PowerShell/PowerShell/releases/download/v$Version/PowerShell-$Version-win-x64.msi", $MsiPath) + +'[Progress] Installing PowerShell Core.' +Start-Process 'msiexec.exe' -Wait -ArgumentList "/i $MsiPath /quiet" +Remove-Item -Path $MsiPath +$PowerShellFolder = $Version[0] +if ($Version -like "*preview*") { + $PowerShellFolder += '-preview' +} +$env:Path = "$env:ProgramFiles\PowerShell\$PowerShellFolder;$env:Path" +'[Progress] PowerShell Core Installed.' \ No newline at end of file diff --git a/__tests__/Publish.ps1 b/__tests__/Publish.ps1 new file mode 100644 index 0000000..625d5bf --- /dev/null +++ b/__tests__/Publish.ps1 @@ -0,0 +1,105 @@ +<# + .SYNOPSIS + Deploy module to PowerShellGallery. +#> +[CmdletBinding(DefaultParameterSetName = 'ModuleName')] +Param +( + # The name of the installed module to be deployed, if not provided the name of the .psm1 file in the parent folder is used. + [Parameter(ParameterSetName = 'ModuleName')] + [ValidateNotNullOrEmpty()] + [String]$ModuleName, + + # Publish module from path (module folder), if not provided -ModuleName is used. + [Parameter(Mandatory, ParameterSetName = 'Path')] + [ValidateNotNullOrEmpty()] + [String]$Path, + + # Key for PowerShellGallery deployment, if not provided $env:NugetApiKey is used. + [ValidateNotNullOrEmpty()] + [String]$NugetApiKey, + + # Skip Version verification for PowerShellGallery deployment, can be used for first release. + [Switch]$Force +) +$ErrorActionPreference = 'Stop' + +if ($Path) { + $Path = Resolve-Path -Path $Path + if ($Path.Count -ne 1) { + throw ('Invalid Path, $Path.Count: {0}.' -f $Path.Count) + } + $Psd1Path = (Get-ChildItem -File -Filter *.psd1 -Path $Path -Recurse)[0].FullName + $ModuleName = [System.IO.Path]::GetFileNameWithoutExtension($Psd1Path) + $VersionLocal = (. ([Scriptblock]::Create((Get-Content -Path $Psd1Path | Out-String)))).ModuleVersion +} +else { + # Get Script Root + if ($PSScriptRoot) { + $ScriptRoot = $PSScriptRoot + } + elseif ($psISE.CurrentFile.IsUntitled -eq $false) { + $ScriptRoot = Split-Path -Path $psISE.CurrentFile.FullPath + } + elseif ($null -ne $psEditor.GetEditorContext().CurrentFile.Path -and $psEditor.GetEditorContext().CurrentFile.Path -notlike 'untitled:*') { + $ScriptRoot = Split-Path -Path $psEditor.GetEditorContext().CurrentFile.Path + } + else { + $ScriptRoot = '.' + } + + # Get Module Info + if (!$ModuleName) { + $ModuleName = [System.IO.Path]::GetFileNameWithoutExtension((Get-ChildItem -File -Filter *.psm1 -Name -Path (Split-Path $ScriptRoot))) + } + $VersionLocal = ((Get-Module -Name $ModuleName -ListAvailable).Version | Measure-Object -Maximum).Maximum +} + +"[Progress] Deploy Script Start for Module: $ModuleName, Version: $VersionLocal." + +# Deploy to PowerShell Gallery if run locally OR from AppVeyor & GitHub master +if (!$env:APPVEYOR -or $env:APPVEYOR_REPO_BRANCH -eq 'master') { + if ($env:APPVEYOR) { + $Success = $true + $AppVeyorProject = Invoke-RestMethod -Uri "https://ci.appveyor.com/api/projects/$env:APPVEYOR_ACCOUNT_NAME/$env:APPVEYOR_PROJECT_SLUG" + $AppVeyorProject.build.jobs | ForEach-Object { + '[Info] AppVeyor job name: "{0}", Id: {1}, Status: {2}.' -f $_.name, $_.jobId, $_.status + if ($_.jobId -ne $env:APPVEYOR_JOB_ID -and $_.status -ne "success") { + $Success = $false + } + } + if (!$Success) { + '[Info] There are filed jobs skipping PowerShell Gallery deploy.' + break + } + } + try { + $VersionGallery = (Find-Module -Name $ModuleName -ErrorAction Stop).Version + } + catch { + if ($_.Exception.Message -notlike 'No match was found for the specified search criteria*' -or !$Force) { + throw $_ + } + } + + "[Info] PowerShellGallery. $ModuleName, VersionGallery: $VersionGallery, VersionLocal: $VersionLocal." + if ($VersionGallery -lt $VersionLocal -or $Force) { + if (!$NugetApiKey) { + $NugetApiKey = $env:NugetApiKey + } + "[Info] PowerShellGallery. Deploying $ModuleName version $VersionLocal." + if ($Path) { + Publish-Module -NuGetApiKey $NugetApiKey -Path $Path + } + else { + Publish-Module -NuGetApiKey $NugetApiKey -Name $ModuleName -RequiredVersion $VersionLocal + } + } + else { + '[Info] PowerShellGallery Deploy Skipped (Version Check).' + } +} +else { + '[Info] PowerShellGallery Deploy Skipped.' +} +'[Progress] Deploy Ended.' \ No newline at end of file diff --git a/__tests__/Remove-WorkSheet.tests.ps1 b/__tests__/Remove-WorkSheet.tests.ps1 index 9458619..a720487 100644 --- a/__tests__/Remove-WorkSheet.tests.ps1 +++ b/__tests__/Remove-WorkSheet.tests.ps1 @@ -1,6 +1,5 @@ #Requires -Modules Pester -Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force -if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() -replace "/$","" } +#Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force Describe "Remove Worksheet" { Context "Remove a worksheet output" { diff --git a/appveyor.yml b/appveyor.yml index b92d3b3..7c24f2b 100644 --- a/appveyor.yml +++ b/appveyor.yml @@ -1,17 +1,67 @@ -image: - - Visual Studio 2015 - # - Ubuntu +# Version format +version: '({build})' +# Build worker image (VM templates) +image: + - Ubuntu1804 + - 'Visual Studio 2019' + +# Fix CRLF on Windows +init: + - cmd: 'git config --global --unset core.autocrlf' + +# To disable automatic builds build: off -test_script: - - ps: .\DoTests.ps1 - - pwsh: .\DoTests.ps1 -DontCreateZip - +# Skipping commits with particular message or from specific user skip_commits: + message: '/\[skip av\]/' files: - - README.md + - '*.md' -artifacts: - - path: ImportExcel*.zip - name: ImportExcel +# Including commits with particular message or from specific user +#only_commits: +# message: '/\[build\]/' # Start a new build if message contains 'build' + +# Scripts that run after cloning repository +install: + - ps: 'Install-Module -Name Pester -Force -SkipPublisherCheck' + - ps: 'Install-Module -Name Assert -Force' + # PowerShell Core + - ps: '& .\__tests__\InstallPowerShell.ps1 -Version "7.0.0-preview.3"' # Install other PowerShell Core version (Optional) + - pwsh: 'Install-Module -Name Pester -Force' + - pwsh: 'Install-Module -Name Assert -Force' + +# To run your custom scripts instead of automatic tests +test_script: + - ps: '& .\__tests__\CI.ps1 -Test' + - pwsh: '& .\__tests__\CI.ps1 -Test' + - ps: '& .\__tests__\CI.ps1 -Finalize' # Collect and upload results + +# Deploy +deploy_script: + - ps: '& .\__tests__\CI.ps1 -Artifact' + - ps: '$null = Install-PackageProvider -Name NuGet -Force ; & .\__tests__\Publish.ps1' + +# Linux setup +for: + - + matrix: + only: + - image: Ubuntu1804 + # Install other PowerShell Core version (Optional) + init: + - sh: 'sudo apt-get -qq update && sudo apt-get -qq install powershell-preview && sudo rm /usr/bin/pwsh && sudo ln -s /opt/microsoft/powershell/7-preview/pwsh /usr/bin/pwsh' + - sh: 'export LANG=en_US.UTF-8' # Fix for PowerShell 7.0.0-preview.2, Remove if using other version. + # Scripts that run after cloning repository + install: + - pwsh: '& .\__tests__\CI.ps1 -Initialize' # Set AppVeyor build version + - pwsh: 'Install-Module -Name Pester -Force' + - pwsh: 'Install-Module -Name Assert -Force' + # To run your custom scripts instead of automatic tests + test_script: + - pwsh: '& .\__tests__\CI.ps1 -Test' + - pwsh: '& .\__tests__\CI.ps1 -Finalize' # Collect and upload results + # Skip Deploy + deploy_script: + - pwsh: '"Deploy skiped on Linux."' \ No newline at end of file diff --git a/azure-pipelines.yml b/azure-pipelines.yml index a53b71d..c8ff6c8 100644 --- a/azure-pipelines.yml +++ b/azure-pipelines.yml @@ -1,44 +1,91 @@ -jobs: - - job: Build_PS_Win2016 - pool: - vmImage: vs2017-win2016 - steps: - - powershell: | - .\DoTests.ps1 - displayName: 'Run Tests on Windows' - - - job: Build_PSCore_Ubuntu1604 - - pool: - vmImage: ubuntu-16.04 - - steps: - - script: | - curl https://packages.microsoft.com/keys/microsoft.asc | sudo apt-key add - - curl https://packages.microsoft.com/config/ubuntu/16.04/prod.list | sudo tee /etc/apt/sources.list.d/microsoft.list - sudo apt-get update - sudo apt-get install -y powershell - displayName: 'Install PowerShell Core' - - - script: | - pwsh -c '.\DoTests.ps1' - displayName: 'Run Tests on Linux' - - - job: Build_PSCore_MacOS1013 - pool: - vmImage: xcode9-macos10.13 - steps: - - script: | - brew update - brew tap caskroom/cask - brew cask install powershell - displayName: 'Install PowerShell Core' - - - script: | - pwsh -c '.\DoTests.ps1' - displayName: 'Run Tests on macOS' +# Starter pipeline +# Start with a minimal pipeline that you can customize to build and deploy your code. +# Add steps that build, run tests, deploy, and more: +# https://aka.ms/yaml trigger: + branches: + include: + - '*' + # - master + # - releases/* paths: exclude: - README.md + - CHANGELOG.md + +jobs: + - job: Windows + pool: + vmImage: 'windows-latest' + + steps: + - powershell: 'Install-Module -Name Pester -Force -SkipPublisherCheck' + displayName: 'Update Pester' + - powershell: './__tests__/CI.ps1 -Test' + displayName: 'Install and Test' + + - task: PublishTestResults@2 + inputs: + testResultsFormat: 'NUnit' + testResultsFiles: '**/TestResults*.xml' + failTaskOnFailedTests: true + + - powershell: './__tests__/CI.ps1 -Artifact' + displayName: 'Prepare Artifact' + - task: PublishPipelineArtifact@1 + inputs: + targetPath: '$(Build.ArtifactStagingDirectory)' + artifact: 'Modules' + - task: PublishPipelineArtifact@1 + inputs: + targetPath: '$(Build.SourcesDirectory)' + artifact: 'Source' + + - job: WindowsPSCore + pool: + vmImage: 'windows-latest' + + steps: + - pwsh: 'Install-Module -Name Pester -Force' + displayName: 'Update Pester' + - pwsh: './__tests__/CI.ps1 -Test' + displayName: 'Install and Test' + + - task: PublishTestResults@2 + inputs: + testResultsFormat: 'NUnit' + testResultsFiles: '**/TestResults*.xml' + failTaskOnFailedTests: true + + - job: Ubuntu + pool: + vmImage: 'ubuntu-latest' + + steps: + - powershell: 'Install-Module -Name Pester -Force' + displayName: 'Update Pester' + - powershell: './__tests__/CI.ps1 -Test' + displayName: 'Install and Test' + + - task: PublishTestResults@2 + inputs: + testResultsFormat: 'NUnit' + testResultsFiles: '**/TestResults*.xml' + failTaskOnFailedTests: true + + - job: macOS + pool: + vmImage: 'macOS-latest' + + steps: + - powershell: 'Install-Module -Name Pester -Force' + displayName: 'Update Pester' + - powershell: './__tests__/CI.ps1 -Test' + displayName: 'Install and Test' + + - task: PublishTestResults@2 + inputs: + testResultsFormat: 'NUnit' + testResultsFiles: '**/TestResults*.xml' + failTaskOnFailedTests: true \ No newline at end of file From 6650ecd5b8e3a15fa877b480837f47d62227ec39 Mon Sep 17 00:00:00 2001 From: ili101 Date: Mon, 26 Aug 2019 15:45:28 +0300 Subject: [PATCH 02/14] FileList Case --- ImportExcel.psm1 | 9 +- Install.ps1 | 43 +++- Merge-Worksheet.ps1 | 538 ++++++++++++++++++++++++++++++++++++++++ Plot.ps1 | 218 ++++++++++++++++ PublishToGallery.ps1 | 7 - Send-SQLDataToExcel.ps1 | 175 +++++++++++++ filelist.txt | 7 +- 7 files changed, 982 insertions(+), 15 deletions(-) create mode 100644 Merge-Worksheet.ps1 create mode 100644 Plot.ps1 delete mode 100644 PublishToGallery.ps1 create mode 100644 Send-SQLDataToExcel.ps1 diff --git a/ImportExcel.psm1 b/ImportExcel.psm1 index 7baf5b0..b8c428e 100644 --- a/ImportExcel.psm1 +++ b/ImportExcel.psm1 @@ -4,8 +4,8 @@ Add-Type -Path "$($PSScriptRoot)\EPPlus.dll" . $PSScriptRoot\AddDataValidation.ps1 . $PSScriptRoot\Charting.ps1 . $PSScriptRoot\ColorCompletion.ps1 -. $PSScriptRoot\ConvertExcelToImageFile.ps1 . $PSScriptRoot\Compare-WorkSheet.ps1 +. $PSScriptRoot\ConvertExcelToImageFile.ps1 . $PSScriptRoot\ConvertFromExcelData.ps1 . $PSScriptRoot\ConvertFromExcelToSQLInsert.ps1 . $PSScriptRoot\ConvertToExcelXlsx.ps1 @@ -23,7 +23,7 @@ Add-Type -Path "$($PSScriptRoot)\EPPlus.dll" . $PSScriptRoot\InferData.ps1 . $PSScriptRoot\Invoke-Sum.ps1 . $PSScriptRoot\Join-Worksheet.ps1 -. $PSScriptRoot\Merge-worksheet.ps1 +. $PSScriptRoot\Merge-Worksheet.ps1 . $PSScriptRoot\New-ConditionalFormattingIconSet.ps1 . $PSScriptRoot\New-ConditionalText.ps1 . $PSScriptRoot\New-ExcelChart.ps1 @@ -31,8 +31,9 @@ Add-Type -Path "$($PSScriptRoot)\EPPlus.dll" . $PSScriptRoot\Open-ExcelPackage.ps1 . $PSScriptRoot\Pivot.ps1 . $PSScriptRoot\PivotTable.ps1 +#. $PSScriptRoot\Plot.ps1 . $PSScriptRoot\RemoveWorksheet.ps1 -. $PSScriptRoot\Send-SqlDataToExcel.ps1 +. $PSScriptRoot\Send-SQLDataToExcel.ps1 . $PSScriptRoot\Set-CellStyle.ps1 . $PSScriptRoot\Set-Column.ps1 . $PSScriptRoot\Set-Row.ps1 @@ -45,7 +46,7 @@ Add-Type -Path "$($PSScriptRoot)\EPPlus.dll" New-Alias -Name Use-ExcelData -Value "ConvertFrom-ExcelData" -Force if ($PSVersionTable.PSVersion.Major -ge 5) { - . $PSScriptRoot\plot.ps1 + . $PSScriptRoot\Plot.ps1 Function New-Plot { [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseShouldProcessForStateChangingFunctions', '', Justification = 'New-Plot does not change system state')] diff --git a/Install.ps1 b/Install.ps1 index 1c96619..ae5e08a 100644 --- a/Install.ps1 +++ b/Install.ps1 @@ -25,8 +25,47 @@ $IncludeFiles = @( '*.dll', '*.psd1', '*.psm1', - '*.ps1', - 'BinFolder*' + 'AddConditionalFormatting.ps1', + 'AddDataValidation.ps1', + 'Charting.ps1', + 'ColorCompletion.ps1', + 'Compare-WorkSheet.ps1', + 'ConvertExcelToImageFile.ps1', + 'ConvertFromExcelData.ps1', + 'ConvertFromExcelToSQLInsert.ps1', + 'ConvertToExcelXlsx.ps1', + 'Copy-ExcelWorkSheet.ps1', + 'Export-Excel.ps1', + 'Export-ExcelSheet.ps1', + 'Export-StocksToExcel.ps1', + 'Get-ExcelColumnName.ps1', + 'Get-ExcelSheetInfo.ps1', + 'Get-ExcelWorkbookInfo.ps1', + 'Get-HtmlTable.ps1', + 'Get-Range.ps1', + 'Get-XYRange.ps1', + 'Import-Html.ps1', + 'InferData.ps1', + 'Invoke-Sum.ps1', + 'Join-Worksheet.ps1', + 'Merge-Worksheet.ps1', + 'New-ConditionalFormattingIconSet.ps1', + 'New-ConditionalText.ps1', + 'New-ExcelChart.ps1', + 'New-PSItem.ps1', + 'Open-ExcelPackage.ps1', + 'Pivot.ps1', + 'PivotTable.ps1', + 'Plot.ps1', + 'RemoveWorksheet.ps1', + 'Send-SQLDataToExcel.ps1', + 'Set-CellStyle.ps1', + 'Set-Column.ps1', + 'Set-Row.ps1', + 'Set-WorkSheetProtection.ps1', + 'SetFormat.ps1', + 'TrackingUtils.ps1', + 'Update-FirstObjectProperties.ps1' ) $ExcludeFiles = @( 'Install.ps1' diff --git a/Merge-Worksheet.ps1 b/Merge-Worksheet.ps1 new file mode 100644 index 0000000..01ae37e --- /dev/null +++ b/Merge-Worksheet.ps1 @@ -0,0 +1,538 @@ +Function Merge-Worksheet { + <# + .Synopsis + Merges two Worksheets (or other objects) into a single Worksheet with differences marked up. + .Description + The Compare-Worksheet command takes two Worksheets and marks differences in the source document, and optionally outputs a grid showing the changes. + By contrast the Merge-Worksheet command takes the Worksheets and combines them into a single sheet showing the old and new data side by side. + Although it is designed to work with Excel data it can work with arrays of any kind of object; so it can be a merge *of* Worksheets, or a merge *to* a Worksheet. + .Example + Merge-Worksheet "Server54.xlsx" "Server55.xlsx" -WorksheetName services -OutputFile Services.xlsx -OutputSheetName 54-55 -show + The workbooks contain audit information for two servers, one sheet contains + a list of services. This command creates a worksheet named "54-55" in a + workbook named "services.xlsx" which shows all the services and their + differences, and opens the new workbook in Excel. + .Example + Merge-Worksheet "Server54.xlsx" "Server55.xlsx" -WorksheetName services -OutputFile Services.xlsx -OutputSheetName 54-55 -HideEqual -AddBackgroundColor LightBlue -show + This modifies the previous command to hide the equal rows in the output + sheet and changes the color used to mark rows added to the second file. + .Example + Merge-Worksheet -OutputFile .\j1.xlsx -OutputSheetName test11 -ReferenceObject (dir .\ImportExcel\4.0.7) -DifferenceObject (dir .\ImportExcel\4.0.8) -Property Length -Show + This version compares two directories, and marks what has changed. + Because no "Key" property is given, "Name" is assumed to be the key + and the only other property examined is length. Files which are added + or deleted or have changed size will be highlighed in the output sheet. + Changes to dates or other attributes will be ignored. + .Example + Merge-Worksheet -RefO (dir .\ImportExcel\4.0.7) -DiffO (dir .\ImportExcel\4.0.8) -Pr Length | Out-GridView + This time no file is written and the results - which include all properties, + not just length, are output and sent to Out-Gridview. This version uses + aliases to shorten the parameters, (OutputFileName can be "outFile" and + the Sheet can be"OutSheet"; DifferenceObject & ReferenceObject can be + DiffObject & RefObject respectively). + #> + [cmdletbinding(SupportsShouldProcess=$true)] + Param( + #First Excel file to compare. You can compare two Excel files or two other objects or a reference obhct against a difference file, but not a reference file against an object. + [parameter(ParameterSetName='A',Mandatory=$true,Position=0)] #A = Compare two files default headers + [parameter(ParameterSetName='B',Mandatory=$true,Position=0)] #B = Compare two files user supplied headers + [parameter(ParameterSetName='C',Mandatory=$true,Position=0)] #C = Compare two files headers P1, P2, P3 etc + $Referencefile , + + #Second Excel file to compare. + [parameter(ParameterSetName='A',Mandatory=$true,Position=1)] + [parameter(ParameterSetName='B',Mandatory=$true,Position=1)] + [parameter(ParameterSetName='C',Mandatory=$true,Position=1)] + [parameter(ParameterSetName='E',Mandatory=$true,Position=1)] #D Compare two objects; E = Compare one object one file that uses default headers + [parameter(ParameterSetName='F',Mandatory=$true,Position=1)] #F = Compare one object one file that uses user supplied headers + [parameter(ParameterSetName='G',Mandatory=$true,Position=1)] #G Compare one object one file that uses headers P1, P2, P3 etc + $Differencefile , + + #Name(s) of Worksheets to compare. + [parameter(ParameterSetName='A',Position=2)] #Applies to all sets EXCEPT D which is two objects (no sheets) + [parameter(ParameterSetName='B',Position=2)] + [parameter(ParameterSetName='C',Position=2)] + [parameter(ParameterSetName='E',Position=2)] + [parameter(ParameterSetName='F',Position=2)] + [parameter(ParameterSetName='G',Position=2)] + $WorksheetName = "Sheet1", + + #The row from where we start to import data, all rows above the StartRow are disregarded. By default this is the first row. + [parameter(ParameterSetName='A')] #Applies to all sets EXCEPT D which is two objects (no sheets, so no start row ) + [parameter(ParameterSetName='B')] + [parameter(ParameterSetName='C')] + [parameter(ParameterSetName='E')] + [parameter(ParameterSetName='F')] + [parameter(ParameterSetName='G')] + [int]$Startrow = 1, + + #Specifies custom property names to use, instead of the values defined in the column headers of the Start ROw. + [Parameter(ParameterSetName='B',Mandatory=$true)] #Compare object + sheet or 2 sheets with user supplied headers + [Parameter(ParameterSetName='F',Mandatory=$true)] + [String[]]$Headername, + + #Automatically generate property names (P1, P2, P3, ..) instead of using the values the top row of the sheet. + [Parameter(ParameterSetName='C',Mandatory=$true)] #Compare object + sheet or 2 sheets with headers of P1, P2, P3 ... + [Parameter(ParameterSetName='G',Mandatory=$true)] + [switch]$NoHeader, + + #Reference object to compare if a Worksheet is NOT being used. Reference object can combine with a difference sheet or difference object + [parameter(ParameterSetName='D',Mandatory=$true)] + [parameter(ParameterSetName='E',Mandatory=$true)] + [parameter(ParameterSetName='F',Mandatory=$true)] + [parameter(ParameterSetName='G',Mandatory=$true)] + [Alias('RefObject')] + $ReferenceObject , + #Difference object to compare if a Worksheet is NOT being used for either half. Can't have a reference sheet and difference object. + [parameter(ParameterSetName='D',Mandatory=$true,Position=1)] + [Alias('DiffObject')] + $DifferenceObject , + [parameter(ParameterSetName='D',Position=2)] + [parameter(ParameterSetName='E',Position=2)] + [parameter(ParameterSetName='F',Position=2)] + [parameter(ParameterSetName='G',Position=2)] + #If there isn't a filename to use to label data from the "Difference" side, DiffPrefix is used, it defaults to "=>" + $DiffPrefix = "=>" , + #File to hold merged data. + [parameter(Position=3)] + [Alias('OutFile')] + $OutputFile , + #Name of Worksheet to output - if none specified will use the reference Worksheet name. + [parameter(Position=4)] + [Alias('OutSheet')] + $OutputSheetName = "Sheet1", + #Properties to include in the DIFF - supports wildcards, default is "*". + $Property = "*" , + #Properties to exclude from the the search - supports wildcards. + $ExcludeProperty , + #Name of a column which is unique used to pair up rows from the refence and difference side, default is "Name". + $Key = "Name" , + #Sets the font color for the "key" field; this means you can filter by color to get only changed rows. + $KeyFontColor = [System.Drawing.Color]::DarkRed , + #Sets the background color for changed rows. + $ChangeBackgroundColor = [System.Drawing.Color]::Orange, + #Sets the background color for rows in the reference but deleted from the difference sheet. + $DeleteBackgroundColor = [System.Drawing.Color]::LightPink, + #Sets the background color for rows not in the reference but added to the difference sheet. + $AddBackgroundColor = [System.Drawing.Color]::PaleGreen, + #if specified, hides the rows in the spreadsheet that are equal and only shows changes, added or deleted rows. + [switch]$HideEqual , + #If specified, outputs the data to the pipeline (you can add -WhatIf so the command only outputs to the pipeline). + [switch]$Passthru , + #If specified, opens the output workbook. + [Switch]$Show + ) + + #region Read Excel data + if ($Differencefile -is [System.IO.FileInfo]) {$Differencefile = $Differencefile.FullName} + if ($Referencefile -is [System.IO.FileInfo]) {$Referencefile = $Referencefile.FullName} + if ($Referencefile -and $Differencefile) { + #if the filenames don't resolve, give up now. + try { $oneFile = ((Resolve-Path -Path $Referencefile -ErrorAction Stop).path -eq (Resolve-Path -Path $Differencefile -ErrorAction Stop).path)} + Catch { Write-Warning -Message "Could not Resolve the filenames." ; return } + + #If we have one file , we must have two different Worksheet names. If we have two files $WorksheetName can be a single string or two strings. + if ($onefile -and ( ($WorksheetName.count -ne 2) -or $WorksheetName[0] -eq $WorksheetName[1] ) ) { + Write-Warning -Message "If both the Reference and difference file are the same then Worksheet name must provide 2 different names" + return + } + if ($WorksheetName.count -eq 2) {$Worksheet2 = $DiffPrefix = $WorksheetName[1] ; $Worksheet1 = $WorksheetName[0] ; } + elseif ($WorksheetName -is [string]) {$Worksheet2 = $Worksheet1 = $WorksheetName ; + $DiffPrefix = (Split-Path -Path $Differencefile -Leaf) -replace "\.xlsx$","" } + else {Write-Warning -Message "You must provide either a single Worksheet name or two names." ; return } + + $params= @{ ErrorAction = [System.Management.Automation.ActionPreference]::Stop } + foreach ($p in @("HeaderName","NoHeader","StartRow")) {if ($PSBoundParameters[$p]) {$params[$p] = $PSBoundParameters[$p]}} + try { + $ReferenceObject = Import-Excel -Path $Referencefile -WorksheetName $Worksheet1 @params + $DifferenceObject = Import-Excel -Path $Differencefile -WorksheetName $Worksheet2 @Params + } + Catch {Write-Warning -Message "Could not read the Worksheet from $Referencefile::$Worksheet1 and/or $Differencefile::$Worksheet2." ; return } + if ($NoHeader) {$firstDataRow = $Startrow } else {$firstDataRow = $Startrow + 1} + } + elseif ( $Differencefile) { + if ($WorksheetName -isnot [string]) {Write-Warning -Message "You must provide a single Worksheet name." ; return } + $params = @{WorksheetName=$WorksheetName; Path=$Differencefile; ErrorAction=[System.Management.Automation.ActionPreference]::Stop } + foreach ($p in @("HeaderName","NoHeader","StartRow")) {if ($PSBoundParameters[$p]) {$params[$p] = $PSBoundParameters[$p]}} + try {$DifferenceObject = Import-Excel @Params } + Catch {Write-Warning -Message "Could not read the Worksheet '$WorksheetName' from $Differencefile::$WorksheetName." ; return } + if ($DiffPrefix -eq "=>" ) { + $DiffPrefix = (Split-Path -Path $Differencefile -Leaf) -replace "\.xlsx$","" + } + if ($NoHeader) {$firstDataRow = $Startrow } else {$firstDataRow = $Startrow + 1} + } + else { $firstDataRow = 1 } + #endregion + + #region Set lists of properties and row numbers + #Make a list of properties/headings using the Property (default "*") and ExcludeProperty parameters + $propList = @() + $DifferenceObject = $DifferenceObject | Update-FirstObjectProperties + $headings = $DifferenceObject[0].psobject.Properties.Name # This preserves the sequence - using get-member would sort them alphabetically! There may be extra properties in + if ($NoHeader -and "Name" -eq $Key) {$Key = "p1"} + if ($headings -notcontains $Key -and + ('*' -ne $Key)) {Write-Warning -Message "You need to specify one of the headings in the sheet '$Worksheet1' as a key." ; return } + foreach ($p in $Property) { $propList += ($headings.where({$_ -like $p}) )} + foreach ($p in $ExcludeProperty) { $propList = $propList.where({$_ -notlike $p}) } + if (($propList -notcontains $Key) -and + ('*' -ne $Key)) { $propList += $Key} #If $key isn't one of the headings we will have bailed by now + $propList = $propList | Select-Object -Unique #so, prolist must contain at least $key if nothing else + + #If key is "*" we treat it differently , and we will create a script property which concatenates all the Properties in $Proplist + $ConCatblock = [scriptblock]::Create( ($proplist | ForEach-Object {'$this."' + $_ + '"'}) -join " + ") + + #Build the list of the properties to output, in order. + $diffpart = @() + $refpart = @() + foreach ($p in $proplist.Where({$key -ne $_}) ) {$refPart += $p ; $diffPart += "$DiffPrefix $p" } + $lastRefColNo = $proplist.count + $FirstDiffColNo = $lastRefColNo + 1 + + if ($key -ne '*') { + $outputProps = @($key) + $refpart + $diffpart + #If we are using a single column as the key, don't duplicate it, so the last difference column will be A if there is one property, C if there are two, E if there are 3 + $lastDiffColNo = (2 * $proplist.count) - 1 + } + else { + $outputProps = @( ) + $refpart + $diffpart + #If we not using a single column as a key all columns are duplicated so, the Last difference column will be B if there is one property, D if there are two, F if there are 3 + $lastDiffColNo = (2 * $proplist.count ) + } + + #Add RowNumber to every row + #If one sheet has extra rows we can get a single "==" result from compare, with the row from the reference sheet, but + #the row in the other sheet might be different so we will look up the row number from the key field - build a hash table for that here + #If we have "*" as the key ad the script property to concatenate the [selected] properties. + + $Rowhash = @{} + $rowNo = $firstDataRow + foreach ($row in $ReferenceObject) { + if ($null -eq $row._row) {Add-Member -InputObject $row -MemberType NoteProperty -Value ($rowNo ++) -Name "_Row" } + else {$rowNo++ } + if ($Key -eq '*' ) {Add-Member -InputObject $row -MemberType ScriptProperty -Value $ConCatblock -Name "_All" } + } + $rowNo = $firstDataRow + foreach ($row in $DifferenceObject) { + Add-Member -InputObject $row -MemberType NoteProperty -Value $rowNo -Name "$DiffPrefix Row" -Force + if ($Key -eq '*' ) { + Add-Member -InputObject $row -MemberType ScriptProperty -Value $ConCatblock -Name "_All" + $Rowhash[$row._All] = $rowNo + } + else {$Rowhash[$row.$key] = $rowNo } + $rowNo ++ + } + if ($DifferenceObject.count -gt $Rowhash.Keys.Count) { + Write-Warning -Message "Difference object has $($DifferenceObject.Count) rows; but only $($Rowhash.keys.count) unique keys" + } + if ($Key -eq '*') {$key = "_ALL"} + #endregion + #We need to know all the properties we've met on the objects we've diffed + $eDiffProps = [ordered]@{} + #When we do a compare object changes will result in two rows so we group them and join them together. + $expandedDiff = Compare-Object -ReferenceObject $ReferenceObject -DifferenceObject $DifferenceObject -Property $propList -PassThru -IncludeEqual | + Group-Object -Property $key | ForEach-Object { + #The value of the key column is the name of the Group. + $keyval = $_.name + #we're going to create a custom object from a hash table. + $hash = [ordered]@{} + foreach ($result in $_.Group) { + if ($result.SideIndicator -ne "=>") {$hash["_Row"] = $result._Row } + elseif (-not $hash["$DiffPrefix Row"]) {$hash["_Row"] = "" } + #if we have already set the side, this must be the second record, so set side to indicate "changed"; if we got two "Same" indicators we may have a classh of keys + if ($hash.Side) { + if ($hash.Side -eq $result.SideIndicator) {Write-Warning -Message "'$keyval' may be a duplicate."} + $hash.Side = "<>" + } + else {$hash["Side"] = $result.SideIndicator} + switch ($hash.side) { + '==' { $hash["$DiffPrefix is"] = 'Same' } + '=>' { $hash["$DiffPrefix is"] = 'Added' } + '<>' { if (-not $hash["_Row"]) { + $hash["$DiffPrefix is"] = 'Added' + } + else { + $hash["$DiffPrefix is"] = 'Changed' + } + } + '<=' { $hash["$DiffPrefix is"] = 'Removed'} + } + #find the number of the row in the the "difference" object which has this key. If it is the object is only in the reference this will be blank. + $hash["$DiffPrefix Row"] = $Rowhash[$keyval] + $hash[$key] = $keyval + #Create FieldName and/or =>FieldName columns + foreach ($p in $result.psobject.Properties.name.where({$_ -ne $key -and $_ -ne "SideIndicator" -and $_ -ne "$DiffPrefix Row" })) { + if ($result.SideIndicator -eq "==" -and $p -in $propList) + {$hash[("$p")] = $hash[("$DiffPrefix $p")] = $result.$P} + elseif ($result.SideIndicator -eq "==" -or $result.SideIndicator -eq "<=") + {$hash[("$p")] = $result.$P} + elseif ($result.SideIndicator -eq "=>") { $hash[("$DiffPrefix $p")] = $result.$P} + } + } + + foreach ($k in $hash.keys) {$eDiffProps[$k] = $true} + [Pscustomobject]$hash + } | Sort-Object -Property "_row" + + #Already sorted by reference row number, fill in any blanks in the difference-row column. + for ($i = 1; $i -lt $expandedDiff.Count; $i++) {if (-not $expandedDiff[$i]."$DiffPrefix Row") {$expandedDiff[$i]."$DiffPrefix Row" = $expandedDiff[$i-1]."$DiffPrefix Row" } } + + #Now re-Sort by difference row number, and fill in any blanks in the reference-row column. + $expandedDiff = $expandedDiff | Sort-Object -Property "$DiffPrefix Row" + for ($i = 1; $i -lt $expandedDiff.Count; $i++) {if (-not $expandedDiff[$i]."_Row") {$expandedDiff[$i]."_Row" = $expandedDiff[$i-1]."_Row" } } + + $AllProps = @("_Row") + $OutputProps + $eDiffProps.keys.where({$_ -notin ($outputProps + @("_row","side","SideIndicator","_ALL" ))}) + + if ($PassThru -or -not $OutputFile) {return ($expandedDiff | Select-Object -Property $allprops | Sort-Object -Property "_row", "$DiffPrefix Row" ) } + elseif ($PSCmdlet.ShouldProcess($OutputFile,"Write Output to Excel file")) { + $expandedDiff = $expandedDiff | Sort-Object -Property "_row", "$DiffPrefix Row" + $xl = $expandedDiff | Select-Object -Property $OutputProps | Update-FirstObjectProperties | + Export-Excel -Path $OutputFile -Worksheetname $OutputSheetName -FreezeTopRow -BoldTopRow -AutoSize -AutoFilter -PassThru + $ws = $xl.Workbook.Worksheets[$OutputSheetName] + for ($i = 0; $i -lt $expandedDiff.Count; $i++ ) { + if ( $expandedDiff[$i].side -ne "==" ) { + Set-ExcelRange -Worksheet $ws -Range ("A" + ($i + 2 )) -FontColor $KeyFontColor + } + elseif ( $HideEqual ) {$ws.row($i+2).hidden = $true } + if ( $expandedDiff[$i].side -eq "<>" ) { + $range = $ws.Dimension -replace "\d+", ($i + 2 ) + Set-ExcelRange -Worksheet $ws -Range $range -BackgroundColor $ChangeBackgroundColor + } + elseif ( $expandedDiff[$i].side -eq "<=" ) { + $rangeR1C1 = "R[{0}]C[1]:R[{0}]C[{1}]" -f ($i + 2 ) , $lastRefColNo + $range = [OfficeOpenXml.ExcelAddress]::TranslateFromR1C1($rangeR1C1,0,0) + Set-ExcelRange -Worksheet $ws -Range $range -BackgroundColor $DeleteBackgroundColor + } + elseif ( $expandedDiff[$i].side -eq "=>" ) { + if ($propList.count -gt 1) { + $rangeR1C1 = "R[{0}]C[{1}]:R[{0}]C[{2}]" -f ($i + 2 ) , $FirstDiffColNo , $lastDiffColNo + $range = [OfficeOpenXml.ExcelAddress]::TranslateFromR1C1($rangeR1C1,0,0) + Set-ExcelRange -Worksheet $ws -Range $range -BackgroundColor $AddBackgroundColor + } + Set-ExcelRange -Worksheet $ws -Range ("A" + ($i + 2 )) -BackgroundColor $AddBackgroundColor + } + } + Close-ExcelPackage -ExcelPackage $xl -Show:$Show + } +} + +Function Merge-MultipleSheets { + <# + .Synopsis + Merges Worksheets into a single Worksheet with differences marked up. + .Description + The Merge Worksheet command combines two sheets. Merge-MultipleSheets is + designed to merge more than two. So if asked to merge sheets A,B,C which + contain Services, with a Name, Displayname and Start mode, where "Name" is + treated as the key, Merge-MultipleSheets calls Merge-Worksheet to merge + "Name", "Displayname" and "Startmode" from sheets A and C; the result has + column headings "_Row", "Name", "DisplayName", "Startmode", "C-DisplayName", + "C-StartMode", "C-Is" and "C-Row". + Merge-MultipleSheets then calls Merge-Worksheet again passing it the + intermediate result and sheet B, comparing "Name", "Displayname" and + "Start mode" columns on each side, and gets a result with columns "_Row", + "Name", "DisplayName", "Startmode", "B-DisplayName", "B-StartMode", "B-Is", + "B-Row", "C-DisplayName", "C-StartMode", "C-Is" and "C-Row". Any columns on + the "reference" side which are not used in the comparison are added on the + right, which is why we compare the sheets in reverse order. + + The "Is" columns hold "Same", "Added", "Removed" or "Changed" and is used for + conditional formatting in the output sheet (these columns are hidden by default), + and when the data is written to Excel the "reference" columns, in this case + "DisplayName" and "Start" are renamed to reflect their source, so become + "A-DisplayName" and "A-Start". + + Conditional formatting is also applied to the Key column ("Name" in this + case) so the view can be filtered to rows with changes by filtering this + column on color. + + Note: the processing order can affect what is seen as a change. For example + if there is an extra item in sheet B in the example above, Sheet C will be + processed and that row and will not be seen to be missing. When sheet B is + processed it is marked as an addition, and the conditional formatting marks + the entries from sheet A to show that a values were added in at least one + sheet. However if Sheet B is the reference sheet, A and C will be seen to + have an item removed; and if B is processed before C, the extra item is + known when C is processed and so C is considered to be missing that item. + .Example + dir Server*.xlsx | Merge-MulipleSheets -WorksheetName Services -OutputFile Test2.xlsx -OutputSheetName Services -Show + Here we are auditing servers and each one has a workbook in the current + directory which contains a "Services" Worksheet (the result of + Get-WmiObject -Class win32_service | Select-Object -Property Name, Displayname, Startmode) + No key is specified so the key is assumed to be the "Name" column. + The files are merged and the result is opened on completion. + .Example + dir Serv*.xlsx | Merge-MulipleSheets -WorksheetName Software -Key "*" -ExcludeProperty Install* -OutputFile Test2.xlsx -OutputSheetName Software -Show + The server audit files in the previous example also have "Software" worksheet, + but no single field on that sheet works as a key. Specifying "*" for the key + produces a compound key using all non-excluded fields (and the installation + date and file location are excluded). + .Example + Merge-MulipleSheets -Path hotfixes.xlsx -WorksheetName Serv* -Key hotfixid -OutputFile test2.xlsx -OutputSheetName hotfixes -HideRowNumbers -Show + This time all the servers have written their hotfix information to their own + worksheets in a shared Excel workbook named "Hotfixes.xlsx" (the information was + obtained by running Get-Hotfix | Sort-Object -Property description,hotfixid | Select-Object -Property Description,HotfixID) + This ignores any sheets which are not named "Serv*", and uses the HotfixID as + the key; in this version the row numbers are hidden. + #> + [cmdletbinding()] + [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseDeclaredVarsMoreThanAssignments', '', Justification="False positives when initializing variable in begin block")] + [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseSingularNouns', '', Justification="MultipleSheet would be incorrect")] + #[Alias("Merge-MulipleSheets")] #There was a spelling error in the first release. This was there to ensure things didn't break but intelisense gave the alias first. + param ( + #Paths to the files to be merged. Files are also accepted + [Parameter(Mandatory=$true,ValueFromPipeline=$true)] + $Path , + #The row from where we start to import data, all rows above the Start row are disregarded. By default this is the first row. + [int]$Startrow = 1, + + #Specifies custom property names to use, instead of the values defined in the column headers of the Start row. + [String[]]$Headername, + + #If specified, property names will be automatically generated (P1, P2, P3, ..) instead of using the values from the start row. + [switch]$NoHeader, + + #Name(s) of Worksheets to compare. + $WorksheetName = "Sheet1", + #File to write output to. + [Alias('OutFile')] + $OutputFile = ".\temp.xlsx", + #Name of Worksheet to output - if none specified will use the reference Worksheet name. + [Alias('OutSheet')] + $OutputSheetName = "Sheet1", + #Properties to include in the comparison - supports wildcards, default is "*". + $Property = "*" , + #Properties to exclude from the the comparison - supports wildcards. + $ExcludeProperty , + #Name of a column which is unique used to pair up rows from the reference and difference sides, default is "Name". + $Key = "Name" , + #Sets the font color for the Key field; this means you can filter by color to get only changed rows. + $KeyFontColor = [System.Drawing.Color]::Red, + #Sets the background color for changed rows. + $ChangeBackgroundColor = [System.Drawing.Color]::Orange, + #Sets the background color for rows in the reference but deleted from the difference sheet. + $DeleteBackgroundColor = [System.Drawing.Color]::LightPink, + #Sets the background color for rows not in the reference but added to the difference sheet. + $AddBackgroundColor = [System.Drawing.Color]::Orange, + #If specified, hides the columns in the spreadsheet that contain the row numbers. + [switch]$HideRowNumbers , + #If specified, outputs the data to the pipeline (you can add -whatif so it the command only outputs to the pipeline). + [switch]$Passthru , + #If specified, opens the output workbook. + [Switch]$Show + ) + begin { $filestoProcess = @() } + process { $filestoProcess += $Path} + end { + if ($filestoProcess.Count -eq 1 -and $WorksheetName -match '\*') { + Write-Progress -Activity "Merging sheets" -CurrentOperation "Expanding * to names of sheets in $($filestoProcess[0]). " + $excel = Open-ExcelPackage -Path $filestoProcess + $WorksheetName = $excel.Workbook.Worksheets.Name.where({$_ -like $WorksheetName}) + Close-ExcelPackage -NoSave -ExcelPackage $excel + } + + #Merge identically named sheets in different work books; + if ($filestoProcess.Count -ge 2 -and $WorksheetName -is "string" ) { + Get-Variable -Name 'HeaderName','NoHeader','StartRow','Key','Property','ExcludeProperty','WorksheetName' -ErrorAction SilentlyContinue | + Where-Object {$_.Value} | ForEach-Object -Begin {$params= @{} } -Process {$params[$_.Name] = $_.Value} + + Write-Progress -Activity "Merging sheets" -CurrentOperation "comparing '$WorksheetName' in $($filestoProcess[-1]) against $($filestoProcess[0]). " + $merged = Merge-Worksheet @params -Referencefile $filestoProcess[0] -Differencefile $filestoProcess[-1] + $nextFileNo = 2 + while ($nextFileNo -lt $filestoProcess.count -and $merged) { + Write-Progress -Activity "Merging sheets" -CurrentOperation "comparing '$WorksheetName' in $($filestoProcess[-$nextFileNo]) against $($filestoProcess[0]). " + $merged = Merge-Worksheet @params -ReferenceObject $merged -Differencefile $filestoProcess[-$nextFileNo] + $nextFileNo ++ + + } + } + #Merge different sheets from one workbook + elseif ($filestoProcess.Count -eq 1 -and $WorksheetName.Count -ge 2 ) { + Get-Variable -Name 'HeaderName','NoHeader','StartRow','Key','Property','ExcludeProperty' -ErrorAction SilentlyContinue | + Where-Object {$_.Value} | ForEach-Object -Begin {$params= @{} } -Process {$params[$_.Name] = $_.Value} + + Write-Progress -Activity "Merging sheets" -CurrentOperation "Comparing $($WorksheetName[-1]) against $($WorksheetName[0]). " + $merged = Merge-Worksheet @params -Referencefile $filestoProcess[0] -Differencefile $filestoProcess[0] -WorksheetName $WorksheetName[0,-1] + $nextSheetNo = 2 + while ($nextSheetNo -lt $WorksheetName.count -and $merged) { + Write-Progress -Activity "Merging sheets" -CurrentOperation "Comparing $($WorksheetName[-$nextSheetNo]) against $($WorksheetName[0]). " + $merged = Merge-Worksheet @params -ReferenceObject $merged -Differencefile $filestoProcess[0] -WorksheetName $WorksheetName[-$nextSheetNo] -DiffPrefix $WorksheetName[-$nextSheetNo] + $nextSheetNo ++ + } + } + #We either need one Worksheet name and many files or one file and many sheets. + else { Write-Warning -Message "Need at least two files to process" ; return } + #if the process didn't return data then abandon now. + if (-not $merged) {Write-Warning -Message "The merge operation did not return any data."; return } + + $orderByProperties = $merged[0].psobject.properties.where({$_.name -match "row$"}).name + Write-Progress -Activity "Merging sheets" -CurrentOperation "creating output sheet '$OutputSheetName' in $OutputFile" + $excel = $merged | Sort-Object -Property $orderByProperties | + Export-Excel -Path $OutputFile -Worksheetname $OutputSheetName -ClearSheet -BoldTopRow -AutoFilter -PassThru + $sheet = $excel.Workbook.Worksheets[$OutputSheetName] + + #We will put in a conditional format for "if all the others are not flagged as 'same'" to mark rows where something is added, removed or changed + $sameChecks = @() + + #All the 'difference' columns in the sheet are labeled with the file they came from, 'reference' columns need their + #headers prefixed with the ref file name, $colnames is the basis of a regular expression to identify what should have $refPrefix appended + $colNames = @("^_Row$") + if ($key -ne "*") + {$colnames += "^$Key$"} + if ($filesToProcess.Count -ge 2) { + $refPrefix = (Split-Path -Path $filestoProcess[0] -Leaf) -replace "\.xlsx$"," " + } + else {$refPrefix = $WorksheetName[0] } + Write-Progress -Activity "Merging sheets" -CurrentOperation "applying formatting to sheet '$OutputSheetName' in $OutputFile" + #Find the column headings which are in the form "diffFile is"; which will hold 'Same', 'Added' or 'Changed' + foreach ($cell in $sheet.Cells[($sheet.Dimension.Address -replace "\d+$","1")].Where({$_.value -match "\sIS$"}) ) { + #Work leftwards across the headings applying conditional formatting which says + # 'Format this cell if the "IS" column has a value of ...' until you find a heading which doesn't have the prefix. + $prefix = $cell.value -replace "\sIS$","" + $columnNo = $cell.start.Column -1 + $cellAddr = [OfficeOpenXml.ExcelAddress]::TranslateFromR1C1("R1C$columnNo",1,$columnNo) + while ($sheet.cells[$cellAddr].value -match $prefix) { + $condFormattingParams = @{RuleType='Expression'; BackgroundPattern='Solid'; Worksheet=$sheet; StopIfTrue=$true; Range=$([OfficeOpenXml.ExcelAddress]::TranslateFromR1C1("R[1]C[$columnNo]:R[1048576]C[$columnNo]",0,0)) } + Add-ConditionalFormatting @condFormattingParams -ConditionValue ($cell.Address + '="Added"' ) -BackgroundColor $AddBackgroundColor + Add-ConditionalFormatting @condFormattingParams -ConditionValue ($cell.Address + '="Changed"') -BackgroundColor $ChangeBackgroundColor + Add-ConditionalFormatting @condFormattingParams -ConditionValue ($cell.Address + '="Removed"') -BackgroundColor $DeleteBackgroundColor + $columnNo -- + $cellAddr = [OfficeOpenXml.ExcelAddress]::TranslateFromR1C1("R1C$columnNo",1,$columnNo) + } + #build up a list of prefixes in $colnames - we'll use that to set headers on rows from the reference file; and build up the "if the 'is' cell isn't same" list + $colNames += $prefix + $sameChecks += (($cell.Address -replace "1","2") +'<>"Same"') + } + + #For all the columns which don't match one of the Diff-file prefixes or "_Row" or the 'Key' columnn name; add the reference file prefix to their header. + $nameRegex = $colNames -Join '|' + foreach ($cell in $sheet.Cells[($sheet.Dimension.Address -replace "\d+$","1")].Where({$_.value -Notmatch $nameRegex}) ) { + $cell.Value = $refPrefix + $cell.Value + $condFormattingParams = @{RuleType='Expression'; BackgroundPattern='Solid'; Worksheet=$sheet; StopIfTrue=$true; Range=[OfficeOpenXml.ExcelAddress]::TranslateFromR1C1("R[2]C[$($cell.start.column)]:R[1048576]C[$($cell.start.column)]",0,0)} + Add-ConditionalFormatting @condFormattingParams -ConditionValue ("OR(" +(($sameChecks -join ",") -replace '<>"Same"','="Added"' ) +")" ) -BackgroundColor $DeleteBackgroundColor + Add-ConditionalFormatting @condFormattingParams -ConditionValue ("AND(" +(($sameChecks -join ",") -replace '<>"Same"','="Changed"') +")" ) -BackgroundColor $ChangeBackgroundColor + } + #We've made a bunch of things wider so now is the time to autofit columns. Any hiding has to come AFTER this, because it unhides things + $sheet.Cells.AutoFitColumns() + + #if we have a key field (we didn't concatenate all fields) use what we built up in $sameChecks to apply conditional formatting to it (Row no will be in column A, Key in Column B) + if ($Key -ne '*') { + Add-ConditionalFormatting -Worksheet $sheet -Range "B2:B1048576" -ForeGroundColor $KeyFontColor -BackgroundPattern 'None' -RuleType Expression -ConditionValue ("OR(" +($sameChecks -join ",") +")" ) + $sheet.view.FreezePanes(2, 3) + } + else {$sheet.view.FreezePanes(2, 2) } + #Go back over the headings to find and hide the "is" columns; + foreach ($cell in $sheet.Cells[($sheet.Dimension.Address -replace "\d+$","1")].Where({$_.value -match "\sIS$"}) ) { + $sheet.Column($cell.start.Column).HIDDEN = $true + } + + #If specified, look over the headings for "row" and hide the columns which say "this was in row such-and-such" + if ($HideRowNumbers) { + foreach ($cell in $sheet.Cells[($sheet.Dimension.Address -replace "\d+$","1")].Where({$_.value -match "Row$"}) ) { + $sheet.Column($cell.start.Column).HIDDEN = $true + } + } + if ($Passthru) {$excel} + else {Close-ExcelPackage -ExcelPackage $excel -Show:$Show} + Write-Progress -Activity "Merging sheets" -Completed + } +} diff --git a/Plot.ps1 b/Plot.ps1 new file mode 100644 index 0000000..4a54ea1 --- /dev/null +++ b/Plot.ps1 @@ -0,0 +1,218 @@ +[Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseDeclaredVarsMoreThanAssignments', '', Justification="False positives")] +param() +class PSPlot { + hidden $path + hidden $pkg + hidden $ws + hidden $chart + + PSPlot() { + $this.path=[System.IO.Path]::GetTempFileName() -replace "\.tmp", ".xlsx" + $this.pkg = New-Object OfficeOpenXml.ExcelPackage $this.path + $this.ws=$this.pkg.Workbook.Worksheets.Add("plot") + } + + [PSPlot] Plot($yValues) { + + $this.NewChart() + + $xValues = 0..$yValues.Count + + $xCol = 'A' + $yCol = 'B' + + $this.AddDataToSheet($xCol,$yCol,'x','y',$xValues,$yValues) + $this.AddSeries($xCol,$yCol,$yValues) + $this.SetChartPosition($yCol) + + return $this + } + + [PSPlot] Plot($yValues,[string]$options) { + $this.NewChart() + + $xValues = 0..$yValues.Count + + $xCol = 'A' + $yCol = 'B' + + $this.AddDataToSheet($xCol,$yCol,'x','y',$xValues,$yValues) + $this.AddSeries($xCol,$yCol,$yValues) + + $this.SetMarkerInfo($options) + $this.SetChartPosition($yCol) + + return $this + } + + [PSPlot] Plot($xValues,$yValues) { + + $this.NewChart() + + $xCol = 'A' + $yCol = 'B' + + $this.AddDataToSheet($xCol,$yCol,'x','y',$xValues,$yValues) + $this.AddSeries($xCol,$yCol,$yValues) + + $this.SetChartPosition($yCol) + + return $this + } + + [PSPlot] Plot($xValues,$yValues,[string]$options) { + $this.NewChart() + + $xCol = 'A' + $yCol = 'B' + + $this.AddDataToSheet($xCol,$yCol,'x','y',$xValues,$yValues) + $this.AddSeries($xCol,$yCol,$yValues) + + $this.SetMarkerInfo($options) + + $this.SetChartPosition($yCol) + + return $this + } + + [PSPlot] Plot($xValues,$yValues,$x1Values,$y1Values) { + + $this.NewChart() + + $xCol = 'A' + $yCol = 'B' + + $this.AddDataToSheet($xCol,$yCol,'x','y',$xValues,$yValues) + $this.AddSeries($xCol,$yCol,$yValues) + + $xCol=$this.GetNextColumnName($yCol) + $yCol=$this.GetNextColumnName($xCol) + + $this.AddDataToSheet($xCol,$yCol,'x1','y1',$x1Values,$y1Values) + $this.AddSeries($xCol,$yCol,$y1Values) + + $this.SetChartPosition($yCol) + + return $this + } + + [PSPlot] Plot($xValues,$yValues,$x1Values,$y1Values,$x2Values,$y2Values) { + + $this.NewChart() + + $xCol = 'A' + $yCol = 'B' + + $this.AddDataToSheet($xCol,$yCol,'x','y',$xValues,$yValues) + $this.AddSeries($xCol,$yCol,$yValues) + + $xCol=$this.GetNextColumnName($yCol) + $yCol=$this.GetNextColumnName($xCol) + + $this.AddDataToSheet($xCol,$yCol,'x1','y1',$x1Values,$y1Values) + $this.AddSeries($xCol,$yCol,$y1Values) + + $xCol=$this.GetNextColumnName($yCol) + $yCol=$this.GetNextColumnName($xCol) + + $this.AddDataToSheet($xCol,$yCol,'x2','y2',$x2Values,$y2Values) + $this.AddSeries($xCol,$yCol,$y2Values) + + $this.SetChartPosition($yCol) + + return $this + } + + [PSPLot] SetChartPosition($yCol) { + $columnNumber = $this.GetColumnNumber($yCol)+1 + $this.chart.SetPosition(1,0,$columnNumber,0) + + return $this + } + + AddSeries($xCol,$yCol,$yValues) { + $yRange = "{0}2:{0}{1}" -f $yCol,($yValues.Count+1) + $xRange = "{0}2:{0}{1}" -f $xCol,($yValues.Count+1) + $Series=$this.chart.Series.Add($yRange,$xRange) + } + + hidden SetMarkerInfo([string]$options) { + $c=$options.Substring(0,1) + $m=$options.Substring(1) + + $cmap=@{r='red';g='green';b='blue';i='indigo';v='violet';c='cyan'} + $mmap=@{Ci='Circle';Da='Dash';di='diamond';do='dot';pl='plus';sq='square';tr='triangle'} + + $this.chart.Series[0].Marker = $mmap.$m + $this.chart.Series[0].MarkerColor = $cmap.$c + $this.chart.Series[0].MarkerLineColor = $cmap.$c + } + + hidden [string]GetNextColumnName($columnName) { + return $this.GetColumnName($this.GetColumnNumber($columnName)+1) + } + + hidden [int]GetColumnNumber($columnName) { + $sum=0 + + $columnName.ToCharArray() | + ForEach-Object { + $sum*=26 + $sum+=[char]$_.tostring().toupper()-[char]'A'+1 + } + + return $sum + } + + hidden [string]GetColumnName($columnNumber) { + $dividend = $columnNumber + $columnName = @() + while($dividend -gt 0) { + $modulo = ($dividend - 1) % 26 + $columnName += [char](65 + $modulo) + $dividend = [int](($dividend -$modulo)/26) + } + + return ($columnName -join '') + } + + hidden AddDataToSheet($xColumn,$yColumn,$xHeader,$yHeader,$xValues,$yValues) { + $count=$yValues.Count + $this.ws.Cells["$($xColumn)1"].Value=$xHeader + $this.ws.Cells["$($yColumn)1"].Value=$yHeader + + for ($idx= 0; $idx-lt $count; $idx++) { + $row=$idx+2 + $this.ws.Cells["$($xColumn)$($row)"].Value=$xValues[$idx] + $this.ws.Cells["$($yColumn)$($row)"].Value=$yValues[$idx] + } + } + + hidden NewChart() { + $chartType="XYScatter" + #$chartType="line" + $this.chart=$this.ws.Drawings.AddChart("plot", $chartType) + $this.chart.Title.Text = 'Plot' + $this.chart.Legend.Remove() + $this.SetChartSize(300,300) + } + + [PSPlot] SetChartSize([int]$width,[int]$height){ + $this.chart.SetSize($width, $height) + + return $this + } + + [PSPlot] Title($title) { + $this.chart.Title.Text = $title + + return $this + } + + Show() { + $this.pkg.Save() + $this.pkg.Dispose() + Invoke-Item $this.path + } +} \ No newline at end of file diff --git a/PublishToGallery.ps1 b/PublishToGallery.ps1 deleted file mode 100644 index cc352c2..0000000 --- a/PublishToGallery.ps1 +++ /dev/null @@ -1,7 +0,0 @@ -$p = @{ - Name = "ImportExcel" - NuGetApiKey = $NuGetApiKey - ReleaseNote = "Add NumberFormat parameter" -} - -Publish-Module @p \ No newline at end of file diff --git a/Send-SQLDataToExcel.ps1 b/Send-SQLDataToExcel.ps1 new file mode 100644 index 0000000..874ee87 --- /dev/null +++ b/Send-SQLDataToExcel.ps1 @@ -0,0 +1,175 @@ +Function Send-SQLDataToExcel { + <# + .SYNOPSIS + Inserts a DataTable - returned by a SQL query - into an ExcelSheet + .DESCRIPTION + This command takes a SQL statement and run it against a database connection; for the connection it accepts either + * an object representing a session with a SQL server or ODBC database, or + * a connection string to make a session (if -MSSQLServer is specified it uses the SQL Native client, + and -Connection can be a server name instead of a detailed connection string. Without this switch it uses ODBC) + The command takes all the parameters of Export-Excel, except for -InputObject (alias TargetData); after + fetching the data it calls Export-Excel with the data as the value of InputParameter and whichever of + Export-Excel's parameters it was passed; for details of these parameters see the help for Export-Excel. + .PARAMETER Session + An active ODBC Connection or SQL connection object representing a session with a database which will be queried to get the data . + .PARAMETER Connection + A database connection string to be used to create a database session; either + * A Data source name written in the form DSN=ODBC_Data_Source_Name, or + * A full ODBC or SQL Native Client Connection string, or + * The name of a SQL server. + .PARAMETER MSSQLServer + Specifies the connection string is for SQL server, not ODBC. + .PARAMETER SQL + The SQL query to run against the session which was passed in -Session or set up from -Connection. + .PARAMETER Database + Switches to a specific database on a SQL server. + .PARAMETER QueryTimeout + Override the default query time of 30 seconds. + .PARAMETER DataTable + A System.Data.DataTable object containing the data to be inserted into the spreadsheet without running a query. + This remains supported to avoid breaking older scripts, but if you have a DataTable object you can pass the it + into Export-Excel using -InputObject. + .EXAMPLE + C:\> Send-SQLDataToExcel -MsSQLserver -Connection localhost -SQL "select name,type,type_desc from [master].[sys].[all_objects]" -Path .\temp.xlsx -WorkSheetname master -AutoSize -FreezeTopRow -AutoFilter -BoldTopRow + + Connects to the local SQL server and selects 3 columns from [Sys].[all_objects] and exports then to a sheet named master with some basic header management + .EXAMPLE + C:\> $dbPath = 'C:\Users\James\Documents\Database1.accdb' + C:\> $Connection = "Driver={Microsoft Access Driver (*.mdb, *.accdb)};Dbq=$dbPath;" + C:\> $SQL="SELECT top 25 Name,Length From TestData ORDER BY Length DESC" + + C:\> Send-SQLDataToExcel -Connection $connection -SQL $sql -path .\demo1.xlsx -WorkSheetname "Sizes" -AutoSize + + This creates an ODBC connection string to read from an Access file and a SQL Statement to extracts data from it, + and sends the resulting data to a new worksheet + + .EXAMPLE + C:\> $dbPath = 'C:\users\James\Documents\f1Results.xlsx' + C:\> $Connection = "Driver={Microsoft Excel Driver (*.xls, *.xlsx, *.xlsm, *.xlsb)};Dbq=$dbPath;" + C:\> $SQL="SELECT top 25 DriverName, Count(RaceDate) as Races, Count(Win) as Wins, Count(Pole) as Poles, Count(FastestLap) as Fastlaps " + + " FROM Results GROUP BY DriverName ORDER BY (count(win)) DESC" + + C:\> Send-SQLDataToExcel -Connection $connection -SQL $sql -path .\demo2.xlsx -WorkSheetname "Winners" -AutoSize -AutoNameRange -ConditionalFormat @{DataBarColor="Blue"; Range="Wins"} + + Similar to the previous example this creates a connection string, this time for an Excel file, and runs + a SQL statement to get a list of motor-racing results, outputting the resulting data to a new spreadsheet. + The spreadsheet is formatted and a data bar added to show make the drivers' wins clearer. + (the F1 results database is available from https://1drv.ms/x/s!AhfYu7-CJv4ehNdZWxJE9LMAX_N5sg ) + .EXAMPLE + C:\> $dbPath = 'C:\users\James\Documents\f1Results.xlsx' + C:\> $SQL = "SELECT top 25 DriverName, Count(RaceDate) as Races, Count(Win) as Wins, Count(Pole) as Poles, Count(FastestLap) as Fastlaps " + + " FROM Results GROUP BY DriverName ORDER BY (count(win)) DESC" + C:\> $null = Get-SQL -Session F1 -excel -Connection $dbPath -sql $sql -OutputVariable Table + + C:\> Send-SQLDataToExcel -DataTable $Table -Path ".\demo3.xlsx" -WorkSheetname Gpwinners -autosize -TableName winners -TableStyle Light6 -show + + This uses Get-SQL (at least V1.1 - download from the PowerShell gallery with Install-Module -Name GetSQL - + note the function is Get-SQL the module is GetSQL without the "-" ) + Get-SQL simplify making database connections and building /submitting SQL statements. + Here Get-SQL uses the same SQL statement as before; -OutputVariable leaves a System.Data.DataTable object in $table + and Send-SQLDataToExcel puts $table into the worksheet and sets it as an Excel table. + The command is equivalent to running + C:\> Export-Excel -inputObject $Table -Path ".\demo3.xlsx" -WorkSheetname Gpwinners -autosize -TableName winners -TableStyle Light6 -show + This is quicker than using + C:\> Get-SQL | export-excel -ExcludeProperty rowerror,rowstate,table,itemarray,haserrors + (the F1 results database is available from https://1drv.ms/x/s!AhfYu7-CJv4ehNdZWxJE9LMAX_N5sg ) + .EXAMPLE + C:\> $SQL = "SELECT top 25 DriverName, Count(Win) as Wins FROM Results GROUP BY DriverName ORDER BY (count(win)) DESC" + C:\> Send-SQLDataToExcel -Session $DbSessions["f1"] -SQL $sql -Path ".\demo3.xlsx" -WorkSheetname Gpwinners -ClearSheet -autosize -ColumnChart + + Like the previous example, this uses Get-SQL (download from the gallery with Install-Module -Name GetSQL). + It uses the database session which Get-SQL created, rather than an ODBC connection string. + The Session parameter can either be a object (as shown here), or the name used by Get-SQL ("F1" in this case). + Here the data is presented as a quick chart. + .EXAMPLE + C:\> Send-SQLDataToExcel -path .\demo4.xlsx -WorkSheetname "LR" -Connection "DSN=LR" -sql "SELECT name AS CollectionName FROM AgLibraryCollection Collection ORDER BY CollectionName" + + This example uses an Existing ODBC datasource name "LR" which maps to an adobe lightroom database and gets a list of collection names into a worksheet + + .Link + Export-Excel + #> + [CmdletBinding(DefaultParameterSetName="none")] + [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSAvoidGlobalVars', '', Justification="Allowed to use DBSessions Global variable from GETSQL Module")] + + param ( + [Parameter(ParameterSetName="SQLConnection", Mandatory=$true)] + [Parameter(ParameterSetName="ODBCConnection", Mandatory=$true)] + $Connection, + [Parameter(ParameterSetName="ExistingSession", Mandatory=$true)] + $Session, + [Parameter(ParameterSetName="SQLConnection", Mandatory=$true)] + [switch]$MsSQLserver, + [Parameter(ParameterSetName="SQLConnection")] + [String]$DataBase, + [Parameter(ParameterSetName="SQLConnection", Mandatory=$true)] + [Parameter(ParameterSetName="ODBCConnection", Mandatory=$true)] + [Parameter(ParameterSetName="ExistingSession", Mandatory=$true)] + [string]$SQL, + [int]$QueryTimeout, + [Parameter(ParameterSetName="Pre-FetchedData", Mandatory=$true)] + [System.Data.DataTable]$DataTable + ) +#Import the parameters from Export-Excel, we will pass InputObject, and we have the common parameters so exclude those, +#and re-write the [Parmameter] attribute on each one to avoid parameterSetName here competing with the settings in Export excel. +#The down side of this that impossible parameter combinations won't be filtered out and need to be caught later. + DynamicParam { + $ParameterAttribute = "System.Management.Automation.ParameterAttribute" + $RuntimeDefinedParam = "System.Management.Automation.RuntimeDefinedParameter" + $paramDictionary = New-Object -TypeName System.Management.Automation.RuntimeDefinedParameterDictionary + $attributeCollection = New-Object -TypeName System.Collections.ObjectModel.Collection[System.Attribute] + $attributeCollection.Add((New-Object -TypeName $ParameterAttribute -Property @{ ParameterSetName = "__AllParameterSets" ;Mandatory = $false})) + foreach ($P in (Get-Command -Name Export-Excel).Parameters.values.where({$_.name -notmatch 'Verbose|Debug|Action$|Variable$|Buffer$|TargetData$|InputObject$'})) { + $paramDictionary.Add($p.Name, (New-Object -TypeName $RuntimeDefinedParam -ArgumentList $p.name, $p.ParameterType, $attributeCollection ) ) + } + return $paramDictionary + } + process { + #Dynamic params mean we can get passed parameter combination Export-Excel will reject, so throw here, rather than get data and then have Export-Excel error. + if ($PSBoundParameters.Path -and $PSBoundParameters.ExcelPackage) { + throw 'Parameter error: you cannot specify both a path and an Excel Package.' + return + } + if ($PSBoundParameters.AutoFilter -and ($PSBoundParameters.TableName -or $PSBoundParameters.TableStyle)) { + Write-Warning "Tables are automatically auto-filtered, -AutoFilter will be ignored" + $null = $PSBoundParameters.Remove('AutoFilter') + } + #We were either given a session object or a connection string (with, optionally a MSSQLServer parameter) + #If we got -MSSQLServer, create a SQL connection, if we didn't but we got -Connection create an ODBC connection + if ($MsSQLserver -and $Connection) { + if ($Connection -notmatch '=') {$Connection = "server=$Connection;trusted_connection=true;timeout=60"} + $Session = New-Object -TypeName System.Data.SqlClient.SqlConnection -ArgumentList $Connection + if ($Session.State -ne 'Open') {$Session.Open()} + if ($DataBase) {$Session.ChangeDatabase($DataBase) } + } + elseif ($Connection) { + $Session = New-Object -TypeName System.Data.Odbc.OdbcConnection -ArgumentList $Connection ; $Session.ConnectionTimeout = 30 + } + if ($Session) { + #A session was either passed in or just created. If it's a SQL one make a SQL DataAdapter, otherwise make an ODBC one + if ($Session -is [String] -and $Global:DbSessions[$Session]) {$Session = $Global:DbSessions[$Session]} + if ($Session.GetType().name -match "SqlConnection") { + $dataAdapter = New-Object -TypeName System.Data.SqlClient.SqlDataAdapter -ArgumentList ( + New-Object -TypeName System.Data.SqlClient.SqlCommand -ArgumentList $SQL, $Session) + } + else { + $dataAdapter = New-Object -TypeName System.Data.Odbc.OdbcDataAdapter -ArgumentList ( + New-Object -TypeName System.Data.Odbc.OdbcCommand -ArgumentList $SQL, $Session ) + } + if ($QueryTimeout) {$dataAdapter.SelectCommand.CommandTimeout = $QueryTimeout} + + #Both adapter types output the same kind of table, create one and fill it from the adapter + $DataTable = New-Object -TypeName System.Data.DataTable + $rowCount = $dataAdapter.fill($dataTable) + Write-Verbose -Message "Query returned $rowCount row(s)" + } + if ($DataTable.Rows.Count) { + #Call export-excel removing parameters which relate to the SQL query, and keeping the rest. + 'Connection' , 'Database' , 'Session' , 'MsSQLserver' , 'SQL' , 'DataTable' , 'QueryTimeout' | ForEach-Object {$null = $PSBoundParameters.Remove($_) } + Export-Excel @PSBoundParameters -InputObject $DataTable + } + else {Write-Warning -Message ' No Data to insert.' } + #If we were passed a connection and opened a session, close that session. + if ($Connection) {$Session.close() } + } +} \ No newline at end of file diff --git a/filelist.txt b/filelist.txt index ebe3d59..e6bd0dc 100644 --- a/filelist.txt +++ b/filelist.txt @@ -2,17 +2,18 @@ *.psd1 *.psm1 AddConditionalFormatting.ps1 +AddDataValidation.ps1 Charting.ps1 ColorCompletion.ps1 -Compare-Worksheet.ps1 +Compare-WorkSheet.ps1 ConvertExcelToImageFile.ps1 ConvertFromExcelData.ps1 ConvertFromExcelToSQLInsert.ps1 ConvertToExcelXlsx.ps1 Copy-ExcelWorkSheet.ps1 -Export-Charts.ps1 Export-Excel.ps1 Export-ExcelSheet.ps1 +Export-StocksToExcel.ps1 Get-ExcelColumnName.ps1 Get-ExcelSheetInfo.ps1 Get-ExcelWorkbookInfo.ps1 @@ -32,10 +33,12 @@ Open-ExcelPackage.ps1 Pivot.ps1 PivotTable.ps1 Plot.ps1 +RemoveWorksheet.ps1 Send-SQLDataToExcel.ps1 Set-CellStyle.ps1 Set-Column.ps1 Set-Row.ps1 +Set-WorkSheetProtection.ps1 SetFormat.ps1 TrackingUtils.ps1 Update-FirstObjectProperties.ps1 \ No newline at end of file From d1592f87398b3ba8b5beac707905d2e41258881b Mon Sep 17 00:00:00 2001 From: ili101 Date: Mon, 26 Aug 2019 15:55:43 +0300 Subject: [PATCH 03/14] Replace $env:TEMP --- Export-StocksToExcel.ps1 | 2 +- __tests__/AddTrendlinesToAChart.tests.ps1 | 2 +- __tests__/Compare-WorkSheet.tests.ps1 | 56 +++++++++---------- .../ConvertFromExcelToSQLInsert.tests.ps1 | 2 +- __tests__/Copy-ExcelWorksheet.Tests.ps1 | 15 ++--- __tests__/Export-Excel.Tests.ps1 | 44 +++++++-------- __tests__/ExtraLongCmd.tests.ps1 | 2 +- __tests__/First10Races.tests.ps1 | 2 +- __tests__/InputItemParameter.tests.ps1 | 2 +- __tests__/Join-Worksheet.tests.ps1 | 4 +- __tests__/PasswordProtection.tests.ps1 | 2 +- __tests__/ProtectWorksheet.tests.ps1 | 4 +- __tests__/RangePassing.ps1 | 6 +- __tests__/Remove-WorkSheet.tests.ps1 | 6 +- .../Set-Row_Set-Column-SetFormat.tests.ps1 | 8 +-- __tests__/Validation.tests.ps1 | 2 +- 16 files changed, 73 insertions(+), 86 deletions(-) diff --git a/Export-StocksToExcel.ps1 b/Export-StocksToExcel.ps1 index bf3672f..4785e0b 100644 --- a/Export-StocksToExcel.ps1 +++ b/Export-StocksToExcel.ps1 @@ -5,7 +5,7 @@ $measure = "Open" ) - $xl = "$env:TEMP\Stocks.xlsx" + $xl = Join-Path ([IO.Path]::GetTempPath()) 'Stocks.xlsx' Remove-Item $xl -ErrorAction SilentlyContinue diff --git a/__tests__/AddTrendlinesToAChart.tests.ps1 b/__tests__/AddTrendlinesToAChart.tests.ps1 index 18bf7e4..5269a76 100644 --- a/__tests__/AddTrendlinesToAChart.tests.ps1 +++ b/__tests__/AddTrendlinesToAChart.tests.ps1 @@ -20,7 +20,7 @@ South,avocado,73 } BeforeEach { - $xlfile = "$env:TEMP\trendLine.xlsx" + $xlfile = "TestDrive:\trendLine.xlsx" Remove-Item $xlfile -ErrorAction SilentlyContinue } diff --git a/__tests__/Compare-WorkSheet.tests.ps1 b/__tests__/Compare-WorkSheet.tests.ps1 index a8114e4..bd01b55 100644 --- a/__tests__/Compare-WorkSheet.tests.ps1 +++ b/__tests__/Compare-WorkSheet.tests.ps1 @@ -5,9 +5,9 @@ else {Add-Type -AssemblyName System.Window Describe "Compare Worksheet" { Context "Simple comparison output" { BeforeAll { - Remove-Item -Path "$env:temp\server*.xlsx" + Remove-Item -Path "TestDrive:\server*.xlsx" [System.Collections.ArrayList]$s = get-service | Select-Object -first 25 -Property Name, RequiredServices, CanPauseAndContinue, CanShutdown, CanStop, DisplayName, DependentServices, MachineName - $s | Export-Excel -Path $env:temp\server1.xlsx + $s | Export-Excel -Path TestDrive:\server1.xlsx #$s is a zero based array, excel rows are 1 based and excel has a header row so Excel rows will be 2 + index in $s $row4Displayname = $s[2].DisplayName $s[2].DisplayName = "Changed from the orginal" @@ -17,9 +17,9 @@ Describe "Compare Worksheet" { $s.Insert(3,$d) $row6Name = $s[5].name $s.RemoveAt(5) - $s | Export-Excel -Path $env:temp\server2.xlsx + $s | Export-Excel -Path TestDrive:\server2.xlsx #Assume default worksheet name, (sheet1) and column header for key ("name") - $comp = compare-WorkSheet "$env:temp\server1.xlsx" "$env:temp\server2.xlsx" | Sort-Object -Property _row, _file + $comp = compare-WorkSheet "TestDrive:\Server1.xlsx" "TestDrive:\Server2.xlsx" | Sort-Object -Property _row, _file } it "Found the right number of differences " { $comp | should not beNullOrEmpty @@ -55,13 +55,13 @@ Describe "Compare Worksheet" { $ModulePath = (Get-Command -Name 'Compare-WorkSheet').Module.Path $PowerShellExec = if ($PSEdition -eq 'Core') {'pwsh.exe'} else {'powershell.exe'} $PowerShellPath = Join-Path -Path $PSHOME -ChildPath $PowerShellExec - . $PowerShellPath -Command ("Import-Module $ModulePath; " + '$null = Compare-WorkSheet "$env:temp\server1.xlsx" "$env:temp\server2.xlsx" -BackgroundColor ([System.Drawing.Color]::LightGreen) -GridView; Start-Sleep -sec 5') + . $PowerShellPath -Command ("Import-Module $ModulePath; " + '$null = Compare-WorkSheet "TestDrive:\Server1.xlsx" "TestDrive:\Server2.xlsx" -BackgroundColor ([System.Drawing.Color]::LightGreen) -GridView; Start-Sleep -sec 5') } else { - $null = Compare-WorkSheet "$env:temp\server1.xlsx" "$env:temp\server2.xlsx" -BackgroundColor ([System.Drawing.Color]::LightGreen) -GridView:$useGrid + $null = Compare-WorkSheet "TestDrive:\Server1.xlsx" "TestDrive:\Server2.xlsx" -BackgroundColor ([System.Drawing.Color]::LightGreen) -GridView:$useGrid } - $xl1 = Open-ExcelPackage -Path "$env:temp\server1.xlsx" - $xl2 = Open-ExcelPackage -Path "$env:temp\server2.xlsx" + $xl1 = Open-ExcelPackage -Path "TestDrive:\Server1.xlsx" + $xl2 = Open-ExcelPackage -Path "TestDrive:\Server2.xlsx" $s1Sheet = $xl1.Workbook.Worksheets[1] $s2Sheet = $xl2.Workbook.Worksheets[1] } @@ -85,9 +85,9 @@ Describe "Compare Worksheet" { Context "Setting the forgound to highlight changed properties" { BeforeAll { - $null = compare-WorkSheet "$env:temp\server1.xlsx" "$env:temp\server2.xlsx" -AllDataBackgroundColor([System.Drawing.Color]::white) -BackgroundColor ([System.Drawing.Color]::LightGreen) -FontColor ([System.Drawing.Color]::DarkRed) - $xl1 = Open-ExcelPackage -Path "$env:temp\server1.xlsx" - $xl2 = Open-ExcelPackage -Path "$env:temp\server2.xlsx" + $null = compare-WorkSheet "TestDrive:\Server1.xlsx" "TestDrive:\Server2.xlsx" -AllDataBackgroundColor([System.Drawing.Color]::white) -BackgroundColor ([System.Drawing.Color]::LightGreen) -FontColor ([System.Drawing.Color]::DarkRed) + $xl1 = Open-ExcelPackage -Path "TestDrive:\Server1.xlsx" + $xl2 = Open-ExcelPackage -Path "TestDrive:\Server2.xlsx" $s1Sheet = $xl1.Workbook.Worksheets[1] $s2Sheet = $xl2.Workbook.Worksheets[1] } @@ -116,7 +116,7 @@ Describe "Compare Worksheet" { BeforeAll { [System.Collections.ArrayList]$s = get-service | Select-Object -first 25 -Property RequiredServices, CanPauseAndContinue, CanShutdown, CanStop, DisplayName, DependentServices, MachineName, ServiceName, ServicesDependedOn, ServiceHandle, Status, ServiceType, StartType -ExcludeProperty Name - $s | Export-Excel -Path $env:temp\server1.xlsx -WorkSheetname Server1 + $s | Export-Excel -Path TestDrive:\server1.xlsx -WorkSheetname Server1 #$s is a zero based array, excel rows are 1 based and excel has a header row so Excel rows will be 2 + index in $s $row4Displayname = $s[2].DisplayName $s[2].DisplayName = "Changed from the orginal" @@ -128,11 +128,11 @@ Describe "Compare Worksheet" { $s.RemoveAt(5) $s[10].ServiceType = "Changed should not matter" - $s | Select-Object -Property ServiceName, DisplayName, StartType, ServiceType | Export-Excel -Path $env:temp\server2.xlsx -WorkSheetname server2 + $s | Select-Object -Property ServiceName, DisplayName, StartType, ServiceType | Export-Excel -Path TestDrive:\server2.xlsx -WorkSheetname server2 #Assume default worksheet name, (sheet1) and column header for key ("name") - $comp = compare-WorkSheet "$env:temp\server1.xlsx" "$env:temp\server2.xlsx" -WorkSheetName Server1,Server2 -Key ServiceName -Property DisplayName,StartType -AllDataBackgroundColor ([System.Drawing.Color]::AliceBlue) -BackgroundColor ([System.Drawing.Color]::White) -FontColor ([System.Drawing.Color]::Red) | Sort-Object _row,_file - $xl1 = Open-ExcelPackage -Path "$env:temp\server1.xlsx" - $xl2 = Open-ExcelPackage -Path "$env:temp\server2.xlsx" + $comp = compare-WorkSheet "TestDrive:\Server1.xlsx" "TestDrive:\Server2.xlsx" -WorkSheetName Server1,Server2 -Key ServiceName -Property DisplayName,StartType -AllDataBackgroundColor ([System.Drawing.Color]::AliceBlue) -BackgroundColor ([System.Drawing.Color]::White) -FontColor ([System.Drawing.Color]::Red) | Sort-Object _row,_file + $xl1 = Open-ExcelPackage -Path "TestDrive:\Server1.xlsx" + $xl2 = Open-ExcelPackage -Path "TestDrive:\Server2.xlsx" $s1Sheet = $xl1.Workbook.Worksheets["server1"] $s2Sheet = $xl2.Workbook.Worksheets["server2"] } @@ -188,10 +188,10 @@ Describe "Compare Worksheet" { Describe "Merge Worksheet" { Context "Merge with 3 properties" { BeforeAll { - Remove-Item -Path "$env:temp\server*.xlsx" , "$env:temp\combined*.xlsx" -ErrorAction SilentlyContinue + Remove-Item -Path "TestDrive:\server*.xlsx" , "TestDrive:\Combined*.xlsx" -ErrorAction SilentlyContinue [System.Collections.ArrayList]$s = get-service | Select-Object -first 25 -Property * - $s | Export-Excel -Path $env:temp\server1.xlsx + $s | Export-Excel -Path TestDrive:\server1.xlsx #$s is a zero based array, excel rows are 1 based and excel has a header row so Excel rows will be 2 + index in $s $s[2].DisplayName = "Changed from the orginal" @@ -203,10 +203,10 @@ Describe "Merge Worksheet" { $s.RemoveAt(5) - $s | Export-Excel -Path $env:temp\server2.xlsx + $s | Export-Excel -Path TestDrive:\server2.xlsx #Assume default worksheet name, (sheet1) and column header for key ("name") - Merge-Worksheet -Referencefile "$env:temp\server1.xlsx" -Differencefile "$env:temp\server2.xlsx" -OutputFile "$env:temp\combined1.xlsx" -Property name,displayname,startType -Key name - $excel = Open-ExcelPackage -Path "$env:temp\combined1.xlsx" + Merge-Worksheet -Referencefile "TestDrive:\server1.xlsx" -Differencefile "TestDrive:\Server2.xlsx" -OutputFile "TestDrive:\combined1.xlsx" -Property name,displayname,startType -Key name + $excel = Open-ExcelPackage -Path "TestDrive:\combined1.xlsx" $ws = $excel.Workbook.Worksheets["sheet1"] } it "Created a worksheet with the correct headings " { @@ -247,16 +247,16 @@ Describe "Merge Worksheet" { } Context "Wider data set" { it "Coped with columns beyond Z in the Output sheet " { - { Merge-Worksheet -Referencefile "$env:temp\server1.xlsx" -Differencefile "$env:temp\server2.xlsx" -OutputFile "$env:temp\combined2.xlsx" } | Should not throw + { Merge-Worksheet -Referencefile "TestDrive:\server1.xlsx" -Differencefile "TestDrive:\Server2.xlsx" -OutputFile "TestDrive:\combined2.xlsx" } | Should not throw } } } Describe "Merge Multiple sheets" { Context "Merge 3 sheets with 3 properties" { BeforeAll { - Remove-Item -Path "$env:temp\server*.xlsx" , "$env:temp\combined*.xlsx" -ErrorAction SilentlyContinue + Remove-Item -Path "TestDrive:\server*.xlsx" , "TestDrive:\Combined*.xlsx" -ErrorAction SilentlyContinue [System.Collections.ArrayList]$s = get-service | Select-Object -first 25 -Property Name,DisplayName,StartType - $s | Export-Excel -Path $env:temp\server1.xlsx + $s | Export-Excel -Path TestDrive:\server1.xlsx #$s is a zero based array, excel rows are 1 based and excel has a header row so Excel rows will be 2 + index in $s $row4Displayname = $s[2].DisplayName @@ -269,7 +269,7 @@ Describe "Merge Multiple sheets" { $s.RemoveAt(5) - $s | Export-Excel -Path $env:temp\server2.xlsx + $s | Export-Excel -Path TestDrive:\server2.xlsx $s[2].displayname = $row4Displayname @@ -279,10 +279,10 @@ Describe "Merge Multiple sheets" { $s.Insert(6,$d) $s.RemoveAt(8) - $s | Export-Excel -Path $env:temp\server3.xlsx + $s | Export-Excel -Path TestDrive:\server3.xlsx - Merge-MultipleSheets -Path "$env:temp\server1.xlsx", "$env:temp\server2.xlsx","$env:temp\server3.xlsx" -OutputFile "$env:temp\combined3.xlsx" -Property name,displayname,startType -Key name - $excel = Open-ExcelPackage -Path "$env:temp\combined3.xlsx" + Merge-MultipleSheets -Path "TestDrive:\server1.xlsx", "TestDrive:\Server2.xlsx","TestDrive:\Server3.xlsx" -OutputFile "TestDrive:\combined3.xlsx" -Property name,displayname,startType -Key name + $excel = Open-ExcelPackage -Path "TestDrive:\combined3.xlsx" $ws = $excel.Workbook.Worksheets["sheet1"] } diff --git a/__tests__/ConvertFromExcelToSQLInsert.tests.ps1 b/__tests__/ConvertFromExcelToSQLInsert.tests.ps1 index b5b13f9..d506fa9 100644 --- a/__tests__/ConvertFromExcelToSQLInsert.tests.ps1 +++ b/__tests__/ConvertFromExcelToSQLInsert.tests.ps1 @@ -1,6 +1,6 @@ #Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force -$xlFile = "$env:TEMP\testSQL.xlsx" +$xlFile = "TestDrive:\testSQL.xlsx" Describe "ConvertFrom-ExcelToSQLInsert" { diff --git a/__tests__/Copy-ExcelWorksheet.Tests.ps1 b/__tests__/Copy-ExcelWorksheet.Tests.ps1 index 04c9809..b2d9bf0 100644 --- a/__tests__/Copy-ExcelWorksheet.Tests.ps1 +++ b/__tests__/Copy-ExcelWorksheet.Tests.ps1 @@ -1,8 +1,5 @@ -if ($PSVersionTable.os -and $PSVersionTable.os -notMatch 'Windows' ) {return} #Currently this test outputs windows services so only run on Windows. -if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() -replace "/$","" } - -$path1 = "$env:TEMP\Test1.xlsx" -$path2 = "$env:TEMP\Test2.xlsx" +$path1 = "TestDrive:\Test1.xlsx" +$path2 = "TestDrive:\Test2.xlsx" Remove-item -Path $path1, $path2 -ErrorAction SilentlyContinue $ProcRange = Get-Process | Export-Excel $path1 -DisplayPropertySet -WorkSheetname Processes -ReturnRange @@ -91,8 +88,8 @@ Describe "Copy-Worksheet" { Context "Copy worksheet should close all files" { BeforeAll { - $xlfile = "$env:TEMP\reports.xlsx" - $xlfileArchive = "$env:TEMP\reportsArchive.xlsx" + $xlfile = "TestDrive:\reports.xlsx" + $xlfileArchive = "TestDrive:\reportsArchive.xlsx" Remove-Item $xlfile -ErrorAction SilentlyContinue Remove-Item $xlfileArchive -ErrorAction SilentlyContinue @@ -119,8 +116,8 @@ Describe "Copy-Worksheet" { Context "Copy worksheet should support piped input" { BeforeAll { - $xlfile = "$env:TEMP\reports.xlsx" - $xlfileArchive = "$env:TEMP\reportsArchive.xlsx" + $xlfile = "TestDrive:\reports.xlsx" + $xlfileArchive = "TestDrive:\reportsArchive.xlsx" Remove-Item $xlfile -ErrorAction SilentlyContinue Remove-Item $xlfileArchive -ErrorAction SilentlyContinue diff --git a/__tests__/Export-Excel.Tests.ps1 b/__tests__/Export-Excel.Tests.ps1 index 964efc4..43fd806 100644 --- a/__tests__/Export-Excel.Tests.ps1 +++ b/__tests__/Export-Excel.Tests.ps1 @@ -8,7 +8,7 @@ if (Get-process -Name Excel,xlim -ErrorAction SilentlyContinue) { Write-Warni Describe ExportExcel { Context "#Example 1 # Creates and opens a file with the right number of rows and columns" { - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\Test.xlsx" Remove-item -Path $path -ErrorAction SilentlyContinue #Test with a maximum of 100 processes for speed; export all properties, then export smaller subsets. $processes = Get-Process | where {$_.StartTime} | Select-Object -first 100 -Property * -excludeProperty Parent @@ -70,7 +70,7 @@ Describe ExportExcel { } Context " # NoAliasOrScriptPropeties -ExcludeProperty and -DisplayPropertySet work" { - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\Test.xlsx" Remove-item -Path $path -ErrorAction SilentlyContinue $processes = Get-Process | Select-Object -First 100 $propertyNames = $Processes[0].psobject.properties.where( {$_.MemberType -eq 'Property'}).name @@ -119,7 +119,7 @@ Describe ExportExcel { Context "#Example 2 # Exports a list of numbers and applies number format " { - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\Test.xlsx" Remove-item -Path $path -ErrorAction SilentlyContinue #testing -ReturnRange switch and applying number format to Formulas as well as values. $returnedRange = @($null, -1, 0, 34, 777, "", -0.5, 119, -0.1, 234, 788,"=A9+A10") | Export-Excel -NumberFormat '[Blue]$#,##0.00;[Red]-$#,##0.00' -Path $path -ReturnRange @@ -158,7 +158,7 @@ Describe ExportExcel { Context " # Number format parameter" { BeforeAll { - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\test.xlsx" Remove-Item -Path $path -ErrorAction SilentlyContinue 1..10 | Export-Excel -Path $path -Numberformat 'Number' 1..10 | Export-Excel -Path $path -Numberformat 'Percentage' -Append @@ -181,7 +181,7 @@ Describe ExportExcel { if ((Get-Culture).NumberFormat.CurrencySymbol -eq "£") {$OtherCurrencySymbol = "$"} else {$OtherCurrencySymbol = "£"} - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\Test.xlsx" $warnVar = $null #Test correct export of different data types and number formats; test hyperlinks, test -NoNumberConversion test object is converted to a string with no warnings, test calcuation of formula Remove-item -Path $path -ErrorAction SilentlyContinue @@ -298,7 +298,7 @@ Describe ExportExcel { Context "# # Setting cells for different data types with -noHeader" { - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\Test.xlsx" Remove-item -Path $path -ErrorAction SilentlyContinue #Test -NoHeader & -NoNumberConversion [PSCustOmobject][Ordered]@{ @@ -359,7 +359,7 @@ Describe ExportExcel { #Test New-ConditionalText builds correctly $ct = New-ConditionalText -ConditionalType GreaterThan 525 -ConditionalTextColor ([System.Drawing.Color]::DarkRed) -BackgroundColor ([System.Drawing.Color]::LightPink) - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\Test.xlsx" Remove-item -Path $path -ErrorAction SilentlyContinue #Test -ConditionalText with a single conditional spec. Write-Output 489 668 299 777 860 151 119 497 234 788 | Export-Excel -Path $path -ConditionalText $ct @@ -389,7 +389,7 @@ Describe ExportExcel { Context "#Example 6 # Adding multiple conditional formats using short form syntax. " { if ($notwindows) {Write-warning "Test only runs on Windows" ; return} #Test adding mutliple conditional blocks and using the minimal syntax for new-ConditionalText - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\Test.xlsx" Remove-item -Path $path -ErrorAction SilentlyContinue #Testing -Passthrough @@ -451,7 +451,7 @@ Describe ExportExcel { } Context "#Examples 8 & 9 # Adding Pivot tables and charts from parameters" { - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\Test.xlsx" #Test -passthru and -worksheetName creating a new, named, sheet in an existing file. $Script:Procs= Get-Process | Select-Object -first 20 -Property Name, cpu, pm, handles, company if ($Procs.count -lt 20) {Write-warning "Not enough proceses were returned by get-Process to run the test." ; return} @@ -512,7 +512,7 @@ Describe ExportExcel { } Context " # Add-Worksheet inserted sheets, moved them correctly, and copied a sheet" { - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\Test.xlsx" #Test the -CopySource and -Movexxxx parameters for Add-WorkSheet $Excel = Open-ExcelPackage $path #At this point Sheets Should be in the order Sheet1, Processes, ProcessesPivotTable @@ -547,7 +547,7 @@ Describe ExportExcel { } Context " # Create and append with Start row and Start Column, inc ranges and Pivot table. " { - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\Test.xlsx" remove-item -Path $path -ErrorAction SilentlyContinue #Catch warning $warnVar = $null @@ -599,7 +599,7 @@ Describe ExportExcel { } Context " # Create and append explicit and auto table and range extension" { - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\Test.xlsx" #Test -Append automatically extends a table, even when it is not specified in the append command; $Script:Procs= Get-process if ($Procs.count -lt 20) {Write-warning "Not enough proceses were returned by get-Process to run the test." ; return} @@ -635,8 +635,7 @@ Describe ExportExcel { } Context "#Example 11 # Create and append with title, inc ranges and Pivot table" { - if ($Procs.count -lt 20) {Write-warning "Not enough proceses were returned by get-Process to run the test." ; return} - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\Test.xlsx" #Test New-PivotTableDefinition builds definition using -Pivotfilter and -PivotTotals options. $ptDef = [ordered]@{} $ptDef += New-PivotTableDefinition -PivotTableName "PT1" -SourceWorkSheet 'Sheet1' -PivotRows "Status" -PivotData @{'Status' = 'Count'} -PivotTotals Columns -PivotFilter "StartType" -IncludePivotChart -ChartType BarClustered3D -ChartTitle "Services by status" -ChartHeight 512 -ChartWidth 768 -ChartRow 10 -ChartColumn 0 -NoLegend -PivotColumns CanPauseAndContinue @@ -718,8 +717,8 @@ Describe ExportExcel { } Context "#Example 13 # Formatting and another way to do a pivot. " { - $path = Join-Path $Env:TEMP "test.xlsx" - Remove-Item $path -ErrorAction SilentlyContinue + $path = "TestDrive:\Test.xlsx" + Remove-Item $path #Test freezing top row/first column, adding formats and a pivot table - from Add-Pivot table not a specification variable - after the export $excel = Get-Process | Select-Object -Property Name, Company, Handles, CPU, PM, NPM, WS | Export-Excel -Path $path -ClearSheet -WorkSheetname "Processes" -FreezeTopRowFirstColumn -PassThru $sheet = $excel.Workbook.Worksheets["Processes"] @@ -800,7 +799,7 @@ Describe ExportExcel { } Context " # Chart from MultiSeries.ps1 in the Examples\charts Directory" { - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\Test.xlsx" Remove-Item -Path $path -ErrorAction SilentlyContinue #Test we haven't missed any parameters on New-ChartDefinition which are on add chart or vice versa. @@ -858,7 +857,7 @@ Describe ExportExcel { } Context " # variation of plot.ps1 from Examples Directory using Add chart outside ExportExcel" { - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\Test.xlsx" #Test inserting a fomual $excel = 0..360 | ForEach-Object {[pscustomobject][ordered]@{x = $_; Sinx = "=Sin(Radians(x)) "}} | Export-Excel -AutoNameRange -Path $path -WorkSheetname SinX -ClearSheet -FreezeFirstColumn -PassThru #Test-Add Excel Chart to existing data. Test add Conditional formatting with a formula @@ -900,7 +899,7 @@ Describe ExportExcel { } Context " # Quick line chart" { - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\Test.xlsx" Remove-Item -Path $path -ErrorAction SilentlyContinue #test drawing a chart when data doesn't have a string 0..360 | ForEach-Object {[pscustomobject][ordered]@{x = $_; Sinx = "=Sin(Radians(x)) "}} | Export-Excel -AutoNameRange -Path $path -LineChart @@ -918,7 +917,7 @@ Describe ExportExcel { } Context " # Quick Pie chart and three icon conditional formating" { - $path = Join-Path $Env:TEMP "Pie.xlsx" + $path = "TestDrive:\Pie.xlsx" Remove-Item -Path $path -ErrorAction SilentlyContinue $Script:Procs= Get-Process if ($Procs.count -lt 20) {Write-warning "Not enough proceses were returned by get-Process to run the test." ; return} @@ -957,8 +956,7 @@ Describe ExportExcel { } Context " # Awkward multiple tables" { - if ($notWindows) {Write-warning "Test only runs on Windows" ; return} - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\test.xlsx" #Test creating 3 on overlapping tables on the same page. Create rightmost the left most then middle. remove-item -Path $path -ErrorAction SilentlyContinue $r = Get-ChildItem -path C:\WINDOWS\system32 -File @@ -993,7 +991,7 @@ Describe ExportExcel { } Context " # Parameters and ParameterSets" { - $Path = join-path $env:TEMP "temp.xlsx" + $Path = "TestDrive:\test.xlsx" Remove-Item -Path $Path -ErrorAction SilentlyContinue $Processes = Get-Process | Select-Object -first 10 -Property Name, cpu, pm, handles, company diff --git a/__tests__/ExtraLongCmd.tests.ps1 b/__tests__/ExtraLongCmd.tests.ps1 index ecb8c17..026043a 100644 --- a/__tests__/ExtraLongCmd.tests.ps1 +++ b/__tests__/ExtraLongCmd.tests.ps1 @@ -1,7 +1,7 @@ if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() -replace "/$","" } -$path = Join-Path $Env:TEMP "test.xlsx" +$path = "TestDrive:\test.xlsx" remove-item -path $path -ErrorAction SilentlyContinue ConvertFrom-Csv @" Product, City, Gross, Net diff --git a/__tests__/First10Races.tests.ps1 b/__tests__/First10Races.tests.ps1 index 3eaa924..02a66ad 100644 --- a/__tests__/First10Races.tests.ps1 +++ b/__tests__/First10Races.tests.ps1 @@ -5,7 +5,7 @@ $dataPath = Join-Path -Path $scriptPath -ChildPath "First10Races.csv" Describe "Creating small named ranges with hyperlinks" { BeforeAll { - $path = Join-Path $Env:TEMP "results.xlsx" + $path = "TestDrive:\Results.xlsx" Remove-Item -Path $path -ErrorAction SilentlyContinue #Read race results, and group by race name : export 1 row to get headers, leaving enough rows aboce to put in a link for each race $results = Import-Csv -Path $dataPath | diff --git a/__tests__/InputItemParameter.tests.ps1 b/__tests__/InputItemParameter.tests.ps1 index 4c02609..6f2243e 100644 --- a/__tests__/InputItemParameter.tests.ps1 +++ b/__tests__/InputItemParameter.tests.ps1 @@ -2,7 +2,7 @@ if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() -replace "/$","" } Describe "Exporting with -Inputobject" { BeforeAll { - $path = Join-Path $Env:TEMP "results.xlsx" + $path = "TestDrive:\Results.xlsx" Remove-Item -Path $path -ErrorAction SilentlyContinue #Read race results, and group by race name : export 1 row to get headers, leaving enough rows aboce to put in a link for each race $results = ((Get-Process) + (Get-Process -id $PID)) | Select-Object -last 10 -Property Name, cpu, pm, handles, StartTime diff --git a/__tests__/Join-Worksheet.tests.ps1 b/__tests__/Join-Worksheet.tests.ps1 index c6b87b3..4adb952 100644 --- a/__tests__/Join-Worksheet.tests.ps1 +++ b/__tests__/Join-Worksheet.tests.ps1 @@ -27,7 +27,7 @@ ID,Product,Quantity,Price,Total Describe "Join Worksheet part 1" { BeforeAll { - $path = Join-Path $Env:TEMP "test.xlsx" + $path = "TestDrive:\test.xlsx" Remove-Item -Path $path -ErrorAction SilentlyContinue $data1 | Export-Excel -Path $path -WorkSheetname Oxford $data2 | Export-Excel -Path $path -WorkSheetname Abingdon @@ -92,7 +92,7 @@ Describe "Join Worksheet part 1" { } } } - $path = Join-Path $Env:TEMP "Test.xlsx" + $path = "TestDrive:\Test.xlsx" Remove-item -Path $path -ErrorAction SilentlyContinue #switched to CIM objects so test runs on V6 Describe "Join Worksheet part 2" { diff --git a/__tests__/PasswordProtection.tests.ps1 b/__tests__/PasswordProtection.tests.ps1 index ec4e6a6..fddfca2 100644 --- a/__tests__/PasswordProtection.tests.ps1 +++ b/__tests__/PasswordProtection.tests.ps1 @@ -8,7 +8,7 @@ Describe "Password Support" { Context "Password protected sheet" { BeforeAll { $password = "YouMustRememberThis" - $path = "$env:TEMP\Test.xlsx" + $path = "TestDrive:\Test.xlsx" Remove-Item $path -ErrorAction SilentlyContinue Get-Service | Select-Object -First 10 | Export-excel -password $password -Path $Path -DisplayPropertySet } diff --git a/__tests__/ProtectWorksheet.tests.ps1 b/__tests__/ProtectWorksheet.tests.ps1 index 14c8f65..f763535 100644 --- a/__tests__/ProtectWorksheet.tests.ps1 +++ b/__tests__/ProtectWorksheet.tests.ps1 @@ -1,6 +1,4 @@ -if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() -replace "/$","" } - -$path = Join-Path $Env:TEMP "test.xlsx" +$path = "TestDrive:\test.xlsx" Remove-Item -path $path -ErrorAction SilentlyContinue $excel = ConvertFrom-Csv @" Product, City, Gross, Net diff --git a/__tests__/RangePassing.ps1 b/__tests__/RangePassing.ps1 index c26f9d0..e8f04f4 100644 --- a/__tests__/RangePassing.ps1 +++ b/__tests__/RangePassing.ps1 @@ -1,8 +1,4 @@ - -if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() -replace "/$","" } -$notWindows = ($PSVersionTable.os -and $PSVersionTable.os -notMatch 'Windows' ) - -$path = Join-Path $Env:TEMP "test.xlsx" +$path = "TestDrive:\test.xlsx" describe "Consistent passing of ranges." { if ($notWindows) {Write-warning -message "Test uses get-service so only works on Windows" ; return} Context "Conditional Formatting" { diff --git a/__tests__/Remove-WorkSheet.tests.ps1 b/__tests__/Remove-WorkSheet.tests.ps1 index a720487..b433b45 100644 --- a/__tests__/Remove-WorkSheet.tests.ps1 +++ b/__tests__/Remove-WorkSheet.tests.ps1 @@ -10,7 +10,7 @@ Name,Age Jane,10 John,20 "@ - $xlFile1 = Join-Path $Env:TEMP "removeWorsheet1.xlsx" + $xlFile1 = "TestDrive:\RemoveWorsheet1.xlsx" Remove-Item $xlFile1 -ErrorAction SilentlyContinue $data | Export-Excel -Path $xlFile1 -WorksheetName Target1 @@ -18,7 +18,7 @@ John,20 $data | Export-Excel -Path $xlFile1 -WorksheetName Target3 $data | Export-Excel -Path $xlFile1 -WorksheetName Sheet1 - $xlFile2 = Join-Path $Env:TEMP "removeWorsheet2.xlsx" + $xlFile2 = "TestDrive:\RemoveWorsheet2.xlsx" Remove-Item $xlFile2 -ErrorAction SilentlyContinue $data | Export-Excel -Path $xlFile2 -WorksheetName Target1 @@ -65,7 +65,7 @@ John,20 it "Should delete sheet from multiple workbooks".PadRight(87) { - Get-ChildItem (Join-Path $Env:TEMP "removeWorsheet*.xlsx") | Remove-WorkSheet + Get-ChildItem "TestDrive:\RemoveWorsheet*.xlsx" | Remove-WorkSheet $actual = Get-ExcelSheetInfo -Path $xlFile1 diff --git a/__tests__/Set-Row_Set-Column-SetFormat.tests.ps1 b/__tests__/Set-Row_Set-Column-SetFormat.tests.ps1 index b802895..aa2798d 100644 --- a/__tests__/Set-Row_Set-Column-SetFormat.tests.ps1 +++ b/__tests__/Set-Row_Set-Column-SetFormat.tests.ps1 @@ -1,6 +1,4 @@ -Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force -if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() -replace "/$","" } -$path = Join-Path $Env:TEMP "test.xlsx" +$path = "TestDrive:\test.xlsx" $data = ConvertFrom-Csv -InputObject @" ID,Product,Quantity,Price @@ -300,7 +298,7 @@ Describe "Conditional Formatting" { } } -$path = Join-Path $Env:TEMP "test.xlsx" +$path = "TestDrive:\test.xlsx" $data2 = ConvertFrom-Csv -InputObject @" ID,Product,Quantity,Price,Total 12001,Nails,37,3.99,147.63 @@ -321,7 +319,7 @@ ID,Product,Quantity,Price,Total Describe "AutoNameRange data with a single property name" { BeforeEach { - $xlfile = Join-Path $Env:TEMP "testNamedRange.xlsx" + $xlfile = "TestDrive:\testNamedRange.xlsx" Remove-Item $xlfile -ErrorAction SilentlyContinue } diff --git a/__tests__/Validation.tests.ps1 b/__tests__/Validation.tests.ps1 index 7c30e43..62d055d 100644 --- a/__tests__/Validation.tests.ps1 +++ b/__tests__/Validation.tests.ps1 @@ -11,7 +11,7 @@ ID,Product,Quantity,Price 12011,Crowbar,7,23.48 "@ -$path = Join-Path $Env:TEMP "DataValidation.xlsx" +$path = "TestDrive:\DataValidation.xlsx" Describe "Data validation and protection" { Context "Data Validation rules" { From ab2405edad51bfbb10e4bae7fb6d89545b56186b Mon Sep 17 00:00:00 2001 From: ili101 Date: Mon, 26 Aug 2019 20:02:18 +0300 Subject: [PATCH 04/14] Scope fixes for TestDrive --- __tests__/Compare-WorkSheet.tests.ps1 | 80 +++++++++---------- __tests__/Copy-ExcelWorksheet.Tests.ps1 | 64 +++++++-------- __tests__/Export-Excel.Tests.ps1 | 28 +++---- __tests__/ExtraLongCmd.tests.ps1 | 14 ++-- __tests__/ProtectWorksheet.tests.ps1 | 17 ++-- .../Set-Row_Set-Column-SetFormat.tests.ps1 | 4 +- 6 files changed, 103 insertions(+), 104 deletions(-) diff --git a/__tests__/Compare-WorkSheet.tests.ps1 b/__tests__/Compare-WorkSheet.tests.ps1 index bd01b55..d3d87d2 100644 --- a/__tests__/Compare-WorkSheet.tests.ps1 +++ b/__tests__/Compare-WorkSheet.tests.ps1 @@ -3,24 +3,24 @@ if ($PSVersionTable.PSVersion.Major -gt 5) { Write-Warning "Can't test grid view on V6 and later" } else {Add-Type -AssemblyName System.Windows.Forms } Describe "Compare Worksheet" { + BeforeAll { + Remove-Item -Path "TestDrive:\server*.xlsx" + [System.Collections.ArrayList]$s = get-service | Select-Object -first 25 -Property Name, RequiredServices, CanPauseAndContinue, CanShutdown, CanStop, DisplayName, DependentServices, MachineName + $s | Export-Excel -Path TestDrive:\server1.xlsx + #$s is a zero based array, excel rows are 1 based and excel has a header row so Excel rows will be 2 + index in $s + $row4Displayname = $s[2].DisplayName + $s[2].DisplayName = "Changed from the orginal" + $d = $s[-1] | Select-Object -Property * + $d.DisplayName = "Dummy Service" + $d.Name = "Dummy" + $s.Insert(3,$d) + $row6Name = $s[5].name + $s.RemoveAt(5) + $s | Export-Excel -Path TestDrive:\server2.xlsx + #Assume default worksheet name, (sheet1) and column header for key ("name") + $comp = compare-WorkSheet "TestDrive:\Server1.xlsx" "TestDrive:\Server2.xlsx" | Sort-Object -Property _row, _file + } Context "Simple comparison output" { - BeforeAll { - Remove-Item -Path "TestDrive:\server*.xlsx" - [System.Collections.ArrayList]$s = get-service | Select-Object -first 25 -Property Name, RequiredServices, CanPauseAndContinue, CanShutdown, CanStop, DisplayName, DependentServices, MachineName - $s | Export-Excel -Path TestDrive:\server1.xlsx - #$s is a zero based array, excel rows are 1 based and excel has a header row so Excel rows will be 2 + index in $s - $row4Displayname = $s[2].DisplayName - $s[2].DisplayName = "Changed from the orginal" - $d = $s[-1] | Select-Object -Property * - $d.DisplayName = "Dummy Service" - $d.Name = "Dummy" - $s.Insert(3,$d) - $row6Name = $s[5].name - $s.RemoveAt(5) - $s | Export-Excel -Path TestDrive:\server2.xlsx - #Assume default worksheet name, (sheet1) and column header for key ("name") - $comp = compare-WorkSheet "TestDrive:\Server1.xlsx" "TestDrive:\Server2.xlsx" | Sort-Object -Property _row, _file - } it "Found the right number of differences " { $comp | should not beNullOrEmpty $comp.Count | should be 4 @@ -55,7 +55,7 @@ Describe "Compare Worksheet" { $ModulePath = (Get-Command -Name 'Compare-WorkSheet').Module.Path $PowerShellExec = if ($PSEdition -eq 'Core') {'pwsh.exe'} else {'powershell.exe'} $PowerShellPath = Join-Path -Path $PSHOME -ChildPath $PowerShellExec - . $PowerShellPath -Command ("Import-Module $ModulePath; " + '$null = Compare-WorkSheet "TestDrive:\Server1.xlsx" "TestDrive:\Server2.xlsx" -BackgroundColor ([System.Drawing.Color]::LightGreen) -GridView; Start-Sleep -sec 5') + . $PowerShellPath -Command ('Import-Module {0}; $null = Compare-WorkSheet "{1}Server1.xlsx" "{1}Server2.xlsx" -BackgroundColor ([System.Drawing.Color]::LightGreen) -GridView; Start-Sleep -sec 5' -f $ModulePath, (Resolve-Path 'TestDrive:').ProviderPath) } else { $null = Compare-WorkSheet "TestDrive:\Server1.xlsx" "TestDrive:\Server2.xlsx" -BackgroundColor ([System.Drawing.Color]::LightGreen) -GridView:$useGrid @@ -186,29 +186,29 @@ Describe "Compare Worksheet" { } Describe "Merge Worksheet" { + BeforeAll { + Remove-Item -Path "TestDrive:\server*.xlsx" , "TestDrive:\Combined*.xlsx" -ErrorAction SilentlyContinue + [System.Collections.ArrayList]$s = get-service | Select-Object -first 25 -Property * + + $s | Export-Excel -Path TestDrive:\server1.xlsx + + #$s is a zero based array, excel rows are 1 based and excel has a header row so Excel rows will be 2 + index in $s + $s[2].DisplayName = "Changed from the orginal" + + $d = $s[-1] | Select-Object -Property * + $d.DisplayName = "Dummy Service" + $d.Name = "Dummy" + $s.Insert(3,$d) + + $s.RemoveAt(5) + + $s | Export-Excel -Path TestDrive:\server2.xlsx + #Assume default worksheet name, (sheet1) and column header for key ("name") + Merge-Worksheet -Referencefile "TestDrive:\server1.xlsx" -Differencefile "TestDrive:\Server2.xlsx" -OutputFile "TestDrive:\combined1.xlsx" -Property name,displayname,startType -Key name + $excel = Open-ExcelPackage -Path "TestDrive:\combined1.xlsx" + $ws = $excel.Workbook.Worksheets["sheet1"] + } Context "Merge with 3 properties" { - BeforeAll { - Remove-Item -Path "TestDrive:\server*.xlsx" , "TestDrive:\Combined*.xlsx" -ErrorAction SilentlyContinue - [System.Collections.ArrayList]$s = get-service | Select-Object -first 25 -Property * - - $s | Export-Excel -Path TestDrive:\server1.xlsx - - #$s is a zero based array, excel rows are 1 based and excel has a header row so Excel rows will be 2 + index in $s - $s[2].DisplayName = "Changed from the orginal" - - $d = $s[-1] | Select-Object -Property * - $d.DisplayName = "Dummy Service" - $d.Name = "Dummy" - $s.Insert(3,$d) - - $s.RemoveAt(5) - - $s | Export-Excel -Path TestDrive:\server2.xlsx - #Assume default worksheet name, (sheet1) and column header for key ("name") - Merge-Worksheet -Referencefile "TestDrive:\server1.xlsx" -Differencefile "TestDrive:\Server2.xlsx" -OutputFile "TestDrive:\combined1.xlsx" -Property name,displayname,startType -Key name - $excel = Open-ExcelPackage -Path "TestDrive:\combined1.xlsx" - $ws = $excel.Workbook.Worksheets["sheet1"] - } it "Created a worksheet with the correct headings " { $ws | should not beNullOrEmpty $ws.Cells[ 1,1].Value | Should be "name" diff --git a/__tests__/Copy-ExcelWorksheet.Tests.ps1 b/__tests__/Copy-ExcelWorksheet.Tests.ps1 index b2d9bf0..d260522 100644 --- a/__tests__/Copy-ExcelWorksheet.Tests.ps1 +++ b/__tests__/Copy-ExcelWorksheet.Tests.ps1 @@ -1,36 +1,36 @@ -$path1 = "TestDrive:\Test1.xlsx" -$path2 = "TestDrive:\Test2.xlsx" -Remove-item -Path $path1, $path2 -ErrorAction SilentlyContinue - -$ProcRange = Get-Process | Export-Excel $path1 -DisplayPropertySet -WorkSheetname Processes -ReturnRange - -if ((Get-Culture).NumberFormat.CurrencySymbol -eq "£") {$OtherCurrencySymbol = "$"} -else {$OtherCurrencySymbol = "£"} -[PSCustOmobject][Ordered]@{ - Date = Get-Date - Formula1 = '=SUM(F2:G2)' - String1 = 'My String' - Float = [math]::pi - IPAddress = '10.10.25.5' - StrLeadZero = '07670' - StrComma = '0,26' - StrEngThousand = '1,234.56' - StrEuroThousand = '1.555,83' - StrDot = '1.2' - StrNegInt = '-31' - StrTrailingNeg = '31-' - StrParens = '(123)' - strLocalCurrency = ('{0}123.45' -f (Get-Culture).NumberFormat.CurrencySymbol ) - strOtherCurrency = ('{0}123.45' -f $OtherCurrencySymbol ) - StrE164Phone = '+32 (444) 444 4444' - StrAltPhone1 = '+32 4 4444 444' - StrAltPhone2 = '+3244444444' - StrLeadSpace = ' 123' - StrTrailSpace = '123 ' - Link1 = [uri]"https://github.com/dfinke/ImportExcel" - Link2 = "https://github.com/dfinke/ImportExcel" # Links are not copied correctly, hopefully this will be fixed at some future date -} | Export-Excel -NoNumberConversion IPAddress, StrLeadZero, StrAltPhone2 -WorkSheetname MixedTypes -Path $path2 Describe "Copy-Worksheet" { + $path1 = "TestDrive:\Test1.xlsx" + $path2 = "TestDrive:\Test2.xlsx" + Remove-Item -Path $path1, $path2 -ErrorAction SilentlyContinue + + $ProcRange = Get-Process | Export-Excel $path1 -DisplayPropertySet -WorkSheetname Processes -ReturnRange + + if ((Get-Culture).NumberFormat.CurrencySymbol -eq "£") { $OtherCurrencySymbol = "$" } + else { $OtherCurrencySymbol = "£" } + [PSCustOmobject][Ordered]@{ + Date = Get-Date + Formula1 = '=SUM(F2:G2)' + String1 = 'My String' + Float = [math]::pi + IPAddress = '10.10.25.5' + StrLeadZero = '07670' + StrComma = '0,26' + StrEngThousand = '1,234.56' + StrEuroThousand = '1.555,83' + StrDot = '1.2' + StrNegInt = '-31' + StrTrailingNeg = '31-' + StrParens = '(123)' + strLocalCurrency = ('{0}123.45' -f (Get-Culture).NumberFormat.CurrencySymbol ) + strOtherCurrency = ('{0}123.45' -f $OtherCurrencySymbol ) + StrE164Phone = '+32 (444) 444 4444' + StrAltPhone1 = '+32 4 4444 444' + StrAltPhone2 = '+3244444444' + StrLeadSpace = ' 123' + StrTrailSpace = '123 ' + Link1 = [uri]"https://github.com/dfinke/ImportExcel" + Link2 = "https://github.com/dfinke/ImportExcel" # Links are not copied correctly, hopefully this will be fixed at some future date + } | Export-Excel -NoNumberConversion IPAddress, StrLeadZero, StrAltPhone2 -WorkSheetname MixedTypes -Path $path2 Context "Simplest copy" { BeforeAll { Copy-ExcelWorkSheet -SourceWorkbook $path1 -DestinationWorkbook $path2 diff --git a/__tests__/Export-Excel.Tests.ps1 b/__tests__/Export-Excel.Tests.ps1 index 43fd806..622dbda 100644 --- a/__tests__/Export-Excel.Tests.ps1 +++ b/__tests__/Export-Excel.Tests.ps1 @@ -386,19 +386,19 @@ Describe ExportExcel { } } - Context "#Example 6 # Adding multiple conditional formats using short form syntax. " { - if ($notwindows) {Write-warning "Test only runs on Windows" ; return} - #Test adding mutliple conditional blocks and using the minimal syntax for new-ConditionalText - $path = "TestDrive:\Test.xlsx" - Remove-item -Path $path -ErrorAction SilentlyContinue + #Test adding mutliple conditional blocks and using the minimal syntax for new-ConditionalText + $path = "TestDrive:\Test.xlsx" + Remove-item -Path $path -ErrorAction SilentlyContinue - #Testing -Passthrough - $Excel = Get-Service | Select-Object Name, Status, DisplayName, ServiceName | - Export-Excel $path -PassThru -ConditionalText $( - New-ConditionalText Stop ([System.Drawing.Color]::DarkRed) ([System.Drawing.Color]::LightPink) - New-ConditionalText Running ([System.Drawing.Color]::Blue) ([System.Drawing.Color]::Cyan) - ) - $ws = $Excel.Workbook.Worksheets[1] + #Testing -Passthrough + $Excel = Get-Service | Select-Object Name, Status, DisplayName, ServiceName | + Export-Excel $path -PassThru -ConditionalText $( + New-ConditionalText Stop ([System.Drawing.Color]::DarkRed) ([System.Drawing.Color]::LightPink) + New-ConditionalText Running ([System.Drawing.Color]::Blue) ([System.Drawing.Color]::Cyan) + ) + $ws = $Excel.Workbook.Worksheets[1] + + Context "#Example 6 # Adding multiple conditional formats using short form syntax. " { it "Added two blocks of conditional formating for the data range " { $ws.ConditionalFormatting.Count | Should be 2 $ws.ConditionalFormatting[0].Address | Should be ($ws.Dimension.Address) @@ -411,8 +411,8 @@ Describe ExportExcel { $ws.ConditionalFormatting[1].Type | Should be "ContainsText" #Add RGB Comparison } - Close-ExcelPackage -ExcelPackage $Excel } + Close-ExcelPackage -ExcelPackage $Excel Context "#Example 7 # Update-FirstObjectProperties works " { $Array = @() @@ -991,7 +991,7 @@ Describe ExportExcel { } Context " # Parameters and ParameterSets" { - $Path = "TestDrive:\test.xlsx" + $Path = Join-Path (Resolve-Path 'TestDrive:').ProviderPath "test.xlsx" Remove-Item -Path $Path -ErrorAction SilentlyContinue $Processes = Get-Process | Select-Object -first 10 -Property Name, cpu, pm, handles, company diff --git a/__tests__/ExtraLongCmd.tests.ps1 b/__tests__/ExtraLongCmd.tests.ps1 index 026043a..8559a0d 100644 --- a/__tests__/ExtraLongCmd.tests.ps1 +++ b/__tests__/ExtraLongCmd.tests.ps1 @@ -1,9 +1,10 @@ if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() -replace "/$","" } -$path = "TestDrive:\test.xlsx" -remove-item -path $path -ErrorAction SilentlyContinue -ConvertFrom-Csv @" +Describe "Creating workbook with a single line" { + $path = "TestDrive:\test.xlsx" + remove-item -path $path -ErrorAction SilentlyContinue + ConvertFrom-Csv @" Product, City, Gross, Net Apple, London , 300, 250 Orange, London , 400, 350 @@ -17,10 +18,9 @@ Apple, New York, 1200,700 PivotChartDefinition=@{Title="Gross and net by city and product"; ChartType="ColumnClustered"; Column=6; Width=600; Height=360; YMajorUnit=500; YMinorUnit=100; YAxisNumberformat="$#,##0"; LegendPosition="Bottom"}}} -$excel = Open-ExcelPackage $path -$ws1 = $excel.Workbook.Worksheets[1] -$ws2 = $excel.Workbook.Worksheets[2] -Describe "Creating workbook with a single line" { + $excel = Open-ExcelPackage $path + $ws1 = $excel.Workbook.Worksheets[1] + $ws2 = $excel.Workbook.Worksheets[2] Context "Data Page" { It "Inserted the data and created the table " { $ws1.Tables[0] | Should not beNullOrEmpty diff --git a/__tests__/ProtectWorksheet.tests.ps1 b/__tests__/ProtectWorksheet.tests.ps1 index f763535..28c65b7 100644 --- a/__tests__/ProtectWorksheet.tests.ps1 +++ b/__tests__/ProtectWorksheet.tests.ps1 @@ -1,6 +1,8 @@ -$path = "TestDrive:\test.xlsx" -Remove-Item -path $path -ErrorAction SilentlyContinue -$excel = ConvertFrom-Csv @" +Describe "Setting worksheet protection " { + BeforeAll { + $path = "TestDrive:\test.xlsx" + Remove-Item -path $path -ErrorAction SilentlyContinue + $excel = ConvertFrom-Csv @" Product, City, Gross, Net Apple, London , 300, 250 Orange, London , 400, 350 @@ -11,14 +13,11 @@ Apple, New York, 1200,700 "@ | Export-Excel -Path $path -WorksheetName Sheet1 -PassThru -$ws = $excel.sheet1 + $ws = $excel.sheet1 -Set-WorkSheetProtection -WorkSheet $ws -IsProtected -BlockEditObject -AllowFormatRows -UnLockAddress "1:1" + Set-WorkSheetProtection -WorkSheet $ws -IsProtected -BlockEditObject -AllowFormatRows -UnLockAddress "1:1" -Close-ExcelPackage -ExcelPackage $excel - -Describe "Setting worksheet protection " { - BeforeAll { + Close-ExcelPackage -ExcelPackage $excel $excel = Open-ExcelPackage -Path $path $ws = $ws = $excel.sheet1 } diff --git a/__tests__/Set-Row_Set-Column-SetFormat.tests.ps1 b/__tests__/Set-Row_Set-Column-SetFormat.tests.ps1 index aa2798d..2b6bac0 100644 --- a/__tests__/Set-Row_Set-Column-SetFormat.tests.ps1 +++ b/__tests__/Set-Row_Set-Column-SetFormat.tests.ps1 @@ -282,7 +282,7 @@ Describe "Set-ExcelColumn, Set-ExcelRow and Set-ExcelRange" { Describe "Conditional Formatting" { BeforeAll { - Remove-Item $path + #Remove-Item $path $data = Get-Process | Where-Object company | Select-Object company, name, pm, handles, *mem* $cfmt = New-ConditionalFormattingIconSet -Range "c:c" -ConditionalFormat ThreeIconSet -IconType Arrows $data | Export-Excel -path $Path -AutoSize -ConditionalFormat $cfmt @@ -357,7 +357,7 @@ Sold,ID Describe "Table Formatting" { BeforeAll { - Remove-Item $path + #Remove-Item $path $excel = $data2 | Export-excel -path $path -WorksheetName Hardware -AutoNameRange -AutoSize -BoldTopRow -FreezeTopRow -PassThru $ws = $excel.Workbook.Worksheets[1] #test showfilter & TotalSettings From 9458a29a6bc1a691962f999a305bf071aeedfd1c Mon Sep 17 00:00:00 2001 From: ili101 Date: Mon, 26 Aug 2019 21:00:06 +0300 Subject: [PATCH 05/14] Readme --- README.md | 10 +++++----- appveyor.yml | 2 +- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index a3d0b1e..3aa3ed2 100644 --- a/README.md +++ b/README.md @@ -17,11 +17,11 @@ If this project helped you reduce the time to get your job done, let me know. | CI System | Environment | Status | |--------------|-------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| AppVeyor | Windows, Core preview, Ubuntu | [![Build status](https://ci.appveyor.com/api/projects/status/7c0s1g5rgdx1bbts/branch/master?svg=true)](https://ci.appveyor.com/project/ili101/Module-Template) | -| Azure DevOps | Windows | [![Build Status](https://dev.azure.com/ili101/ImportExcel/_apis/build/status/ili101.ImportExcel?branchName=master&jobName=Windows)](https://dev.azure.com/ili101/ImportExcel/_build/latest?definitionId=1&branchName=master) | -| Azure DevOps | Windows (Core) | [![Build Status](https://dev.azure.com/ili101/ImportExcel/_apis/build/status/ili101.ImportExcel?branchName=master&jobName=WindowsPSCore)](https://dev.azure.com/ili101/ImportExcel/_build/latest?definitionId=1&branchName=master) | -| Azure DevOps | Ubuntu | [![Build Status](https://dev.azure.com/ili101/ImportExcel/_apis/build/status/ili101.ImportExcel?branchName=master&jobName=Ubuntu)](https://dev.azure.com/ili101/ImportExcel/_build/latest?definitionId=1&branchName=master) | -| Azure DevOps | macOS | [![Build Status](https://dev.azure.com/ili101/ImportExcel/_apis/build/status/ili101.ImportExcel?branchName=master&jobName=macOS)](https://dev.azure.com/ili101/ImportExcel/_build/latest?definitionId=1&branchName=master) | +| AppVeyor | Windows, Core preview, Ubuntu | [![Build status](https://ci.appveyor.com/api/projects/status/7c0s1g5rgdx1bbts/branch/Tests?svg=true)](https://ci.appveyor.com/project/ili101/Module-Template) | +| Azure DevOps | Windows | [![Build Status](https://dev.azure.com/ili101/ImportExcel/_apis/build/status/ili101.ImportExcel?branchName=Tests&jobName=Windows)](https://dev.azure.com/ili101/ImportExcel/_build/latest?definitionId=1&branchName=Tests) | +| Azure DevOps | Windows (Core) | [![Build Status](https://dev.azure.com/ili101/ImportExcel/_apis/build/status/ili101.ImportExcel?branchName=Tests&jobName=WindowsPSCore)](https://dev.azure.com/ili101/ImportExcel/_build/latest?definitionId=1&branchName=Tests) | +| Azure DevOps | Ubuntu | [![Build Status](https://dev.azure.com/ili101/ImportExcel/_apis/build/status/ili101.ImportExcel?branchName=Tests&jobName=Ubuntu)](https://dev.azure.com/ili101/ImportExcel/_build/latest?definitionId=1&branchName=Tests) | +| Azure DevOps | macOS | [![Build Status](https://dev.azure.com/ili101/ImportExcel/_apis/build/status/ili101.ImportExcel?branchName=Tests&jobName=macOS)](https://dev.azure.com/ili101/ImportExcel/_build/latest?definitionId=1&branchName=Tests) | diff --git a/appveyor.yml b/appveyor.yml index 7c24f2b..47012cc 100644 --- a/appveyor.yml +++ b/appveyor.yml @@ -41,7 +41,7 @@ test_script: # Deploy deploy_script: - ps: '& .\__tests__\CI.ps1 -Artifact' - - ps: '$null = Install-PackageProvider -Name NuGet -Force ; & .\__tests__\Publish.ps1' + #- ps: '$null = Install-PackageProvider -Name NuGet -Force ; & .\__tests__\Publish.ps1' # Linux setup for: From 8047631014e44b459600bfdef912bf0e5e4947f8 Mon Sep 17 00:00:00 2001 From: ili101 Date: Mon, 26 Aug 2019 22:23:12 +0300 Subject: [PATCH 06/14] Linux Tests rm and macOS mono-libgdiplus --- azure-pipelines.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/azure-pipelines.yml b/azure-pipelines.yml index c8ff6c8..c125bce 100644 --- a/azure-pipelines.yml +++ b/azure-pipelines.yml @@ -79,6 +79,8 @@ jobs: vmImage: 'macOS-latest' steps: + - script: brew install mono-libgdiplus + displayName: 'Install mono-libgdiplus' - powershell: 'Install-Module -Name Pester -Force' displayName: 'Update Pester' - powershell: './__tests__/CI.ps1 -Test' From 89a59b1eba7edb8e254de1cf3145ae1f0f26188e Mon Sep 17 00:00:00 2001 From: ili101 Date: Tue, 27 Aug 2019 03:05:56 +0300 Subject: [PATCH 07/14] Samples tests workaround for Linux --- __tests__/Compare-WorkSheet.tests.ps1 | 1 + __tests__/Export-Excel.Tests.ps1 | 5 +- __tests__/Join-Worksheet.tests.ps1 | 1 + __tests__/Samples/Get-CimInstanceDisk.xml | Bin 0 -> 2232 bytes .../Samples/Get-CimInstanceNetAdapter.xml | Bin 0 -> 2838 bytes __tests__/Samples/Get-Process.xml | 29880 ++++++++++++++++ __tests__/Samples/Get-Service.xml | Bin 0 -> 148546 bytes __tests__/Samples/Samples.ps1 | 38 + 8 files changed, 29922 insertions(+), 3 deletions(-) create mode 100644 __tests__/Samples/Get-CimInstanceDisk.xml create mode 100644 __tests__/Samples/Get-CimInstanceNetAdapter.xml create mode 100644 __tests__/Samples/Get-Process.xml create mode 100644 __tests__/Samples/Get-Service.xml create mode 100644 __tests__/Samples/Samples.ps1 diff --git a/__tests__/Compare-WorkSheet.tests.ps1 b/__tests__/Compare-WorkSheet.tests.ps1 index d3d87d2..94e1112 100644 --- a/__tests__/Compare-WorkSheet.tests.ps1 +++ b/__tests__/Compare-WorkSheet.tests.ps1 @@ -1,5 +1,6 @@ #Requires -Modules Pester #Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force +. "$PSScriptRoot\Samples\Samples.ps1" if ($PSVersionTable.PSVersion.Major -gt 5) { Write-Warning "Can't test grid view on V6 and later" } else {Add-Type -AssemblyName System.Windows.Forms } Describe "Compare Worksheet" { diff --git a/__tests__/Export-Excel.Tests.ps1 b/__tests__/Export-Excel.Tests.ps1 index 622dbda..70b362f 100644 --- a/__tests__/Export-Excel.Tests.ps1 +++ b/__tests__/Export-Excel.Tests.ps1 @@ -1,8 +1,7 @@ #Requires -Modules Pester -Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force -if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() -replace "/$","" } -$notWindows = ($PSVersionTable.os -and $PSVersionTable.os -notMatch 'Windows' ) +#Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force +. "$PSScriptRoot\Samples\Samples.ps1" if (Get-process -Name Excel,xlim -ErrorAction SilentlyContinue) { Write-Warning -Message "You need to close Excel before running the tests." ; return} Describe ExportExcel { diff --git a/__tests__/Join-Worksheet.tests.ps1 b/__tests__/Join-Worksheet.tests.ps1 index 4adb952..35d029c 100644 --- a/__tests__/Join-Worksheet.tests.ps1 +++ b/__tests__/Join-Worksheet.tests.ps1 @@ -24,6 +24,7 @@ ID,Product,Quantity,Price,Total 12010,Drill,11,8,88 12012,Pliers,3,14.99,44.97 "@ +. "$PSScriptRoot\Samples\Samples.ps1" Describe "Join Worksheet part 1" { BeforeAll { diff --git a/__tests__/Samples/Get-CimInstanceDisk.xml b/__tests__/Samples/Get-CimInstanceDisk.xml new file mode 100644 index 0000000000000000000000000000000000000000..9c9d578610a03eba0c728a40a10df71e5a73b8a6 GIT binary patch literal 2232 zcmc(f+fLg+5QhJ2q`rfd2T1IknpP||EV&@g+8mn zNOh!BFs3?WUq_yCatT_>9HUw1d(L?So4I~H_%oXcqoJlkMw^|jHLdG|*6^xTdD1$z+jvk%)tVU!PJGO>o|I^hraSR&618$EYuChHKrwQ3v?PIE9 z((J2kzpKkFTKFE}_x8c2r%#NoI;0@&ri{Rp6~O#4PVLIkgD06_!s_s zp9rb0vG@`8jKdD|^$bQ}8iO76SX*HC7}l4nuD4=4N zd-+=~zMtjy=&d6V+Hlx|(Jmak1)E*iY%}eiMBp|Zm;Z;!);lu!^;srkdf((vCoJ!z cPdkI}4n^CXwU_Cab;+let6xz5qEhl}|VX-I|vkSrg`Ra3KAVRt9qHV}z zcjt2ET;B7}nf?7(){XA;U9keS6)K`P&_rW>R7OSR+*5Gh3^Kno(va2It>0@(`>7Ag z(_(dXkB*T#^mBX%%tUC5dHP7^7*CkbvuC3D!k+CJ((*b{fp$vI-WgT&TCcDgXz6F5 zFG%-QSI>D+Sd;RSw`#B>Np2}yQOns6@oh@4hnFoq;IoZJjIN1i%=68SL;4m;RWrU8 zO^2_?ET<-WYpmFATl468-DTpsU5Uv&*yqLd7W}sRQpcx0NE_}`zB3ogj9!SRHS~-? z%(6Chv2>YF^5z%_tlCUM&imhZf@hg*wVup*j9XycaGYs?!3YG5Uv1>)j14JU4?$>7 z<|6%IT!jrCxN1y@7@PFi$rK%aNtO(AzqgMbL;Zrs&Pha0Ot0t7rYCJyBGzZ@8)Eqr zeLE-7!v3ajedqPzJ{qICF47*_&AZqkV<$1Iw~O}~{UR;P*yaoLEdxmiToK0@EL%hy z(t1vJ(P;@l^N#s=t0vRFo=cnYtVpg4#T|9QSA}iWAwc_Iy`D4c_WfzKTC|-@H!j98 zENQ}|H0T_{k6Uuo1o^KH(H_~JgWM($+IpYL_WrzI>JnR3Dsq;`-ZeLKN?lG9*{-|? z`ut)!KRH6q|FwR+ONHVg{8;zoIqF9`ANTWUwSJUTf=A2xkxu(A9+{SxtRJN#aOsNk z_WX6jDxTdTb`RN|*5oAD>Dx&>=Uxdo*LEKcka=KKqq5koW&dsVSLScNH`IVM=YAI( jis-c) + + + System.Diagnostics.Process + System.ComponentModel.Component + System.MarshalByRefObject + System.Object + + System.Diagnostics.Process (ApCent) + + 8 + false +
2019-08-15T19:34:28.9085966+03:00
+ 10780 + . + 45560 + 45560 + 54538240 + 54538240 + 679376 + 679376 + 60116992 + 60116992 + 78831616 + 78831616 + 627404800 + 627404800 + 54538240 + 54538240 + ApCent + 1 + + + System.Diagnostics.ProcessThreadCollection + System.Collections.ReadOnlyCollectionBase + System.Object + + + + + System.Diagnostics.ProcessThread + System.ComponentModel.Component + System.MarshalByRefObject + System.Object + + System.Diagnostics.ProcessThread + + 8 + 10 + 10784 + 140719955419728 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 10880 + 140719955419728 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 10 + 11 + 10884 + 140719955419728 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 11160 + 140719955419728 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 12336 + 140719955419728 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 12496 + 140719955419728 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 11356 + 140719955419728 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 6 + 6 + 13204 + 140719955419728 + Wait + ExecutionDelay + + + + + + + System.Diagnostics.ProcessThread + + 6 + 6 + 12584 + 140719955419728 + Wait + ExecutionDelay + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 13440 + 140719955419728 + Wait + EventPairLow + + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 19048 + 140719955419728 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 13 + 15 + 10692 + 140719955419728 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 23032 + 140719955419728 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 8896 + 140719955419728 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 26264 + 140719955419728 + Wait + EventPairLow + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 1416 + 140719955419728 + Wait + EventPairLow + + + + + + + 16 + + + System.Collections.ArrayList + System.Object + + + + + + + + + + + + + + + + + + + + + false + + + 732 + 606478336 + 606478336 + false + 26746880 + 26746880 + + PT3.546875S + PT7.328125S + PT3.78125S + + + System.IntPtr + System.ValueType + System.Object + + 0 + + + true + + + + + ApCent + 1 + 732 + 606478336 + 26746880 + 54538240 + 45560 + + + + 7.328125 + + + + + Process + + + + + System.Diagnostics.Process (ApplicationFrameHost) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + Microsoft.Win32.SafeHandles.SafeHandleZeroOrMinusOneIsInvalid + System.Runtime.InteropServices.SafeHandle + System.Runtime.ConstrainedExecution.CriticalFinalizerObject + System.Object + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 4304 + + 8 + false +
2019-08-15T19:35:18.4407991+03:00
+ 21284 + . + + + 1413120 + + + + 204800 + + + + System.Diagnostics.ProcessModuleCollection + System.Collections.ReadOnlyCollectionBase + System.Object + + + + + System.Diagnostics.ProcessModule + System.ComponentModel.Component + System.MarshalByRefObject + System.Object + + System.Diagnostics.ProcessModule (ApplicationFrameHost.exe) + + ApplicationFrameHost.exe + C:\Windows\system32\ApplicationFrameHost.exe + 140695356768256 + 81920 + 140695356775552 + File: C:\Windows\system32\ApplicationFrameHost.exe_x000D__x000A_InternalName: Application Frame Host_x000D__x000A_OriginalFilename: ApplicationFrameHost.exe_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Application Frame Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 80 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Application Frame Host + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNEL32.DLL) + + KERNEL32.DLL + C:\Windows\System32\KERNEL32.DLL + 140719912779776 + 733184 + 140719912876560 + File: C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName: kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 716 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNELBASE.dll) + + KERNELBASE.dll + C:\Windows\System32\KERNELBASE.dll + 140719894495232 + 2699264 + 140719894841456 + File: C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName: Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2636 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcrt.dll) + + msvcrt.dll + C:\Windows\System32\msvcrt.dll + 140719950004224 + 647168 + 140719950035120 + File: C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName: msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion: 7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT CRT DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 7.0.17763.475_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 7.0.17763.475 (WinBuild.160101.0800) + 7.0.17763.475 + Windows NT CRT DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (combase.dll) + + combase.dll + C:\Windows\System32\combase.dll + 140719950856192 + 3325952 + 140719951769888 + File: C:\Windows\System32\combase.dll_x000D__x000A_InternalName: COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft COM for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3248 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft COM for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ucrtbase.dll) + + ucrtbase.dll + C:\Windows\System32\ucrtbase.dll + 140719893446656 + 1024000 + 140719893528400 + File: C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName: ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1000 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RPCRT4.dll) + + RPCRT4.dll + C:\Windows\System32\RPCRT4.dll + 140719917629440 + 1187840 + 140719918006928 + File: C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName: rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Procedure Call Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Procedure Call Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + + bcryptPrimitives.dll + C:\Windows\System32\bcryptPrimitives.dll + 140719890235392 + 516096 + 140719890461152 + File: C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName: bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 504 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dxgi.dll) + + dxgi.dll + C:\Windows\system32\dxgi.dll + 140719868149760 + 794624 + 140719868291472 + File: C:\Windows\system32\dxgi.dll_x000D__x000A_InternalName: dxgi.dll_x000D__x000A_OriginalFilename: dxgi.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: DirectX Graphics Infrastructure_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 776 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + DirectX Graphics Infrastructure + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (win32u.dll) + + win32u.dll + C:\Windows\System32\win32u.dll + 140719906816000 + 131072 + 0 + File: C:\Windows\System32\win32u.dll_x000D__x000A_InternalName: Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32u_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 128 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32u + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32.dll) + + gdi32.dll + C:\Windows\System32\gdi32.dll + 140719950659584 + 167936 + 140719950676208 + File: C:\Windows\System32\gdi32.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32full.dll) + + gdi32full.dll + C:\Windows\System32\gdi32full.dll + 140719905112064 + 1675264 + 140719905369792 + File: C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1636 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcp_win.dll) + + msvcp_win.dll + C:\Windows\System32\msvcp_win.dll + 140719889580032 + 655360 + 140719889658864 + File: C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName: msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 640 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USER32.dll) + + USER32.dll + C:\Windows\System32\USER32.dll + 140719909306368 + 1667072 + 140719909414448 + File: C:\Windows\System32\USER32.dll_x000D__x000A_InternalName: user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows USER API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows USER API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IMM32.DLL) + + IMM32.DLL + C:\Windows\System32\IMM32.DLL + 140719906947072 + 188416 + 140719906952688 + File: C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName: imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows IMM32 API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (kernel.appcore.dll) + + kernel.appcore.dll + C:\Windows\System32\kernel.appcore.dll + 140719888400384 + 69632 + 140719888415648 + File: C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName: kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AppModel API Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 68 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AppModel API Host + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (clbcatq.dll) + + clbcatq.dll + C:\Windows\System32\clbcatq.dll + 140719916908544 + 663552 + 140719916925344 + File: C:\Windows\System32\clbcatq.dll_x000D__x000A_InternalName: CLBCATQ.DLL_x000D__x000A_OriginalFilename: CLBCATQ.DLL_x000D__x000A_FileVersion: 2001.12.10941.16384 (WinBuild.160101.0800)_x000D__x000A_FileDescription: COM+ Configuration Catalog_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 648 + Microsoft Corporation + 2001.12.10941.16384 (WinBuild.160101.0800) + 10.0.17763.1 + COM+ Configuration Catalog + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ApplicationFrame.dll) + + ApplicationFrame.dll + C:\Windows\System32\ApplicationFrame.dll + 140719235465216 + 692224 + 140719235652272 + File: C:\Windows\System32\ApplicationFrame.dll_x000D__x000A_InternalName: Application Frame_x000D__x000A_OriginalFilename: ApplicationFrame.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Application Frame_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 676 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Application Frame + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SHCORE.dll) + + SHCORE.dll + C:\Windows\System32\SHCORE.dll + 140719907143680 + 688128 + 140719907388560 + File: C:\Windows\System32\SHCORE.dll_x000D__x000A_InternalName: SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: SHCORE_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 672 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + SHCORE + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SHLWAPI.dll) + + SHLWAPI.dll + C:\Windows\System32\SHLWAPI.dll + 140719945547776 + 335872 + 140719945588304 + File: C:\Windows\System32\SHLWAPI.dll_x000D__x000A_InternalName: SHLWAPI_x000D__x000A_OriginalFilename: SHLWAPI.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Shell Light-weight Utility Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 328 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Shell Light-weight Utility Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (OLEAUT32.dll) + + OLEAUT32.dll + C:\Windows\System32\OLEAUT32.dll + 140719946465280 + 802816 + 140719946574624 + File: C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName: OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OLEAUT32.DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 784 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + OLEAUT32.DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (PROPSYS.dll) + + PROPSYS.dll + C:\Windows\System32\PROPSYS.dll + 140719831187456 + 1736704 + 140719831447408 + File: C:\Windows\System32\PROPSYS.dll_x000D__x000A_InternalName: propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion: 7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Property System_x000D__x000A_Product: Windows® Search_x000D__x000A_ProductVersion: 7.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1696 + Microsoft Corporation + 7.0.17763.1 (WinBuild.160101.0800) + 7.0.17763.1 + Microsoft Property System + Windows® Search + + + + + System.Diagnostics.ProcessModule (sechost.dll) + + sechost.dll + C:\Windows\System32\sechost.dll + 140719948824576 + 647168 + 140719948951504 + File: C:\Windows\System32\sechost.dll_x000D__x000A_InternalName: sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Host for SCM/SDDL/LSA Lookup APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (twinapi.appcore.dll) + + twinapi.appcore.dll + C:\Windows\System32\twinapi.appcore.dll + 140719861596160 + 2150400 + 140719862039776 + File: C:\Windows\System32\twinapi.appcore.dll_x000D__x000A_InternalName: twinapi.appcore_x000D__x000A_OriginalFilename: twinapi.appcore.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: twinapi.appcore_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2100 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + twinapi.appcore + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (UxTheme.dll) + + UxTheme.dll + C:\Windows\System32\UxTheme.dll + 140719860547584 + 638976 + 140719860712368 + File: C:\Windows\System32\UxTheme.dll_x000D__x000A_InternalName: UxTheme.dll_x000D__x000A_OriginalFilename: UxTheme.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft UxTheme Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 624 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft UxTheme Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (DEVOBJ.dll) + + DEVOBJ.dll + C:\Windows\System32\DEVOBJ.dll + 140719885844480 + 167936 + 140719885874112 + File: C:\Windows\System32\DEVOBJ.dll_x000D__x000A_InternalName: devinfoset.dll_x000D__x000A_OriginalFilename: devinfoset.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Device Information Set DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Device Information Set DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cfgmgr32.dll) + + cfgmgr32.dll + C:\Windows\System32\cfgmgr32.dll + 140719889252352 + 303104 + 140719889325904 + File: C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName: cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Configuration Manager DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 296 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Configuration Manager DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (TWINAPI.dll) + + TWINAPI.dll + C:\Windows\System32\TWINAPI.dll + 140719346810880 + 643072 + 140719346851504 + File: C:\Windows\System32\TWINAPI.dll_x000D__x000A_InternalName: twinapi_x000D__x000A_OriginalFilename: twinapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: twinapi_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + twinapi + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (d2d1.dll) + + d2d1.dll + C:\Windows\System32\d2d1.dll + 140719843311616 + 6021120 + 140719844430608 + File: C:\Windows\System32\d2d1.dll_x000D__x000A_InternalName: d2d1_x000D__x000A_OriginalFilename: d2d1_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft D2D Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 5880 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft D2D Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcp47mrm.dll) + + bcp47mrm.dll + C:\Windows\System32\bcp47mrm.dll + 140719398584320 + 172032 + 140719398614560 + File: C:\Windows\System32\bcp47mrm.dll_x000D__x000A_InternalName: BCP47mrm.dll_x000D__x000A_OriginalFilename: BCP47mrm.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: BCP47 Language Classes for Resource Management_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 168 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + BCP47 Language Classes for Resource Management + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (d3d11.dll) + + d3d11.dll + C:\Windows\System32\d3d11.dll + 140719840690176 + 2613248 + 140719841252320 + File: C:\Windows\System32\d3d11.dll_x000D__x000A_InternalName: D3D11.dll_x000D__x000A_OriginalFilename: D3D11.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Direct3D 11 Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2552 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Direct3D 11 Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dwmapi.dll) + + dwmapi.dll + C:\Windows\System32\dwmapi.dll + 140719861399552 + 188416 + 140719861412880 + File: C:\Windows\System32\dwmapi.dll_x000D__x000A_InternalName: dwmapi.dll_x000D__x000A_OriginalFilename: dwmapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Desktop Window Manager API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft Desktop Window Manager API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RMCLIENT.dll) + + RMCLIENT.dll + C:\Windows\System32\RMCLIENT.dll + 140719864479744 + 163840 + 140719864516304 + File: C:\Windows\System32\RMCLIENT.dll_x000D__x000A_InternalName: rmclient.dll_x000D__x000A_OriginalFilename: rmclient.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Resource Manager Client_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 160 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Resource Manager Client + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPT32.dll) + + CRYPT32.dll + C:\Windows\System32\CRYPT32.dll + 140719891480576 + 1945600 + 140719891804832 + File: C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName: CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Crypto API32_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1900 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Crypto API32 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSASN1.dll) + + MSASN1.dll + C:\Windows\System32\MSASN1.dll + 140719887876096 + 73728 + 140719887898576 + File: C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName: msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: ASN.1 Runtime APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 72 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + ASN.1 Runtime APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPTSP.dll) + + CRYPTSP.dll + C:\Windows\System32\CRYPTSP.dll + 140719889121280 + 94208 + 140719889138512 + File: C:\Windows\System32\CRYPTSP.dll_x000D__x000A_InternalName: cryptsp.dll_x000D__x000A_OriginalFilename: cryptsp.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Cryptographic Service Provider API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 92 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Cryptographic Service Provider API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll) + + OneCoreUAPCommonProxyStub.dll + C:\Windows\System32\OneCoreUAPCommonProxyStub.dll + 140719791996928 + 7585792 + 140719792085488 + File: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll_x000D__x000A_InternalName: OneCoreUAPCommonProxyStub.dll_x000D__x000A_OriginalFilename: OneCoreUAPCommonProxyStub.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OneCoreUAP Common Proxy Stub_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 7408 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + OneCoreUAP Common Proxy Stub + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSCTF.dll) + + MSCTF.dll + C:\Windows\System32\MSCTF.dll + 140719947317248 + 1486848 + 140719947597184 + File: C:\Windows\System32\MSCTF.dll_x000D__x000A_InternalName: MSCTF_x000D__x000A_OriginalFilename: MSCTF.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MSCTF Server DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1452 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MSCTF Server DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (D3D10Warp.dll) + + D3D10Warp.dll + C:\Windows\system32\D3D10Warp.dll + 140718043889664 + 7581696 + 140718049668720 + File: C:\Windows\system32\D3D10Warp.dll_x000D__x000A_InternalName: D3D10Warp.dll_x000D__x000A_OriginalFilename: D3D10Warp.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Direct3D Rasterizer_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 7404 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Direct3D Rasterizer + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (advapi32.dll) + + advapi32.dll + C:\Windows\System32\advapi32.dll + 140719915335680 + 667648 + 140719915417840 + File: C:\Windows\System32\advapi32.dll_x000D__x000A_InternalName: advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Advanced Windows 32 Base API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 652 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Advanced Windows 32 Base API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dcomp.dll) + + dcomp.dll + C:\Windows\System32\dcomp.dll + 140719849340928 + 1847296 + 140719849715008 + File: C:\Windows\System32\dcomp.dll_x000D__x000A_InternalName: dcomp.dll_x000D__x000A_OriginalFilename: dcomp.dll_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft DirectComposition Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1804 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Microsoft DirectComposition Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CoreMessaging.dll) + + CoreMessaging.dll + C:\Windows\System32\CoreMessaging.dll + 140719854845952 + 925696 + 140719855185296 + File: C:\Windows\System32\CoreMessaging.dll_x000D__x000A_InternalName: CoreMessaging.dll_x000D__x000A_OriginalFilename: CoreMessaging.dll_x000D__x000A_FileVersion: 10.0.17763.194_x000D__x000A_FileDescription: Microsoft CoreMessaging Dll_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.194_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 904 + Microsoft Corporation + 10.0.17763.194 + 10.0.17763.194 + Microsoft CoreMessaging Dll + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (UIAutomationCore.DLL) + + UIAutomationCore.DLL + C:\Windows\system32\UIAutomationCore.DLL + 140719367651328 + 2469888 + 140719368013472 + File: C:\Windows\system32\UIAutomationCore.DLL_x000D__x000A_InternalName: UIAutomationCore.dll_x000D__x000A_OriginalFilename: UIAutomationCore.dll.mui_x000D__x000A_FileVersion: 7.2.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft UI Automation Core_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2412 + Microsoft Corporation + 7.2.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft UI Automation Core + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (Bcp47Langs.dll) + + Bcp47Langs.dll + C:\Windows\system32\Bcp47Langs.dll + 140719366537216 + 376832 + 140719366617696 + File: C:\Windows\system32\Bcp47Langs.dll_x000D__x000A_InternalName: BCP47Lang.dll_x000D__x000A_OriginalFilename: BCP47Lang.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: BCP47 Language Classes_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 368 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + BCP47 Language Classes + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SHELL32.dll) + + SHELL32.dll + C:\Windows\System32\SHELL32.dll + 140719923593216 + 21954560 + 140719924695456 + File: C:\Windows\System32\SHELL32.dll_x000D__x000A_InternalName: SHELL32_x000D__x000A_OriginalFilename: SHELL32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Shell Common Dll_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 21440 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Shell Common Dll + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (windows.storage.dll) + + windows.storage.dll + C:\Windows\System32\windows.storage.dll + 140719897444352 + 7643136 + 140719899226624 + File: C:\Windows\System32\windows.storage.dll_x000D__x000A_InternalName: Windows.Storage_x000D__x000A_OriginalFilename: Windows.Storage.dll.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft WinRT Storage API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 7464 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft WinRT Storage API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (profapi.dll) + + profapi.dll + C:\Windows\System32\profapi.dll + 140719888531456 + 147456 + 140719888564400 + File: C:\Windows\System32\profapi.dll_x000D__x000A_InternalName: PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: User Profile Basic API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + User Profile Basic API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (powrprof.dll) + + powrprof.dll + C:\Windows\System32\powrprof.dll + 140719888007168 + 380928 + 140719888020992 + File: C:\Windows\System32\powrprof.dll_x000D__x000A_InternalName: POWRPROF_x000D__x000A_OriginalFilename: POWRPROF.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Power Profile Helper DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 372 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Power Profile Helper DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (Windows.StateRepositoryPS.dll) + + Windows.StateRepositoryPS.dll + C:\Windows\System32\Windows.StateRepositoryPS.dll + 140719444393984 + 1216512 + 140719444420016 + File: C:\Windows\System32\Windows.StateRepositoryPS.dll_x000D__x000A_InternalName: Windows StateRepository Proxy/Stub Server_x000D__x000A_OriginalFilename: Windows.StateRepositoryPS.dll_x000D__x000A_FileVersion: 10.0.17763.557 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows StateRepository Proxy/Stub Server_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.557_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1188 + Microsoft Corporation + 10.0.17763.557 (WinBuild.160101.0800) + 10.0.17763.557 + Windows StateRepository Proxy/Stub Server + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (windowscodecs.dll) + + windowscodecs.dll + C:\Windows\system32\windowscodecs.dll + 140719807528960 + 1802240 + 140719808100048 + File: C:\Windows\system32\windowscodecs.dll_x000D__x000A_InternalName: WindowsCodecs_x000D__x000A_OriginalFilename: WindowsCodecs_x000D__x000A_FileVersion: 10.0.17763.55 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Windows Codecs Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.55_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1760 + Microsoft Corporation + 10.0.17763.55 (WinBuild.160101.0800) + 10.0.17763.55 + Microsoft Windows Codecs Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (mrmcorer.dll) + + mrmcorer.dll + C:\Windows\SYSTEM32\mrmcorer.dll + 140719527231488 + 1077248 + 140719527499040 + File: C:\Windows\SYSTEM32\mrmcorer.dll_x000D__x000A_InternalName: MrmCore_x000D__x000A_OriginalFilename: MrmCore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Windows MRM_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1052 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft Windows MRM + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (iertutil.dll) + + iertutil.dll + C:\Windows\SYSTEM32\iertutil.dll + 140719686811648 + 2785280 + 140719687033936 + File: C:\Windows\SYSTEM32\iertutil.dll_x000D__x000A_InternalName: IeRtUtil.dll_x000D__x000A_OriginalFilename: IeRtUtil.dll.mui_x000D__x000A_FileVersion: 11.00.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Run time utility for Internet Explorer_x000D__x000A_Product: Internet Explorer_x000D__x000A_ProductVersion: 11.00.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2720 + Microsoft Corporation + 11.00.17763.1 (WinBuild.160101.0800) + 11.00.17763.1 + Run time utility for Internet Explorer + Internet Explorer + + + + + System.Diagnostics.ProcessModule (Bcrypt.dll) + + Bcrypt.dll + C:\Windows\System32\Bcrypt.dll + 140719897247744 + 155648 + 140719897281296 + File: C:\Windows\System32\Bcrypt.dll_x000D__x000A_InternalName: bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 152 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (Windows.UI.dll) + + Windows.UI.dll + C:\Windows\System32\Windows.UI.dll + 140719393931264 + 1286144 + 140719394124800 + File: C:\Windows\System32\Windows.UI.dll_x000D__x000A_InternalName: Windows Runtime UI Foundation DLL_x000D__x000A_OriginalFilename: Windows.UI.dll.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Runtime UI Foundation DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1256 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Runtime UI Foundation DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (InputHost.dll) + + InputHost.dll + C:\Windows\System32\InputHost.dll + 140719452192768 + 835584 + 140719452738880 + File: C:\Windows\System32\InputHost.dll_x000D__x000A_InternalName: _x000D__x000A_OriginalFilename: _x000D__x000A_FileVersion: _x000D__x000A_FileDescription: _x000D__x000A_Product: _x000D__x000A_ProductVersion: _x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: _x000D__x000A_ + + + + + 816 + + + + + + + + + + System.Diagnostics.ProcessModule (TextInputFramework.dll) + + TextInputFramework.dll + C:\Windows\System32\TextInputFramework.dll + 140719392555008 + 610304 + 140719392710816 + File: C:\Windows\System32\TextInputFramework.dll_x000D__x000A_InternalName: "TextInputFramework.DYNLINK"_x000D__x000A_OriginalFilename: "TextInputFramework.DYNLINK"_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: "TextInputFramework.DYNLINK"_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 596 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + "TextInputFramework.DYNLINK" + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CoreUIComponents.dll) + + CoreUIComponents.dll + C:\Windows\System32\CoreUIComponents.dll + 140719821684736 + 3284992 + 140719822198848 + File: C:\Windows\System32\CoreUIComponents.dll_x000D__x000A_InternalName: CoreUIComponents.dll_x000D__x000A_OriginalFilename: CoreUIComponents.dll_x000D__x000A_FileVersion: 10.0.17763.1_x000D__x000A_FileDescription: Microsoft Core UI Components Dll_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3208 + Microsoft Corporation + 10.0.17763.1 + 10.0.17763.1 + Microsoft Core UI Components Dll + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ntmarta.dll) + + ntmarta.dll + C:\Windows\SYSTEM32\ntmarta.dll + 140719871557632 + 200704 + 140719871586448 + File: C:\Windows\SYSTEM32\ntmarta.dll_x000D__x000A_InternalName: ntmarta.dll_x000D__x000A_OriginalFilename: ntmarta.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT MARTA provider_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 196 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows NT MARTA provider + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (wintypes.dll) + + wintypes.dll + C:\Windows\SYSTEM32\wintypes.dll + 140719817687040 + 1388544 + 140719817864912 + File: C:\Windows\SYSTEM32\wintypes.dll_x000D__x000A_InternalName: Windows Base Types DLL_x000D__x000A_OriginalFilename: WinTypes.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Base Types DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1356 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Base Types DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (UIAnimation.dll) + + UIAnimation.dll + C:\Windows\System32\UIAnimation.dll + 140719805956096 + 294912 + 140719806033856 + File: C:\Windows\System32\UIAnimation.dll_x000D__x000A_InternalName: UIAnimation_x000D__x000A_OriginalFilename: UIAnimation.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Animation Manager_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 288 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Animation Manager + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (rometadata.dll) + + rometadata.dll + C:\Windows\SYSTEM32\rometadata.dll + 140719140175872 + 241664 + 140719140323392 + File: C:\Windows\SYSTEM32\rometadata.dll_x000D__x000A_InternalName: RoMetadata.dll_x000D__x000A_OriginalFilename: RoMetadata.dll_x000D__x000A_FileVersion: 4.7.3190.0 built by: NET472REL1LAST_C_x000D__x000A_FileDescription: Microsoft MetaData Library_x000D__x000A_Product: Microsoft® .NET Framework_x000D__x000A_ProductVersion: 4.7.3190.0_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: True_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 236 + Microsoft Corporation + 4.7.3190.0 built by: NET472REL1LAST_C + 4.7.3190.0 + Microsoft MetaData Library + Microsoft® .NET Framework + + + + + System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll) + + OneCoreCommonProxyStub.dll + C:\Windows\System32\OneCoreCommonProxyStub.dll + 140719407628288 + 487424 + 140719407642784 + File: C:\Windows\System32\OneCoreCommonProxyStub.dll_x000D__x000A_InternalName: OneCoreCommonProxyStub.dll_x000D__x000A_OriginalFilename: OneCoreCommonProxyStub.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OneCore Common Proxy Stub_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 476 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + OneCore Common Proxy Stub + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ActXPrxy.dll) + + ActXPrxy.dll + C:\Windows\System32\ActXPrxy.dll + 140719371845632 + 630784 + 140719371862624 + File: C:\Windows\System32\ActXPrxy.dll_x000D__x000A_InternalName: ActXPrxy.dll_x000D__x000A_OriginalFilename: ActXPrxy.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: ActiveX Interface Marshaling Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 616 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + ActiveX Interface Marshaling Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (Oleacc.dll) + + Oleacc.dll + C:\Windows\system32\Oleacc.dll + 140719711649792 + 442368 + 140719711744976 + File: C:\Windows\system32\Oleacc.dll_x000D__x000A_InternalName: OLEACC_x000D__x000A_OriginalFilename: OLEACC.DLL_x000D__x000A_FileVersion: 7.2.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Active Accessibility Core Component_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: Language Neutral_x000D__x000A_ + + + + + 432 + Microsoft Corporation + 7.2.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Active Accessibility Core Component + Microsoft® Windows® Operating System + + + + + 65 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 30728 + 30728 + 33636352 + 33636352 + 434664 + 434664 + 39424000 + 39424000 + 39313408 + 39313408 + 2203649400832 + 331177984 + true + + + System.Diagnostics.ProcessPriorityClass + System.Enum + System.ValueType + System.Object + + Normal + 32 + + 33636352 + 33636352 + ApplicationFrameHost + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 15060 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.015625S +
2019-08-15T19:35:18.4408013+03:00
+ PT0.015625S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 20008 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.078125S +
2019-08-15T21:12:04.2208823+03:00
+ PT0.140625S + PT0.0625S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 15900 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.109375S +
2019-08-20T03:19:37.6326221+03:00
+ PT0.109375S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 17672 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.546875S +
2019-08-27T00:11:19.2064498+03:00
+ PT0.71875S + PT0.171875S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 22544 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-27T01:29:26.5083829+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 7132 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-27T02:27:39.526744+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 25096 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-27T02:27:39.534197+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 6452 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-27T02:27:39.5379888+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 22960 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-27T02:27:39.5381311+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 16428 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-27T02:27:39.5382616+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 23400 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-27T02:27:39.5384874+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 20696 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-27T02:27:39.5601223+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 24152 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-27T02:28:08.8587677+03:00
+ PT0S + PT0S + + + + + + + 13 + + + + + + + + + + + + + + + + + + + false + + + 522 + 2203626831872 + 308609024 + false + 26087424 + 26087424 + + + + System.Diagnostics.ProcessModule (ApplicationFrameHost.exe) + + ApplicationFrameHost.exe + C:\Windows\system32\ApplicationFrameHost.exe + 140695356768256 + 81920 + 140695356775552 + File: C:\Windows\system32\ApplicationFrameHost.exe_x000D__x000A_InternalName: Application Frame Host_x000D__x000A_OriginalFilename: ApplicationFrameHost.exe_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Application Frame Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 80 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Application Frame Host + Microsoft® Windows® Operating System + + + PT8.484375S + PT12.578125S + PT4.09375S + + + 2098158 + + Inbox - Gmail ‎- Mail + true + + + + + ApplicationFrameHost + 1 + 522 + 2203626831872 + 26087424 + 33636352 + 30728 + C:\Windows\system32\ApplicationFrameHost.exe + + Microsoft Corporation + 12.578125 + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Application Frame Host + Microsoft® Windows® Operating System + Process + + + + + System.Diagnostics.Process (AppVShNotify) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 7908 + + 8 + false +
2019-08-16T21:32:17.0236684+03:00
+ 5928 + . + + + 1413120 + + + + 204800 + + + + + + + System.Diagnostics.ProcessModule (AppVShNotify.exe) + + AppVShNotify.exe + C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe + 140700876079104 + 294912 + 140700876169016 + File: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe_x000D__x000A_InternalName: AppVShNotify_x000D__x000A_OriginalFilename: AppVShNotify.exe_x000D__x000A_FileVersion: 5.1.145.0_x000D__x000A_FileDescription: AppVShNotify_x000D__x000A_Product: Microsoft Application Virtualization (App-V)_x000D__x000A_ProductVersion: 5.1.145.0_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 288 + Microsoft Corporation + 5.1.145.0 + 5.1.145.0 + AppVShNotify + Microsoft Application Virtualization (App-V) + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNEL32.DLL) + + KERNEL32.DLL + C:\Windows\System32\KERNEL32.DLL + 140719912779776 + 733184 + 140719912876560 + File: C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName: kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 716 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNELBASE.dll) + + KERNELBASE.dll + C:\Windows\System32\KERNELBASE.dll + 140719894495232 + 2699264 + 140719894841456 + File: C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName: Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2636 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USER32.dll) + + USER32.dll + C:\Windows\System32\USER32.dll + 140719909306368 + 1667072 + 140719909414448 + File: C:\Windows\System32\USER32.dll_x000D__x000A_InternalName: user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows USER API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows USER API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (win32u.dll) + + win32u.dll + C:\Windows\System32\win32u.dll + 140719906816000 + 131072 + 0 + File: C:\Windows\System32\win32u.dll_x000D__x000A_InternalName: Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32u_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 128 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32u + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (GDI32.dll) + + GDI32.dll + C:\Windows\System32\GDI32.dll + 140719950659584 + 167936 + 140719950676208 + File: C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32full.dll) + + gdi32full.dll + C:\Windows\System32\gdi32full.dll + 140719905112064 + 1675264 + 140719905369792 + File: C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1636 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcp_win.dll) + + msvcp_win.dll + C:\Windows\System32\msvcp_win.dll + 140719889580032 + 655360 + 140719889658864 + File: C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName: msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 640 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ucrtbase.dll) + + ucrtbase.dll + C:\Windows\System32\ucrtbase.dll + 140719893446656 + 1024000 + 140719893528400 + File: C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName: ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1000 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ADVAPI32.dll) + + ADVAPI32.dll + C:\Windows\System32\ADVAPI32.dll + 140719915335680 + 667648 + 140719915417840 + File: C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName: advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Advanced Windows 32 Base API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 652 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Advanced Windows 32 Base API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcrt.dll) + + msvcrt.dll + C:\Windows\System32\msvcrt.dll + 140719950004224 + 647168 + 140719950035120 + File: C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName: msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion: 7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT CRT DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 7.0.17763.475_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 7.0.17763.475 (WinBuild.160101.0800) + 7.0.17763.475 + Windows NT CRT DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (sechost.dll) + + sechost.dll + C:\Windows\System32\sechost.dll + 140719948824576 + 647168 + 140719948951504 + File: C:\Windows\System32\sechost.dll_x000D__x000A_InternalName: sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Host for SCM/SDDL/LSA Lookup APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RPCRT4.dll) + + RPCRT4.dll + C:\Windows\System32\RPCRT4.dll + 140719917629440 + 1187840 + 140719918006928 + File: C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName: rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Procedure Call Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Procedure Call Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ole32.dll) + + ole32.dll + C:\Windows\System32\ole32.dll + 140719907864576 + 1396736 + 140719908019504 + File: C:\Windows\System32\ole32.dll_x000D__x000A_InternalName: OLE32.DLL_x000D__x000A_OriginalFilename: OLE32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft OLE for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1364 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft OLE for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (combase.dll) + + combase.dll + C:\Windows\System32\combase.dll + 140719950856192 + 3325952 + 140719951769888 + File: C:\Windows\System32\combase.dll_x000D__x000A_InternalName: COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft COM for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3248 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft COM for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + + bcryptPrimitives.dll + C:\Windows\System32\bcryptPrimitives.dll + 140719890235392 + 516096 + 140719890461152 + File: C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName: bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 504 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SHELL32.dll) + + SHELL32.dll + C:\Windows\System32\SHELL32.dll + 140719923593216 + 21954560 + 140719924695456 + File: C:\Windows\System32\SHELL32.dll_x000D__x000A_InternalName: SHELL32_x000D__x000A_OriginalFilename: SHELL32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Shell Common Dll_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 21440 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Shell Common Dll + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cfgmgr32.dll) + + cfgmgr32.dll + C:\Windows\System32\cfgmgr32.dll + 140719889252352 + 303104 + 140719889325904 + File: C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName: cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Configuration Manager DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 296 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Configuration Manager DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (shcore.dll) + + shcore.dll + C:\Windows\System32\shcore.dll + 140719907143680 + 688128 + 140719907388560 + File: C:\Windows\System32\shcore.dll_x000D__x000A_InternalName: SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: SHCORE_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 672 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + SHCORE + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (windows.storage.dll) + + windows.storage.dll + C:\Windows\System32\windows.storage.dll + 140719897444352 + 7643136 + 140719899226624 + File: C:\Windows\System32\windows.storage.dll_x000D__x000A_InternalName: Windows.Storage_x000D__x000A_OriginalFilename: Windows.Storage.dll.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft WinRT Storage API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 7464 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft WinRT Storage API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSVCP120.dll) + + MSVCP120.dll + C:\Program Files\Common Files\Microsoft Shared\ClickToRun\MSVCP120.dll + 140719534964736 + 679936 + 140719535288300 + File: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\MSVCP120.dll_x000D__x000A_InternalName: msvcp120.dll_x000D__x000A_OriginalFilename: msvcp120.dll_x000D__x000A_FileVersion: 12.00.30501.0 built by: REL_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Visual Studio® 2013_x000D__x000A_ProductVersion: 12.00.30501.0_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 664 + Microsoft Corporation + 12.00.30501.0 built by: REL + 12.00.30501.0 + Microsoft® C Runtime Library + Microsoft® Visual Studio® 2013 + + + + + System.Diagnostics.ProcessModule (MSVCR120.dll) + + MSVCR120.dll + C:\Program Files\Common Files\Microsoft Shared\ClickToRun\MSVCR120.dll + 140719535685632 + 978944 + 140719535827404 + File: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\MSVCR120.dll_x000D__x000A_InternalName: msvcr120.dll_x000D__x000A_OriginalFilename: msvcr120.dll_x000D__x000A_FileVersion: 12.00.30501.0 built by: REL_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Visual Studio® 2013_x000D__x000A_ProductVersion: 12.00.30501.0_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 956 + Microsoft Corporation + 12.00.30501.0 built by: REL + 12.00.30501.0 + Microsoft® C Runtime Library + Microsoft® Visual Studio® 2013 + + + + + System.Diagnostics.ProcessModule (profapi.dll) + + profapi.dll + C:\Windows\System32\profapi.dll + 140719888531456 + 147456 + 140719888564400 + File: C:\Windows\System32\profapi.dll_x000D__x000A_InternalName: PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: User Profile Basic API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + User Profile Basic API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (powrprof.dll) + + powrprof.dll + C:\Windows\System32\powrprof.dll + 140719888007168 + 380928 + 140719888020992 + File: C:\Windows\System32\powrprof.dll_x000D__x000A_InternalName: POWRPROF_x000D__x000A_OriginalFilename: POWRPROF.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Power Profile Helper DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 372 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Power Profile Helper DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (shlwapi.dll) + + shlwapi.dll + C:\Windows\System32\shlwapi.dll + 140719945547776 + 335872 + 140719945588304 + File: C:\Windows\System32\shlwapi.dll_x000D__x000A_InternalName: SHLWAPI_x000D__x000A_OriginalFilename: SHLWAPI.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Shell Light-weight Utility Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 328 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Shell Light-weight Utility Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (kernel.appcore.dll) + + kernel.appcore.dll + C:\Windows\System32\kernel.appcore.dll + 140719888400384 + 69632 + 140719888415648 + File: C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName: kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AppModel API Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 68 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AppModel API Host + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cryptsp.dll) + + cryptsp.dll + C:\Windows\System32\cryptsp.dll + 140719889121280 + 94208 + 140719889138512 + File: C:\Windows\System32\cryptsp.dll_x000D__x000A_InternalName: cryptsp.dll_x000D__x000A_OriginalFilename: cryptsp.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Cryptographic Service Provider API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 92 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Cryptographic Service Provider API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USERENV.dll) + + USERENV.dll + C:\Windows\SYSTEM32\USERENV.dll + 140719887024128 + 163840 + 140719887043280 + File: C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName: userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Userenv_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Userenv + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IMM32.DLL) + + IMM32.DLL + C:\Windows\System32\IMM32.DLL + 140719906947072 + 188416 + 140719906952688 + File: C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName: imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows IMM32 API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (sspicli.dll) + + sspicli.dll + C:\Windows\SYSTEM32\sspicli.dll + 140719886827520 + 192512 + 140719886881776 + File: C:\Windows\SYSTEM32\sspicli.dll_x000D__x000A_InternalName: sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 188 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msv1_0.DLL) + + msv1_0.DLL + C:\Windows\system32\msv1_0.DLL + 140719879421952 + 487424 + 140719879520000 + File: C:\Windows\system32\msv1_0.DLL_x000D__x000A_InternalName: MSV1_0.DLL_x000D__x000A_OriginalFilename: MSV1_0.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Authentication Package v1.0_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 476 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft Authentication Package v1.0 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcrypt.dll) + + bcrypt.dll + C:\Windows\System32\bcrypt.dll + 140719897247744 + 155648 + 140719897281296 + File: C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName: bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 152 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (NtlmShared.dll) + + NtlmShared.dll + C:\Windows\SYSTEM32\NtlmShared.dll + 140719879356416 + 53248 + 140719879374528 + File: C:\Windows\SYSTEM32\NtlmShared.dll_x000D__x000A_InternalName: NtlmShared.dll_x000D__x000A_OriginalFilename: NtlmShared.dll_x000D__x000A_FileVersion: 10.0.17763.316 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NTLM Shared Functionality_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.316_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 52 + Microsoft Corporation + 10.0.17763.316 (WinBuild.160101.0800) + 10.0.17763.316 + NTLM Shared Functionality + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cryptdll.dll) + + cryptdll.dll + C:\Windows\SYSTEM32\cryptdll.dll + 140719880404992 + 86016 + 140719880438240 + File: C:\Windows\SYSTEM32\cryptdll.dll_x000D__x000A_InternalName: cryptdll.dll_x000D__x000A_OriginalFilename: cryptdll.dll_x000D__x000A_FileVersion: 10.0.17763.503 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Cryptography Manager_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.503_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 84 + Microsoft Corporation + 10.0.17763.503 (WinBuild.160101.0800) + 10.0.17763.503 + Cryptography Manager + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (uxtheme.dll) + + uxtheme.dll + C:\Windows\system32\uxtheme.dll + 140719860547584 + 638976 + 140719860712368 + File: C:\Windows\system32\uxtheme.dll_x000D__x000A_InternalName: UxTheme.dll_x000D__x000A_OriginalFilename: UxTheme.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft UxTheme Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 624 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft UxTheme Library + Microsoft® Windows® Operating System + + + + + 36 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 9072 + 9072 + 2039808 + 2039808 + 172488 + 172488 + 2269184 + 2269184 + 8658944 + 8658944 + 4423241728 + 128274432 + true + + + Normal + 32 + + 2039808 + 2039808 + AppVShNotify + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 15324 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-16T21:32:17.0236695+03:00
+ PT0S + PT0S + + + + + + + 1 + + + + + + + false + + + 167 + 4415381504 + 120414208 + false + 991232 + 991232 + + + + System.Diagnostics.ProcessModule (AppVShNotify.exe) + + AppVShNotify.exe + C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe + 140700876079104 + 294912 + 140700876169016 + File: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe_x000D__x000A_InternalName: AppVShNotify_x000D__x000A_OriginalFilename: AppVShNotify.exe_x000D__x000A_FileVersion: 5.1.145.0_x000D__x000A_FileDescription: AppVShNotify_x000D__x000A_Product: Microsoft Application Virtualization (App-V)_x000D__x000A_ProductVersion: 5.1.145.0_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 288 + Microsoft Corporation + 5.1.145.0 + 5.1.145.0 + AppVShNotify + Microsoft Application Virtualization (App-V) + + + PT0.0625S + PT0.09375S + PT0.03125S + + + 0 + + + true + + + + + AppVShNotify + 1 + 167 + 4415381504 + 991232 + 2039808 + 9072 + C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe + + Microsoft Corporation + 0.09375 + 5.1.145.0 + 5.1.145.0 + AppVShNotify + Microsoft Application Virtualization (App-V) + Process + + + + + System.Diagnostics.Process (audiodg) + + 8 +
2019-08-26T20:52:20.9249882+03:00
+ 22436 + . + 15072 + 15072 + 22097920 + 22097920 + 127312 + 127312 + 25055232 + 25055232 + 29364224 + 29364224 + 2203439460352 + 121237504 + 22097920 + 22097920 + audiodg + 0 + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 9720 + 140719955419728 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 16756 + 0 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 25904 + 140719955419728 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 5200 + 0 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 27380 + 140719955419728 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 16 + 16 + 25336 + 140719955419728 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 26312 + 140719955419728 + Wait + EventPairLow + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 19660 + 0 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 18684 + 140719955419728 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 26620 + 140719955419728 + Wait + EventPairLow + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 22224 + 0 + Wait + UserRequest + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 12360 + 140719955419728 + Wait + UserRequest + + + + + + + 12 + + + + + + + + + + + + + + + + + + false + + + 671 + 2203435687936 + 117465088 + false + 19423232 + 19423232 + + PT33.921875S + PT3M30.578125S + PT2M56.65625S + + + 0 + + + true + + + + + audiodg + 0 + 671 + 2203435687936 + 19423232 + 22097920 + 15072 + + + + 210.578125 + + + + + Process + + + + + System.Diagnostics.Process (AutoHotkey) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 5384 + + 8 + false +
2019-08-15T19:34:55.1958182+03:00
+ 18988 + . + + + 1413120 + + + + 204800 + + + + + + + System.Diagnostics.ProcessModule (AutoHotkey.exe) + + AutoHotkey.exe + C:\Program Files\AutoHotkey\AutoHotkey.exe + 5368709120 + 1236992 + 5369433848 + File: C:\Program Files\AutoHotkey\AutoHotkey.exe_x000D__x000A_InternalName: AutoHotkey_x000D__x000A_OriginalFilename: AutoHotkey.exe_x000D__x000A_FileVersion: 1.1.30.00_x000D__x000A_FileDescription: AutoHotkey Unicode 64-bit_x000D__x000A_Product: AutoHotkey_x000D__x000A_ProductVersion: 1.1.30.00_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1208 + + 1.1.30.00 + 1.1.30.00 + AutoHotkey Unicode 64-bit + AutoHotkey + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNEL32.DLL) + + KERNEL32.DLL + C:\Windows\System32\KERNEL32.DLL + 140719912779776 + 733184 + 140719912876560 + File: C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName: kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 716 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNELBASE.dll) + + KERNELBASE.dll + C:\Windows\System32\KERNELBASE.dll + 140719894495232 + 2699264 + 140719894841456 + File: C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName: Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2636 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (PSAPI.DLL) + + PSAPI.DLL + C:\Windows\System32\PSAPI.DLL + 140719945940992 + 32768 + 140719945945216 + File: C:\Windows\System32\PSAPI.DLL_x000D__x000A_InternalName: PSAPI_x000D__x000A_OriginalFilename: PSAPI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Process Status Helper_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 32 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Process Status Helper + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USER32.dll) + + USER32.dll + C:\Windows\System32\USER32.dll + 140719909306368 + 1667072 + 140719909414448 + File: C:\Windows\System32\USER32.dll_x000D__x000A_InternalName: user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows USER API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows USER API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (win32u.dll) + + win32u.dll + C:\Windows\System32\win32u.dll + 140719906816000 + 131072 + 0 + File: C:\Windows\System32\win32u.dll_x000D__x000A_InternalName: Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32u_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 128 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32u + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (GDI32.dll) + + GDI32.dll + C:\Windows\System32\GDI32.dll + 140719950659584 + 167936 + 140719950676208 + File: C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32full.dll) + + gdi32full.dll + C:\Windows\System32\gdi32full.dll + 140719905112064 + 1675264 + 140719905369792 + File: C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1636 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcp_win.dll) + + msvcp_win.dll + C:\Windows\System32\msvcp_win.dll + 140719889580032 + 655360 + 140719889658864 + File: C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName: msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 640 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ucrtbase.dll) + + ucrtbase.dll + C:\Windows\System32\ucrtbase.dll + 140719893446656 + 1024000 + 140719893528400 + File: C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName: ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1000 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (COMDLG32.dll) + + COMDLG32.dll + C:\Windows\System32\COMDLG32.dll + 140719914090496 + 1208320 + 140719914272592 + File: C:\Windows\System32\COMDLG32.dll_x000D__x000A_InternalName: comdlg32_x000D__x000A_OriginalFilename: comdlg32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Common Dialogs DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1180 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Common Dialogs DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcrt.dll) + + msvcrt.dll + C:\Windows\System32\msvcrt.dll + 140719950004224 + 647168 + 140719950035120 + File: C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName: msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion: 7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT CRT DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 7.0.17763.475_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 7.0.17763.475 (WinBuild.160101.0800) + 7.0.17763.475 + Windows NT CRT DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (combase.dll) + + combase.dll + C:\Windows\System32\combase.dll + 140719950856192 + 3325952 + 140719951769888 + File: C:\Windows\System32\combase.dll_x000D__x000A_InternalName: COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft COM for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3248 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft COM for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RPCRT4.dll) + + RPCRT4.dll + C:\Windows\System32\RPCRT4.dll + 140719917629440 + 1187840 + 140719918006928 + File: C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName: rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Procedure Call Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Procedure Call Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + + bcryptPrimitives.dll + C:\Windows\System32\bcryptPrimitives.dll + 140719890235392 + 516096 + 140719890461152 + File: C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName: bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 504 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (shcore.dll) + + shcore.dll + C:\Windows\System32\shcore.dll + 140719907143680 + 688128 + 140719907388560 + File: C:\Windows\System32\shcore.dll_x000D__x000A_InternalName: SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: SHCORE_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 672 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + SHCORE + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SHLWAPI.dll) + + SHLWAPI.dll + C:\Windows\System32\SHLWAPI.dll + 140719945547776 + 335872 + 140719945588304 + File: C:\Windows\System32\SHLWAPI.dll_x000D__x000A_InternalName: SHLWAPI_x000D__x000A_OriginalFilename: SHLWAPI.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Shell Light-weight Utility Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 328 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Shell Light-weight Utility Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SHELL32.dll) + + SHELL32.dll + C:\Windows\System32\SHELL32.dll + 140719923593216 + 21954560 + 140719924695456 + File: C:\Windows\System32\SHELL32.dll_x000D__x000A_InternalName: SHELL32_x000D__x000A_OriginalFilename: SHELL32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Shell Common Dll_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 21440 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Shell Common Dll + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cfgmgr32.dll) + + cfgmgr32.dll + C:\Windows\System32\cfgmgr32.dll + 140719889252352 + 303104 + 140719889325904 + File: C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName: cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Configuration Manager DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 296 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Configuration Manager DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (VERSION.dll) + + VERSION.dll + C:\Windows\SYSTEM32\VERSION.dll + 140719800254464 + 40960 + 140719800259344 + File: C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName: version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Version Checking and File Installation Libraries_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 40 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Version Checking and File Installation Libraries + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WSOCK32.dll) + + WSOCK32.dll + C:\Windows\SYSTEM32\WSOCK32.dll + 140719277277184 + 36864 + 140719277282048 + File: C:\Windows\SYSTEM32\WSOCK32.dll_x000D__x000A_InternalName: wsock32.dll_x000D__x000A_OriginalFilename: wsock32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Socket 32-Bit DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 36 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Socket 32-Bit DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMM.dll) + + WINMM.dll + C:\Windows\SYSTEM32\WINMM.dll + 140719835054080 + 147456 + 140719835066368 + File: C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName: winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MCI API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MCI API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (windows.storage.dll) + + windows.storage.dll + C:\Windows\System32\windows.storage.dll + 140719897444352 + 7643136 + 140719899226624 + File: C:\Windows\System32\windows.storage.dll_x000D__x000A_InternalName: Windows.Storage_x000D__x000A_OriginalFilename: Windows.Storage.dll.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft WinRT Storage API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 7464 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft WinRT Storage API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WS2_32.dll) + + WS2_32.dll + C:\Windows\System32\WS2_32.dll + 140719954198528 + 446464 + 140719954286384 + File: C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName: ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 436 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Socket 2.0 32-Bit DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (sechost.dll) + + sechost.dll + C:\Windows\System32\sechost.dll + 140719948824576 + 647168 + 140719948951504 + File: C:\Windows\System32\sechost.dll_x000D__x000A_InternalName: sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Host for SCM/SDDL/LSA Lookup APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (advapi32.dll) + + advapi32.dll + C:\Windows\System32\advapi32.dll + 140719915335680 + 667648 + 140719915417840 + File: C:\Windows\System32\advapi32.dll_x000D__x000A_InternalName: advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Advanced Windows 32 Base API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 652 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Advanced Windows 32 Base API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (profapi.dll) + + profapi.dll + C:\Windows\System32\profapi.dll + 140719888531456 + 147456 + 140719888564400 + File: C:\Windows\System32\profapi.dll_x000D__x000A_InternalName: PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: User Profile Basic API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + User Profile Basic API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (powrprof.dll) + + powrprof.dll + C:\Windows\System32\powrprof.dll + 140719888007168 + 380928 + 140719888020992 + File: C:\Windows\System32\powrprof.dll_x000D__x000A_InternalName: POWRPROF_x000D__x000A_OriginalFilename: POWRPROF.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Power Profile Helper DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 372 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Power Profile Helper DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (kernel.appcore.dll) + + kernel.appcore.dll + C:\Windows\System32\kernel.appcore.dll + 140719888400384 + 69632 + 140719888415648 + File: C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName: kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AppModel API Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 68 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AppModel API Host + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cryptsp.dll) + + cryptsp.dll + C:\Windows\System32\cryptsp.dll + 140719889121280 + 94208 + 140719889138512 + File: C:\Windows\System32\cryptsp.dll_x000D__x000A_InternalName: cryptsp.dll_x000D__x000A_OriginalFilename: cryptsp.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Cryptographic Service Provider API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 92 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Cryptographic Service Provider API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ole32.dll) + + ole32.dll + C:\Windows\System32\ole32.dll + 140719907864576 + 1396736 + 140719908019504 + File: C:\Windows\System32\ole32.dll_x000D__x000A_InternalName: OLE32.DLL_x000D__x000A_OriginalFilename: OLE32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft OLE for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1364 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft OLE for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (OLEAUT32.dll) + + OLEAUT32.dll + C:\Windows\System32\OLEAUT32.dll + 140719946465280 + 802816 + 140719946574624 + File: C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName: OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OLEAUT32.DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 784 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + OLEAUT32.DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMMBASE.dll) + + WINMMBASE.dll + C:\Windows\SYSTEM32\WINMMBASE.dll + 140719834857472 + 184320 + 140719834890448 + File: C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName: winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base Multimedia Extension API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 180 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base Multimedia Extension API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (COMCTL32.dll) + + COMCTL32.dll + C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.678_none_05b74150071d72bf\COMCTL32.dll + 140719697690624 + 2592768 + 140719698120976 + File: C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.678_none_05b74150071d72bf\COMCTL32.dll_x000D__x000A_InternalName: COMCTL32_x000D__x000A_OriginalFilename: COMCTL32.DLL.MUI_x000D__x000A_FileVersion: 5.82 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Common Controls Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2532 + Microsoft Corporation + 5.82 (WinBuild.160101.0800) + 10.0.17763.1 + Common Controls Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IMM32.DLL) + + IMM32.DLL + C:\Windows\System32\IMM32.DLL + 140719906947072 + 188416 + 140719906952688 + File: C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName: imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows IMM32 API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (uxtheme.dll) + + uxtheme.dll + C:\Windows\system32\uxtheme.dll + 140719860547584 + 638976 + 140719860712368 + File: C:\Windows\system32\uxtheme.dll_x000D__x000A_InternalName: UxTheme.dll_x000D__x000A_OriginalFilename: UxTheme.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft UxTheme Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 624 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft UxTheme Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSCTF.dll) + + MSCTF.dll + C:\Windows\System32\MSCTF.dll + 140719947317248 + 1486848 + 140719947597184 + File: C:\Windows\System32\MSCTF.dll_x000D__x000A_InternalName: MSCTF_x000D__x000A_OriginalFilename: MSCTF.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MSCTF Server DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1452 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MSCTF Server DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dwmapi.dll) + + dwmapi.dll + C:\Windows\system32\dwmapi.dll + 140719861399552 + 188416 + 140719861412880 + File: C:\Windows\system32\dwmapi.dll_x000D__x000A_InternalName: dwmapi.dll_x000D__x000A_OriginalFilename: dwmapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Desktop Window Manager API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft Desktop Window Manager API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPT32.dll) + + CRYPT32.dll + C:\Windows\System32\CRYPT32.dll + 140719891480576 + 1945600 + 140719891804832 + File: C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName: CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Crypto API32_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1900 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Crypto API32 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSASN1.dll) + + MSASN1.dll + C:\Windows\System32\MSASN1.dll + 140719887876096 + 73728 + 140719887898576 + File: C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName: msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: ASN.1 Runtime APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 72 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + ASN.1 Runtime APIs + Microsoft® Windows® Operating System + + + + + 41 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 10600 + 10600 + 2682880 + 2682880 + 228648 + 228648 + 2781184 + 2781184 + 9916416 + 9916416 + 4475940864 + 180973568 + true + + + Normal + 32 + + 2682880 + 2682880 + AutoHotkey + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 18992 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.078125S +
2019-08-15T19:34:55.1958197+03:00
+ PT0.109375S + PT0.03125S + + + + + + + System.Diagnostics.ProcessThread + + 15 + 15 + 19020 + true + TimeCritical + 140719955419728 + Wait + UserRequest + PT2.015625S +
2019-08-15T19:34:55.304947+03:00
+ PT2.203125S + PT0.1875S + + + + + + + 2 + + + + + + + + false + + + 144 + 4454965248 + 159997952 + false + 2682880 + 2682880 + + + + System.Diagnostics.ProcessModule (AutoHotkey.exe) + + AutoHotkey.exe + C:\Program Files\AutoHotkey\AutoHotkey.exe + 5368709120 + 1236992 + 5369433848 + File: C:\Program Files\AutoHotkey\AutoHotkey.exe_x000D__x000A_InternalName: AutoHotkey_x000D__x000A_OriginalFilename: AutoHotkey.exe_x000D__x000A_FileVersion: 1.1.30.00_x000D__x000A_FileDescription: AutoHotkey Unicode 64-bit_x000D__x000A_Product: AutoHotkey_x000D__x000A_ProductVersion: 1.1.30.00_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1208 + + 1.1.30.00 + 1.1.30.00 + AutoHotkey Unicode 64-bit + AutoHotkey + + + PT2.1875S + PT2.40625S + PT0.21875S + + + 0 + + + true + + + + + AutoHotkey + 1 + 144 + 4454965248 + 2682880 + 2682880 + 10600 + C:\Program Files\AutoHotkey\AutoHotkey.exe + + + System.Diagnostics.Process (explorer) + + Microsoft.Win32.SafeHandles.SafeProcessHandle + 6820 + 8 + false +
2019-08-15T19:34:27.5692786+03:00
+ 9120 + . + 1413120 + 204800 + + + + System.Diagnostics.ProcessModule (Explorer.EXE) + System.Diagnostics.ProcessModule (ntdll.dll) + System.Diagnostics.ProcessModule (KERNEL32.DLL) + System.Diagnostics.ProcessModule (KERNELBASE.dll) + System.Diagnostics.ProcessModule (msvcrt.dll) + System.Diagnostics.ProcessModule (combase.dll) + System.Diagnostics.ProcessModule (ucrtbase.dll) + System.Diagnostics.ProcessModule (RPCRT4.dll) + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + System.Diagnostics.ProcessModule (OLEAUT32.dll) + System.Diagnostics.ProcessModule (msvcp_win.dll) + System.Diagnostics.ProcessModule (shcore.dll) + System.Diagnostics.ProcessModule (advapi32.dll) + System.Diagnostics.ProcessModule (sechost.dll) + System.Diagnostics.ProcessModule (powrprof.dll) + System.Diagnostics.ProcessModule (shlwapi.dll) + System.Diagnostics.ProcessModule (GDI32.dll) + System.Diagnostics.ProcessModule (gdi32full.dll) + System.Diagnostics.ProcessModule (USER32.dll) + System.Diagnostics.ProcessModule (win32u.dll) + System.Diagnostics.ProcessModule (windows.storage.dll) + System.Diagnostics.ProcessModule (profapi.dll) + System.Diagnostics.ProcessModule (kernel.appcore.dll) + System.Diagnostics.ProcessModule (SHELL32.dll) + System.Diagnostics.ProcessModule (cfgmgr32.dll) + System.Diagnostics.ProcessModule (cryptsp.dll) + System.Diagnostics.ProcessModule (dxgi.dll) + System.Diagnostics.ProcessModule (winmm.dll) + System.Diagnostics.ProcessModule (WININET.dll) + System.Diagnostics.ProcessModule (PROPSYS.dll) + System.Diagnostics.ProcessModule (TWINAPI.dll) + System.Diagnostics.ProcessModule (UxTheme.dll) + System.Diagnostics.ProcessModule (settingsynccore.dll) + System.Diagnostics.ProcessModule (SspiCli.dll) + System.Diagnostics.ProcessModule (USERENV.dll) + System.Diagnostics.ProcessModule (twinapi.appcore.dll) + System.Diagnostics.ProcessModule (WTSAPI32.dll) + System.Diagnostics.ProcessModule (dwmapi.dll) + System.Diagnostics.ProcessModule (CRYPT32.dll) + System.Diagnostics.ProcessModule (MSASN1.dll) + System.Diagnostics.ProcessModule (WINMMBASE.dll) + System.Diagnostics.ProcessModule (RMCLIENT.dll) + System.Diagnostics.ProcessModule (bcrypt.dll) + System.Diagnostics.ProcessModule (IMM32.DLL) + System.Diagnostics.ProcessModule (NInput.dll) + System.Diagnostics.ProcessModule (MSCTF.dll) + System.Diagnostics.ProcessModule (ole32.dll) + System.Diagnostics.ProcessModule (comctl32.dll) + System.Diagnostics.ProcessModule (clbcatq.dll) + System.Diagnostics.ProcessModule (appresolver.dll) + System.Diagnostics.ProcessModule (Bcp47Langs.dll) + System.Diagnostics.ProcessModule (SLC.dll) + System.Diagnostics.ProcessModule (sppc.dll) + System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll) + System.Diagnostics.ProcessModule (StartTileData.dll) + System.Diagnostics.ProcessModule (CoreMessaging.dll) + System.Diagnostics.ProcessModule (IDStore.dll) + System.Diagnostics.ProcessModule (SAMLIB.dll) + System.Diagnostics.ProcessModule (Windows.StateRepositoryPS.dll) + System.Diagnostics.ProcessModule (Windows.ApplicationModel.dll) + System.Diagnostics.ProcessModule (AppXDeploymentClient.dll) + System.Diagnostics.ProcessModule (StateRepository.Core.dll) + System.Diagnostics.ProcessModule (policymanager.dll) + System.Diagnostics.ProcessModule (msvcp110_win.dll) + System.Diagnostics.ProcessModule (Windows.StateRepositoryClient.dll) + System.Diagnostics.ProcessModule (WinTypes.dll) + System.Diagnostics.ProcessModule (winsta.dll) + System.Diagnostics.ProcessModule (SndVolSSO.DLL) + System.Diagnostics.ProcessModule (MMDevAPI.DLL) + System.Diagnostics.ProcessModule (DEVOBJ.dll) + System.Diagnostics.ProcessModule (OLEACC.dll) + System.Diagnostics.ProcessModule (windowscodecs.dll) + System.Diagnostics.ProcessModule (dataexchange.dll) + System.Diagnostics.ProcessModule (dcomp.dll) + System.Diagnostics.ProcessModule (d3d11.dll) + System.Diagnostics.ProcessModule (apphelp.dll) + System.Diagnostics.ProcessModule (explorerframe.dll) + System.Diagnostics.ProcessModule (TileDataRepository.dll) + System.Diagnostics.ProcessModule (Windows.StateRepository.dll) + System.Diagnostics.ProcessModule (MrmCoreR.dll) + System.Diagnostics.ProcessModule (Windows.UI.dll) + System.Diagnostics.ProcessModule (InputHost.dll) + System.Diagnostics.ProcessModule (TextInputFramework.dll) + System.Diagnostics.ProcessModule (CoreUIComponents.dll) + System.Diagnostics.ProcessModule (d2d1.dll) + System.Diagnostics.ProcessModule (ntmarta.dll) + System.Diagnostics.ProcessModule (languageoverlayutil.dll) + System.Diagnostics.ProcessModule (bcp47mrm.dll) + System.Diagnostics.ProcessModule (coml2.dll) + System.Diagnostics.ProcessModule (iertutil.dll) + System.Diagnostics.ProcessModule (thumbcache.dll) + System.Diagnostics.ProcessModule (twinui.pcshell.dll) + System.Diagnostics.ProcessModule (DWrite.dll) + System.Diagnostics.ProcessModule (wincorlib.DLL) + System.Diagnostics.ProcessModule (cdp.dll) + System.Diagnostics.ProcessModule (dsreg.dll) + System.Diagnostics.ProcessModule (edputil.dll) + System.Diagnostics.ProcessModule (windows.immersiveshell.serviceprovider.dll) + System.Diagnostics.ProcessModule (peopleband.dll) + System.Diagnostics.ProcessModule (WLDP.DLL) + System.Diagnostics.ProcessModule (WINTRUST.dll) + System.Diagnostics.ProcessModule (CLDAPI.dll) + System.Diagnostics.ProcessModule (FLTLIB.DLL) + System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll) + System.Diagnostics.ProcessModule (twinui.appcore.dll) + System.Diagnostics.ProcessModule (twinui.dll) + System.Diagnostics.ProcessModule (pdh.dll) + System.Diagnostics.ProcessModule (PhotoMetadataHandler.dll) + System.Diagnostics.ProcessModule (ApplicationFrame.dll) + System.Diagnostics.ProcessModule (ntshrui.dll) + System.Diagnostics.ProcessModule (srvcli.dll) + System.Diagnostics.ProcessModule (cscapi.dll) + System.Diagnostics.ProcessModule (netutils.dll) + System.Diagnostics.ProcessModule (HolographicExtensions.dll) + System.Diagnostics.ProcessModule (ResourcePolicyClient.dll) + System.Diagnostics.ProcessModule (Windows.UI.Immersive.dll) + System.Diagnostics.ProcessModule (AboveLockAppHost.dll) + System.Diagnostics.ProcessModule (Secur32.dll) + System.Diagnostics.ProcessModule (npsm.dll) + System.Diagnostics.ProcessModule (Windows.Shell.BlueLightReduction.dll) + System.Diagnostics.ProcessModule (tishell64.dll) + System.Diagnostics.ProcessModule (WS2_32.dll) + System.Diagnostics.ProcessModule (dbghelp.dll) + System.Diagnostics.ProcessModule (MPR.dll) + System.Diagnostics.ProcessModule (dbgcore.DLL) + System.Diagnostics.ProcessModule (IconCodecService.dll) + System.Diagnostics.ProcessModule (Windows.Internal.Signals.dll) + System.Diagnostics.ProcessModule (mscms.dll) + System.Diagnostics.ProcessModule (ColorAdapterClient.dll) + System.Diagnostics.ProcessModule (Windows.CloudStore.dll) + System.Diagnostics.ProcessModule (urlmon.dll) + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + System.Diagnostics.ProcessModule (usermgrcli.dll) + System.Diagnostics.ProcessModule (Windows.CloudStore.Schema.Shell.dll) + System.Diagnostics.ProcessModule (shfolder.DLL) + System.Diagnostics.ProcessModule (FileSyncShell64.dll) + System.Diagnostics.ProcessModule (PSAPI.DLL) + System.Diagnostics.ProcessModule (VERSION.dll) + System.Diagnostics.ProcessModule (TaskFlowDataEngine.dll) + System.Diagnostics.ProcessModule (StructuredQuery.dll) + System.Diagnostics.ProcessModule (EhStorShell.dll) + System.Diagnostics.ProcessModule (SETUPAPI.dll) + System.Diagnostics.ProcessModule (cscui.dll) + System.Diagnostics.ProcessModule (Windows.Data.Activities.dll) + System.Diagnostics.ProcessModule (Windows.Security.Authentication.Web.Core.dll) + System.Diagnostics.ProcessModule (NotificationControllerPS.dll) + System.Diagnostics.ProcessModule (vaultcli.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll) + System.Diagnostics.ProcessModule (NaturalLanguage6.dll) + System.Diagnostics.ProcessModule (NLSData000d.dll) + System.Diagnostics.ProcessModule (MLS7.dll) + System.Diagnostics.ProcessModule (MSWB7.dll) + System.Diagnostics.ProcessModule (DevDispItemProvider.dll) + System.Diagnostics.ProcessModule (ActXPrxy.dll) + System.Diagnostics.ProcessModule (wlidprov.dll) + System.Diagnostics.ProcessModule (samcli.dll) + System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll) + System.Diagnostics.ProcessModule (lockcontroller.dll) + System.Diagnostics.ProcessModule (nvldumdx.dll) + System.Diagnostics.ProcessModule (imagehlp.dll) + System.Diagnostics.ProcessModule (Windows.UI.Core.TextInput.dll) + System.Diagnostics.ProcessModule (sxs.dll) + System.Diagnostics.ProcessModule (familysafetyext.dll) + System.Diagnostics.ProcessModule (rsaenh.dll) + System.Diagnostics.ProcessModule (nvwgf2umx_cfg.dll) + System.Diagnostics.ProcessModule (ShellCommonCommonProxyStub.dll) + System.Diagnostics.ProcessModule (UIAnimation.dll) + System.Diagnostics.ProcessModule (cryptngc.dll) + System.Diagnostics.ProcessModule (ncrypt.dll) + System.Diagnostics.ProcessModule (NTASN1.dll) + System.Diagnostics.ProcessModule (cflapi.dll) + System.Diagnostics.ProcessModule (npmproxy.dll) + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + System.Diagnostics.ProcessModule (NSI.dll) + System.Diagnostics.ProcessModule (dusmapi.dll) + System.Diagnostics.ProcessModule (gdiplus.dll) + System.Diagnostics.ProcessModule (MFPlat.DLL) + System.Diagnostics.ProcessModule (RTWorkQ.DLL) + System.Diagnostics.ProcessModule (settingsyncpolicy.dll) + System.Diagnostics.ProcessModule (stobject.dll) + System.Diagnostics.ProcessModule (WMICLNT.dll) + System.Diagnostics.ProcessModule (BatMeter.dll) + System.Diagnostics.ProcessModule (OneDriveSettingSyncProvider.dll) + System.Diagnostics.ProcessModule (InputSwitch.dll) + System.Diagnostics.ProcessModule (Windows.UI.Shell.dll) + System.Diagnostics.ProcessModule (es.dll) + System.Diagnostics.ProcessModule (Actioncenter.dll) + System.Diagnostics.ProcessModule (wevtapi.dll) + System.Diagnostics.ProcessModule (DeviceSetupManagerAPI.dll) + System.Diagnostics.ProcessModule (atlthunk.dll) + System.Diagnostics.ProcessModule (dxp.dll) + System.Diagnostics.ProcessModule (SHDOCVW.dll) + System.Diagnostics.ProcessModule (Syncreg.dll) + System.Diagnostics.ProcessModule (AUDIOSES.DLL) + System.Diagnostics.ProcessModule (AVRT.dll) + System.Diagnostics.ProcessModule (CompPkgSup.DLL) + System.Diagnostics.ProcessModule (pnidui.dll) + System.Diagnostics.ProcessModule (MobileNetworking.dll) + System.Diagnostics.ProcessModule (wpdshserviceobj.dll) + System.Diagnostics.ProcessModule (netprofm.dll) + System.Diagnostics.ProcessModule (PortableDeviceTypes.dll) + System.Diagnostics.ProcessModule (NetworkUXBroker.dll) + System.Diagnostics.ProcessModule (PortableDeviceApi.dll) + System.Diagnostics.ProcessModule (EthernetMediaManager.dll) + System.Diagnostics.ProcessModule (WINHTTP.dll) + System.Diagnostics.ProcessModule (wlanapi.dll) + System.Diagnostics.ProcessModule (SettingMonitor.dll) + System.Diagnostics.ProcessModule (bthprops.cpl) + System.Diagnostics.ProcessModule (dhcpcsvc6.DLL) + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + System.Diagnostics.ProcessModule (PackageStateRoaming.dll) + System.Diagnostics.ProcessModule (ieframe.dll) + System.Diagnostics.ProcessModule (NETAPI32.dll) + System.Diagnostics.ProcessModule (WKSCLI.DLL) + System.Diagnostics.ProcessModule (msIso.dll) + System.Diagnostics.ProcessModule (Windows.Internal.Shell.Broker.dll) + System.Diagnostics.ProcessModule (LINKINFO.dll) + System.Diagnostics.ProcessModule (cscobj.dll) + System.Diagnostics.ProcessModule (wpnclient.dll) + System.Diagnostics.ProcessModule (srchadmin.dll) + System.Diagnostics.ProcessModule (msxml6.dll) + System.Diagnostics.ProcessModule (windows.storage.search.dll) + System.Diagnostics.ProcessModule (SyncCenter.dll) + System.Diagnostics.ProcessModule (imapi2.dll) + System.Diagnostics.ProcessModule (mssprxy.dll) + System.Diagnostics.ProcessModule (dlnashext.dll) + System.Diagnostics.ProcessModule (msi.dll) + System.Diagnostics.ProcessModule (wdmaud.drv) + System.Diagnostics.ProcessModule (ksuser.dll) + System.Diagnostics.ProcessModule (msacm32.drv) + System.Diagnostics.ProcessModule (MSACM32.dll) + System.Diagnostics.ProcessModule (midimap.dll) + System.Diagnostics.ProcessModule (pcacli.dll) + System.Diagnostics.ProcessModule (sfc_os.dll) + System.Diagnostics.ProcessModule (MLANG.dll) + System.Diagnostics.ProcessModule (daxexec.dll) + System.Diagnostics.ProcessModule (container.dll) + System.Diagnostics.ProcessModule (licensemanagerapi.dll) + System.Diagnostics.ProcessModule (capauthz.dll) + System.Diagnostics.ProcessModule (Windows.UI.Xaml.dll) + System.Diagnostics.ProcessModule (WindowsInternal.ComposableShell.Experiences.Switcher.dll) + System.Diagnostics.ProcessModule (TileControl.dll) + System.Diagnostics.ProcessModule (TaskFlowUI.dll) + System.Diagnostics.ProcessModule (UiaManager.dll) + System.Diagnostics.ProcessModule (usermgrproxy.dll) + System.Diagnostics.ProcessModule (NPSMDesktopProvider.dll) + System.Diagnostics.ProcessModule (BthAvctpSvc.dll) + System.Diagnostics.ProcessModule (BthTelemetry.dll) + System.Diagnostics.ProcessModule (netshell.dll) + System.Diagnostics.ProcessModule (nlaapi.dll) + System.Diagnostics.ProcessModule (DUI70.dll) + System.Diagnostics.ProcessModule (DUser.dll) + System.Diagnostics.ProcessModule (RASDLG.dll) + System.Diagnostics.ProcessModule (rtutils.dll) + System.Diagnostics.ProcessModule (RASAPI32.dll) + System.Diagnostics.ProcessModule (MPRAPI.dll) + System.Diagnostics.ProcessModule (rasman.dll) + System.Diagnostics.ProcessModule (DPAPI.dll) + System.Diagnostics.ProcessModule (uiautomationcore.dll) + System.Diagnostics.ProcessModule (hnetcfg.dll) + System.Diagnostics.ProcessModule (ATL.DLL) + System.Diagnostics.ProcessModule (GPAPI.dll) + System.Diagnostics.ProcessModule (rasadhlp.dll) + System.Diagnostics.ProcessModule (DNSAPI.dll) + System.Diagnostics.ProcessModule (shutdownux.dll) + System.Diagnostics.ProcessModule (WINBRAND.dll) + System.Diagnostics.ProcessModule (D3D10Warp.dll) + System.Diagnostics.ProcessModule (wscinterop.dll) + System.Diagnostics.ProcessModule (WSCAPI.dll) + System.Diagnostics.ProcessModule (wscui.cpl) + System.Diagnostics.ProcessModule (werconcpl.dll) + System.Diagnostics.ProcessModule (wer.dll) + System.Diagnostics.ProcessModule (framedynos.dll) + System.Diagnostics.ProcessModule (hcproviders.dll) + System.Diagnostics.ProcessModule (ieproxy.dll) + System.Diagnostics.ProcessModule (wpnapps.dll) + System.Diagnostics.ProcessModule (XmlLite.dll) + System.Diagnostics.ProcessModule (twext.dll) + System.Diagnostics.ProcessModule (WorkfoldersShell.dll) + System.Diagnostics.ProcessModule (rarext.dll) + System.Diagnostics.ProcessModule (MSIMG32.dll) + System.Diagnostics.ProcessModule (SnagitShellExt64.dll) + System.Diagnostics.ProcessModule (WINSPOOL.DRV) + System.Diagnostics.ProcessModule (SnagItShellExtRes.dll) + System.Diagnostics.ProcessModule (shellext.dll) + System.Diagnostics.ProcessModule (mpclient.dll) + System.Diagnostics.ProcessModule (BCShellEx64.dll) + System.Diagnostics.ProcessModule (BabylonDocTranslation64PI.dll) + System.Diagnostics.ProcessModule (NppShell_06.dll) + System.Diagnostics.ProcessModule (MSVCR90.dll) + System.Diagnostics.ProcessModule (7-zip.dll) + System.Diagnostics.ProcessModule (nv3dappshext.dll) + System.Diagnostics.ProcessModule (acppage.dll) + System.Diagnostics.ProcessModule (AEPIC.dll) + System.Diagnostics.ProcessModule (sfc.dll) + System.Diagnostics.ProcessModule (smartscreenps.dll) + System.Diagnostics.ProcessModule (drprov.dll) + System.Diagnostics.ProcessModule (ntlanman.dll) + System.Diagnostics.ProcessModule (davclnt.dll) + System.Diagnostics.ProcessModule (DAVHLPR.dll) + System.Diagnostics.ProcessModule (storageusage.dll) + System.Diagnostics.ProcessModule (directmanipulation.dll) + System.Diagnostics.ProcessModule (HID.DLL) + System.Diagnostics.ProcessModule (Windows.Web.dll) + System.Diagnostics.ProcessModule (UserDataTimeUtil.dll) + System.Diagnostics.ProcessModule (tabbtn.dll) + System.Diagnostics.ProcessModule (TabBtnEx.dll) + System.Diagnostics.ProcessModule (CHARTV.dll) + System.Diagnostics.ProcessModule (NetworkExplorer.dll) + System.Diagnostics.ProcessModule (tiptsf.dll) + System.Diagnostics.ProcessModule (UIRibbon.dll) + System.Diagnostics.ProcessModule (rstrtmgr.dll) + System.Diagnostics.ProcessModule (nlmproxy.dll) + System.Diagnostics.ProcessModule (provsvc.dll) + System.Diagnostics.ProcessModule (castingshellext.dll) + System.Diagnostics.ProcessModule (windowscodecsext.dll) + System.Diagnostics.ProcessModule (TOKENBINDING.dll) + System.Diagnostics.ProcessModule (ondemandconnroutehelper.dll) + System.Diagnostics.ProcessModule (mswsock.dll) + System.Diagnostics.ProcessModule (WINNSI.DLL) + System.Diagnostics.ProcessModule (fwpuclnt.dll) + System.Diagnostics.ProcessModule (schannel.DLL) + System.Diagnostics.ProcessModule (mskeyprotect.dll) + System.Diagnostics.ProcessModule (ncryptsslp.dll) + System.Diagnostics.ProcessModule (cryptnet.dll) + System.Diagnostics.ProcessModule (VirtDisk.dll) + System.Diagnostics.ProcessModule (profext.dll) + System.Diagnostics.ProcessModule (comsvcs.dll) + System.Diagnostics.ProcessModule (AppContracts.dll) + System.Diagnostics.ProcessModule (OnDemandBrokerClient.dll) + System.Diagnostics.ProcessModule (themeui.dll) + System.Diagnostics.ProcessModule (webio.dll) + System.Diagnostics.ProcessModule (MsftEdit.dll) + System.Diagnostics.ProcessModule (nvshext.dll) + System.Diagnostics.ProcessModule (atiacm64.dll) + System.Diagnostics.ProcessModule (zipfldr.dll) + System.Diagnostics.ProcessModule (PlayToDevice.dll) + System.Diagnostics.ProcessModule (cdprt.dll) + System.Diagnostics.ProcessModule (EhStorAPI.dll) + System.Diagnostics.ProcessModule (Windows.Globalization.dll) + + + 232504 + 232504 + 280805376 + 280805376 + 1898208 + 1898208 + 291442688 + 291442688 + 569737216 + 569737216 + 2208799674368 + 1186484224 + true + Normal + 280805376 + 280805376 + explorer + 65535 + 1 + + + + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + + + 4934 + 2204607348736 + 1289125888 + false + 281395200 + 281395200 + + System.Diagnostics.ProcessModule (Explorer.EXE) + PT12M36.90625S + PT17M57.3125S + PT5M20.40625S + 65808 + + true + + + + + explorer + 1 + 4934 + 2204607348736 + 281395200 + 280805376 + 232504 + C:\Windows\Explorer.EXE + + Microsoft Corporation + 1077.3125 + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Explorer + Microsoft® Windows® Operating System + Process + + + + 2.40625 + 1.1.30.00 + 1.1.30.00 + AutoHotkey Unicode 64-bit + AutoHotkey + Process + + + + + System.Diagnostics.Process (BCClipboard) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 1932 + + 8 + false +
2019-08-15T19:34:51.6508555+03:00
+ 16564 + . + + + 1413120 + + + + 204800 + + + + + + + System.Diagnostics.ProcessModule (BCClipboard.exe) + + BCClipboard.exe + C:\Program Files\Beyond Compare 4\BCClipboard.exe + 4194304 + 1392640 + 5104868 + File: C:\Program Files\Beyond Compare 4\BCClipboard.exe_x000D__x000A_InternalName: _x000D__x000A_OriginalFilename: BCClipboard.exe_x000D__x000A_FileVersion: 4.2.6.23150_x000D__x000A_FileDescription: Beyond Compare Clipboard Compare_x000D__x000A_Product: Beyond Compare_x000D__x000A_ProductVersion: 4.2_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1360 + Scooter Software + 4.2.6.23150 + 4.2 + Beyond Compare Clipboard Compare + Beyond Compare + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (wow64.dll) + + wow64.dll + C:\Windows\System32\wow64.dll + 140719916449792 + 339968 + 140719916544144 + File: C:\Windows\System32\wow64.dll_x000D__x000A_InternalName: wow64_x000D__x000A_OriginalFilename: wow64.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32 Emulation on NT64_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 332 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32 Emulation on NT64 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (wow64win.dll) + + wow64win.dll + C:\Windows\System32\wow64win.dll + 140719949479936 + 507904 + 140719949541312 + File: C:\Windows\System32\wow64win.dll_x000D__x000A_InternalName: wow64lg2_x000D__x000A_OriginalFilename: wow64lg2.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Wow64 Console and Win32 API Logging_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 496 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Wow64 Console and Win32 API Logging + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (wow64cpu.dll) + + wow64cpu.dll + C:\Windows\System32\wow64cpu.dll + 1999175680 + 36864 + 1999180448 + File: C:\Windows\System32\wow64cpu.dll_x000D__x000A_InternalName: wow64cpu_x000D__x000A_OriginalFilename: wow64cpu.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AMD64 Wow64 CPU _x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 36 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AMD64 Wow64 CPU + Microsoft® Windows® Operating System + + + + + 5 + + + + + + + + + + + false + + + 12840 + 12840 + 4497408 + 4497408 + 192688 + 192688 + 4579328 + 4579328 + 9891840 + 9891840 + 121106432 + 121106432 + true + + + Normal + 32 + + 4497408 + 4497408 + BCClipboard + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 14732 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.59375S +
2019-08-15T19:34:51.6508569+03:00
+ PT0.6875S + PT0.09375S + + + + + + + 1 + + + + + + + false + + + 181 + 100130816 + 100130816 + false + 4435968 + 4435968 + + + + System.Diagnostics.ProcessModule (BCClipboard.exe) + + BCClipboard.exe + C:\Program Files\Beyond Compare 4\BCClipboard.exe + 4194304 + 1392640 + 5104868 + File: C:\Program Files\Beyond Compare 4\BCClipboard.exe_x000D__x000A_InternalName: _x000D__x000A_OriginalFilename: BCClipboard.exe_x000D__x000A_FileVersion: 4.2.6.23150_x000D__x000A_FileDescription: Beyond Compare Clipboard Compare_x000D__x000A_Product: Beyond Compare_x000D__x000A_ProductVersion: 4.2_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1360 + Scooter Software + 4.2.6.23150 + 4.2 + Beyond Compare Clipboard Compare + Beyond Compare + + + PT0.625S + PT0.71875S + PT0.09375S + + + 0 + + + true + + + + + BCClipboard + 1 + 181 + 100130816 + 4435968 + 4497408 + 12840 + C:\Program Files\Beyond Compare 4\BCClipboard.exe + + + System.Diagnostics.Process (explorer) + + Microsoft.Win32.SafeHandles.SafeProcessHandle + 3692 + 8 + false +
2019-08-15T19:34:27.5692786+03:00
+ 9120 + . + 1413120 + 204800 + + + + System.Diagnostics.ProcessModule (Explorer.EXE) + System.Diagnostics.ProcessModule (ntdll.dll) + System.Diagnostics.ProcessModule (KERNEL32.DLL) + System.Diagnostics.ProcessModule (KERNELBASE.dll) + System.Diagnostics.ProcessModule (msvcrt.dll) + System.Diagnostics.ProcessModule (combase.dll) + System.Diagnostics.ProcessModule (ucrtbase.dll) + System.Diagnostics.ProcessModule (RPCRT4.dll) + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + System.Diagnostics.ProcessModule (OLEAUT32.dll) + System.Diagnostics.ProcessModule (msvcp_win.dll) + System.Diagnostics.ProcessModule (shcore.dll) + System.Diagnostics.ProcessModule (advapi32.dll) + System.Diagnostics.ProcessModule (sechost.dll) + System.Diagnostics.ProcessModule (powrprof.dll) + System.Diagnostics.ProcessModule (shlwapi.dll) + System.Diagnostics.ProcessModule (GDI32.dll) + System.Diagnostics.ProcessModule (gdi32full.dll) + System.Diagnostics.ProcessModule (USER32.dll) + System.Diagnostics.ProcessModule (win32u.dll) + System.Diagnostics.ProcessModule (windows.storage.dll) + System.Diagnostics.ProcessModule (profapi.dll) + System.Diagnostics.ProcessModule (kernel.appcore.dll) + System.Diagnostics.ProcessModule (SHELL32.dll) + System.Diagnostics.ProcessModule (cfgmgr32.dll) + System.Diagnostics.ProcessModule (cryptsp.dll) + System.Diagnostics.ProcessModule (dxgi.dll) + System.Diagnostics.ProcessModule (winmm.dll) + System.Diagnostics.ProcessModule (WININET.dll) + System.Diagnostics.ProcessModule (PROPSYS.dll) + System.Diagnostics.ProcessModule (TWINAPI.dll) + System.Diagnostics.ProcessModule (UxTheme.dll) + System.Diagnostics.ProcessModule (settingsynccore.dll) + System.Diagnostics.ProcessModule (SspiCli.dll) + System.Diagnostics.ProcessModule (USERENV.dll) + System.Diagnostics.ProcessModule (twinapi.appcore.dll) + System.Diagnostics.ProcessModule (WTSAPI32.dll) + System.Diagnostics.ProcessModule (dwmapi.dll) + System.Diagnostics.ProcessModule (CRYPT32.dll) + System.Diagnostics.ProcessModule (MSASN1.dll) + System.Diagnostics.ProcessModule (WINMMBASE.dll) + System.Diagnostics.ProcessModule (RMCLIENT.dll) + System.Diagnostics.ProcessModule (bcrypt.dll) + System.Diagnostics.ProcessModule (IMM32.DLL) + System.Diagnostics.ProcessModule (NInput.dll) + System.Diagnostics.ProcessModule (MSCTF.dll) + System.Diagnostics.ProcessModule (ole32.dll) + System.Diagnostics.ProcessModule (comctl32.dll) + System.Diagnostics.ProcessModule (clbcatq.dll) + System.Diagnostics.ProcessModule (appresolver.dll) + System.Diagnostics.ProcessModule (Bcp47Langs.dll) + System.Diagnostics.ProcessModule (SLC.dll) + System.Diagnostics.ProcessModule (sppc.dll) + System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll) + System.Diagnostics.ProcessModule (StartTileData.dll) + System.Diagnostics.ProcessModule (CoreMessaging.dll) + System.Diagnostics.ProcessModule (IDStore.dll) + System.Diagnostics.ProcessModule (SAMLIB.dll) + System.Diagnostics.ProcessModule (Windows.StateRepositoryPS.dll) + System.Diagnostics.ProcessModule (Windows.ApplicationModel.dll) + System.Diagnostics.ProcessModule (AppXDeploymentClient.dll) + System.Diagnostics.ProcessModule (StateRepository.Core.dll) + System.Diagnostics.ProcessModule (policymanager.dll) + System.Diagnostics.ProcessModule (msvcp110_win.dll) + System.Diagnostics.ProcessModule (Windows.StateRepositoryClient.dll) + System.Diagnostics.ProcessModule (WinTypes.dll) + System.Diagnostics.ProcessModule (winsta.dll) + System.Diagnostics.ProcessModule (SndVolSSO.DLL) + System.Diagnostics.ProcessModule (MMDevAPI.DLL) + System.Diagnostics.ProcessModule (DEVOBJ.dll) + System.Diagnostics.ProcessModule (OLEACC.dll) + System.Diagnostics.ProcessModule (windowscodecs.dll) + System.Diagnostics.ProcessModule (dataexchange.dll) + System.Diagnostics.ProcessModule (dcomp.dll) + System.Diagnostics.ProcessModule (d3d11.dll) + System.Diagnostics.ProcessModule (apphelp.dll) + System.Diagnostics.ProcessModule (explorerframe.dll) + System.Diagnostics.ProcessModule (TileDataRepository.dll) + System.Diagnostics.ProcessModule (Windows.StateRepository.dll) + System.Diagnostics.ProcessModule (MrmCoreR.dll) + System.Diagnostics.ProcessModule (Windows.UI.dll) + System.Diagnostics.ProcessModule (InputHost.dll) + System.Diagnostics.ProcessModule (TextInputFramework.dll) + System.Diagnostics.ProcessModule (CoreUIComponents.dll) + System.Diagnostics.ProcessModule (d2d1.dll) + System.Diagnostics.ProcessModule (ntmarta.dll) + System.Diagnostics.ProcessModule (languageoverlayutil.dll) + System.Diagnostics.ProcessModule (bcp47mrm.dll) + System.Diagnostics.ProcessModule (coml2.dll) + System.Diagnostics.ProcessModule (iertutil.dll) + System.Diagnostics.ProcessModule (thumbcache.dll) + System.Diagnostics.ProcessModule (twinui.pcshell.dll) + System.Diagnostics.ProcessModule (DWrite.dll) + System.Diagnostics.ProcessModule (wincorlib.DLL) + System.Diagnostics.ProcessModule (cdp.dll) + System.Diagnostics.ProcessModule (dsreg.dll) + System.Diagnostics.ProcessModule (edputil.dll) + System.Diagnostics.ProcessModule (windows.immersiveshell.serviceprovider.dll) + System.Diagnostics.ProcessModule (peopleband.dll) + System.Diagnostics.ProcessModule (WLDP.DLL) + System.Diagnostics.ProcessModule (WINTRUST.dll) + System.Diagnostics.ProcessModule (CLDAPI.dll) + System.Diagnostics.ProcessModule (FLTLIB.DLL) + System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll) + System.Diagnostics.ProcessModule (twinui.appcore.dll) + System.Diagnostics.ProcessModule (twinui.dll) + System.Diagnostics.ProcessModule (pdh.dll) + System.Diagnostics.ProcessModule (PhotoMetadataHandler.dll) + System.Diagnostics.ProcessModule (ApplicationFrame.dll) + System.Diagnostics.ProcessModule (ntshrui.dll) + System.Diagnostics.ProcessModule (srvcli.dll) + System.Diagnostics.ProcessModule (cscapi.dll) + System.Diagnostics.ProcessModule (netutils.dll) + System.Diagnostics.ProcessModule (HolographicExtensions.dll) + System.Diagnostics.ProcessModule (ResourcePolicyClient.dll) + System.Diagnostics.ProcessModule (Windows.UI.Immersive.dll) + System.Diagnostics.ProcessModule (AboveLockAppHost.dll) + System.Diagnostics.ProcessModule (Secur32.dll) + System.Diagnostics.ProcessModule (npsm.dll) + System.Diagnostics.ProcessModule (Windows.Shell.BlueLightReduction.dll) + System.Diagnostics.ProcessModule (tishell64.dll) + System.Diagnostics.ProcessModule (WS2_32.dll) + System.Diagnostics.ProcessModule (dbghelp.dll) + System.Diagnostics.ProcessModule (MPR.dll) + System.Diagnostics.ProcessModule (dbgcore.DLL) + System.Diagnostics.ProcessModule (IconCodecService.dll) + System.Diagnostics.ProcessModule (Windows.Internal.Signals.dll) + System.Diagnostics.ProcessModule (mscms.dll) + System.Diagnostics.ProcessModule (ColorAdapterClient.dll) + System.Diagnostics.ProcessModule (Windows.CloudStore.dll) + System.Diagnostics.ProcessModule (urlmon.dll) + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + System.Diagnostics.ProcessModule (usermgrcli.dll) + System.Diagnostics.ProcessModule (Windows.CloudStore.Schema.Shell.dll) + System.Diagnostics.ProcessModule (shfolder.DLL) + System.Diagnostics.ProcessModule (FileSyncShell64.dll) + System.Diagnostics.ProcessModule (PSAPI.DLL) + System.Diagnostics.ProcessModule (VERSION.dll) + System.Diagnostics.ProcessModule (TaskFlowDataEngine.dll) + System.Diagnostics.ProcessModule (StructuredQuery.dll) + System.Diagnostics.ProcessModule (EhStorShell.dll) + System.Diagnostics.ProcessModule (SETUPAPI.dll) + System.Diagnostics.ProcessModule (cscui.dll) + System.Diagnostics.ProcessModule (Windows.Data.Activities.dll) + System.Diagnostics.ProcessModule (Windows.Security.Authentication.Web.Core.dll) + System.Diagnostics.ProcessModule (NotificationControllerPS.dll) + System.Diagnostics.ProcessModule (vaultcli.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll) + System.Diagnostics.ProcessModule (NaturalLanguage6.dll) + System.Diagnostics.ProcessModule (NLSData000d.dll) + System.Diagnostics.ProcessModule (MLS7.dll) + System.Diagnostics.ProcessModule (MSWB7.dll) + System.Diagnostics.ProcessModule (DevDispItemProvider.dll) + System.Diagnostics.ProcessModule (ActXPrxy.dll) + System.Diagnostics.ProcessModule (wlidprov.dll) + System.Diagnostics.ProcessModule (samcli.dll) + System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll) + System.Diagnostics.ProcessModule (lockcontroller.dll) + System.Diagnostics.ProcessModule (nvldumdx.dll) + System.Diagnostics.ProcessModule (imagehlp.dll) + System.Diagnostics.ProcessModule (Windows.UI.Core.TextInput.dll) + System.Diagnostics.ProcessModule (sxs.dll) + System.Diagnostics.ProcessModule (familysafetyext.dll) + System.Diagnostics.ProcessModule (rsaenh.dll) + System.Diagnostics.ProcessModule (nvwgf2umx_cfg.dll) + System.Diagnostics.ProcessModule (ShellCommonCommonProxyStub.dll) + System.Diagnostics.ProcessModule (UIAnimation.dll) + System.Diagnostics.ProcessModule (cryptngc.dll) + System.Diagnostics.ProcessModule (ncrypt.dll) + System.Diagnostics.ProcessModule (NTASN1.dll) + System.Diagnostics.ProcessModule (cflapi.dll) + System.Diagnostics.ProcessModule (npmproxy.dll) + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + System.Diagnostics.ProcessModule (NSI.dll) + System.Diagnostics.ProcessModule (dusmapi.dll) + System.Diagnostics.ProcessModule (gdiplus.dll) + System.Diagnostics.ProcessModule (MFPlat.DLL) + System.Diagnostics.ProcessModule (RTWorkQ.DLL) + System.Diagnostics.ProcessModule (settingsyncpolicy.dll) + System.Diagnostics.ProcessModule (stobject.dll) + System.Diagnostics.ProcessModule (WMICLNT.dll) + System.Diagnostics.ProcessModule (BatMeter.dll) + System.Diagnostics.ProcessModule (OneDriveSettingSyncProvider.dll) + System.Diagnostics.ProcessModule (InputSwitch.dll) + System.Diagnostics.ProcessModule (Windows.UI.Shell.dll) + System.Diagnostics.ProcessModule (es.dll) + System.Diagnostics.ProcessModule (Actioncenter.dll) + System.Diagnostics.ProcessModule (wevtapi.dll) + System.Diagnostics.ProcessModule (DeviceSetupManagerAPI.dll) + System.Diagnostics.ProcessModule (atlthunk.dll) + System.Diagnostics.ProcessModule (dxp.dll) + System.Diagnostics.ProcessModule (SHDOCVW.dll) + System.Diagnostics.ProcessModule (Syncreg.dll) + System.Diagnostics.ProcessModule (AUDIOSES.DLL) + System.Diagnostics.ProcessModule (AVRT.dll) + System.Diagnostics.ProcessModule (CompPkgSup.DLL) + System.Diagnostics.ProcessModule (pnidui.dll) + System.Diagnostics.ProcessModule (MobileNetworking.dll) + System.Diagnostics.ProcessModule (wpdshserviceobj.dll) + System.Diagnostics.ProcessModule (netprofm.dll) + System.Diagnostics.ProcessModule (PortableDeviceTypes.dll) + System.Diagnostics.ProcessModule (NetworkUXBroker.dll) + System.Diagnostics.ProcessModule (PortableDeviceApi.dll) + System.Diagnostics.ProcessModule (EthernetMediaManager.dll) + System.Diagnostics.ProcessModule (WINHTTP.dll) + System.Diagnostics.ProcessModule (wlanapi.dll) + System.Diagnostics.ProcessModule (SettingMonitor.dll) + System.Diagnostics.ProcessModule (bthprops.cpl) + System.Diagnostics.ProcessModule (dhcpcsvc6.DLL) + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + System.Diagnostics.ProcessModule (PackageStateRoaming.dll) + System.Diagnostics.ProcessModule (ieframe.dll) + System.Diagnostics.ProcessModule (NETAPI32.dll) + System.Diagnostics.ProcessModule (WKSCLI.DLL) + System.Diagnostics.ProcessModule (msIso.dll) + System.Diagnostics.ProcessModule (Windows.Internal.Shell.Broker.dll) + System.Diagnostics.ProcessModule (LINKINFO.dll) + System.Diagnostics.ProcessModule (cscobj.dll) + System.Diagnostics.ProcessModule (wpnclient.dll) + System.Diagnostics.ProcessModule (srchadmin.dll) + System.Diagnostics.ProcessModule (msxml6.dll) + System.Diagnostics.ProcessModule (windows.storage.search.dll) + System.Diagnostics.ProcessModule (SyncCenter.dll) + System.Diagnostics.ProcessModule (imapi2.dll) + System.Diagnostics.ProcessModule (mssprxy.dll) + System.Diagnostics.ProcessModule (dlnashext.dll) + System.Diagnostics.ProcessModule (msi.dll) + System.Diagnostics.ProcessModule (wdmaud.drv) + System.Diagnostics.ProcessModule (ksuser.dll) + System.Diagnostics.ProcessModule (msacm32.drv) + System.Diagnostics.ProcessModule (MSACM32.dll) + System.Diagnostics.ProcessModule (midimap.dll) + System.Diagnostics.ProcessModule (pcacli.dll) + System.Diagnostics.ProcessModule (sfc_os.dll) + System.Diagnostics.ProcessModule (MLANG.dll) + System.Diagnostics.ProcessModule (daxexec.dll) + System.Diagnostics.ProcessModule (container.dll) + System.Diagnostics.ProcessModule (licensemanagerapi.dll) + System.Diagnostics.ProcessModule (capauthz.dll) + System.Diagnostics.ProcessModule (Windows.UI.Xaml.dll) + System.Diagnostics.ProcessModule (WindowsInternal.ComposableShell.Experiences.Switcher.dll) + System.Diagnostics.ProcessModule (TileControl.dll) + System.Diagnostics.ProcessModule (TaskFlowUI.dll) + System.Diagnostics.ProcessModule (UiaManager.dll) + System.Diagnostics.ProcessModule (usermgrproxy.dll) + System.Diagnostics.ProcessModule (NPSMDesktopProvider.dll) + System.Diagnostics.ProcessModule (BthAvctpSvc.dll) + System.Diagnostics.ProcessModule (BthTelemetry.dll) + System.Diagnostics.ProcessModule (netshell.dll) + System.Diagnostics.ProcessModule (nlaapi.dll) + System.Diagnostics.ProcessModule (DUI70.dll) + System.Diagnostics.ProcessModule (DUser.dll) + System.Diagnostics.ProcessModule (RASDLG.dll) + System.Diagnostics.ProcessModule (rtutils.dll) + System.Diagnostics.ProcessModule (RASAPI32.dll) + System.Diagnostics.ProcessModule (MPRAPI.dll) + System.Diagnostics.ProcessModule (rasman.dll) + System.Diagnostics.ProcessModule (DPAPI.dll) + System.Diagnostics.ProcessModule (uiautomationcore.dll) + System.Diagnostics.ProcessModule (hnetcfg.dll) + System.Diagnostics.ProcessModule (ATL.DLL) + System.Diagnostics.ProcessModule (GPAPI.dll) + System.Diagnostics.ProcessModule (rasadhlp.dll) + System.Diagnostics.ProcessModule (DNSAPI.dll) + System.Diagnostics.ProcessModule (shutdownux.dll) + System.Diagnostics.ProcessModule (WINBRAND.dll) + System.Diagnostics.ProcessModule (D3D10Warp.dll) + System.Diagnostics.ProcessModule (wscinterop.dll) + System.Diagnostics.ProcessModule (WSCAPI.dll) + System.Diagnostics.ProcessModule (wscui.cpl) + System.Diagnostics.ProcessModule (werconcpl.dll) + System.Diagnostics.ProcessModule (wer.dll) + System.Diagnostics.ProcessModule (framedynos.dll) + System.Diagnostics.ProcessModule (hcproviders.dll) + System.Diagnostics.ProcessModule (ieproxy.dll) + System.Diagnostics.ProcessModule (wpnapps.dll) + System.Diagnostics.ProcessModule (XmlLite.dll) + System.Diagnostics.ProcessModule (twext.dll) + System.Diagnostics.ProcessModule (WorkfoldersShell.dll) + System.Diagnostics.ProcessModule (rarext.dll) + System.Diagnostics.ProcessModule (MSIMG32.dll) + System.Diagnostics.ProcessModule (SnagitShellExt64.dll) + System.Diagnostics.ProcessModule (WINSPOOL.DRV) + System.Diagnostics.ProcessModule (SnagItShellExtRes.dll) + System.Diagnostics.ProcessModule (shellext.dll) + System.Diagnostics.ProcessModule (mpclient.dll) + System.Diagnostics.ProcessModule (BCShellEx64.dll) + System.Diagnostics.ProcessModule (BabylonDocTranslation64PI.dll) + System.Diagnostics.ProcessModule (NppShell_06.dll) + System.Diagnostics.ProcessModule (MSVCR90.dll) + System.Diagnostics.ProcessModule (7-zip.dll) + System.Diagnostics.ProcessModule (nv3dappshext.dll) + System.Diagnostics.ProcessModule (acppage.dll) + System.Diagnostics.ProcessModule (AEPIC.dll) + System.Diagnostics.ProcessModule (sfc.dll) + System.Diagnostics.ProcessModule (smartscreenps.dll) + System.Diagnostics.ProcessModule (drprov.dll) + System.Diagnostics.ProcessModule (ntlanman.dll) + System.Diagnostics.ProcessModule (davclnt.dll) + System.Diagnostics.ProcessModule (DAVHLPR.dll) + System.Diagnostics.ProcessModule (storageusage.dll) + System.Diagnostics.ProcessModule (directmanipulation.dll) + System.Diagnostics.ProcessModule (HID.DLL) + System.Diagnostics.ProcessModule (Windows.Web.dll) + System.Diagnostics.ProcessModule (UserDataTimeUtil.dll) + System.Diagnostics.ProcessModule (tabbtn.dll) + System.Diagnostics.ProcessModule (TabBtnEx.dll) + System.Diagnostics.ProcessModule (CHARTV.dll) + System.Diagnostics.ProcessModule (NetworkExplorer.dll) + System.Diagnostics.ProcessModule (tiptsf.dll) + System.Diagnostics.ProcessModule (UIRibbon.dll) + System.Diagnostics.ProcessModule (rstrtmgr.dll) + System.Diagnostics.ProcessModule (nlmproxy.dll) + System.Diagnostics.ProcessModule (provsvc.dll) + System.Diagnostics.ProcessModule (castingshellext.dll) + System.Diagnostics.ProcessModule (windowscodecsext.dll) + System.Diagnostics.ProcessModule (TOKENBINDING.dll) + System.Diagnostics.ProcessModule (ondemandconnroutehelper.dll) + System.Diagnostics.ProcessModule (mswsock.dll) + System.Diagnostics.ProcessModule (WINNSI.DLL) + System.Diagnostics.ProcessModule (fwpuclnt.dll) + System.Diagnostics.ProcessModule (schannel.DLL) + System.Diagnostics.ProcessModule (mskeyprotect.dll) + System.Diagnostics.ProcessModule (ncryptsslp.dll) + System.Diagnostics.ProcessModule (cryptnet.dll) + System.Diagnostics.ProcessModule (VirtDisk.dll) + System.Diagnostics.ProcessModule (profext.dll) + System.Diagnostics.ProcessModule (comsvcs.dll) + System.Diagnostics.ProcessModule (AppContracts.dll) + System.Diagnostics.ProcessModule (OnDemandBrokerClient.dll) + System.Diagnostics.ProcessModule (themeui.dll) + System.Diagnostics.ProcessModule (webio.dll) + System.Diagnostics.ProcessModule (MsftEdit.dll) + System.Diagnostics.ProcessModule (nvshext.dll) + System.Diagnostics.ProcessModule (atiacm64.dll) + System.Diagnostics.ProcessModule (zipfldr.dll) + System.Diagnostics.ProcessModule (PlayToDevice.dll) + System.Diagnostics.ProcessModule (cdprt.dll) + System.Diagnostics.ProcessModule (EhStorAPI.dll) + System.Diagnostics.ProcessModule (Windows.Globalization.dll) + + + 232504 + 232504 + 280805376 + 280805376 + 1898208 + 1898208 + 291442688 + 291442688 + 569737216 + 569737216 + 2208799674368 + 1186484224 + true + Normal + 280805376 + 280805376 + explorer + 65535 + 1 + + + + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + + + 4934 + 2204607348736 + 1289125888 + false + 281395200 + 281395200 + + System.Diagnostics.ProcessModule (Explorer.EXE) + PT12M36.90625S + PT17M57.3125S + PT5M20.40625S + 65808 + + true + + + + + explorer + 1 + 4934 + 2204607348736 + 281395200 + 280805376 + 232504 + C:\Windows\Explorer.EXE + + Microsoft Corporation + 1077.3125 + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Explorer + Microsoft® Windows® Operating System + Process + + + Scooter Software + 0.71875 + 4.2.6.23150 + 4.2 + Beyond Compare Clipboard Compare + Beyond Compare + Process + + + + + System.Diagnostics.Process (chrome) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 4164 + + 8 + false +
2019-08-27T02:00:52.3073978+03:00
+ 2596 + . + + + 1413120 + + + + 204800 + + + + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNEL32.DLL) + + KERNEL32.DLL + C:\Windows\System32\KERNEL32.DLL + 140719912779776 + 733184 + 140719912876560 + File: C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName: kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 716 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNELBASE.dll) + + KERNELBASE.dll + C:\Windows\System32\KERNELBASE.dll + 140719894495232 + 2699264 + 140719894841456 + File: C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName: Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2636 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_elf.dll) + + chrome_elf.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll + 140719325642752 + 925696 + 140719326148464 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName: chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 904 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (VERSION.dll) + + VERSION.dll + C:\Windows\SYSTEM32\VERSION.dll + 140719800254464 + 40960 + 140719800259344 + File: C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName: version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Version Checking and File Installation Libraries_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 40 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Version Checking and File Installation Libraries + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcrt.dll) + + msvcrt.dll + C:\Windows\System32\msvcrt.dll + 140719950004224 + 647168 + 140719950035120 + File: C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName: msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion: 7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT CRT DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 7.0.17763.475_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 7.0.17763.475 (WinBuild.160101.0800) + 7.0.17763.475 + Windows NT CRT DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + + bcryptPrimitives.dll + C:\Windows\System32\bcryptPrimitives.dll + 140719890235392 + 516096 + 140719890461152 + File: C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName: bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 504 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ADVAPI32.dll) + + ADVAPI32.dll + C:\Windows\System32\ADVAPI32.dll + 140719915335680 + 667648 + 140719915417840 + File: C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName: advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Advanced Windows 32 Base API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 652 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Advanced Windows 32 Base API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (sechost.dll) + + sechost.dll + C:\Windows\System32\sechost.dll + 140719948824576 + 647168 + 140719948951504 + File: C:\Windows\System32\sechost.dll_x000D__x000A_InternalName: sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Host for SCM/SDDL/LSA Lookup APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RPCRT4.dll) + + RPCRT4.dll + C:\Windows\System32\RPCRT4.dll + 140719917629440 + 1187840 + 140719918006928 + File: C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName: rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Procedure Call Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Procedure Call Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_child.dll) + + chrome_child.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll + 140717177962496 + 87977984 + 140717247440176 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName: chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 85916 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (OLEAUT32.dll) + + OLEAUT32.dll + C:\Windows\System32\OLEAUT32.dll + 140719946465280 + 802816 + 140719946574624 + File: C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName: OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OLEAUT32.DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 784 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + OLEAUT32.DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcp_win.dll) + + msvcp_win.dll + C:\Windows\System32\msvcp_win.dll + 140719889580032 + 655360 + 140719889658864 + File: C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName: msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 640 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ucrtbase.dll) + + ucrtbase.dll + C:\Windows\System32\ucrtbase.dll + 140719893446656 + 1024000 + 140719893528400 + File: C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName: ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1000 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (combase.dll) + + combase.dll + C:\Windows\System32\combase.dll + 140719950856192 + 3325952 + 140719951769888 + File: C:\Windows\System32\combase.dll_x000D__x000A_InternalName: COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft COM for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3248 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft COM for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WS2_32.dll) + + WS2_32.dll + C:\Windows\System32\WS2_32.dll + 140719954198528 + 446464 + 140719954286384 + File: C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName: ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 436 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Socket 2.0 32-Bit DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (GDI32.dll) + + GDI32.dll + C:\Windows\System32\GDI32.dll + 140719950659584 + 167936 + 140719950676208 + File: C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32full.dll) + + gdi32full.dll + C:\Windows\System32\gdi32full.dll + 140719905112064 + 1675264 + 140719905369792 + File: C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1636 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USER32.dll) + + USER32.dll + C:\Windows\System32\USER32.dll + 140719909306368 + 1667072 + 140719909414448 + File: C:\Windows\System32\USER32.dll_x000D__x000A_InternalName: user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows USER API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows USER API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (win32u.dll) + + win32u.dll + C:\Windows\System32\win32u.dll + 140719906816000 + 131072 + 0 + File: C:\Windows\System32\win32u.dll_x000D__x000A_InternalName: Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32u_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 128 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32u + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINTRUST.dll) + + WINTRUST.dll + C:\Windows\System32\WINTRUST.dll + 140719888728064 + 364544 + 140719888791376 + File: C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName: WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Trust Verification APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 356 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft Trust Verification APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSASN1.dll) + + MSASN1.dll + C:\Windows\System32\MSASN1.dll + 140719887876096 + 73728 + 140719887898576 + File: C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName: msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: ASN.1 Runtime APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 72 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + ASN.1 Runtime APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPT32.dll) + + CRYPT32.dll + C:\Windows\System32\CRYPT32.dll + 140719891480576 + 1945600 + 140719891804832 + File: C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName: CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Crypto API32_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1900 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Crypto API32 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + + IPHLPAPI.DLL + C:\Windows\SYSTEM32\IPHLPAPI.DLL + 140719876931584 + 249856 + 140719876989024 + File: C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName: iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: IP Helper API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 244 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + IP Helper API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMM.dll) + + WINMM.dll + C:\Windows\SYSTEM32\WINMM.dll + 140719835054080 + 147456 + 140719835066368 + File: C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName: winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MCI API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MCI API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USERENV.dll) + + USERENV.dll + C:\Windows\SYSTEM32\USERENV.dll + 140719887024128 + 163840 + 140719887043280 + File: C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName: userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Userenv_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Userenv + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (profapi.dll) + + profapi.dll + C:\Windows\System32\profapi.dll + 140719888531456 + 147456 + 140719888564400 + File: C:\Windows\System32\profapi.dll_x000D__x000A_InternalName: PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: User Profile Basic API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + User Profile Basic API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (DWrite.dll) + + DWrite.dll + C:\Windows\SYSTEM32\DWrite.dll + 140719303819264 + 3129344 + 140719304509728 + File: C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName: DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft DirectX Typography Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3056 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft DirectX Typography Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINSPOOL.DRV) + + WINSPOOL.DRV + C:\Windows\SYSTEM32\WINSPOOL.DRV + 140719787606016 + 561152 + 140719787676448 + File: C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName: winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Spooler Driver_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 548 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Spooler Driver + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (kernel.appcore.dll) + + kernel.appcore.dll + C:\Windows\System32\kernel.appcore.dll + 140719888400384 + 69632 + 140719888415648 + File: C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName: kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AppModel API Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 68 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AppModel API Host + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcrypt.dll) + + bcrypt.dll + C:\Windows\System32\bcrypt.dll + 140719897247744 + 155648 + 140719897281296 + File: C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName: bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 152 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dbghelp.dll) + + dbghelp.dll + C:\Windows\SYSTEM32\dbghelp.dll + 140719552397312 + 2019328 + 140719552479168 + File: C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName: DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Image Helper_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Image Helper + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINHTTP.dll) + + WINHTTP.dll + C:\Windows\SYSTEM32\WINHTTP.dll + 140719810019328 + 991232 + 140719810293024 + File: C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName: winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows HTTP Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 968 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows HTTP Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (Secur32.dll) + + Secur32.dll + C:\Windows\SYSTEM32\Secur32.dll + 140719559147520 + 49152 + 140719559156816 + File: C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName: secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + + dhcpcsvc.DLL + C:\Windows\SYSTEM32\dhcpcsvc.DLL + 140719782494208 + 114688 + 140719782503840 + File: C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName: dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: DHCP Client Service_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 112 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + DHCP Client Service + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (NSI.dll) + + NSI.dll + C:\Windows\System32\NSI.dll + 140719916843008 + 32768 + 140719916851008 + File: C:\Windows\System32\NSI.dll_x000D__x000A_InternalName: nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NSI User-mode interface DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 32 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NSI User-mode interface DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMMBASE.dll) + + WINMMBASE.dll + C:\Windows\SYSTEM32\WINMMBASE.dll + 140719834857472 + 184320 + 140719834890448 + File: C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName: winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base Multimedia Extension API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 180 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base Multimedia Extension API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cfgmgr32.dll) + + cfgmgr32.dll + C:\Windows\System32\cfgmgr32.dll + 140719889252352 + 303104 + 140719889325904 + File: C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName: cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Configuration Manager DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 296 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Configuration Manager DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (PROPSYS.dll) + + PROPSYS.dll + C:\Windows\SYSTEM32\PROPSYS.dll + 140719831187456 + 1736704 + 140719831447408 + File: C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName: propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion: 7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Property System_x000D__x000A_Product: Windows® Search_x000D__x000A_ProductVersion: 7.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1696 + Microsoft Corporation + 7.0.17763.1 (WinBuild.160101.0800) + 7.0.17763.1 + Microsoft Property System + Windows® Search + + + + + System.Diagnostics.ProcessModule (shcore.dll) + + shcore.dll + C:\Windows\System32\shcore.dll + 140719907143680 + 688128 + 140719907388560 + File: C:\Windows\System32\shcore.dll_x000D__x000A_InternalName: SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: SHCORE_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 672 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + SHCORE + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SSPICLI.DLL) + + SSPICLI.DLL + C:\Windows\SYSTEM32\SSPICLI.DLL + 140719886827520 + 192512 + 140719886881776 + File: C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName: sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 188 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IMM32.DLL) + + IMM32.DLL + C:\Windows\System32\IMM32.DLL + 140719906947072 + 188416 + 140719906952688 + File: C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName: imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows IMM32 API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + + CRYPTBASE.DLL + C:\Windows\SYSTEM32\CRYPTBASE.DLL + 140719881846784 + 49152 + 140719881855488 + File: C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName: cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base cryptographic API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base cryptographic API DLL + Microsoft® Windows® Operating System + + + + + 44 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 81184 + 81184 + 138997760 + 138997760 + 340400 + 340400 + 239808512 + 239808512 + 230625280 + 230625280 + 2205045006336 + 1726783488 + true + + + Normal + 32 + + 138997760 + 138997760 + chrome + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 22204 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.3125S +
2019-08-27T02:00:52.3073998+03:00
+ PT1.921875S + PT1.609375S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 23584 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-27T02:00:52.3662233+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 6 + 6 + 27580 + true + Lowest + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-27T02:00:52.3673446+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 14644 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0.09375S +
2019-08-27T02:00:52.368027+03:00
+ PT0.140625S + PT0.046875S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 22264 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-27T02:00:52.3685937+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 19392 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-27T02:00:52.3694148+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 17056 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-27T02:00:52.3755099+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 26912 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-27T02:00:52.3766204+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 12192 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-27T02:00:52.3770034+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 19156 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-27T02:00:52.3775859+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 22748 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-27T02:00:52.3780011+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 6 + 6 + 25144 + true + Lowest + 140719955419728 + Wait + Unknown + PT0S +
2019-08-27T02:00:52.3783612+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 15984 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-27T02:45:53.3398653+03:00
+ PT0S + PT0S + + + + + + + 13 + + + + + + + + + + + + + + + + + + + false + + + 242 + 2204968783872 + 1650561024 + false + 38588416 + 38588416 + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + PT0.5625S + PT4.25S + PT3.6875S + + + 0 + + + true + + + + + chrome + 1 + 242 + 2204968783872 + 38588416 + 138997760 + 81184 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + + + System.Diagnostics.Process (chrome) + + Microsoft.Win32.SafeHandles.SafeProcessHandle + 7936 + 8 + false +
2019-08-24T14:18:00.3253674+03:00
+ 23804 + . + 1413120 + 204800 + + + + System.Diagnostics.ProcessModule (chrome.exe) + System.Diagnostics.ProcessModule (ntdll.dll) + System.Diagnostics.ProcessModule (KERNEL32.DLL) + System.Diagnostics.ProcessModule (KERNELBASE.dll) + System.Diagnostics.ProcessModule (chrome_elf.dll) + System.Diagnostics.ProcessModule (VERSION.dll) + System.Diagnostics.ProcessModule (msvcrt.dll) + System.Diagnostics.ProcessModule (ADVAPI32.dll) + System.Diagnostics.ProcessModule (sechost.dll) + System.Diagnostics.ProcessModule (RPCRT4.dll) + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + System.Diagnostics.ProcessModule (user32.dll) + System.Diagnostics.ProcessModule (win32u.dll) + System.Diagnostics.ProcessModule (GDI32.dll) + System.Diagnostics.ProcessModule (gdi32full.dll) + System.Diagnostics.ProcessModule (msvcp_win.dll) + System.Diagnostics.ProcessModule (ucrtbase.dll) + System.Diagnostics.ProcessModule (IMM32.DLL) + System.Diagnostics.ProcessModule (SHELL32.dll) + System.Diagnostics.ProcessModule (cfgmgr32.dll) + System.Diagnostics.ProcessModule (shcore.dll) + System.Diagnostics.ProcessModule (combase.dll) + System.Diagnostics.ProcessModule (windows.storage.dll) + System.Diagnostics.ProcessModule (profapi.dll) + System.Diagnostics.ProcessModule (powrprof.dll) + System.Diagnostics.ProcessModule (shlwapi.dll) + System.Diagnostics.ProcessModule (kernel.appcore.dll) + System.Diagnostics.ProcessModule (cryptsp.dll) + System.Diagnostics.ProcessModule (chrome.dll) + System.Diagnostics.ProcessModule (uxtheme.dll) + System.Diagnostics.ProcessModule (dwmapi.dll) + System.Diagnostics.ProcessModule (CRYPT32.dll) + System.Diagnostics.ProcessModule (MSASN1.dll) + System.Diagnostics.ProcessModule (USERENV.dll) + System.Diagnostics.ProcessModule (gpapi.dll) + System.Diagnostics.ProcessModule (wkscli.dll) + System.Diagnostics.ProcessModule (bcrypt.dll) + System.Diagnostics.ProcessModule (netutils.dll) + System.Diagnostics.ProcessModule (ole32.dll) + System.Diagnostics.ProcessModule (MSCTF.dll) + System.Diagnostics.ProcessModule (OLEAUT32.dll) + System.Diagnostics.ProcessModule (Secur32.dll) + System.Diagnostics.ProcessModule (SSPICLI.DLL) + System.Diagnostics.ProcessModule (DWrite.dll) + System.Diagnostics.ProcessModule (WS2_32.dll) + System.Diagnostics.ProcessModule (COMCTL32.dll) + System.Diagnostics.ProcessModule (clbcatq.dll) + System.Diagnostics.ProcessModule (twinapi.appcore.dll) + System.Diagnostics.ProcessModule (RMCLIENT.dll) + System.Diagnostics.ProcessModule (twinapi.dll) + System.Diagnostics.ProcessModule (NLAapi.dll) + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + System.Diagnostics.ProcessModule (NSI.dll) + System.Diagnostics.ProcessModule (dhcpcsvc6.DLL) + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + System.Diagnostics.ProcessModule (DNSAPI.dll) + System.Diagnostics.ProcessModule (mscms.dll) + System.Diagnostics.ProcessModule (ColorAdapterClient.dll) + System.Diagnostics.ProcessModule (icm32.dll) + System.Diagnostics.ProcessModule (Windows.UI.dll) + System.Diagnostics.ProcessModule (TextInputFramework.dll) + System.Diagnostics.ProcessModule (InputHost.dll) + System.Diagnostics.ProcessModule (CoreUIComponents.dll) + System.Diagnostics.ProcessModule (CoreMessaging.dll) + System.Diagnostics.ProcessModule (d2d1.dll) + System.Diagnostics.ProcessModule (d3d11.dll) + System.Diagnostics.ProcessModule (PROPSYS.dll) + System.Diagnostics.ProcessModule (wintypes.dll) + System.Diagnostics.ProcessModule (ntmarta.dll) + System.Diagnostics.ProcessModule (dxgi.dll) + System.Diagnostics.ProcessModule (WTSAPI32.dll) + System.Diagnostics.ProcessModule (wlanapi.dll) + System.Diagnostics.ProcessModule (WINSTA.dll) + System.Diagnostics.ProcessModule (wbemprox.dll) + System.Diagnostics.ProcessModule (wbemcomn.dll) + System.Diagnostics.ProcessModule (MMDevApi.dll) + System.Diagnostics.ProcessModule (DEVOBJ.dll) + System.Diagnostics.ProcessModule (wbemsvc.dll) + System.Diagnostics.ProcessModule (WINHTTP.dll) + System.Diagnostics.ProcessModule (fastprox.dll) + System.Diagnostics.ProcessModule (wmiutils.dll) + System.Diagnostics.ProcessModule (DPAPI.dll) + System.Diagnostics.ProcessModule (FirewallAPI.dll) + System.Diagnostics.ProcessModule (fwbase.dll) + System.Diagnostics.ProcessModule (LINKINFO.dll) + System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll) + System.Diagnostics.ProcessModule (dataexchange.dll) + System.Diagnostics.ProcessModule (dcomp.dll) + System.Diagnostics.ProcessModule (atlthunk.dll) + System.Diagnostics.ProcessModule (OLEACC.dll) + System.Diagnostics.ProcessModule (directmanipulation.dll) + System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll) + System.Diagnostics.ProcessModule (explorerframe.dll) + System.Diagnostics.ProcessModule (wpnapps.dll) + System.Diagnostics.ProcessModule (XmlLite.dll) + System.Diagnostics.ProcessModule (usermgrcli.dll) + System.Diagnostics.ProcessModule (mswsock.dll) + System.Diagnostics.ProcessModule (WINMM.dll) + System.Diagnostics.ProcessModule (WINMMBASE.dll) + System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll) + System.Diagnostics.ProcessModule (WmiPerfInst.dll) + System.Diagnostics.ProcessModule (pdh.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll) + System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll) + System.Diagnostics.ProcessModule (Windows.Networking.dll) + System.Diagnostics.ProcessModule (BiWinrt.dll) + System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll) + System.Diagnostics.ProcessModule (NETAPI32.dll) + System.Diagnostics.ProcessModule (SAMCLI.DLL) + System.Diagnostics.ProcessModule (SAMLIB.dll) + System.Diagnostics.ProcessModule (wdmaud.drv) + System.Diagnostics.ProcessModule (ksuser.dll) + System.Diagnostics.ProcessModule (AVRT.dll) + System.Diagnostics.ProcessModule (AUDIOSES.DLL) + System.Diagnostics.ProcessModule (msacm32.drv) + System.Diagnostics.ProcessModule (MSACM32.dll) + System.Diagnostics.ProcessModule (midimap.dll) + System.Diagnostics.ProcessModule (resourcepolicyclient.dll) + System.Diagnostics.ProcessModule (BitsProxy.dll) + + + 61568 + 61568 + 316080128 + 316080128 + 857648 + 857648 + 455720960 + 455720960 + 398323712 + 398323712 + 2204288917504 + 970694656 + true + Normal + 316080128 + 316080128 + chrome + 65535 + 1 + + + + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + + + 1747 + 2204143845376 + 825622528 + false + 112414720 + 112414720 + + System.Diagnostics.ProcessModule (chrome.exe) + PT11M7.53125S + PT21M46.28125S + PT10M38.75S + 1770664 + The Living Tombstone Radio - Now Playing on Pandora - Google Chrome + true + + + + + chrome + 1 + 1747 + 2204143845376 + 112414720 + 316080128 + 61568 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + System.Diagnostics.Process (explorer) + Google LLC + 1306.28125 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + Google LLC + 4.25 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + + + System.Diagnostics.Process (chrome) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 4556 + + 4 + false +
2019-08-24T14:18:43.414544+03:00
+ 2848 + . + + + 1413120 + + + + 204800 + + + + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNEL32.DLL) + + KERNEL32.DLL + C:\Windows\System32\KERNEL32.DLL + 140719912779776 + 733184 + 140719912876560 + File: C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName: kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 716 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNELBASE.dll) + + KERNELBASE.dll + C:\Windows\System32\KERNELBASE.dll + 140719894495232 + 2699264 + 140719894841456 + File: C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName: Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2636 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_elf.dll) + + chrome_elf.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll + 140719325642752 + 925696 + 140719326148464 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName: chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 904 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (VERSION.dll) + + VERSION.dll + C:\Windows\SYSTEM32\VERSION.dll + 140719800254464 + 40960 + 140719800259344 + File: C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName: version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Version Checking and File Installation Libraries_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 40 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Version Checking and File Installation Libraries + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcrt.dll) + + msvcrt.dll + C:\Windows\System32\msvcrt.dll + 140719950004224 + 647168 + 140719950035120 + File: C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName: msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion: 7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT CRT DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 7.0.17763.475_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 7.0.17763.475 (WinBuild.160101.0800) + 7.0.17763.475 + Windows NT CRT DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + + bcryptPrimitives.dll + C:\Windows\System32\bcryptPrimitives.dll + 140719890235392 + 516096 + 140719890461152 + File: C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName: bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 504 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ADVAPI32.dll) + + ADVAPI32.dll + C:\Windows\System32\ADVAPI32.dll + 140719915335680 + 667648 + 140719915417840 + File: C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName: advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Advanced Windows 32 Base API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 652 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Advanced Windows 32 Base API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (sechost.dll) + + sechost.dll + C:\Windows\System32\sechost.dll + 140719948824576 + 647168 + 140719948951504 + File: C:\Windows\System32\sechost.dll_x000D__x000A_InternalName: sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Host for SCM/SDDL/LSA Lookup APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RPCRT4.dll) + + RPCRT4.dll + C:\Windows\System32\RPCRT4.dll + 140719917629440 + 1187840 + 140719918006928 + File: C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName: rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Procedure Call Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Procedure Call Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_child.dll) + + chrome_child.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll + 140717177962496 + 87977984 + 140717247440176 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName: chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 85916 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (OLEAUT32.dll) + + OLEAUT32.dll + C:\Windows\System32\OLEAUT32.dll + 140719946465280 + 802816 + 140719946574624 + File: C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName: OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OLEAUT32.DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 784 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + OLEAUT32.DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcp_win.dll) + + msvcp_win.dll + C:\Windows\System32\msvcp_win.dll + 140719889580032 + 655360 + 140719889658864 + File: C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName: msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 640 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ucrtbase.dll) + + ucrtbase.dll + C:\Windows\System32\ucrtbase.dll + 140719893446656 + 1024000 + 140719893528400 + File: C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName: ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1000 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (combase.dll) + + combase.dll + C:\Windows\System32\combase.dll + 140719950856192 + 3325952 + 140719951769888 + File: C:\Windows\System32\combase.dll_x000D__x000A_InternalName: COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft COM for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3248 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft COM for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WS2_32.dll) + + WS2_32.dll + C:\Windows\System32\WS2_32.dll + 140719954198528 + 446464 + 140719954286384 + File: C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName: ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 436 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Socket 2.0 32-Bit DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (GDI32.dll) + + GDI32.dll + C:\Windows\System32\GDI32.dll + 140719950659584 + 167936 + 140719950676208 + File: C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32full.dll) + + gdi32full.dll + C:\Windows\System32\gdi32full.dll + 140719905112064 + 1675264 + 140719905369792 + File: C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1636 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USER32.dll) + + USER32.dll + C:\Windows\System32\USER32.dll + 140719909306368 + 1667072 + 140719909414448 + File: C:\Windows\System32\USER32.dll_x000D__x000A_InternalName: user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows USER API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows USER API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (win32u.dll) + + win32u.dll + C:\Windows\System32\win32u.dll + 140719906816000 + 131072 + 0 + File: C:\Windows\System32\win32u.dll_x000D__x000A_InternalName: Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32u_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 128 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32u + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINTRUST.dll) + + WINTRUST.dll + C:\Windows\System32\WINTRUST.dll + 140719888728064 + 364544 + 140719888791376 + File: C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName: WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Trust Verification APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 356 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft Trust Verification APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSASN1.dll) + + MSASN1.dll + C:\Windows\System32\MSASN1.dll + 140719887876096 + 73728 + 140719887898576 + File: C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName: msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: ASN.1 Runtime APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 72 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + ASN.1 Runtime APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPT32.dll) + + CRYPT32.dll + C:\Windows\System32\CRYPT32.dll + 140719891480576 + 1945600 + 140719891804832 + File: C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName: CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Crypto API32_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1900 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Crypto API32 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + + IPHLPAPI.DLL + C:\Windows\SYSTEM32\IPHLPAPI.DLL + 140719876931584 + 249856 + 140719876989024 + File: C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName: iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: IP Helper API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 244 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + IP Helper API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMM.dll) + + WINMM.dll + C:\Windows\SYSTEM32\WINMM.dll + 140719835054080 + 147456 + 140719835066368 + File: C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName: winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MCI API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MCI API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USERENV.dll) + + USERENV.dll + C:\Windows\SYSTEM32\USERENV.dll + 140719887024128 + 163840 + 140719887043280 + File: C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName: userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Userenv_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Userenv + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (profapi.dll) + + profapi.dll + C:\Windows\System32\profapi.dll + 140719888531456 + 147456 + 140719888564400 + File: C:\Windows\System32\profapi.dll_x000D__x000A_InternalName: PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: User Profile Basic API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + User Profile Basic API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (DWrite.dll) + + DWrite.dll + C:\Windows\SYSTEM32\DWrite.dll + 140719303819264 + 3129344 + 140719304509728 + File: C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName: DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft DirectX Typography Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3056 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft DirectX Typography Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINSPOOL.DRV) + + WINSPOOL.DRV + C:\Windows\SYSTEM32\WINSPOOL.DRV + 140719787606016 + 561152 + 140719787676448 + File: C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName: winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Spooler Driver_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 548 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Spooler Driver + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (kernel.appcore.dll) + + kernel.appcore.dll + C:\Windows\System32\kernel.appcore.dll + 140719888400384 + 69632 + 140719888415648 + File: C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName: kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AppModel API Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 68 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AppModel API Host + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcrypt.dll) + + bcrypt.dll + C:\Windows\System32\bcrypt.dll + 140719897247744 + 155648 + 140719897281296 + File: C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName: bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 152 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dbghelp.dll) + + dbghelp.dll + C:\Windows\SYSTEM32\dbghelp.dll + 140719552397312 + 2019328 + 140719552479168 + File: C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName: DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Image Helper_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Image Helper + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINHTTP.dll) + + WINHTTP.dll + C:\Windows\SYSTEM32\WINHTTP.dll + 140719810019328 + 991232 + 140719810293024 + File: C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName: winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows HTTP Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 968 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows HTTP Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (Secur32.dll) + + Secur32.dll + C:\Windows\SYSTEM32\Secur32.dll + 140719559147520 + 49152 + 140719559156816 + File: C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName: secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + + dhcpcsvc.DLL + C:\Windows\SYSTEM32\dhcpcsvc.DLL + 140719782494208 + 114688 + 140719782503840 + File: C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName: dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: DHCP Client Service_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 112 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + DHCP Client Service + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (NSI.dll) + + NSI.dll + C:\Windows\System32\NSI.dll + 140719916843008 + 32768 + 140719916851008 + File: C:\Windows\System32\NSI.dll_x000D__x000A_InternalName: nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NSI User-mode interface DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 32 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NSI User-mode interface DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMMBASE.dll) + + WINMMBASE.dll + C:\Windows\SYSTEM32\WINMMBASE.dll + 140719834857472 + 184320 + 140719834890448 + File: C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName: winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base Multimedia Extension API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 180 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base Multimedia Extension API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cfgmgr32.dll) + + cfgmgr32.dll + C:\Windows\System32\cfgmgr32.dll + 140719889252352 + 303104 + 140719889325904 + File: C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName: cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Configuration Manager DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 296 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Configuration Manager DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (PROPSYS.dll) + + PROPSYS.dll + C:\Windows\SYSTEM32\PROPSYS.dll + 140719831187456 + 1736704 + 140719831447408 + File: C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName: propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion: 7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Property System_x000D__x000A_Product: Windows® Search_x000D__x000A_ProductVersion: 7.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1696 + Microsoft Corporation + 7.0.17763.1 (WinBuild.160101.0800) + 7.0.17763.1 + Microsoft Property System + Windows® Search + + + + + System.Diagnostics.ProcessModule (shcore.dll) + + shcore.dll + C:\Windows\System32\shcore.dll + 140719907143680 + 688128 + 140719907388560 + File: C:\Windows\System32\shcore.dll_x000D__x000A_InternalName: SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: SHCORE_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 672 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + SHCORE + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SSPICLI.DLL) + + SSPICLI.DLL + C:\Windows\SYSTEM32\SSPICLI.DLL + 140719886827520 + 192512 + 140719886881776 + File: C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName: sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 188 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IMM32.DLL) + + IMM32.DLL + C:\Windows\System32\IMM32.DLL + 140719906947072 + 188416 + 140719906952688 + File: C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName: imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows IMM32 API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + + CRYPTBASE.DLL + C:\Windows\SYSTEM32\CRYPTBASE.DLL + 140719881846784 + 49152 + 140719881855488 + File: C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName: cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base cryptographic API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base cryptographic API DLL + Microsoft® Windows® Operating System + + + + + 44 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 28144 + 28144 + 41238528 + 41238528 + 345584 + 345584 + 47251456 + 47251456 + 51593216 + 51593216 + 2203769114624 + 450891776 + true + + + Idle + 64 + + 41238528 + 41238528 + chrome + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 4 + 5 + 19712 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.515625S +
2019-08-24T14:18:43.4145459+03:00
+ PT5.03125S + PT4.515625S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 9476 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:43.4709619+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 2 + 2 + 3680 + true + Lowest + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:43.4720883+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 6 + 1744 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0.90625S +
2019-08-24T14:18:43.4727947+03:00
+ PT4.671875S + PT3.765625S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 12432 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-24T14:18:43.4734126+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 14860 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:43.4742712+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 5 + 4540 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:43.4810346+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 18264 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:43.4822668+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 5 + 18120 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:43.4828147+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 11936 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:43.4831871+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 6440 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:43.4837534+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 2 + 2 + 15148 + true + Lowest + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:43.4841852+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 2940 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-27T02:48:22.4698995+03:00
+ PT0S + PT0S + + + + + + + 13 + + + + + + + + + + + + + + + + + + + false + + + 243 + 2203746963456 + 428740608 + false + 30584832 + 30584832 + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + PT2.03125S + PT11.359375S + PT9.328125S + + + 0 + + + true + + + + + chrome + 1 + 243 + 2203746963456 + 30584832 + 41238528 + 28144 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + + + System.Diagnostics.Process (chrome) + + Microsoft.Win32.SafeHandles.SafeProcessHandle + 7720 + 8 + false +
2019-08-24T14:18:00.3253674+03:00
+ 23804 + . + 1413120 + 204800 + + + + System.Diagnostics.ProcessModule (chrome.exe) + System.Diagnostics.ProcessModule (ntdll.dll) + System.Diagnostics.ProcessModule (KERNEL32.DLL) + System.Diagnostics.ProcessModule (KERNELBASE.dll) + System.Diagnostics.ProcessModule (chrome_elf.dll) + System.Diagnostics.ProcessModule (VERSION.dll) + System.Diagnostics.ProcessModule (msvcrt.dll) + System.Diagnostics.ProcessModule (ADVAPI32.dll) + System.Diagnostics.ProcessModule (sechost.dll) + System.Diagnostics.ProcessModule (RPCRT4.dll) + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + System.Diagnostics.ProcessModule (user32.dll) + System.Diagnostics.ProcessModule (win32u.dll) + System.Diagnostics.ProcessModule (GDI32.dll) + System.Diagnostics.ProcessModule (gdi32full.dll) + System.Diagnostics.ProcessModule (msvcp_win.dll) + System.Diagnostics.ProcessModule (ucrtbase.dll) + System.Diagnostics.ProcessModule (IMM32.DLL) + System.Diagnostics.ProcessModule (SHELL32.dll) + System.Diagnostics.ProcessModule (cfgmgr32.dll) + System.Diagnostics.ProcessModule (shcore.dll) + System.Diagnostics.ProcessModule (combase.dll) + System.Diagnostics.ProcessModule (windows.storage.dll) + System.Diagnostics.ProcessModule (profapi.dll) + System.Diagnostics.ProcessModule (powrprof.dll) + System.Diagnostics.ProcessModule (shlwapi.dll) + System.Diagnostics.ProcessModule (kernel.appcore.dll) + System.Diagnostics.ProcessModule (cryptsp.dll) + System.Diagnostics.ProcessModule (chrome.dll) + System.Diagnostics.ProcessModule (uxtheme.dll) + System.Diagnostics.ProcessModule (dwmapi.dll) + System.Diagnostics.ProcessModule (CRYPT32.dll) + System.Diagnostics.ProcessModule (MSASN1.dll) + System.Diagnostics.ProcessModule (USERENV.dll) + System.Diagnostics.ProcessModule (gpapi.dll) + System.Diagnostics.ProcessModule (wkscli.dll) + System.Diagnostics.ProcessModule (bcrypt.dll) + System.Diagnostics.ProcessModule (netutils.dll) + System.Diagnostics.ProcessModule (ole32.dll) + System.Diagnostics.ProcessModule (MSCTF.dll) + System.Diagnostics.ProcessModule (OLEAUT32.dll) + System.Diagnostics.ProcessModule (Secur32.dll) + System.Diagnostics.ProcessModule (SSPICLI.DLL) + System.Diagnostics.ProcessModule (DWrite.dll) + System.Diagnostics.ProcessModule (WS2_32.dll) + System.Diagnostics.ProcessModule (COMCTL32.dll) + System.Diagnostics.ProcessModule (clbcatq.dll) + System.Diagnostics.ProcessModule (twinapi.appcore.dll) + System.Diagnostics.ProcessModule (RMCLIENT.dll) + System.Diagnostics.ProcessModule (twinapi.dll) + System.Diagnostics.ProcessModule (NLAapi.dll) + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + System.Diagnostics.ProcessModule (NSI.dll) + System.Diagnostics.ProcessModule (dhcpcsvc6.DLL) + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + System.Diagnostics.ProcessModule (DNSAPI.dll) + System.Diagnostics.ProcessModule (mscms.dll) + System.Diagnostics.ProcessModule (ColorAdapterClient.dll) + System.Diagnostics.ProcessModule (icm32.dll) + System.Diagnostics.ProcessModule (Windows.UI.dll) + System.Diagnostics.ProcessModule (TextInputFramework.dll) + System.Diagnostics.ProcessModule (InputHost.dll) + System.Diagnostics.ProcessModule (CoreUIComponents.dll) + System.Diagnostics.ProcessModule (CoreMessaging.dll) + System.Diagnostics.ProcessModule (d2d1.dll) + System.Diagnostics.ProcessModule (d3d11.dll) + System.Diagnostics.ProcessModule (PROPSYS.dll) + System.Diagnostics.ProcessModule (wintypes.dll) + System.Diagnostics.ProcessModule (ntmarta.dll) + System.Diagnostics.ProcessModule (dxgi.dll) + System.Diagnostics.ProcessModule (WTSAPI32.dll) + System.Diagnostics.ProcessModule (wlanapi.dll) + System.Diagnostics.ProcessModule (WINSTA.dll) + System.Diagnostics.ProcessModule (wbemprox.dll) + System.Diagnostics.ProcessModule (wbemcomn.dll) + System.Diagnostics.ProcessModule (MMDevApi.dll) + System.Diagnostics.ProcessModule (DEVOBJ.dll) + System.Diagnostics.ProcessModule (wbemsvc.dll) + System.Diagnostics.ProcessModule (WINHTTP.dll) + System.Diagnostics.ProcessModule (fastprox.dll) + System.Diagnostics.ProcessModule (wmiutils.dll) + System.Diagnostics.ProcessModule (DPAPI.dll) + System.Diagnostics.ProcessModule (FirewallAPI.dll) + System.Diagnostics.ProcessModule (fwbase.dll) + System.Diagnostics.ProcessModule (LINKINFO.dll) + System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll) + System.Diagnostics.ProcessModule (dataexchange.dll) + System.Diagnostics.ProcessModule (dcomp.dll) + System.Diagnostics.ProcessModule (atlthunk.dll) + System.Diagnostics.ProcessModule (OLEACC.dll) + System.Diagnostics.ProcessModule (directmanipulation.dll) + System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll) + System.Diagnostics.ProcessModule (explorerframe.dll) + System.Diagnostics.ProcessModule (wpnapps.dll) + System.Diagnostics.ProcessModule (XmlLite.dll) + System.Diagnostics.ProcessModule (usermgrcli.dll) + System.Diagnostics.ProcessModule (mswsock.dll) + System.Diagnostics.ProcessModule (WINMM.dll) + System.Diagnostics.ProcessModule (WINMMBASE.dll) + System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll) + System.Diagnostics.ProcessModule (WmiPerfInst.dll) + System.Diagnostics.ProcessModule (pdh.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll) + System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll) + System.Diagnostics.ProcessModule (Windows.Networking.dll) + System.Diagnostics.ProcessModule (BiWinrt.dll) + System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll) + System.Diagnostics.ProcessModule (NETAPI32.dll) + System.Diagnostics.ProcessModule (SAMCLI.DLL) + System.Diagnostics.ProcessModule (SAMLIB.dll) + System.Diagnostics.ProcessModule (wdmaud.drv) + System.Diagnostics.ProcessModule (ksuser.dll) + System.Diagnostics.ProcessModule (AVRT.dll) + System.Diagnostics.ProcessModule (AUDIOSES.DLL) + System.Diagnostics.ProcessModule (msacm32.drv) + System.Diagnostics.ProcessModule (MSACM32.dll) + System.Diagnostics.ProcessModule (midimap.dll) + System.Diagnostics.ProcessModule (resourcepolicyclient.dll) + System.Diagnostics.ProcessModule (BitsProxy.dll) + + + 61568 + 61568 + 316080128 + 316080128 + 857648 + 857648 + 455720960 + 455720960 + 398323712 + 398323712 + 2204288917504 + 970694656 + true + Normal + 316080128 + 316080128 + chrome + 65535 + 1 + + + + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + + + 1747 + 2204143845376 + 825622528 + false + 112414720 + 112414720 + + System.Diagnostics.ProcessModule (chrome.exe) + PT11M7.53125S + PT21M46.28125S + PT10M38.75S + 1770664 + The Living Tombstone Radio - Now Playing on Pandora - Google Chrome + true + + + + + chrome + 1 + 1747 + 2204143845376 + 112414720 + 316080128 + 61568 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + System.Diagnostics.Process (explorer) + Google LLC + 1306.28125 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + Google LLC + 11.359375 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + + + System.Diagnostics.Process (chrome) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 4408 + + 8 + false +
2019-08-24T14:18:00.9594983+03:00
+ 5196 + . + + + 1413120 + + + + 204800 + + + + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNEL32.DLL) + + KERNEL32.DLL + C:\Windows\System32\KERNEL32.DLL + 140719912779776 + 733184 + 140719912876560 + File: C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName: kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 716 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNELBASE.dll) + + KERNELBASE.dll + C:\Windows\System32\KERNELBASE.dll + 140719894495232 + 2699264 + 140719894841456 + File: C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName: Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2636 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_elf.dll) + + chrome_elf.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll + 140719325642752 + 925696 + 140719326148464 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName: chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 904 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (VERSION.dll) + + VERSION.dll + C:\Windows\SYSTEM32\VERSION.dll + 140719800254464 + 40960 + 140719800259344 + File: C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName: version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Version Checking and File Installation Libraries_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 40 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Version Checking and File Installation Libraries + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcrt.dll) + + msvcrt.dll + C:\Windows\System32\msvcrt.dll + 140719950004224 + 647168 + 140719950035120 + File: C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName: msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion: 7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT CRT DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 7.0.17763.475_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 7.0.17763.475 (WinBuild.160101.0800) + 7.0.17763.475 + Windows NT CRT DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + + bcryptPrimitives.dll + C:\Windows\System32\bcryptPrimitives.dll + 140719890235392 + 516096 + 140719890461152 + File: C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName: bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 504 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ADVAPI32.dll) + + ADVAPI32.dll + C:\Windows\System32\ADVAPI32.dll + 140719915335680 + 667648 + 140719915417840 + File: C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName: advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Advanced Windows 32 Base API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 652 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Advanced Windows 32 Base API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (sechost.dll) + + sechost.dll + C:\Windows\System32\sechost.dll + 140719948824576 + 647168 + 140719948951504 + File: C:\Windows\System32\sechost.dll_x000D__x000A_InternalName: sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Host for SCM/SDDL/LSA Lookup APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RPCRT4.dll) + + RPCRT4.dll + C:\Windows\System32\RPCRT4.dll + 140719917629440 + 1187840 + 140719918006928 + File: C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName: rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Procedure Call Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Procedure Call Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_child.dll) + + chrome_child.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll + 140717177962496 + 87977984 + 140717247440176 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName: chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 85916 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (OLEAUT32.dll) + + OLEAUT32.dll + C:\Windows\System32\OLEAUT32.dll + 140719946465280 + 802816 + 140719946574624 + File: C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName: OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OLEAUT32.DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 784 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + OLEAUT32.DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcp_win.dll) + + msvcp_win.dll + C:\Windows\System32\msvcp_win.dll + 140719889580032 + 655360 + 140719889658864 + File: C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName: msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 640 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ucrtbase.dll) + + ucrtbase.dll + C:\Windows\System32\ucrtbase.dll + 140719893446656 + 1024000 + 140719893528400 + File: C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName: ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1000 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (combase.dll) + + combase.dll + C:\Windows\System32\combase.dll + 140719950856192 + 3325952 + 140719951769888 + File: C:\Windows\System32\combase.dll_x000D__x000A_InternalName: COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft COM for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3248 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft COM for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WS2_32.dll) + + WS2_32.dll + C:\Windows\System32\WS2_32.dll + 140719954198528 + 446464 + 140719954286384 + File: C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName: ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 436 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Socket 2.0 32-Bit DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (GDI32.dll) + + GDI32.dll + C:\Windows\System32\GDI32.dll + 140719950659584 + 167936 + 140719950676208 + File: C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32full.dll) + + gdi32full.dll + C:\Windows\System32\gdi32full.dll + 140719905112064 + 1675264 + 140719905369792 + File: C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1636 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USER32.dll) + + USER32.dll + C:\Windows\System32\USER32.dll + 140719909306368 + 1667072 + 140719909414448 + File: C:\Windows\System32\USER32.dll_x000D__x000A_InternalName: user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows USER API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows USER API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (win32u.dll) + + win32u.dll + C:\Windows\System32\win32u.dll + 140719906816000 + 131072 + 0 + File: C:\Windows\System32\win32u.dll_x000D__x000A_InternalName: Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32u_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 128 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32u + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINTRUST.dll) + + WINTRUST.dll + C:\Windows\System32\WINTRUST.dll + 140719888728064 + 364544 + 140719888791376 + File: C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName: WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Trust Verification APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 356 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft Trust Verification APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSASN1.dll) + + MSASN1.dll + C:\Windows\System32\MSASN1.dll + 140719887876096 + 73728 + 140719887898576 + File: C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName: msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: ASN.1 Runtime APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 72 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + ASN.1 Runtime APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPT32.dll) + + CRYPT32.dll + C:\Windows\System32\CRYPT32.dll + 140719891480576 + 1945600 + 140719891804832 + File: C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName: CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Crypto API32_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1900 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Crypto API32 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + + IPHLPAPI.DLL + C:\Windows\SYSTEM32\IPHLPAPI.DLL + 140719876931584 + 249856 + 140719876989024 + File: C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName: iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: IP Helper API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 244 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + IP Helper API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMM.dll) + + WINMM.dll + C:\Windows\SYSTEM32\WINMM.dll + 140719835054080 + 147456 + 140719835066368 + File: C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName: winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MCI API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MCI API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USERENV.dll) + + USERENV.dll + C:\Windows\SYSTEM32\USERENV.dll + 140719887024128 + 163840 + 140719887043280 + File: C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName: userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Userenv_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Userenv + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (profapi.dll) + + profapi.dll + C:\Windows\System32\profapi.dll + 140719888531456 + 147456 + 140719888564400 + File: C:\Windows\System32\profapi.dll_x000D__x000A_InternalName: PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: User Profile Basic API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + User Profile Basic API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (DWrite.dll) + + DWrite.dll + C:\Windows\SYSTEM32\DWrite.dll + 140719303819264 + 3129344 + 140719304509728 + File: C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName: DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft DirectX Typography Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3056 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft DirectX Typography Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINSPOOL.DRV) + + WINSPOOL.DRV + C:\Windows\SYSTEM32\WINSPOOL.DRV + 140719787606016 + 561152 + 140719787676448 + File: C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName: winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Spooler Driver_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 548 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Spooler Driver + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (kernel.appcore.dll) + + kernel.appcore.dll + C:\Windows\System32\kernel.appcore.dll + 140719888400384 + 69632 + 140719888415648 + File: C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName: kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AppModel API Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 68 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AppModel API Host + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcrypt.dll) + + bcrypt.dll + C:\Windows\System32\bcrypt.dll + 140719897247744 + 155648 + 140719897281296 + File: C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName: bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 152 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dbghelp.dll) + + dbghelp.dll + C:\Windows\SYSTEM32\dbghelp.dll + 140719552397312 + 2019328 + 140719552479168 + File: C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName: DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Image Helper_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Image Helper + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINHTTP.dll) + + WINHTTP.dll + C:\Windows\SYSTEM32\WINHTTP.dll + 140719810019328 + 991232 + 140719810293024 + File: C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName: winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows HTTP Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 968 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows HTTP Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (Secur32.dll) + + Secur32.dll + C:\Windows\SYSTEM32\Secur32.dll + 140719559147520 + 49152 + 140719559156816 + File: C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName: secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + + dhcpcsvc.DLL + C:\Windows\SYSTEM32\dhcpcsvc.DLL + 140719782494208 + 114688 + 140719782503840 + File: C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName: dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: DHCP Client Service_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 112 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + DHCP Client Service + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (NSI.dll) + + NSI.dll + C:\Windows\System32\NSI.dll + 140719916843008 + 32768 + 140719916851008 + File: C:\Windows\System32\NSI.dll_x000D__x000A_InternalName: nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NSI User-mode interface DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 32 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NSI User-mode interface DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMMBASE.dll) + + WINMMBASE.dll + C:\Windows\SYSTEM32\WINMMBASE.dll + 140719834857472 + 184320 + 140719834890448 + File: C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName: winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base Multimedia Extension API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 180 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base Multimedia Extension API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cfgmgr32.dll) + + cfgmgr32.dll + C:\Windows\System32\cfgmgr32.dll + 140719889252352 + 303104 + 140719889325904 + File: C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName: cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Configuration Manager DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 296 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Configuration Manager DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (PROPSYS.dll) + + PROPSYS.dll + C:\Windows\SYSTEM32\PROPSYS.dll + 140719831187456 + 1736704 + 140719831447408 + File: C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName: propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion: 7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Property System_x000D__x000A_Product: Windows® Search_x000D__x000A_ProductVersion: 7.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1696 + Microsoft Corporation + 7.0.17763.1 (WinBuild.160101.0800) + 7.0.17763.1 + Microsoft Property System + Windows® Search + + + + + System.Diagnostics.ProcessModule (shcore.dll) + + shcore.dll + C:\Windows\System32\shcore.dll + 140719907143680 + 688128 + 140719907388560 + File: C:\Windows\System32\shcore.dll_x000D__x000A_InternalName: SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: SHCORE_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 672 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + SHCORE + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SSPICLI.DLL) + + SSPICLI.DLL + C:\Windows\SYSTEM32\SSPICLI.DLL + 140719886827520 + 192512 + 140719886881776 + File: C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName: sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 188 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IMM32.DLL) + + IMM32.DLL + C:\Windows\System32\IMM32.DLL + 140719906947072 + 188416 + 140719906952688 + File: C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName: imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows IMM32 API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + + CRYPTBASE.DLL + C:\Windows\SYSTEM32\CRYPTBASE.DLL + 140719881846784 + 49152 + 140719881855488 + File: C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName: cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base cryptographic API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base cryptographic API DLL + Microsoft® Windows® Operating System + + + + + 44 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 25152 + 25152 + 32710656 + 32710656 + 350648 + 350648 + 43442176 + 43442176 + 43405312 + 43405312 + 2203784564736 + 466341888 + true + + + Normal + 32 + + 32710656 + 32710656 + chrome + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 17952 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.421875S +
2019-08-24T14:18:00.9595002+03:00
+ PT7.84375S + PT7.421875S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 12744 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.0621287+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 6 + 6 + 9280 + true + Lowest + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.0643991+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 6708 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0.59375S +
2019-08-24T14:18:01.0654768+03:00
+ PT2.140625S + PT1.546875S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 1660 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-24T14:18:01.0663254+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 18704 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.0674549+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 21836 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.0785829+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 3644 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.0820887+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 8800 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.0827336+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 17776 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.0833734+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 20228 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.0839275+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 6 + 7 + 17364 + true + Lowest + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.0845327+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 22480 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-27T02:50:47.5351816+03:00
+ PT0S + PT0S + + + + + + + 13 + + + + + + + + + + + + + + + + + + + false + + + 242 + 2203745755136 + 427532288 + false + 34971648 + 34971648 + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + PT1.59375S + PT11.203125S + PT9.609375S + + + 0 + + + true + + + + + chrome + 1 + 242 + 2203745755136 + 34971648 + 32710656 + 25152 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + + + System.Diagnostics.Process (chrome) + + Microsoft.Win32.SafeHandles.SafeProcessHandle + 4520 + 8 + false +
2019-08-24T14:18:00.3253674+03:00
+ 23804 + . + 1413120 + 204800 + + + + System.Diagnostics.ProcessModule (chrome.exe) + System.Diagnostics.ProcessModule (ntdll.dll) + System.Diagnostics.ProcessModule (KERNEL32.DLL) + System.Diagnostics.ProcessModule (KERNELBASE.dll) + System.Diagnostics.ProcessModule (chrome_elf.dll) + System.Diagnostics.ProcessModule (VERSION.dll) + System.Diagnostics.ProcessModule (msvcrt.dll) + System.Diagnostics.ProcessModule (ADVAPI32.dll) + System.Diagnostics.ProcessModule (sechost.dll) + System.Diagnostics.ProcessModule (RPCRT4.dll) + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + System.Diagnostics.ProcessModule (user32.dll) + System.Diagnostics.ProcessModule (win32u.dll) + System.Diagnostics.ProcessModule (GDI32.dll) + System.Diagnostics.ProcessModule (gdi32full.dll) + System.Diagnostics.ProcessModule (msvcp_win.dll) + System.Diagnostics.ProcessModule (ucrtbase.dll) + System.Diagnostics.ProcessModule (IMM32.DLL) + System.Diagnostics.ProcessModule (SHELL32.dll) + System.Diagnostics.ProcessModule (cfgmgr32.dll) + System.Diagnostics.ProcessModule (shcore.dll) + System.Diagnostics.ProcessModule (combase.dll) + System.Diagnostics.ProcessModule (windows.storage.dll) + System.Diagnostics.ProcessModule (profapi.dll) + System.Diagnostics.ProcessModule (powrprof.dll) + System.Diagnostics.ProcessModule (shlwapi.dll) + System.Diagnostics.ProcessModule (kernel.appcore.dll) + System.Diagnostics.ProcessModule (cryptsp.dll) + System.Diagnostics.ProcessModule (chrome.dll) + System.Diagnostics.ProcessModule (uxtheme.dll) + System.Diagnostics.ProcessModule (dwmapi.dll) + System.Diagnostics.ProcessModule (CRYPT32.dll) + System.Diagnostics.ProcessModule (MSASN1.dll) + System.Diagnostics.ProcessModule (USERENV.dll) + System.Diagnostics.ProcessModule (gpapi.dll) + System.Diagnostics.ProcessModule (wkscli.dll) + System.Diagnostics.ProcessModule (bcrypt.dll) + System.Diagnostics.ProcessModule (netutils.dll) + System.Diagnostics.ProcessModule (ole32.dll) + System.Diagnostics.ProcessModule (MSCTF.dll) + System.Diagnostics.ProcessModule (OLEAUT32.dll) + System.Diagnostics.ProcessModule (Secur32.dll) + System.Diagnostics.ProcessModule (SSPICLI.DLL) + System.Diagnostics.ProcessModule (DWrite.dll) + System.Diagnostics.ProcessModule (WS2_32.dll) + System.Diagnostics.ProcessModule (COMCTL32.dll) + System.Diagnostics.ProcessModule (clbcatq.dll) + System.Diagnostics.ProcessModule (twinapi.appcore.dll) + System.Diagnostics.ProcessModule (RMCLIENT.dll) + System.Diagnostics.ProcessModule (twinapi.dll) + System.Diagnostics.ProcessModule (NLAapi.dll) + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + System.Diagnostics.ProcessModule (NSI.dll) + System.Diagnostics.ProcessModule (dhcpcsvc6.DLL) + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + System.Diagnostics.ProcessModule (DNSAPI.dll) + System.Diagnostics.ProcessModule (mscms.dll) + System.Diagnostics.ProcessModule (ColorAdapterClient.dll) + System.Diagnostics.ProcessModule (icm32.dll) + System.Diagnostics.ProcessModule (Windows.UI.dll) + System.Diagnostics.ProcessModule (TextInputFramework.dll) + System.Diagnostics.ProcessModule (InputHost.dll) + System.Diagnostics.ProcessModule (CoreUIComponents.dll) + System.Diagnostics.ProcessModule (CoreMessaging.dll) + System.Diagnostics.ProcessModule (d2d1.dll) + System.Diagnostics.ProcessModule (d3d11.dll) + System.Diagnostics.ProcessModule (PROPSYS.dll) + System.Diagnostics.ProcessModule (wintypes.dll) + System.Diagnostics.ProcessModule (ntmarta.dll) + System.Diagnostics.ProcessModule (dxgi.dll) + System.Diagnostics.ProcessModule (WTSAPI32.dll) + System.Diagnostics.ProcessModule (wlanapi.dll) + System.Diagnostics.ProcessModule (WINSTA.dll) + System.Diagnostics.ProcessModule (wbemprox.dll) + System.Diagnostics.ProcessModule (wbemcomn.dll) + System.Diagnostics.ProcessModule (MMDevApi.dll) + System.Diagnostics.ProcessModule (DEVOBJ.dll) + System.Diagnostics.ProcessModule (wbemsvc.dll) + System.Diagnostics.ProcessModule (WINHTTP.dll) + System.Diagnostics.ProcessModule (fastprox.dll) + System.Diagnostics.ProcessModule (wmiutils.dll) + System.Diagnostics.ProcessModule (DPAPI.dll) + System.Diagnostics.ProcessModule (FirewallAPI.dll) + System.Diagnostics.ProcessModule (fwbase.dll) + System.Diagnostics.ProcessModule (LINKINFO.dll) + System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll) + System.Diagnostics.ProcessModule (dataexchange.dll) + System.Diagnostics.ProcessModule (dcomp.dll) + System.Diagnostics.ProcessModule (atlthunk.dll) + System.Diagnostics.ProcessModule (OLEACC.dll) + System.Diagnostics.ProcessModule (directmanipulation.dll) + System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll) + System.Diagnostics.ProcessModule (explorerframe.dll) + System.Diagnostics.ProcessModule (wpnapps.dll) + System.Diagnostics.ProcessModule (XmlLite.dll) + System.Diagnostics.ProcessModule (usermgrcli.dll) + System.Diagnostics.ProcessModule (mswsock.dll) + System.Diagnostics.ProcessModule (WINMM.dll) + System.Diagnostics.ProcessModule (WINMMBASE.dll) + System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll) + System.Diagnostics.ProcessModule (WmiPerfInst.dll) + System.Diagnostics.ProcessModule (pdh.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll) + System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll) + System.Diagnostics.ProcessModule (Windows.Networking.dll) + System.Diagnostics.ProcessModule (BiWinrt.dll) + System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll) + System.Diagnostics.ProcessModule (NETAPI32.dll) + System.Diagnostics.ProcessModule (SAMCLI.DLL) + System.Diagnostics.ProcessModule (SAMLIB.dll) + System.Diagnostics.ProcessModule (wdmaud.drv) + System.Diagnostics.ProcessModule (ksuser.dll) + System.Diagnostics.ProcessModule (AVRT.dll) + System.Diagnostics.ProcessModule (AUDIOSES.DLL) + System.Diagnostics.ProcessModule (msacm32.drv) + System.Diagnostics.ProcessModule (MSACM32.dll) + System.Diagnostics.ProcessModule (midimap.dll) + System.Diagnostics.ProcessModule (resourcepolicyclient.dll) + System.Diagnostics.ProcessModule (BitsProxy.dll) + + + 61568 + 61568 + 316080128 + 316080128 + 857648 + 857648 + 455720960 + 455720960 + 398323712 + 398323712 + 2204288917504 + 970694656 + true + Normal + 316080128 + 316080128 + chrome + 65535 + 1 + + + + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + + + 1747 + 2204143845376 + 825622528 + false + 112414720 + 112414720 + + System.Diagnostics.ProcessModule (chrome.exe) + PT11M7.53125S + PT21M46.28125S + PT10M38.75S + 1770664 + The Living Tombstone Radio - Now Playing on Pandora - Google Chrome + true + + + + + chrome + 1 + 1747 + 2204143845376 + 112414720 + 316080128 + 61568 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + System.Diagnostics.Process (explorer) + Google LLC + 1306.28125 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + Google LLC + 11.203125 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + + + System.Diagnostics.Process (chrome) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 7512 + + 4 + false +
2019-08-24T14:18:25.2320391+03:00
+ 15872 + . + + + 1413120 + + + + 204800 + + + + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNEL32.DLL) + + KERNEL32.DLL + C:\Windows\System32\KERNEL32.DLL + 140719912779776 + 733184 + 140719912876560 + File: C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName: kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 716 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNELBASE.dll) + + KERNELBASE.dll + C:\Windows\System32\KERNELBASE.dll + 140719894495232 + 2699264 + 140719894841456 + File: C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName: Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2636 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_elf.dll) + + chrome_elf.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll + 140719325642752 + 925696 + 140719326148464 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName: chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 904 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (VERSION.dll) + + VERSION.dll + C:\Windows\SYSTEM32\VERSION.dll + 140719800254464 + 40960 + 140719800259344 + File: C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName: version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Version Checking and File Installation Libraries_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 40 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Version Checking and File Installation Libraries + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcrt.dll) + + msvcrt.dll + C:\Windows\System32\msvcrt.dll + 140719950004224 + 647168 + 140719950035120 + File: C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName: msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion: 7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT CRT DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 7.0.17763.475_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 7.0.17763.475 (WinBuild.160101.0800) + 7.0.17763.475 + Windows NT CRT DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + + bcryptPrimitives.dll + C:\Windows\System32\bcryptPrimitives.dll + 140719890235392 + 516096 + 140719890461152 + File: C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName: bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 504 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ADVAPI32.dll) + + ADVAPI32.dll + C:\Windows\System32\ADVAPI32.dll + 140719915335680 + 667648 + 140719915417840 + File: C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName: advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Advanced Windows 32 Base API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 652 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Advanced Windows 32 Base API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (sechost.dll) + + sechost.dll + C:\Windows\System32\sechost.dll + 140719948824576 + 647168 + 140719948951504 + File: C:\Windows\System32\sechost.dll_x000D__x000A_InternalName: sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Host for SCM/SDDL/LSA Lookup APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RPCRT4.dll) + + RPCRT4.dll + C:\Windows\System32\RPCRT4.dll + 140719917629440 + 1187840 + 140719918006928 + File: C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName: rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Procedure Call Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Procedure Call Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_child.dll) + + chrome_child.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll + 140717177962496 + 87977984 + 140717247440176 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName: chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 85916 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (OLEAUT32.dll) + + OLEAUT32.dll + C:\Windows\System32\OLEAUT32.dll + 140719946465280 + 802816 + 140719946574624 + File: C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName: OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OLEAUT32.DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 784 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + OLEAUT32.DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcp_win.dll) + + msvcp_win.dll + C:\Windows\System32\msvcp_win.dll + 140719889580032 + 655360 + 140719889658864 + File: C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName: msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 640 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ucrtbase.dll) + + ucrtbase.dll + C:\Windows\System32\ucrtbase.dll + 140719893446656 + 1024000 + 140719893528400 + File: C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName: ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1000 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (combase.dll) + + combase.dll + C:\Windows\System32\combase.dll + 140719950856192 + 3325952 + 140719951769888 + File: C:\Windows\System32\combase.dll_x000D__x000A_InternalName: COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft COM for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3248 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft COM for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WS2_32.dll) + + WS2_32.dll + C:\Windows\System32\WS2_32.dll + 140719954198528 + 446464 + 140719954286384 + File: C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName: ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 436 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Socket 2.0 32-Bit DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (GDI32.dll) + + GDI32.dll + C:\Windows\System32\GDI32.dll + 140719950659584 + 167936 + 140719950676208 + File: C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32full.dll) + + gdi32full.dll + C:\Windows\System32\gdi32full.dll + 140719905112064 + 1675264 + 140719905369792 + File: C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1636 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USER32.dll) + + USER32.dll + C:\Windows\System32\USER32.dll + 140719909306368 + 1667072 + 140719909414448 + File: C:\Windows\System32\USER32.dll_x000D__x000A_InternalName: user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows USER API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows USER API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (win32u.dll) + + win32u.dll + C:\Windows\System32\win32u.dll + 140719906816000 + 131072 + 0 + File: C:\Windows\System32\win32u.dll_x000D__x000A_InternalName: Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32u_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 128 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32u + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINTRUST.dll) + + WINTRUST.dll + C:\Windows\System32\WINTRUST.dll + 140719888728064 + 364544 + 140719888791376 + File: C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName: WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Trust Verification APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 356 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft Trust Verification APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSASN1.dll) + + MSASN1.dll + C:\Windows\System32\MSASN1.dll + 140719887876096 + 73728 + 140719887898576 + File: C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName: msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: ASN.1 Runtime APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 72 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + ASN.1 Runtime APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPT32.dll) + + CRYPT32.dll + C:\Windows\System32\CRYPT32.dll + 140719891480576 + 1945600 + 140719891804832 + File: C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName: CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Crypto API32_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1900 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Crypto API32 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + + IPHLPAPI.DLL + C:\Windows\SYSTEM32\IPHLPAPI.DLL + 140719876931584 + 249856 + 140719876989024 + File: C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName: iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: IP Helper API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 244 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + IP Helper API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMM.dll) + + WINMM.dll + C:\Windows\SYSTEM32\WINMM.dll + 140719835054080 + 147456 + 140719835066368 + File: C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName: winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MCI API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MCI API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USERENV.dll) + + USERENV.dll + C:\Windows\SYSTEM32\USERENV.dll + 140719887024128 + 163840 + 140719887043280 + File: C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName: userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Userenv_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Userenv + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (profapi.dll) + + profapi.dll + C:\Windows\System32\profapi.dll + 140719888531456 + 147456 + 140719888564400 + File: C:\Windows\System32\profapi.dll_x000D__x000A_InternalName: PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: User Profile Basic API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + User Profile Basic API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (DWrite.dll) + + DWrite.dll + C:\Windows\SYSTEM32\DWrite.dll + 140719303819264 + 3129344 + 140719304509728 + File: C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName: DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft DirectX Typography Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3056 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft DirectX Typography Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINSPOOL.DRV) + + WINSPOOL.DRV + C:\Windows\SYSTEM32\WINSPOOL.DRV + 140719787606016 + 561152 + 140719787676448 + File: C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName: winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Spooler Driver_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 548 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Spooler Driver + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (kernel.appcore.dll) + + kernel.appcore.dll + C:\Windows\System32\kernel.appcore.dll + 140719888400384 + 69632 + 140719888415648 + File: C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName: kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AppModel API Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 68 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AppModel API Host + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcrypt.dll) + + bcrypt.dll + C:\Windows\System32\bcrypt.dll + 140719897247744 + 155648 + 140719897281296 + File: C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName: bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 152 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dbghelp.dll) + + dbghelp.dll + C:\Windows\SYSTEM32\dbghelp.dll + 140719552397312 + 2019328 + 140719552479168 + File: C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName: DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Image Helper_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Image Helper + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINHTTP.dll) + + WINHTTP.dll + C:\Windows\SYSTEM32\WINHTTP.dll + 140719810019328 + 991232 + 140719810293024 + File: C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName: winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows HTTP Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 968 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows HTTP Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (Secur32.dll) + + Secur32.dll + C:\Windows\SYSTEM32\Secur32.dll + 140719559147520 + 49152 + 140719559156816 + File: C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName: secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + + dhcpcsvc.DLL + C:\Windows\SYSTEM32\dhcpcsvc.DLL + 140719782494208 + 114688 + 140719782503840 + File: C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName: dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: DHCP Client Service_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 112 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + DHCP Client Service + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (NSI.dll) + + NSI.dll + C:\Windows\System32\NSI.dll + 140719916843008 + 32768 + 140719916851008 + File: C:\Windows\System32\NSI.dll_x000D__x000A_InternalName: nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NSI User-mode interface DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 32 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NSI User-mode interface DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMMBASE.dll) + + WINMMBASE.dll + C:\Windows\SYSTEM32\WINMMBASE.dll + 140719834857472 + 184320 + 140719834890448 + File: C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName: winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base Multimedia Extension API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 180 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base Multimedia Extension API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cfgmgr32.dll) + + cfgmgr32.dll + C:\Windows\System32\cfgmgr32.dll + 140719889252352 + 303104 + 140719889325904 + File: C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName: cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Configuration Manager DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 296 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Configuration Manager DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (PROPSYS.dll) + + PROPSYS.dll + C:\Windows\SYSTEM32\PROPSYS.dll + 140719831187456 + 1736704 + 140719831447408 + File: C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName: propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion: 7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Property System_x000D__x000A_Product: Windows® Search_x000D__x000A_ProductVersion: 7.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1696 + Microsoft Corporation + 7.0.17763.1 (WinBuild.160101.0800) + 7.0.17763.1 + Microsoft Property System + Windows® Search + + + + + System.Diagnostics.ProcessModule (shcore.dll) + + shcore.dll + C:\Windows\System32\shcore.dll + 140719907143680 + 688128 + 140719907388560 + File: C:\Windows\System32\shcore.dll_x000D__x000A_InternalName: SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: SHCORE_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 672 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + SHCORE + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SSPICLI.DLL) + + SSPICLI.DLL + C:\Windows\SYSTEM32\SSPICLI.DLL + 140719886827520 + 192512 + 140719886881776 + File: C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName: sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 188 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IMM32.DLL) + + IMM32.DLL + C:\Windows\System32\IMM32.DLL + 140719906947072 + 188416 + 140719906952688 + File: C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName: imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows IMM32 API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + + CRYPTBASE.DLL + C:\Windows\SYSTEM32\CRYPTBASE.DLL + 140719881846784 + 49152 + 140719881855488 + File: C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName: cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base cryptographic API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base cryptographic API DLL + Microsoft® Windows® Operating System + + + + + 44 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 30864 + 30864 + 54034432 + 54034432 + 345592 + 345592 + 57327616 + 57327616 + 62857216 + 62857216 + 2203778174976 + 459952128 + true + + + Idle + 64 + + 54034432 + 54034432 + chrome + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 4 + 5 + 19404 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.703125S +
2019-08-24T14:18:25.2320411+03:00
+ PT13.359375S + PT12.65625S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 23468 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:25.2871957+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 2 + 2 + 11960 + true + Lowest + 140719955419728 + Wait + UserRequest + PT0.015625S +
2019-08-24T14:18:25.2884299+03:00
+ PT0.015625S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 6 + 15104 + true + Normal + 140719955419728 + Wait + EventPairLow + PT2.0625S +
2019-08-24T14:18:25.2892063+03:00
+ PT9.515625S + PT7.453125S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 16732 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-24T14:18:25.2897506+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 21176 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:25.2905892+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 5 + 21136 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:25.2967609+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 3172 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:25.2979255+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 5 + 14200 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:25.2985009+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 22588 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:25.2989314+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 13100 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:25.2992883+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 2 + 2 + 11312 + true + Lowest + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:25.2996254+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 23864 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-27T02:54:54.3150646+03:00
+ PT0S + PT0S + + + + + + + 13 + + + + + + + + + + + + + + + + + + + false + + + 252 + 2203757715456 + 439492608 + false + 50520064 + 50520064 + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + PT3.984375S + PT30.328125S + PT26.34375S + + + 0 + + + true + + + + + chrome + 1 + 252 + 2203757715456 + 50520064 + 54034432 + 30864 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + + + System.Diagnostics.Process (chrome) + + Microsoft.Win32.SafeHandles.SafeProcessHandle + 7716 + 8 + false +
2019-08-24T14:18:00.3253674+03:00
+ 23804 + . + 1413120 + 204800 + + + + System.Diagnostics.ProcessModule (chrome.exe) + System.Diagnostics.ProcessModule (ntdll.dll) + System.Diagnostics.ProcessModule (KERNEL32.DLL) + System.Diagnostics.ProcessModule (KERNELBASE.dll) + System.Diagnostics.ProcessModule (chrome_elf.dll) + System.Diagnostics.ProcessModule (VERSION.dll) + System.Diagnostics.ProcessModule (msvcrt.dll) + System.Diagnostics.ProcessModule (ADVAPI32.dll) + System.Diagnostics.ProcessModule (sechost.dll) + System.Diagnostics.ProcessModule (RPCRT4.dll) + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + System.Diagnostics.ProcessModule (user32.dll) + System.Diagnostics.ProcessModule (win32u.dll) + System.Diagnostics.ProcessModule (GDI32.dll) + System.Diagnostics.ProcessModule (gdi32full.dll) + System.Diagnostics.ProcessModule (msvcp_win.dll) + System.Diagnostics.ProcessModule (ucrtbase.dll) + System.Diagnostics.ProcessModule (IMM32.DLL) + System.Diagnostics.ProcessModule (SHELL32.dll) + System.Diagnostics.ProcessModule (cfgmgr32.dll) + System.Diagnostics.ProcessModule (shcore.dll) + System.Diagnostics.ProcessModule (combase.dll) + System.Diagnostics.ProcessModule (windows.storage.dll) + System.Diagnostics.ProcessModule (profapi.dll) + System.Diagnostics.ProcessModule (powrprof.dll) + System.Diagnostics.ProcessModule (shlwapi.dll) + System.Diagnostics.ProcessModule (kernel.appcore.dll) + System.Diagnostics.ProcessModule (cryptsp.dll) + System.Diagnostics.ProcessModule (chrome.dll) + System.Diagnostics.ProcessModule (uxtheme.dll) + System.Diagnostics.ProcessModule (dwmapi.dll) + System.Diagnostics.ProcessModule (CRYPT32.dll) + System.Diagnostics.ProcessModule (MSASN1.dll) + System.Diagnostics.ProcessModule (USERENV.dll) + System.Diagnostics.ProcessModule (gpapi.dll) + System.Diagnostics.ProcessModule (wkscli.dll) + System.Diagnostics.ProcessModule (bcrypt.dll) + System.Diagnostics.ProcessModule (netutils.dll) + System.Diagnostics.ProcessModule (ole32.dll) + System.Diagnostics.ProcessModule (MSCTF.dll) + System.Diagnostics.ProcessModule (OLEAUT32.dll) + System.Diagnostics.ProcessModule (Secur32.dll) + System.Diagnostics.ProcessModule (SSPICLI.DLL) + System.Diagnostics.ProcessModule (DWrite.dll) + System.Diagnostics.ProcessModule (WS2_32.dll) + System.Diagnostics.ProcessModule (COMCTL32.dll) + System.Diagnostics.ProcessModule (clbcatq.dll) + System.Diagnostics.ProcessModule (twinapi.appcore.dll) + System.Diagnostics.ProcessModule (RMCLIENT.dll) + System.Diagnostics.ProcessModule (twinapi.dll) + System.Diagnostics.ProcessModule (NLAapi.dll) + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + System.Diagnostics.ProcessModule (NSI.dll) + System.Diagnostics.ProcessModule (dhcpcsvc6.DLL) + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + System.Diagnostics.ProcessModule (DNSAPI.dll) + System.Diagnostics.ProcessModule (mscms.dll) + System.Diagnostics.ProcessModule (ColorAdapterClient.dll) + System.Diagnostics.ProcessModule (icm32.dll) + System.Diagnostics.ProcessModule (Windows.UI.dll) + System.Diagnostics.ProcessModule (TextInputFramework.dll) + System.Diagnostics.ProcessModule (InputHost.dll) + System.Diagnostics.ProcessModule (CoreUIComponents.dll) + System.Diagnostics.ProcessModule (CoreMessaging.dll) + System.Diagnostics.ProcessModule (d2d1.dll) + System.Diagnostics.ProcessModule (d3d11.dll) + System.Diagnostics.ProcessModule (PROPSYS.dll) + System.Diagnostics.ProcessModule (wintypes.dll) + System.Diagnostics.ProcessModule (ntmarta.dll) + System.Diagnostics.ProcessModule (dxgi.dll) + System.Diagnostics.ProcessModule (WTSAPI32.dll) + System.Diagnostics.ProcessModule (wlanapi.dll) + System.Diagnostics.ProcessModule (WINSTA.dll) + System.Diagnostics.ProcessModule (wbemprox.dll) + System.Diagnostics.ProcessModule (wbemcomn.dll) + System.Diagnostics.ProcessModule (MMDevApi.dll) + System.Diagnostics.ProcessModule (DEVOBJ.dll) + System.Diagnostics.ProcessModule (wbemsvc.dll) + System.Diagnostics.ProcessModule (WINHTTP.dll) + System.Diagnostics.ProcessModule (fastprox.dll) + System.Diagnostics.ProcessModule (wmiutils.dll) + System.Diagnostics.ProcessModule (DPAPI.dll) + System.Diagnostics.ProcessModule (FirewallAPI.dll) + System.Diagnostics.ProcessModule (fwbase.dll) + System.Diagnostics.ProcessModule (LINKINFO.dll) + System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll) + System.Diagnostics.ProcessModule (dataexchange.dll) + System.Diagnostics.ProcessModule (dcomp.dll) + System.Diagnostics.ProcessModule (atlthunk.dll) + System.Diagnostics.ProcessModule (OLEACC.dll) + System.Diagnostics.ProcessModule (directmanipulation.dll) + System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll) + System.Diagnostics.ProcessModule (explorerframe.dll) + System.Diagnostics.ProcessModule (wpnapps.dll) + System.Diagnostics.ProcessModule (XmlLite.dll) + System.Diagnostics.ProcessModule (usermgrcli.dll) + System.Diagnostics.ProcessModule (mswsock.dll) + System.Diagnostics.ProcessModule (WINMM.dll) + System.Diagnostics.ProcessModule (WINMMBASE.dll) + System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll) + System.Diagnostics.ProcessModule (WmiPerfInst.dll) + System.Diagnostics.ProcessModule (pdh.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll) + System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll) + System.Diagnostics.ProcessModule (Windows.Networking.dll) + System.Diagnostics.ProcessModule (BiWinrt.dll) + System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll) + System.Diagnostics.ProcessModule (NETAPI32.dll) + System.Diagnostics.ProcessModule (SAMCLI.DLL) + System.Diagnostics.ProcessModule (SAMLIB.dll) + System.Diagnostics.ProcessModule (wdmaud.drv) + System.Diagnostics.ProcessModule (ksuser.dll) + System.Diagnostics.ProcessModule (AVRT.dll) + System.Diagnostics.ProcessModule (AUDIOSES.DLL) + System.Diagnostics.ProcessModule (msacm32.drv) + System.Diagnostics.ProcessModule (MSACM32.dll) + System.Diagnostics.ProcessModule (midimap.dll) + System.Diagnostics.ProcessModule (resourcepolicyclient.dll) + System.Diagnostics.ProcessModule (BitsProxy.dll) + + + 61568 + 61568 + 316080128 + 316080128 + 857648 + 857648 + 455720960 + 455720960 + 398323712 + 398323712 + 2204288917504 + 970694656 + true + Normal + 316080128 + 316080128 + chrome + 65535 + 1 + + + + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + + + 1747 + 2204143845376 + 825622528 + false + 112414720 + 112414720 + + System.Diagnostics.ProcessModule (chrome.exe) + PT11M7.53125S + PT21M46.28125S + PT10M38.75S + 1770664 + The Living Tombstone Radio - Now Playing on Pandora - Google Chrome + true + + + + + chrome + 1 + 1747 + 2204143845376 + 112414720 + 316080128 + 61568 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + System.Diagnostics.Process (explorer) + Google LLC + 1306.28125 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + Google LLC + 30.328125 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + + + System.Diagnostics.Process (chrome) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 7080 + + 8 + false +
2019-08-24T14:18:01.0269646+03:00
+ 16452 + . + + + 1413120 + + + + 204800 + + + + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNEL32.DLL) + + KERNEL32.DLL + C:\Windows\System32\KERNEL32.DLL + 140719912779776 + 733184 + 140719912876560 + File: C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName: kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 716 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNELBASE.dll) + + KERNELBASE.dll + C:\Windows\System32\KERNELBASE.dll + 140719894495232 + 2699264 + 140719894841456 + File: C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName: Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2636 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_elf.dll) + + chrome_elf.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll + 140719325642752 + 925696 + 140719326148464 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName: chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 904 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (VERSION.dll) + + VERSION.dll + C:\Windows\SYSTEM32\VERSION.dll + 140719800254464 + 40960 + 140719800259344 + File: C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName: version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Version Checking and File Installation Libraries_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 40 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Version Checking and File Installation Libraries + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcrt.dll) + + msvcrt.dll + C:\Windows\System32\msvcrt.dll + 140719950004224 + 647168 + 140719950035120 + File: C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName: msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion: 7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT CRT DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 7.0.17763.475_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 7.0.17763.475 (WinBuild.160101.0800) + 7.0.17763.475 + Windows NT CRT DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + + bcryptPrimitives.dll + C:\Windows\System32\bcryptPrimitives.dll + 140719890235392 + 516096 + 140719890461152 + File: C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName: bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 504 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ADVAPI32.dll) + + ADVAPI32.dll + C:\Windows\System32\ADVAPI32.dll + 140719915335680 + 667648 + 140719915417840 + File: C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName: advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Advanced Windows 32 Base API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 652 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Advanced Windows 32 Base API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (sechost.dll) + + sechost.dll + C:\Windows\System32\sechost.dll + 140719948824576 + 647168 + 140719948951504 + File: C:\Windows\System32\sechost.dll_x000D__x000A_InternalName: sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Host for SCM/SDDL/LSA Lookup APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RPCRT4.dll) + + RPCRT4.dll + C:\Windows\System32\RPCRT4.dll + 140719917629440 + 1187840 + 140719918006928 + File: C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName: rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Procedure Call Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Procedure Call Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_child.dll) + + chrome_child.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll + 140717177962496 + 87977984 + 140717247440176 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName: chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 85916 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (OLEAUT32.dll) + + OLEAUT32.dll + C:\Windows\System32\OLEAUT32.dll + 140719946465280 + 802816 + 140719946574624 + File: C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName: OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OLEAUT32.DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 784 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + OLEAUT32.DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcp_win.dll) + + msvcp_win.dll + C:\Windows\System32\msvcp_win.dll + 140719889580032 + 655360 + 140719889658864 + File: C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName: msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 640 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ucrtbase.dll) + + ucrtbase.dll + C:\Windows\System32\ucrtbase.dll + 140719893446656 + 1024000 + 140719893528400 + File: C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName: ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1000 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (combase.dll) + + combase.dll + C:\Windows\System32\combase.dll + 140719950856192 + 3325952 + 140719951769888 + File: C:\Windows\System32\combase.dll_x000D__x000A_InternalName: COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft COM for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3248 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft COM for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WS2_32.dll) + + WS2_32.dll + C:\Windows\System32\WS2_32.dll + 140719954198528 + 446464 + 140719954286384 + File: C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName: ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 436 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Socket 2.0 32-Bit DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (GDI32.dll) + + GDI32.dll + C:\Windows\System32\GDI32.dll + 140719950659584 + 167936 + 140719950676208 + File: C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32full.dll) + + gdi32full.dll + C:\Windows\System32\gdi32full.dll + 140719905112064 + 1675264 + 140719905369792 + File: C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1636 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USER32.dll) + + USER32.dll + C:\Windows\System32\USER32.dll + 140719909306368 + 1667072 + 140719909414448 + File: C:\Windows\System32\USER32.dll_x000D__x000A_InternalName: user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows USER API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows USER API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (win32u.dll) + + win32u.dll + C:\Windows\System32\win32u.dll + 140719906816000 + 131072 + 0 + File: C:\Windows\System32\win32u.dll_x000D__x000A_InternalName: Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32u_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 128 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32u + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINTRUST.dll) + + WINTRUST.dll + C:\Windows\System32\WINTRUST.dll + 140719888728064 + 364544 + 140719888791376 + File: C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName: WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Trust Verification APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 356 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft Trust Verification APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSASN1.dll) + + MSASN1.dll + C:\Windows\System32\MSASN1.dll + 140719887876096 + 73728 + 140719887898576 + File: C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName: msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: ASN.1 Runtime APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 72 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + ASN.1 Runtime APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPT32.dll) + + CRYPT32.dll + C:\Windows\System32\CRYPT32.dll + 140719891480576 + 1945600 + 140719891804832 + File: C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName: CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Crypto API32_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1900 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Crypto API32 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + + IPHLPAPI.DLL + C:\Windows\SYSTEM32\IPHLPAPI.DLL + 140719876931584 + 249856 + 140719876989024 + File: C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName: iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: IP Helper API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 244 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + IP Helper API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMM.dll) + + WINMM.dll + C:\Windows\SYSTEM32\WINMM.dll + 140719835054080 + 147456 + 140719835066368 + File: C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName: winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MCI API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MCI API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USERENV.dll) + + USERENV.dll + C:\Windows\SYSTEM32\USERENV.dll + 140719887024128 + 163840 + 140719887043280 + File: C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName: userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Userenv_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Userenv + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (profapi.dll) + + profapi.dll + C:\Windows\System32\profapi.dll + 140719888531456 + 147456 + 140719888564400 + File: C:\Windows\System32\profapi.dll_x000D__x000A_InternalName: PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: User Profile Basic API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + User Profile Basic API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (DWrite.dll) + + DWrite.dll + C:\Windows\SYSTEM32\DWrite.dll + 140719303819264 + 3129344 + 140719304509728 + File: C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName: DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft DirectX Typography Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3056 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft DirectX Typography Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINSPOOL.DRV) + + WINSPOOL.DRV + C:\Windows\SYSTEM32\WINSPOOL.DRV + 140719787606016 + 561152 + 140719787676448 + File: C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName: winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Spooler Driver_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 548 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Spooler Driver + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (kernel.appcore.dll) + + kernel.appcore.dll + C:\Windows\System32\kernel.appcore.dll + 140719888400384 + 69632 + 140719888415648 + File: C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName: kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AppModel API Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 68 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AppModel API Host + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcrypt.dll) + + bcrypt.dll + C:\Windows\System32\bcrypt.dll + 140719897247744 + 155648 + 140719897281296 + File: C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName: bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 152 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dbghelp.dll) + + dbghelp.dll + C:\Windows\SYSTEM32\dbghelp.dll + 140719552397312 + 2019328 + 140719552479168 + File: C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName: DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Image Helper_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Image Helper + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINHTTP.dll) + + WINHTTP.dll + C:\Windows\SYSTEM32\WINHTTP.dll + 140719810019328 + 991232 + 140719810293024 + File: C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName: winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows HTTP Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 968 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows HTTP Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (Secur32.dll) + + Secur32.dll + C:\Windows\SYSTEM32\Secur32.dll + 140719559147520 + 49152 + 140719559156816 + File: C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName: secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + + dhcpcsvc.DLL + C:\Windows\SYSTEM32\dhcpcsvc.DLL + 140719782494208 + 114688 + 140719782503840 + File: C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName: dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: DHCP Client Service_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 112 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + DHCP Client Service + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (NSI.dll) + + NSI.dll + C:\Windows\System32\NSI.dll + 140719916843008 + 32768 + 140719916851008 + File: C:\Windows\System32\NSI.dll_x000D__x000A_InternalName: nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NSI User-mode interface DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 32 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NSI User-mode interface DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMMBASE.dll) + + WINMMBASE.dll + C:\Windows\SYSTEM32\WINMMBASE.dll + 140719834857472 + 184320 + 140719834890448 + File: C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName: winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base Multimedia Extension API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 180 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base Multimedia Extension API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cfgmgr32.dll) + + cfgmgr32.dll + C:\Windows\System32\cfgmgr32.dll + 140719889252352 + 303104 + 140719889325904 + File: C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName: cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Configuration Manager DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 296 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Configuration Manager DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (PROPSYS.dll) + + PROPSYS.dll + C:\Windows\SYSTEM32\PROPSYS.dll + 140719831187456 + 1736704 + 140719831447408 + File: C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName: propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion: 7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Property System_x000D__x000A_Product: Windows® Search_x000D__x000A_ProductVersion: 7.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1696 + Microsoft Corporation + 7.0.17763.1 (WinBuild.160101.0800) + 7.0.17763.1 + Microsoft Property System + Windows® Search + + + + + System.Diagnostics.ProcessModule (shcore.dll) + + shcore.dll + C:\Windows\System32\shcore.dll + 140719907143680 + 688128 + 140719907388560 + File: C:\Windows\System32\shcore.dll_x000D__x000A_InternalName: SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: SHCORE_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 672 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + SHCORE + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SSPICLI.DLL) + + SSPICLI.DLL + C:\Windows\SYSTEM32\SSPICLI.DLL + 140719886827520 + 192512 + 140719886881776 + File: C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName: sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 188 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IMM32.DLL) + + IMM32.DLL + C:\Windows\System32\IMM32.DLL + 140719906947072 + 188416 + 140719906952688 + File: C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName: imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows IMM32 API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + + CRYPTBASE.DLL + C:\Windows\SYSTEM32\CRYPTBASE.DLL + 140719881846784 + 49152 + 140719881855488 + File: C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName: cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base cryptographic API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base cryptographic API DLL + Microsoft® Windows® Operating System + + + + + 44 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 40248 + 40248 + 57729024 + 57729024 + 364304 + 364304 + 65871872 + 65871872 + 81608704 + 81608704 + 2203830345728 + 512122880 + true + + + Normal + 32 + + 57729024 + 57729024 + chrome + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 9092 + true + Normal + 140719955419728 + Wait + UserRequest + PT1.734375S +
2019-08-24T14:18:01.0269665+03:00
+ PT25.390625S + PT23.65625S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 23060 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.1098393+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 6 + 6 + 23920 + true + Lowest + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.1121281+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 14128 + true + Normal + 140719955419728 + Wait + EventPairLow + PT3.234375S +
2019-08-24T14:18:01.1133499+03:00
+ PT10.640625S + PT7.40625S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 14168 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-24T14:18:01.1143636+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 8156 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.1155671+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 11068 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.015625S +
2019-08-24T14:18:01.1252164+03:00
+ PT0.03125S + PT0.015625S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 24048 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.1274934+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 6264 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.1287853+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 13592 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.1304862+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 18268 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.1316548+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 6 + 6 + 5552 + true + Lowest + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.1324836+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 19428 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-27T02:54:52.9737724+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 18148 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-27T02:56:43.10665+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 23088 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-27T02:56:43.1078534+03:00
+ PT0S + PT0S + + + + + + + 15 + + + + + + + + + + + + + + + + + + + + + false + + + 288 + 2203804323840 + 486100992 + false + 60903424 + 60903424 + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + PT8.828125S + PT52.671875S + PT43.84375S + + + 0 + + + true + + + + + chrome + 1 + 288 + 2203804323840 + 60903424 + 57729024 + 40248 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + + + System.Diagnostics.Process (chrome) + + Microsoft.Win32.SafeHandles.SafeProcessHandle + 7152 + 8 + false +
2019-08-24T14:18:00.3253674+03:00
+ 23804 + . + 1413120 + 204800 + + + + System.Diagnostics.ProcessModule (chrome.exe) + System.Diagnostics.ProcessModule (ntdll.dll) + System.Diagnostics.ProcessModule (KERNEL32.DLL) + System.Diagnostics.ProcessModule (KERNELBASE.dll) + System.Diagnostics.ProcessModule (chrome_elf.dll) + System.Diagnostics.ProcessModule (VERSION.dll) + System.Diagnostics.ProcessModule (msvcrt.dll) + System.Diagnostics.ProcessModule (ADVAPI32.dll) + System.Diagnostics.ProcessModule (sechost.dll) + System.Diagnostics.ProcessModule (RPCRT4.dll) + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + System.Diagnostics.ProcessModule (user32.dll) + System.Diagnostics.ProcessModule (win32u.dll) + System.Diagnostics.ProcessModule (GDI32.dll) + System.Diagnostics.ProcessModule (gdi32full.dll) + System.Diagnostics.ProcessModule (msvcp_win.dll) + System.Diagnostics.ProcessModule (ucrtbase.dll) + System.Diagnostics.ProcessModule (IMM32.DLL) + System.Diagnostics.ProcessModule (SHELL32.dll) + System.Diagnostics.ProcessModule (cfgmgr32.dll) + System.Diagnostics.ProcessModule (shcore.dll) + System.Diagnostics.ProcessModule (combase.dll) + System.Diagnostics.ProcessModule (windows.storage.dll) + System.Diagnostics.ProcessModule (profapi.dll) + System.Diagnostics.ProcessModule (powrprof.dll) + System.Diagnostics.ProcessModule (shlwapi.dll) + System.Diagnostics.ProcessModule (kernel.appcore.dll) + System.Diagnostics.ProcessModule (cryptsp.dll) + System.Diagnostics.ProcessModule (chrome.dll) + System.Diagnostics.ProcessModule (uxtheme.dll) + System.Diagnostics.ProcessModule (dwmapi.dll) + System.Diagnostics.ProcessModule (CRYPT32.dll) + System.Diagnostics.ProcessModule (MSASN1.dll) + System.Diagnostics.ProcessModule (USERENV.dll) + System.Diagnostics.ProcessModule (gpapi.dll) + System.Diagnostics.ProcessModule (wkscli.dll) + System.Diagnostics.ProcessModule (bcrypt.dll) + System.Diagnostics.ProcessModule (netutils.dll) + System.Diagnostics.ProcessModule (ole32.dll) + System.Diagnostics.ProcessModule (MSCTF.dll) + System.Diagnostics.ProcessModule (OLEAUT32.dll) + System.Diagnostics.ProcessModule (Secur32.dll) + System.Diagnostics.ProcessModule (SSPICLI.DLL) + System.Diagnostics.ProcessModule (DWrite.dll) + System.Diagnostics.ProcessModule (WS2_32.dll) + System.Diagnostics.ProcessModule (COMCTL32.dll) + System.Diagnostics.ProcessModule (clbcatq.dll) + System.Diagnostics.ProcessModule (twinapi.appcore.dll) + System.Diagnostics.ProcessModule (RMCLIENT.dll) + System.Diagnostics.ProcessModule (twinapi.dll) + System.Diagnostics.ProcessModule (NLAapi.dll) + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + System.Diagnostics.ProcessModule (NSI.dll) + System.Diagnostics.ProcessModule (dhcpcsvc6.DLL) + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + System.Diagnostics.ProcessModule (DNSAPI.dll) + System.Diagnostics.ProcessModule (mscms.dll) + System.Diagnostics.ProcessModule (ColorAdapterClient.dll) + System.Diagnostics.ProcessModule (icm32.dll) + System.Diagnostics.ProcessModule (Windows.UI.dll) + System.Diagnostics.ProcessModule (TextInputFramework.dll) + System.Diagnostics.ProcessModule (InputHost.dll) + System.Diagnostics.ProcessModule (CoreUIComponents.dll) + System.Diagnostics.ProcessModule (CoreMessaging.dll) + System.Diagnostics.ProcessModule (d2d1.dll) + System.Diagnostics.ProcessModule (d3d11.dll) + System.Diagnostics.ProcessModule (PROPSYS.dll) + System.Diagnostics.ProcessModule (wintypes.dll) + System.Diagnostics.ProcessModule (ntmarta.dll) + System.Diagnostics.ProcessModule (dxgi.dll) + System.Diagnostics.ProcessModule (WTSAPI32.dll) + System.Diagnostics.ProcessModule (wlanapi.dll) + System.Diagnostics.ProcessModule (WINSTA.dll) + System.Diagnostics.ProcessModule (wbemprox.dll) + System.Diagnostics.ProcessModule (wbemcomn.dll) + System.Diagnostics.ProcessModule (MMDevApi.dll) + System.Diagnostics.ProcessModule (DEVOBJ.dll) + System.Diagnostics.ProcessModule (wbemsvc.dll) + System.Diagnostics.ProcessModule (WINHTTP.dll) + System.Diagnostics.ProcessModule (fastprox.dll) + System.Diagnostics.ProcessModule (wmiutils.dll) + System.Diagnostics.ProcessModule (DPAPI.dll) + System.Diagnostics.ProcessModule (FirewallAPI.dll) + System.Diagnostics.ProcessModule (fwbase.dll) + System.Diagnostics.ProcessModule (LINKINFO.dll) + System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll) + System.Diagnostics.ProcessModule (dataexchange.dll) + System.Diagnostics.ProcessModule (dcomp.dll) + System.Diagnostics.ProcessModule (atlthunk.dll) + System.Diagnostics.ProcessModule (OLEACC.dll) + System.Diagnostics.ProcessModule (directmanipulation.dll) + System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll) + System.Diagnostics.ProcessModule (explorerframe.dll) + System.Diagnostics.ProcessModule (wpnapps.dll) + System.Diagnostics.ProcessModule (XmlLite.dll) + System.Diagnostics.ProcessModule (usermgrcli.dll) + System.Diagnostics.ProcessModule (mswsock.dll) + System.Diagnostics.ProcessModule (WINMM.dll) + System.Diagnostics.ProcessModule (WINMMBASE.dll) + System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll) + System.Diagnostics.ProcessModule (WmiPerfInst.dll) + System.Diagnostics.ProcessModule (pdh.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll) + System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll) + System.Diagnostics.ProcessModule (Windows.Networking.dll) + System.Diagnostics.ProcessModule (BiWinrt.dll) + System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll) + System.Diagnostics.ProcessModule (NETAPI32.dll) + System.Diagnostics.ProcessModule (SAMCLI.DLL) + System.Diagnostics.ProcessModule (SAMLIB.dll) + System.Diagnostics.ProcessModule (wdmaud.drv) + System.Diagnostics.ProcessModule (ksuser.dll) + System.Diagnostics.ProcessModule (AVRT.dll) + System.Diagnostics.ProcessModule (AUDIOSES.DLL) + System.Diagnostics.ProcessModule (msacm32.drv) + System.Diagnostics.ProcessModule (MSACM32.dll) + System.Diagnostics.ProcessModule (midimap.dll) + System.Diagnostics.ProcessModule (resourcepolicyclient.dll) + System.Diagnostics.ProcessModule (BitsProxy.dll) + + + 61568 + 61568 + 316080128 + 316080128 + 857648 + 857648 + 455720960 + 455720960 + 398323712 + 398323712 + 2204288917504 + 970694656 + true + Normal + 316080128 + 316080128 + chrome + 65535 + 1 + + + + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + + + 1747 + 2204143845376 + 825622528 + false + 112414720 + 112414720 + + System.Diagnostics.ProcessModule (chrome.exe) + PT11M7.53125S + PT21M46.28125S + PT10M38.75S + 1770664 + The Living Tombstone Radio - Now Playing on Pandora - Google Chrome + true + + + + + chrome + 1 + 1747 + 2204143845376 + 112414720 + 316080128 + 61568 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + System.Diagnostics.Process (explorer) + Google LLC + 1306.28125 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + Google LLC + 52.671875 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + + + System.Diagnostics.Process (chrome) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 6676 + + 8 + false +
2019-08-24T14:18:00.6284219+03:00
+ 16692 + . + + + 1413120 + + + + 204800 + + + + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNEL32.DLL) + + KERNEL32.DLL + C:\Windows\System32\KERNEL32.DLL + 140719912779776 + 733184 + 140719912876560 + File: C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName: kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 716 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNELBASE.dll) + + KERNELBASE.dll + C:\Windows\System32\KERNELBASE.dll + 140719894495232 + 2699264 + 140719894841456 + File: C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName: Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2636 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_elf.dll) + + chrome_elf.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll + 140719325642752 + 925696 + 140719326148464 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName: chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 904 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (VERSION.dll) + + VERSION.dll + C:\Windows\SYSTEM32\VERSION.dll + 140719800254464 + 40960 + 140719800259344 + File: C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName: version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Version Checking and File Installation Libraries_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 40 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Version Checking and File Installation Libraries + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcrt.dll) + + msvcrt.dll + C:\Windows\System32\msvcrt.dll + 140719950004224 + 647168 + 140719950035120 + File: C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName: msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion: 7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT CRT DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 7.0.17763.475_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 7.0.17763.475 (WinBuild.160101.0800) + 7.0.17763.475 + Windows NT CRT DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + + bcryptPrimitives.dll + C:\Windows\System32\bcryptPrimitives.dll + 140719890235392 + 516096 + 140719890461152 + File: C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName: bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 504 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ADVAPI32.dll) + + ADVAPI32.dll + C:\Windows\System32\ADVAPI32.dll + 140719915335680 + 667648 + 140719915417840 + File: C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName: advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Advanced Windows 32 Base API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 652 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Advanced Windows 32 Base API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (sechost.dll) + + sechost.dll + C:\Windows\System32\sechost.dll + 140719948824576 + 647168 + 140719948951504 + File: C:\Windows\System32\sechost.dll_x000D__x000A_InternalName: sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Host for SCM/SDDL/LSA Lookup APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RPCRT4.dll) + + RPCRT4.dll + C:\Windows\System32\RPCRT4.dll + 140719917629440 + 1187840 + 140719918006928 + File: C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName: rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Procedure Call Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Procedure Call Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (user32.dll) + + user32.dll + C:\Windows\System32\user32.dll + 140719909306368 + 1667072 + 140719909414448 + File: C:\Windows\System32\user32.dll_x000D__x000A_InternalName: user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows USER API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows USER API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (win32u.dll) + + win32u.dll + C:\Windows\System32\win32u.dll + 140719906816000 + 131072 + 0 + File: C:\Windows\System32\win32u.dll_x000D__x000A_InternalName: Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32u_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 128 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32u + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (GDI32.dll) + + GDI32.dll + C:\Windows\System32\GDI32.dll + 140719950659584 + 167936 + 140719950676208 + File: C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32full.dll) + + gdi32full.dll + C:\Windows\System32\gdi32full.dll + 140719905112064 + 1675264 + 140719905369792 + File: C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1636 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcp_win.dll) + + msvcp_win.dll + C:\Windows\System32\msvcp_win.dll + 140719889580032 + 655360 + 140719889658864 + File: C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName: msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 640 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ucrtbase.dll) + + ucrtbase.dll + C:\Windows\System32\ucrtbase.dll + 140719893446656 + 1024000 + 140719893528400 + File: C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName: ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1000 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IMM32.DLL) + + IMM32.DLL + C:\Windows\System32\IMM32.DLL + 140719906947072 + 188416 + 140719906952688 + File: C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName: imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows IMM32 API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_child.dll) + + chrome_child.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll + 140717177962496 + 87977984 + 140717247440176 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName: chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 85916 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (OLEAUT32.dll) + + OLEAUT32.dll + C:\Windows\System32\OLEAUT32.dll + 140719946465280 + 802816 + 140719946574624 + File: C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName: OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OLEAUT32.DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 784 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + OLEAUT32.DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (combase.dll) + + combase.dll + C:\Windows\System32\combase.dll + 140719950856192 + 3325952 + 140719951769888 + File: C:\Windows\System32\combase.dll_x000D__x000A_InternalName: COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft COM for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3248 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft COM for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WS2_32.dll) + + WS2_32.dll + C:\Windows\System32\WS2_32.dll + 140719954198528 + 446464 + 140719954286384 + File: C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName: ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 436 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Socket 2.0 32-Bit DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINTRUST.dll) + + WINTRUST.dll + C:\Windows\System32\WINTRUST.dll + 140719888728064 + 364544 + 140719888791376 + File: C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName: WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Trust Verification APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 356 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft Trust Verification APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSASN1.dll) + + MSASN1.dll + C:\Windows\System32\MSASN1.dll + 140719887876096 + 73728 + 140719887898576 + File: C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName: msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: ASN.1 Runtime APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 72 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + ASN.1 Runtime APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPT32.dll) + + CRYPT32.dll + C:\Windows\System32\CRYPT32.dll + 140719891480576 + 1945600 + 140719891804832 + File: C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName: CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Crypto API32_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1900 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Crypto API32 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + + IPHLPAPI.DLL + C:\Windows\SYSTEM32\IPHLPAPI.DLL + 140719876931584 + 249856 + 140719876989024 + File: C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName: iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: IP Helper API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 244 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + IP Helper API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMM.dll) + + WINMM.dll + C:\Windows\SYSTEM32\WINMM.dll + 140719835054080 + 147456 + 140719835066368 + File: C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName: winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MCI API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MCI API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USERENV.dll) + + USERENV.dll + C:\Windows\SYSTEM32\USERENV.dll + 140719887024128 + 163840 + 140719887043280 + File: C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName: userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Userenv_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Userenv + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (profapi.dll) + + profapi.dll + C:\Windows\System32\profapi.dll + 140719888531456 + 147456 + 140719888564400 + File: C:\Windows\System32\profapi.dll_x000D__x000A_InternalName: PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: User Profile Basic API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + User Profile Basic API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (DWrite.dll) + + DWrite.dll + C:\Windows\SYSTEM32\DWrite.dll + 140719303819264 + 3129344 + 140719304509728 + File: C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName: DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft DirectX Typography Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3056 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft DirectX Typography Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINSPOOL.DRV) + + WINSPOOL.DRV + C:\Windows\SYSTEM32\WINSPOOL.DRV + 140719787606016 + 561152 + 140719787676448 + File: C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName: winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Spooler Driver_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 548 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Spooler Driver + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (kernel.appcore.dll) + + kernel.appcore.dll + C:\Windows\System32\kernel.appcore.dll + 140719888400384 + 69632 + 140719888415648 + File: C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName: kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AppModel API Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 68 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AppModel API Host + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcrypt.dll) + + bcrypt.dll + C:\Windows\System32\bcrypt.dll + 140719897247744 + 155648 + 140719897281296 + File: C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName: bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 152 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dbghelp.dll) + + dbghelp.dll + C:\Windows\SYSTEM32\dbghelp.dll + 140719552397312 + 2019328 + 140719552479168 + File: C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName: DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Image Helper_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Image Helper + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINHTTP.dll) + + WINHTTP.dll + C:\Windows\SYSTEM32\WINHTTP.dll + 140719810019328 + 991232 + 140719810293024 + File: C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName: winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows HTTP Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 968 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows HTTP Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (Secur32.dll) + + Secur32.dll + C:\Windows\SYSTEM32\Secur32.dll + 140719559147520 + 49152 + 140719559156816 + File: C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName: secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + + dhcpcsvc.DLL + C:\Windows\SYSTEM32\dhcpcsvc.DLL + 140719782494208 + 114688 + 140719782503840 + File: C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName: dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: DHCP Client Service_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 112 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + DHCP Client Service + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (NSI.dll) + + NSI.dll + C:\Windows\System32\NSI.dll + 140719916843008 + 32768 + 140719916851008 + File: C:\Windows\System32\NSI.dll_x000D__x000A_InternalName: nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NSI User-mode interface DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 32 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NSI User-mode interface DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMMBASE.dll) + + WINMMBASE.dll + C:\Windows\SYSTEM32\WINMMBASE.dll + 140719834857472 + 184320 + 140719834890448 + File: C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName: winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base Multimedia Extension API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 180 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base Multimedia Extension API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cfgmgr32.dll) + + cfgmgr32.dll + C:\Windows\System32\cfgmgr32.dll + 140719889252352 + 303104 + 140719889325904 + File: C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName: cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Configuration Manager DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 296 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Configuration Manager DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (PROPSYS.dll) + + PROPSYS.dll + C:\Windows\SYSTEM32\PROPSYS.dll + 140719831187456 + 1736704 + 140719831447408 + File: C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName: propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion: 7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Property System_x000D__x000A_Product: Windows® Search_x000D__x000A_ProductVersion: 7.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1696 + Microsoft Corporation + 7.0.17763.1 (WinBuild.160101.0800) + 7.0.17763.1 + Microsoft Property System + Windows® Search + + + + + System.Diagnostics.ProcessModule (shcore.dll) + + shcore.dll + C:\Windows\System32\shcore.dll + 140719907143680 + 688128 + 140719907388560 + File: C:\Windows\System32\shcore.dll_x000D__x000A_InternalName: SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: SHCORE_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 672 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + SHCORE + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SSPICLI.DLL) + + SSPICLI.DLL + C:\Windows\SYSTEM32\SSPICLI.DLL + 140719886827520 + 192512 + 140719886881776 + File: C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName: sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 188 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + + CRYPTBASE.DLL + C:\Windows\SYSTEM32\CRYPTBASE.DLL + 140719881846784 + 49152 + 140719881855488 + File: C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName: cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base cryptographic API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base cryptographic API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (NLAapi.dll) + + NLAapi.dll + C:\Windows\system32\NLAapi.dll + 140719828631552 + 110592 + 140719828656896 + File: C:\Windows\system32\NLAapi.dll_x000D__x000A_InternalName: nlaapi.dll_x000D__x000A_OriginalFilename: nlaapi.dll_x000D__x000A_FileVersion: 10.0.17763.134 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Network Location Awareness 2_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.134_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 108 + Microsoft Corporation + 10.0.17763.134 (WinBuild.160101.0800) + 10.0.17763.134 + Network Location Awareness 2 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dhcpcsvc6.DLL) + + dhcpcsvc6.DLL + C:\Windows\SYSTEM32\dhcpcsvc6.DLL + 140719782232064 + 90112 + 140719782238752 + File: C:\Windows\SYSTEM32\dhcpcsvc6.DLL_x000D__x000A_InternalName: dhcpcsvc6.dll_x000D__x000A_OriginalFilename: dhcpcsvc6.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: DHCPv6 Client_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 88 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + DHCPv6 Client + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (DNSAPI.dll) + + DNSAPI.dll + C:\Windows\SYSTEM32\DNSAPI.dll + 140719877193728 + 811008 + 140719877369872 + File: C:\Windows\SYSTEM32\DNSAPI.dll_x000D__x000A_InternalName: dnsapi_x000D__x000A_OriginalFilename: dnsapi_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: DNS Client API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 792 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + DNS Client API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (DPAPI.dll) + + DPAPI.dll + C:\Windows\System32\DPAPI.dll + 140719875096576 + 40960 + 140719875102688 + File: C:\Windows\System32\DPAPI.dll_x000D__x000A_InternalName: dpapi.dll_x000D__x000A_OriginalFilename: dpapi.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Data Protection API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 40 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Data Protection API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (mswsock.dll) + + mswsock.dll + C:\Windows\system32\mswsock.dll + 140719879946240 + 421888 + 140719880017168 + File: C:\Windows\system32\mswsock.dll_x000D__x000A_InternalName: mswsock.dll_x000D__x000A_OriginalFilename: mswsock.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Windows Sockets 2.0 Service Provider_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 412 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft Windows Sockets 2.0 Service Provider + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (rasadhlp.dll) + + rasadhlp.dll + C:\Windows\System32\rasadhlp.dll + 140719719251968 + 40960 + 140719719257232 + File: C:\Windows\System32\rasadhlp.dll_x000D__x000A_InternalName: rasadhlp.dll_x000D__x000A_OriginalFilename: rasadhlp.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Access AutoDial Helper_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 40 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Access AutoDial Helper + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (fwpuclnt.dll) + + fwpuclnt.dll + C:\Windows\System32\fwpuclnt.dll + 140719712108544 + 495616 + 140719712131680 + File: C:\Windows\System32\fwpuclnt.dll_x000D__x000A_InternalName: fwpuclnt.dll_x000D__x000A_OriginalFilename: fwpuclnt.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: FWP/IPsec User-Mode API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 484 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + FWP/IPsec User-Mode API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPTSP.dll) + + CRYPTSP.dll + C:\Windows\System32\CRYPTSP.dll + 140719889121280 + 94208 + 140719889138512 + File: C:\Windows\System32\CRYPTSP.dll_x000D__x000A_InternalName: cryptsp.dll_x000D__x000A_OriginalFilename: cryptsp.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Cryptographic Service Provider API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 92 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Cryptographic Service Provider API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (rsaenh.dll) + + rsaenh.dll + C:\Windows\system32\rsaenh.dll + 140719874834432 + 208896 + 140719874861552 + File: C:\Windows\system32\rsaenh.dll_x000D__x000A_InternalName: rsaenh.dll_x000D__x000A_OriginalFilename: rsaenh.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Enhanced Cryptographic Provider_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 204 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft Enhanced Cryptographic Provider + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gpapi.dll) + + gpapi.dll + C:\Windows\SYSTEM32\gpapi.dll + 140719867625472 + 139264 + 140719867637568 + File: C:\Windows\SYSTEM32\gpapi.dll_x000D__x000A_InternalName: gpapi.dll_x000D__x000A_OriginalFilename: gpapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Group Policy Client API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 136 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Group Policy Client API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cryptnet.dll) + + cryptnet.dll + C:\Windows\System32\cryptnet.dll + 140719710535680 + 192512 + 140719710590816 + File: C:\Windows\System32\cryptnet.dll_x000D__x000A_InternalName: CRYPTNET.DLL_x000D__x000A_OriginalFilename: CRYPTNET.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Crypto Network Related API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 188 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Crypto Network Related API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINNSI.DLL) + + WINNSI.DLL + C:\Windows\SYSTEM32\WINNSI.DLL + 140719785443328 + 45056 + 140719785450976 + File: C:\Windows\SYSTEM32\WINNSI.DLL_x000D__x000A_InternalName: winnsi.dll_x000D__x000A_OriginalFilename: winnsi.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Network Store Information RPC interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 44 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Network Store Information RPC interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (webio.dll) + + webio.dll + C:\Windows\SYSTEM32\webio.dll + 140719648210944 + 618496 + 140719648411376 + File: C:\Windows\SYSTEM32\webio.dll_x000D__x000A_InternalName: webio.dll_x000D__x000A_OriginalFilename: webio.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Web Transfer Protocols API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 604 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Web Transfer Protocols API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ntmarta.dll) + + ntmarta.dll + C:\Windows\SYSTEM32\ntmarta.dll + 140719871557632 + 200704 + 140719871586448 + File: C:\Windows\SYSTEM32\ntmarta.dll_x000D__x000A_InternalName: ntmarta.dll_x000D__x000A_OriginalFilename: ntmarta.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT MARTA provider_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 196 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows NT MARTA provider + Microsoft® Windows® Operating System + + + + + 58 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 21832 + 21832 + 19230720 + 19230720 + 400912 + 400912 + 20287488 + 20287488 + 36925440 + 36925440 + 2203612741632 + 294518784 + true + + + Normal + 32 + + 19230720 + 19230720 + chrome + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 18052 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.046875S +
2019-08-24T14:18:00.6284233+03:00
+ PT0.046875S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 9052 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-24T14:18:00.712493+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 20416 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:00.7153672+03:00
+ PT0.015625S + PT0.015625S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 12108 + true + Normal + 0 + Wait + EventPairLow + PT13.0625S +
2019-08-24T14:18:00.7210044+03:00
+ PT52.546875S + PT39.484375S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 12532 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0.578125S +
2019-08-24T14:18:00.7213994+03:00
+ PT1.03125S + PT0.453125S + + + + + + + System.Diagnostics.ProcessThread + + 6 + 6 + 4884 + true + Lowest + 140719955419728 + Wait + UserRequest + PT9.140625S +
2019-08-24T14:18:00.7515381+03:00
+ PT9.359375S + PT0.21875S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 22456 + true + Normal + 140719955419728 + Wait + EventPairLow + PT1.734375S +
2019-08-24T14:18:00.8723273+03:00
+ PT2.328125S + PT0.59375S + + + + + + + System.Diagnostics.ProcessThread + + 9 + 9 + 6416 + true + AboveNormal + 140719955419728 + Wait + EventPairLow + PT0.03125S +
2019-08-24T14:18:01.1201511+03:00
+ PT0.03125S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 16320 + true + Normal + 0 + Wait + UserRequest + PT0.5625S +
2019-08-26T23:57:28.7558393+03:00
+ PT0.609375S + PT0.046875S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 7316 + true + Normal + 0 + Wait + UserRequest + PT0.40625S +
2019-08-27T01:30:25.4929337+03:00
+ PT0.40625S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 20892 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-27T02:28:14.3175541+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 19600 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-27T02:48:14.3176602+03:00
+ PT0S + PT0S + + + + + + + 12 + + + + + + + + + + + + + + + + + + false + + + 420 + 2203588632576 + 270409728 + false + 28524544 + 28524544 + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + PT50.09375S + PT1M33.15625S + PT43.0625S + + + 0 + + + true + + + + + chrome + 1 + 420 + 2203588632576 + 28524544 + 19230720 + 21832 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + + + System.Diagnostics.Process (chrome) + + Microsoft.Win32.SafeHandles.SafeProcessHandle + 804 + 8 + false +
2019-08-24T14:18:00.3253674+03:00
+ 23804 + . + 1413120 + 204800 + + + + System.Diagnostics.ProcessModule (chrome.exe) + System.Diagnostics.ProcessModule (ntdll.dll) + System.Diagnostics.ProcessModule (KERNEL32.DLL) + System.Diagnostics.ProcessModule (KERNELBASE.dll) + System.Diagnostics.ProcessModule (chrome_elf.dll) + System.Diagnostics.ProcessModule (VERSION.dll) + System.Diagnostics.ProcessModule (msvcrt.dll) + System.Diagnostics.ProcessModule (ADVAPI32.dll) + System.Diagnostics.ProcessModule (sechost.dll) + System.Diagnostics.ProcessModule (RPCRT4.dll) + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + System.Diagnostics.ProcessModule (user32.dll) + System.Diagnostics.ProcessModule (win32u.dll) + System.Diagnostics.ProcessModule (GDI32.dll) + System.Diagnostics.ProcessModule (gdi32full.dll) + System.Diagnostics.ProcessModule (msvcp_win.dll) + System.Diagnostics.ProcessModule (ucrtbase.dll) + System.Diagnostics.ProcessModule (IMM32.DLL) + System.Diagnostics.ProcessModule (SHELL32.dll) + System.Diagnostics.ProcessModule (cfgmgr32.dll) + System.Diagnostics.ProcessModule (shcore.dll) + System.Diagnostics.ProcessModule (combase.dll) + System.Diagnostics.ProcessModule (windows.storage.dll) + System.Diagnostics.ProcessModule (profapi.dll) + System.Diagnostics.ProcessModule (powrprof.dll) + System.Diagnostics.ProcessModule (shlwapi.dll) + System.Diagnostics.ProcessModule (kernel.appcore.dll) + System.Diagnostics.ProcessModule (cryptsp.dll) + System.Diagnostics.ProcessModule (chrome.dll) + System.Diagnostics.ProcessModule (uxtheme.dll) + System.Diagnostics.ProcessModule (dwmapi.dll) + System.Diagnostics.ProcessModule (CRYPT32.dll) + System.Diagnostics.ProcessModule (MSASN1.dll) + System.Diagnostics.ProcessModule (USERENV.dll) + System.Diagnostics.ProcessModule (gpapi.dll) + System.Diagnostics.ProcessModule (wkscli.dll) + System.Diagnostics.ProcessModule (bcrypt.dll) + System.Diagnostics.ProcessModule (netutils.dll) + System.Diagnostics.ProcessModule (ole32.dll) + System.Diagnostics.ProcessModule (MSCTF.dll) + System.Diagnostics.ProcessModule (OLEAUT32.dll) + System.Diagnostics.ProcessModule (Secur32.dll) + System.Diagnostics.ProcessModule (SSPICLI.DLL) + System.Diagnostics.ProcessModule (DWrite.dll) + System.Diagnostics.ProcessModule (WS2_32.dll) + System.Diagnostics.ProcessModule (COMCTL32.dll) + System.Diagnostics.ProcessModule (clbcatq.dll) + System.Diagnostics.ProcessModule (twinapi.appcore.dll) + System.Diagnostics.ProcessModule (RMCLIENT.dll) + System.Diagnostics.ProcessModule (twinapi.dll) + System.Diagnostics.ProcessModule (NLAapi.dll) + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + System.Diagnostics.ProcessModule (NSI.dll) + System.Diagnostics.ProcessModule (dhcpcsvc6.DLL) + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + System.Diagnostics.ProcessModule (DNSAPI.dll) + System.Diagnostics.ProcessModule (mscms.dll) + System.Diagnostics.ProcessModule (ColorAdapterClient.dll) + System.Diagnostics.ProcessModule (icm32.dll) + System.Diagnostics.ProcessModule (Windows.UI.dll) + System.Diagnostics.ProcessModule (TextInputFramework.dll) + System.Diagnostics.ProcessModule (InputHost.dll) + System.Diagnostics.ProcessModule (CoreUIComponents.dll) + System.Diagnostics.ProcessModule (CoreMessaging.dll) + System.Diagnostics.ProcessModule (d2d1.dll) + System.Diagnostics.ProcessModule (d3d11.dll) + System.Diagnostics.ProcessModule (PROPSYS.dll) + System.Diagnostics.ProcessModule (wintypes.dll) + System.Diagnostics.ProcessModule (ntmarta.dll) + System.Diagnostics.ProcessModule (dxgi.dll) + System.Diagnostics.ProcessModule (WTSAPI32.dll) + System.Diagnostics.ProcessModule (wlanapi.dll) + System.Diagnostics.ProcessModule (WINSTA.dll) + System.Diagnostics.ProcessModule (wbemprox.dll) + System.Diagnostics.ProcessModule (wbemcomn.dll) + System.Diagnostics.ProcessModule (MMDevApi.dll) + System.Diagnostics.ProcessModule (DEVOBJ.dll) + System.Diagnostics.ProcessModule (wbemsvc.dll) + System.Diagnostics.ProcessModule (WINHTTP.dll) + System.Diagnostics.ProcessModule (fastprox.dll) + System.Diagnostics.ProcessModule (wmiutils.dll) + System.Diagnostics.ProcessModule (DPAPI.dll) + System.Diagnostics.ProcessModule (FirewallAPI.dll) + System.Diagnostics.ProcessModule (fwbase.dll) + System.Diagnostics.ProcessModule (LINKINFO.dll) + System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll) + System.Diagnostics.ProcessModule (dataexchange.dll) + System.Diagnostics.ProcessModule (dcomp.dll) + System.Diagnostics.ProcessModule (atlthunk.dll) + System.Diagnostics.ProcessModule (OLEACC.dll) + System.Diagnostics.ProcessModule (directmanipulation.dll) + System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll) + System.Diagnostics.ProcessModule (explorerframe.dll) + System.Diagnostics.ProcessModule (wpnapps.dll) + System.Diagnostics.ProcessModule (XmlLite.dll) + System.Diagnostics.ProcessModule (usermgrcli.dll) + System.Diagnostics.ProcessModule (mswsock.dll) + System.Diagnostics.ProcessModule (WINMM.dll) + System.Diagnostics.ProcessModule (WINMMBASE.dll) + System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll) + System.Diagnostics.ProcessModule (WmiPerfInst.dll) + System.Diagnostics.ProcessModule (pdh.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll) + System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll) + System.Diagnostics.ProcessModule (Windows.Networking.dll) + System.Diagnostics.ProcessModule (BiWinrt.dll) + System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll) + System.Diagnostics.ProcessModule (NETAPI32.dll) + System.Diagnostics.ProcessModule (SAMCLI.DLL) + System.Diagnostics.ProcessModule (SAMLIB.dll) + System.Diagnostics.ProcessModule (wdmaud.drv) + System.Diagnostics.ProcessModule (ksuser.dll) + System.Diagnostics.ProcessModule (AVRT.dll) + System.Diagnostics.ProcessModule (AUDIOSES.DLL) + System.Diagnostics.ProcessModule (msacm32.drv) + System.Diagnostics.ProcessModule (MSACM32.dll) + System.Diagnostics.ProcessModule (midimap.dll) + System.Diagnostics.ProcessModule (resourcepolicyclient.dll) + System.Diagnostics.ProcessModule (BitsProxy.dll) + + + 61568 + 61568 + 316080128 + 316080128 + 857648 + 857648 + 455720960 + 455720960 + 398323712 + 398323712 + 2204288917504 + 970694656 + true + Normal + 316080128 + 316080128 + chrome + 65535 + 1 + + + + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + + + 1747 + 2204143845376 + 825622528 + false + 112414720 + 112414720 + + System.Diagnostics.ProcessModule (chrome.exe) + PT11M7.53125S + PT21M46.28125S + PT10M38.75S + 1770664 + The Living Tombstone Radio - Now Playing on Pandora - Google Chrome + true + + + + + chrome + 1 + 1747 + 2204143845376 + 112414720 + 316080128 + 61568 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + System.Diagnostics.Process (explorer) + Google LLC + 1306.28125 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + Google LLC + 93.15625 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + + + System.Diagnostics.Process (chrome) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 3692 + + 8 + false +
2019-08-24T14:18:00.891714+03:00
+ 17336 + . + + + 1413120 + + + + 204800 + + + + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNEL32.DLL) + + KERNEL32.DLL + C:\Windows\System32\KERNEL32.DLL + 140719912779776 + 733184 + 140719912876560 + File: C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName: kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 716 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNELBASE.dll) + + KERNELBASE.dll + C:\Windows\System32\KERNELBASE.dll + 140719894495232 + 2699264 + 140719894841456 + File: C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName: Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2636 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_elf.dll) + + chrome_elf.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll + 140719325642752 + 925696 + 140719326148464 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName: chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 904 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (VERSION.dll) + + VERSION.dll + C:\Windows\SYSTEM32\VERSION.dll + 140719800254464 + 40960 + 140719800259344 + File: C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName: version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Version Checking and File Installation Libraries_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 40 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Version Checking and File Installation Libraries + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcrt.dll) + + msvcrt.dll + C:\Windows\System32\msvcrt.dll + 140719950004224 + 647168 + 140719950035120 + File: C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName: msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion: 7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT CRT DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 7.0.17763.475_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 7.0.17763.475 (WinBuild.160101.0800) + 7.0.17763.475 + Windows NT CRT DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + + bcryptPrimitives.dll + C:\Windows\System32\bcryptPrimitives.dll + 140719890235392 + 516096 + 140719890461152 + File: C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName: bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 504 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ADVAPI32.dll) + + ADVAPI32.dll + C:\Windows\System32\ADVAPI32.dll + 140719915335680 + 667648 + 140719915417840 + File: C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName: advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Advanced Windows 32 Base API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 652 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Advanced Windows 32 Base API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (sechost.dll) + + sechost.dll + C:\Windows\System32\sechost.dll + 140719948824576 + 647168 + 140719948951504 + File: C:\Windows\System32\sechost.dll_x000D__x000A_InternalName: sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Host for SCM/SDDL/LSA Lookup APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RPCRT4.dll) + + RPCRT4.dll + C:\Windows\System32\RPCRT4.dll + 140719917629440 + 1187840 + 140719918006928 + File: C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName: rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Procedure Call Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Procedure Call Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_child.dll) + + chrome_child.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll + 140717177962496 + 87977984 + 140717247440176 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName: chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 85916 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (OLEAUT32.dll) + + OLEAUT32.dll + C:\Windows\System32\OLEAUT32.dll + 140719946465280 + 802816 + 140719946574624 + File: C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName: OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OLEAUT32.DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 784 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + OLEAUT32.DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcp_win.dll) + + msvcp_win.dll + C:\Windows\System32\msvcp_win.dll + 140719889580032 + 655360 + 140719889658864 + File: C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName: msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 640 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ucrtbase.dll) + + ucrtbase.dll + C:\Windows\System32\ucrtbase.dll + 140719893446656 + 1024000 + 140719893528400 + File: C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName: ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1000 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (combase.dll) + + combase.dll + C:\Windows\System32\combase.dll + 140719950856192 + 3325952 + 140719951769888 + File: C:\Windows\System32\combase.dll_x000D__x000A_InternalName: COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft COM for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3248 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft COM for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WS2_32.dll) + + WS2_32.dll + C:\Windows\System32\WS2_32.dll + 140719954198528 + 446464 + 140719954286384 + File: C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName: ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 436 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Socket 2.0 32-Bit DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (GDI32.dll) + + GDI32.dll + C:\Windows\System32\GDI32.dll + 140719950659584 + 167936 + 140719950676208 + File: C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32full.dll) + + gdi32full.dll + C:\Windows\System32\gdi32full.dll + 140719905112064 + 1675264 + 140719905369792 + File: C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1636 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USER32.dll) + + USER32.dll + C:\Windows\System32\USER32.dll + 140719909306368 + 1667072 + 140719909414448 + File: C:\Windows\System32\USER32.dll_x000D__x000A_InternalName: user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows USER API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows USER API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (win32u.dll) + + win32u.dll + C:\Windows\System32\win32u.dll + 140719906816000 + 131072 + 0 + File: C:\Windows\System32\win32u.dll_x000D__x000A_InternalName: Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32u_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 128 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32u + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINTRUST.dll) + + WINTRUST.dll + C:\Windows\System32\WINTRUST.dll + 140719888728064 + 364544 + 140719888791376 + File: C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName: WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Trust Verification APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 356 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft Trust Verification APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSASN1.dll) + + MSASN1.dll + C:\Windows\System32\MSASN1.dll + 140719887876096 + 73728 + 140719887898576 + File: C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName: msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: ASN.1 Runtime APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 72 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + ASN.1 Runtime APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPT32.dll) + + CRYPT32.dll + C:\Windows\System32\CRYPT32.dll + 140719891480576 + 1945600 + 140719891804832 + File: C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName: CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Crypto API32_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1900 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Crypto API32 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + + IPHLPAPI.DLL + C:\Windows\SYSTEM32\IPHLPAPI.DLL + 140719876931584 + 249856 + 140719876989024 + File: C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName: iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: IP Helper API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 244 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + IP Helper API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMM.dll) + + WINMM.dll + C:\Windows\SYSTEM32\WINMM.dll + 140719835054080 + 147456 + 140719835066368 + File: C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName: winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MCI API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MCI API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USERENV.dll) + + USERENV.dll + C:\Windows\SYSTEM32\USERENV.dll + 140719887024128 + 163840 + 140719887043280 + File: C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName: userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Userenv_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Userenv + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (profapi.dll) + + profapi.dll + C:\Windows\System32\profapi.dll + 140719888531456 + 147456 + 140719888564400 + File: C:\Windows\System32\profapi.dll_x000D__x000A_InternalName: PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: User Profile Basic API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + User Profile Basic API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (DWrite.dll) + + DWrite.dll + C:\Windows\SYSTEM32\DWrite.dll + 140719303819264 + 3129344 + 140719304509728 + File: C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName: DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft DirectX Typography Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3056 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft DirectX Typography Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINSPOOL.DRV) + + WINSPOOL.DRV + C:\Windows\SYSTEM32\WINSPOOL.DRV + 140719787606016 + 561152 + 140719787676448 + File: C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName: winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Spooler Driver_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 548 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Spooler Driver + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (kernel.appcore.dll) + + kernel.appcore.dll + C:\Windows\System32\kernel.appcore.dll + 140719888400384 + 69632 + 140719888415648 + File: C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName: kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AppModel API Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 68 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AppModel API Host + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcrypt.dll) + + bcrypt.dll + C:\Windows\System32\bcrypt.dll + 140719897247744 + 155648 + 140719897281296 + File: C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName: bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 152 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dbghelp.dll) + + dbghelp.dll + C:\Windows\SYSTEM32\dbghelp.dll + 140719552397312 + 2019328 + 140719552479168 + File: C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName: DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Image Helper_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Image Helper + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINHTTP.dll) + + WINHTTP.dll + C:\Windows\SYSTEM32\WINHTTP.dll + 140719810019328 + 991232 + 140719810293024 + File: C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName: winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows HTTP Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 968 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows HTTP Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (Secur32.dll) + + Secur32.dll + C:\Windows\SYSTEM32\Secur32.dll + 140719559147520 + 49152 + 140719559156816 + File: C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName: secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + + dhcpcsvc.DLL + C:\Windows\SYSTEM32\dhcpcsvc.DLL + 140719782494208 + 114688 + 140719782503840 + File: C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName: dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: DHCP Client Service_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 112 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + DHCP Client Service + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (NSI.dll) + + NSI.dll + C:\Windows\System32\NSI.dll + 140719916843008 + 32768 + 140719916851008 + File: C:\Windows\System32\NSI.dll_x000D__x000A_InternalName: nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NSI User-mode interface DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 32 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NSI User-mode interface DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMMBASE.dll) + + WINMMBASE.dll + C:\Windows\SYSTEM32\WINMMBASE.dll + 140719834857472 + 184320 + 140719834890448 + File: C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName: winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base Multimedia Extension API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 180 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base Multimedia Extension API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cfgmgr32.dll) + + cfgmgr32.dll + C:\Windows\System32\cfgmgr32.dll + 140719889252352 + 303104 + 140719889325904 + File: C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName: cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Configuration Manager DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 296 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Configuration Manager DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (PROPSYS.dll) + + PROPSYS.dll + C:\Windows\SYSTEM32\PROPSYS.dll + 140719831187456 + 1736704 + 140719831447408 + File: C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName: propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion: 7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Property System_x000D__x000A_Product: Windows® Search_x000D__x000A_ProductVersion: 7.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1696 + Microsoft Corporation + 7.0.17763.1 (WinBuild.160101.0800) + 7.0.17763.1 + Microsoft Property System + Windows® Search + + + + + System.Diagnostics.ProcessModule (shcore.dll) + + shcore.dll + C:\Windows\System32\shcore.dll + 140719907143680 + 688128 + 140719907388560 + File: C:\Windows\System32\shcore.dll_x000D__x000A_InternalName: SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: SHCORE_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 672 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + SHCORE + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SSPICLI.DLL) + + SSPICLI.DLL + C:\Windows\SYSTEM32\SSPICLI.DLL + 140719886827520 + 192512 + 140719886881776 + File: C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName: sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 188 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IMM32.DLL) + + IMM32.DLL + C:\Windows\System32\IMM32.DLL + 140719906947072 + 188416 + 140719906952688 + File: C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName: imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows IMM32 API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + + CRYPTBASE.DLL + C:\Windows\SYSTEM32\CRYPTBASE.DLL + 140719881846784 + 49152 + 140719881855488 + File: C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName: cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base cryptographic API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base cryptographic API DLL + Microsoft® Windows® Operating System + + + + + 44 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 20528 + 20528 + 21176320 + 21176320 + 332072 + 332072 + 22097920 + 22097920 + 33763328 + 33763328 + 2203738079232 + 419856384 + true + + + Normal + 32 + + 21176320 + 21176320 + chrome + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 17172 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.046875S +
2019-08-24T14:18:00.8917162+03:00
+ PT0.234375S + PT0.1875S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 10476 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:00.9728349+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 6 + 6 + 14688 + true + Lowest + 140719955419728 + Wait + UserRequest + PT0.046875S +
2019-08-24T14:18:00.9744074+03:00
+ PT0.046875S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 12600 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-24T14:18:00.9753449+03:00
+ PT0.03125S + PT0.03125S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 11992 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-24T14:18:00.9761278+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 9032 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:00.97722+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 6492 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:00.9872469+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 15476 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:00.9907187+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 18840 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:00.9913832+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 7796 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:00.9919132+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 10608 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:00.9923393+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 6 + 7 + 2164 + true + Lowest + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:00.9929578+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 13136 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.03125S +
2019-08-24T14:18:09.0915195+03:00
+ PT0.03125S + PT0S + + + + + + + 13 + + + + + + + + + + + + + + + + + + + false + + + 237 + 2203721302016 + 403079168 + false + 17076224 + 17076224 + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + PT0.1875S + PT0.40625S + PT0.21875S + + + 0 + + + true + + + + + chrome + 1 + 237 + 2203721302016 + 17076224 + 21176320 + 20528 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + + + System.Diagnostics.Process (chrome) + + Microsoft.Win32.SafeHandles.SafeProcessHandle + 6716 + 8 + false +
2019-08-24T14:18:00.3253674+03:00
+ 23804 + . + 1413120 + 204800 + + + + System.Diagnostics.ProcessModule (chrome.exe) + System.Diagnostics.ProcessModule (ntdll.dll) + System.Diagnostics.ProcessModule (KERNEL32.DLL) + System.Diagnostics.ProcessModule (KERNELBASE.dll) + System.Diagnostics.ProcessModule (chrome_elf.dll) + System.Diagnostics.ProcessModule (VERSION.dll) + System.Diagnostics.ProcessModule (msvcrt.dll) + System.Diagnostics.ProcessModule (ADVAPI32.dll) + System.Diagnostics.ProcessModule (sechost.dll) + System.Diagnostics.ProcessModule (RPCRT4.dll) + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + System.Diagnostics.ProcessModule (user32.dll) + System.Diagnostics.ProcessModule (win32u.dll) + System.Diagnostics.ProcessModule (GDI32.dll) + System.Diagnostics.ProcessModule (gdi32full.dll) + System.Diagnostics.ProcessModule (msvcp_win.dll) + System.Diagnostics.ProcessModule (ucrtbase.dll) + System.Diagnostics.ProcessModule (IMM32.DLL) + System.Diagnostics.ProcessModule (SHELL32.dll) + System.Diagnostics.ProcessModule (cfgmgr32.dll) + System.Diagnostics.ProcessModule (shcore.dll) + System.Diagnostics.ProcessModule (combase.dll) + System.Diagnostics.ProcessModule (windows.storage.dll) + System.Diagnostics.ProcessModule (profapi.dll) + System.Diagnostics.ProcessModule (powrprof.dll) + System.Diagnostics.ProcessModule (shlwapi.dll) + System.Diagnostics.ProcessModule (kernel.appcore.dll) + System.Diagnostics.ProcessModule (cryptsp.dll) + System.Diagnostics.ProcessModule (chrome.dll) + System.Diagnostics.ProcessModule (uxtheme.dll) + System.Diagnostics.ProcessModule (dwmapi.dll) + System.Diagnostics.ProcessModule (CRYPT32.dll) + System.Diagnostics.ProcessModule (MSASN1.dll) + System.Diagnostics.ProcessModule (USERENV.dll) + System.Diagnostics.ProcessModule (gpapi.dll) + System.Diagnostics.ProcessModule (wkscli.dll) + System.Diagnostics.ProcessModule (bcrypt.dll) + System.Diagnostics.ProcessModule (netutils.dll) + System.Diagnostics.ProcessModule (ole32.dll) + System.Diagnostics.ProcessModule (MSCTF.dll) + System.Diagnostics.ProcessModule (OLEAUT32.dll) + System.Diagnostics.ProcessModule (Secur32.dll) + System.Diagnostics.ProcessModule (SSPICLI.DLL) + System.Diagnostics.ProcessModule (DWrite.dll) + System.Diagnostics.ProcessModule (WS2_32.dll) + System.Diagnostics.ProcessModule (COMCTL32.dll) + System.Diagnostics.ProcessModule (clbcatq.dll) + System.Diagnostics.ProcessModule (twinapi.appcore.dll) + System.Diagnostics.ProcessModule (RMCLIENT.dll) + System.Diagnostics.ProcessModule (twinapi.dll) + System.Diagnostics.ProcessModule (NLAapi.dll) + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + System.Diagnostics.ProcessModule (NSI.dll) + System.Diagnostics.ProcessModule (dhcpcsvc6.DLL) + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + System.Diagnostics.ProcessModule (DNSAPI.dll) + System.Diagnostics.ProcessModule (mscms.dll) + System.Diagnostics.ProcessModule (ColorAdapterClient.dll) + System.Diagnostics.ProcessModule (icm32.dll) + System.Diagnostics.ProcessModule (Windows.UI.dll) + System.Diagnostics.ProcessModule (TextInputFramework.dll) + System.Diagnostics.ProcessModule (InputHost.dll) + System.Diagnostics.ProcessModule (CoreUIComponents.dll) + System.Diagnostics.ProcessModule (CoreMessaging.dll) + System.Diagnostics.ProcessModule (d2d1.dll) + System.Diagnostics.ProcessModule (d3d11.dll) + System.Diagnostics.ProcessModule (PROPSYS.dll) + System.Diagnostics.ProcessModule (wintypes.dll) + System.Diagnostics.ProcessModule (ntmarta.dll) + System.Diagnostics.ProcessModule (dxgi.dll) + System.Diagnostics.ProcessModule (WTSAPI32.dll) + System.Diagnostics.ProcessModule (wlanapi.dll) + System.Diagnostics.ProcessModule (WINSTA.dll) + System.Diagnostics.ProcessModule (wbemprox.dll) + System.Diagnostics.ProcessModule (wbemcomn.dll) + System.Diagnostics.ProcessModule (MMDevApi.dll) + System.Diagnostics.ProcessModule (DEVOBJ.dll) + System.Diagnostics.ProcessModule (wbemsvc.dll) + System.Diagnostics.ProcessModule (WINHTTP.dll) + System.Diagnostics.ProcessModule (fastprox.dll) + System.Diagnostics.ProcessModule (wmiutils.dll) + System.Diagnostics.ProcessModule (DPAPI.dll) + System.Diagnostics.ProcessModule (FirewallAPI.dll) + System.Diagnostics.ProcessModule (fwbase.dll) + System.Diagnostics.ProcessModule (LINKINFO.dll) + System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll) + System.Diagnostics.ProcessModule (dataexchange.dll) + System.Diagnostics.ProcessModule (dcomp.dll) + System.Diagnostics.ProcessModule (atlthunk.dll) + System.Diagnostics.ProcessModule (OLEACC.dll) + System.Diagnostics.ProcessModule (directmanipulation.dll) + System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll) + System.Diagnostics.ProcessModule (explorerframe.dll) + System.Diagnostics.ProcessModule (wpnapps.dll) + System.Diagnostics.ProcessModule (XmlLite.dll) + System.Diagnostics.ProcessModule (usermgrcli.dll) + System.Diagnostics.ProcessModule (mswsock.dll) + System.Diagnostics.ProcessModule (WINMM.dll) + System.Diagnostics.ProcessModule (WINMMBASE.dll) + System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll) + System.Diagnostics.ProcessModule (WmiPerfInst.dll) + System.Diagnostics.ProcessModule (pdh.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll) + System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll) + System.Diagnostics.ProcessModule (Windows.Networking.dll) + System.Diagnostics.ProcessModule (BiWinrt.dll) + System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll) + System.Diagnostics.ProcessModule (NETAPI32.dll) + System.Diagnostics.ProcessModule (SAMCLI.DLL) + System.Diagnostics.ProcessModule (SAMLIB.dll) + System.Diagnostics.ProcessModule (wdmaud.drv) + System.Diagnostics.ProcessModule (ksuser.dll) + System.Diagnostics.ProcessModule (AVRT.dll) + System.Diagnostics.ProcessModule (AUDIOSES.DLL) + System.Diagnostics.ProcessModule (msacm32.drv) + System.Diagnostics.ProcessModule (MSACM32.dll) + System.Diagnostics.ProcessModule (midimap.dll) + System.Diagnostics.ProcessModule (resourcepolicyclient.dll) + System.Diagnostics.ProcessModule (BitsProxy.dll) + + + 61568 + 61568 + 316080128 + 316080128 + 857648 + 857648 + 455720960 + 455720960 + 398323712 + 398323712 + 2204288917504 + 970694656 + true + Normal + 316080128 + 316080128 + chrome + 65535 + 1 + + + + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + + + 1747 + 2204143845376 + 825622528 + false + 112414720 + 112414720 + + System.Diagnostics.ProcessModule (chrome.exe) + PT11M7.53125S + PT21M46.28125S + PT10M38.75S + 1770664 + The Living Tombstone Radio - Now Playing on Pandora - Google Chrome + true + + + + + chrome + 1 + 1747 + 2204143845376 + 112414720 + 316080128 + 61568 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + System.Diagnostics.Process (explorer) + Google LLC + 1306.28125 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + Google LLC + 0.40625 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + + + System.Diagnostics.Process (chrome) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 7324 + + 8 + false +
2019-08-24T14:18:00.9750682+03:00
+ 19216 + . + + + 1413120 + + + + 204800 + + + + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNEL32.DLL) + + KERNEL32.DLL + C:\Windows\System32\KERNEL32.DLL + 140719912779776 + 733184 + 140719912876560 + File: C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName: kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 716 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNELBASE.dll) + + KERNELBASE.dll + C:\Windows\System32\KERNELBASE.dll + 140719894495232 + 2699264 + 140719894841456 + File: C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName: Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2636 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_elf.dll) + + chrome_elf.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll + 140719325642752 + 925696 + 140719326148464 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName: chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 904 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (VERSION.dll) + + VERSION.dll + C:\Windows\SYSTEM32\VERSION.dll + 140719800254464 + 40960 + 140719800259344 + File: C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName: version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Version Checking and File Installation Libraries_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 40 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Version Checking and File Installation Libraries + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcrt.dll) + + msvcrt.dll + C:\Windows\System32\msvcrt.dll + 140719950004224 + 647168 + 140719950035120 + File: C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName: msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion: 7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT CRT DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 7.0.17763.475_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 7.0.17763.475 (WinBuild.160101.0800) + 7.0.17763.475 + Windows NT CRT DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + + bcryptPrimitives.dll + C:\Windows\System32\bcryptPrimitives.dll + 140719890235392 + 516096 + 140719890461152 + File: C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName: bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 504 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ADVAPI32.dll) + + ADVAPI32.dll + C:\Windows\System32\ADVAPI32.dll + 140719915335680 + 667648 + 140719915417840 + File: C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName: advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Advanced Windows 32 Base API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 652 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Advanced Windows 32 Base API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (sechost.dll) + + sechost.dll + C:\Windows\System32\sechost.dll + 140719948824576 + 647168 + 140719948951504 + File: C:\Windows\System32\sechost.dll_x000D__x000A_InternalName: sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Host for SCM/SDDL/LSA Lookup APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RPCRT4.dll) + + RPCRT4.dll + C:\Windows\System32\RPCRT4.dll + 140719917629440 + 1187840 + 140719918006928 + File: C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName: rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Procedure Call Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Procedure Call Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_child.dll) + + chrome_child.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll + 140717177962496 + 87977984 + 140717247440176 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName: chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 85916 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (OLEAUT32.dll) + + OLEAUT32.dll + C:\Windows\System32\OLEAUT32.dll + 140719946465280 + 802816 + 140719946574624 + File: C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName: OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OLEAUT32.DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 784 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + OLEAUT32.DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcp_win.dll) + + msvcp_win.dll + C:\Windows\System32\msvcp_win.dll + 140719889580032 + 655360 + 140719889658864 + File: C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName: msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 640 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ucrtbase.dll) + + ucrtbase.dll + C:\Windows\System32\ucrtbase.dll + 140719893446656 + 1024000 + 140719893528400 + File: C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName: ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1000 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (combase.dll) + + combase.dll + C:\Windows\System32\combase.dll + 140719950856192 + 3325952 + 140719951769888 + File: C:\Windows\System32\combase.dll_x000D__x000A_InternalName: COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft COM for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3248 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft COM for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WS2_32.dll) + + WS2_32.dll + C:\Windows\System32\WS2_32.dll + 140719954198528 + 446464 + 140719954286384 + File: C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName: ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 436 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Socket 2.0 32-Bit DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (GDI32.dll) + + GDI32.dll + C:\Windows\System32\GDI32.dll + 140719950659584 + 167936 + 140719950676208 + File: C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32full.dll) + + gdi32full.dll + C:\Windows\System32\gdi32full.dll + 140719905112064 + 1675264 + 140719905369792 + File: C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1636 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USER32.dll) + + USER32.dll + C:\Windows\System32\USER32.dll + 140719909306368 + 1667072 + 140719909414448 + File: C:\Windows\System32\USER32.dll_x000D__x000A_InternalName: user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows USER API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows USER API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (win32u.dll) + + win32u.dll + C:\Windows\System32\win32u.dll + 140719906816000 + 131072 + 0 + File: C:\Windows\System32\win32u.dll_x000D__x000A_InternalName: Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32u_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 128 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32u + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINTRUST.dll) + + WINTRUST.dll + C:\Windows\System32\WINTRUST.dll + 140719888728064 + 364544 + 140719888791376 + File: C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName: WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Trust Verification APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 356 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft Trust Verification APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSASN1.dll) + + MSASN1.dll + C:\Windows\System32\MSASN1.dll + 140719887876096 + 73728 + 140719887898576 + File: C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName: msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: ASN.1 Runtime APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 72 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + ASN.1 Runtime APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPT32.dll) + + CRYPT32.dll + C:\Windows\System32\CRYPT32.dll + 140719891480576 + 1945600 + 140719891804832 + File: C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName: CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Crypto API32_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1900 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Crypto API32 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + + IPHLPAPI.DLL + C:\Windows\SYSTEM32\IPHLPAPI.DLL + 140719876931584 + 249856 + 140719876989024 + File: C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName: iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: IP Helper API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 244 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + IP Helper API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMM.dll) + + WINMM.dll + C:\Windows\SYSTEM32\WINMM.dll + 140719835054080 + 147456 + 140719835066368 + File: C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName: winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MCI API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MCI API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USERENV.dll) + + USERENV.dll + C:\Windows\SYSTEM32\USERENV.dll + 140719887024128 + 163840 + 140719887043280 + File: C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName: userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Userenv_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Userenv + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (profapi.dll) + + profapi.dll + C:\Windows\System32\profapi.dll + 140719888531456 + 147456 + 140719888564400 + File: C:\Windows\System32\profapi.dll_x000D__x000A_InternalName: PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: User Profile Basic API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + User Profile Basic API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (DWrite.dll) + + DWrite.dll + C:\Windows\SYSTEM32\DWrite.dll + 140719303819264 + 3129344 + 140719304509728 + File: C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName: DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft DirectX Typography Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3056 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft DirectX Typography Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINSPOOL.DRV) + + WINSPOOL.DRV + C:\Windows\SYSTEM32\WINSPOOL.DRV + 140719787606016 + 561152 + 140719787676448 + File: C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName: winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Spooler Driver_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 548 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Spooler Driver + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (kernel.appcore.dll) + + kernel.appcore.dll + C:\Windows\System32\kernel.appcore.dll + 140719888400384 + 69632 + 140719888415648 + File: C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName: kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AppModel API Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 68 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AppModel API Host + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcrypt.dll) + + bcrypt.dll + C:\Windows\System32\bcrypt.dll + 140719897247744 + 155648 + 140719897281296 + File: C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName: bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 152 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dbghelp.dll) + + dbghelp.dll + C:\Windows\SYSTEM32\dbghelp.dll + 140719552397312 + 2019328 + 140719552479168 + File: C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName: DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Image Helper_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Image Helper + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINHTTP.dll) + + WINHTTP.dll + C:\Windows\SYSTEM32\WINHTTP.dll + 140719810019328 + 991232 + 140719810293024 + File: C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName: winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows HTTP Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 968 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows HTTP Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (Secur32.dll) + + Secur32.dll + C:\Windows\SYSTEM32\Secur32.dll + 140719559147520 + 49152 + 140719559156816 + File: C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName: secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + + dhcpcsvc.DLL + C:\Windows\SYSTEM32\dhcpcsvc.DLL + 140719782494208 + 114688 + 140719782503840 + File: C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName: dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: DHCP Client Service_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 112 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + DHCP Client Service + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (NSI.dll) + + NSI.dll + C:\Windows\System32\NSI.dll + 140719916843008 + 32768 + 140719916851008 + File: C:\Windows\System32\NSI.dll_x000D__x000A_InternalName: nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NSI User-mode interface DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 32 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NSI User-mode interface DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMMBASE.dll) + + WINMMBASE.dll + C:\Windows\SYSTEM32\WINMMBASE.dll + 140719834857472 + 184320 + 140719834890448 + File: C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName: winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base Multimedia Extension API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 180 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base Multimedia Extension API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cfgmgr32.dll) + + cfgmgr32.dll + C:\Windows\System32\cfgmgr32.dll + 140719889252352 + 303104 + 140719889325904 + File: C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName: cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Configuration Manager DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 296 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Configuration Manager DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (PROPSYS.dll) + + PROPSYS.dll + C:\Windows\SYSTEM32\PROPSYS.dll + 140719831187456 + 1736704 + 140719831447408 + File: C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName: propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion: 7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Property System_x000D__x000A_Product: Windows® Search_x000D__x000A_ProductVersion: 7.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1696 + Microsoft Corporation + 7.0.17763.1 (WinBuild.160101.0800) + 7.0.17763.1 + Microsoft Property System + Windows® Search + + + + + System.Diagnostics.ProcessModule (shcore.dll) + + shcore.dll + C:\Windows\System32\shcore.dll + 140719907143680 + 688128 + 140719907388560 + File: C:\Windows\System32\shcore.dll_x000D__x000A_InternalName: SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: SHCORE_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 672 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + SHCORE + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SSPICLI.DLL) + + SSPICLI.DLL + C:\Windows\SYSTEM32\SSPICLI.DLL + 140719886827520 + 192512 + 140719886881776 + File: C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName: sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 188 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IMM32.DLL) + + IMM32.DLL + C:\Windows\System32\IMM32.DLL + 140719906947072 + 188416 + 140719906952688 + File: C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName: imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows IMM32 API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + + CRYPTBASE.DLL + C:\Windows\SYSTEM32\CRYPTBASE.DLL + 140719881846784 + 49152 + 140719881855488 + File: C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName: cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base cryptographic API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base cryptographic API DLL + Microsoft® Windows® Operating System + + + + + 44 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 29640 + 29640 + 63090688 + 63090688 + 340264 + 340264 + 75571200 + 75571200 + 72970240 + 72970240 + 2203804340224 + 486117376 + true + + + Normal + 32 + + 63090688 + 63090688 + chrome + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 9724 + true + Normal + 140719955419728 + Wait + UserRequest + PT1.8125S +
2019-08-24T14:18:00.97507+03:00
+ PT12.453125S + PT10.640625S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 7440 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.0706884+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 6 + 6 + 23216 + true + Lowest + 140719955419728 + Wait + UserRequest + PT0.015625S +
2019-08-24T14:18:01.0725577+03:00
+ PT0.015625S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 20024 + true + Normal + 140719955419728 + Wait + EventPairLow + PT5.125S +
2019-08-24T14:18:01.0748313+03:00
+ PT12S + PT6.875S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 23700 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-24T14:18:01.075694+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 5736 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.0791088+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 20820 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.0888845+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 3340 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.0909397+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 18184 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.0915003+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 19060 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.091958+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 20792 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.0924597+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 6 + 7 + 11268 + true + Lowest + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.092959+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 21936 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-27T02:36:39.1963672+03:00
+ PT0S + PT0S + + + + + + + 13 + + + + + + + + + + + + + + + + + + + false + + + 237 + 2203782578176 + 464355328 + false + 33050624 + 33050624 + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + PT7.21875S + PT24.796875S + PT17.578125S + + + 0 + + + true + + + + + chrome + 1 + 237 + 2203782578176 + 33050624 + 63090688 + 29640 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + + + System.Diagnostics.Process (chrome) + + Microsoft.Win32.SafeHandles.SafeProcessHandle + 5292 + 8 + false +
2019-08-24T14:18:00.3253674+03:00
+ 23804 + . + 1413120 + 204800 + + + + System.Diagnostics.ProcessModule (chrome.exe) + System.Diagnostics.ProcessModule (ntdll.dll) + System.Diagnostics.ProcessModule (KERNEL32.DLL) + System.Diagnostics.ProcessModule (KERNELBASE.dll) + System.Diagnostics.ProcessModule (chrome_elf.dll) + System.Diagnostics.ProcessModule (VERSION.dll) + System.Diagnostics.ProcessModule (msvcrt.dll) + System.Diagnostics.ProcessModule (ADVAPI32.dll) + System.Diagnostics.ProcessModule (sechost.dll) + System.Diagnostics.ProcessModule (RPCRT4.dll) + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + System.Diagnostics.ProcessModule (user32.dll) + System.Diagnostics.ProcessModule (win32u.dll) + System.Diagnostics.ProcessModule (GDI32.dll) + System.Diagnostics.ProcessModule (gdi32full.dll) + System.Diagnostics.ProcessModule (msvcp_win.dll) + System.Diagnostics.ProcessModule (ucrtbase.dll) + System.Diagnostics.ProcessModule (IMM32.DLL) + System.Diagnostics.ProcessModule (SHELL32.dll) + System.Diagnostics.ProcessModule (cfgmgr32.dll) + System.Diagnostics.ProcessModule (shcore.dll) + System.Diagnostics.ProcessModule (combase.dll) + System.Diagnostics.ProcessModule (windows.storage.dll) + System.Diagnostics.ProcessModule (profapi.dll) + System.Diagnostics.ProcessModule (powrprof.dll) + System.Diagnostics.ProcessModule (shlwapi.dll) + System.Diagnostics.ProcessModule (kernel.appcore.dll) + System.Diagnostics.ProcessModule (cryptsp.dll) + System.Diagnostics.ProcessModule (chrome.dll) + System.Diagnostics.ProcessModule (uxtheme.dll) + System.Diagnostics.ProcessModule (dwmapi.dll) + System.Diagnostics.ProcessModule (CRYPT32.dll) + System.Diagnostics.ProcessModule (MSASN1.dll) + System.Diagnostics.ProcessModule (USERENV.dll) + System.Diagnostics.ProcessModule (gpapi.dll) + System.Diagnostics.ProcessModule (wkscli.dll) + System.Diagnostics.ProcessModule (bcrypt.dll) + System.Diagnostics.ProcessModule (netutils.dll) + System.Diagnostics.ProcessModule (ole32.dll) + System.Diagnostics.ProcessModule (MSCTF.dll) + System.Diagnostics.ProcessModule (OLEAUT32.dll) + System.Diagnostics.ProcessModule (Secur32.dll) + System.Diagnostics.ProcessModule (SSPICLI.DLL) + System.Diagnostics.ProcessModule (DWrite.dll) + System.Diagnostics.ProcessModule (WS2_32.dll) + System.Diagnostics.ProcessModule (COMCTL32.dll) + System.Diagnostics.ProcessModule (clbcatq.dll) + System.Diagnostics.ProcessModule (twinapi.appcore.dll) + System.Diagnostics.ProcessModule (RMCLIENT.dll) + System.Diagnostics.ProcessModule (twinapi.dll) + System.Diagnostics.ProcessModule (NLAapi.dll) + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + System.Diagnostics.ProcessModule (NSI.dll) + System.Diagnostics.ProcessModule (dhcpcsvc6.DLL) + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + System.Diagnostics.ProcessModule (DNSAPI.dll) + System.Diagnostics.ProcessModule (mscms.dll) + System.Diagnostics.ProcessModule (ColorAdapterClient.dll) + System.Diagnostics.ProcessModule (icm32.dll) + System.Diagnostics.ProcessModule (Windows.UI.dll) + System.Diagnostics.ProcessModule (TextInputFramework.dll) + System.Diagnostics.ProcessModule (InputHost.dll) + System.Diagnostics.ProcessModule (CoreUIComponents.dll) + System.Diagnostics.ProcessModule (CoreMessaging.dll) + System.Diagnostics.ProcessModule (d2d1.dll) + System.Diagnostics.ProcessModule (d3d11.dll) + System.Diagnostics.ProcessModule (PROPSYS.dll) + System.Diagnostics.ProcessModule (wintypes.dll) + System.Diagnostics.ProcessModule (ntmarta.dll) + System.Diagnostics.ProcessModule (dxgi.dll) + System.Diagnostics.ProcessModule (WTSAPI32.dll) + System.Diagnostics.ProcessModule (wlanapi.dll) + System.Diagnostics.ProcessModule (WINSTA.dll) + System.Diagnostics.ProcessModule (wbemprox.dll) + System.Diagnostics.ProcessModule (wbemcomn.dll) + System.Diagnostics.ProcessModule (MMDevApi.dll) + System.Diagnostics.ProcessModule (DEVOBJ.dll) + System.Diagnostics.ProcessModule (wbemsvc.dll) + System.Diagnostics.ProcessModule (WINHTTP.dll) + System.Diagnostics.ProcessModule (fastprox.dll) + System.Diagnostics.ProcessModule (wmiutils.dll) + System.Diagnostics.ProcessModule (DPAPI.dll) + System.Diagnostics.ProcessModule (FirewallAPI.dll) + System.Diagnostics.ProcessModule (fwbase.dll) + System.Diagnostics.ProcessModule (LINKINFO.dll) + System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll) + System.Diagnostics.ProcessModule (dataexchange.dll) + System.Diagnostics.ProcessModule (dcomp.dll) + System.Diagnostics.ProcessModule (atlthunk.dll) + System.Diagnostics.ProcessModule (OLEACC.dll) + System.Diagnostics.ProcessModule (directmanipulation.dll) + System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll) + System.Diagnostics.ProcessModule (explorerframe.dll) + System.Diagnostics.ProcessModule (wpnapps.dll) + System.Diagnostics.ProcessModule (XmlLite.dll) + System.Diagnostics.ProcessModule (usermgrcli.dll) + System.Diagnostics.ProcessModule (mswsock.dll) + System.Diagnostics.ProcessModule (WINMM.dll) + System.Diagnostics.ProcessModule (WINMMBASE.dll) + System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll) + System.Diagnostics.ProcessModule (WmiPerfInst.dll) + System.Diagnostics.ProcessModule (pdh.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll) + System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll) + System.Diagnostics.ProcessModule (Windows.Networking.dll) + System.Diagnostics.ProcessModule (BiWinrt.dll) + System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll) + System.Diagnostics.ProcessModule (NETAPI32.dll) + System.Diagnostics.ProcessModule (SAMCLI.DLL) + System.Diagnostics.ProcessModule (SAMLIB.dll) + System.Diagnostics.ProcessModule (wdmaud.drv) + System.Diagnostics.ProcessModule (ksuser.dll) + System.Diagnostics.ProcessModule (AVRT.dll) + System.Diagnostics.ProcessModule (AUDIOSES.DLL) + System.Diagnostics.ProcessModule (msacm32.drv) + System.Diagnostics.ProcessModule (MSACM32.dll) + System.Diagnostics.ProcessModule (midimap.dll) + System.Diagnostics.ProcessModule (resourcepolicyclient.dll) + System.Diagnostics.ProcessModule (BitsProxy.dll) + + + 61568 + 61568 + 316080128 + 316080128 + 857648 + 857648 + 455720960 + 455720960 + 398323712 + 398323712 + 2204288917504 + 970694656 + true + Normal + 316080128 + 316080128 + chrome + 65535 + 1 + + + + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + + + 1747 + 2204143845376 + 825622528 + false + 112414720 + 112414720 + + System.Diagnostics.ProcessModule (chrome.exe) + PT11M7.53125S + PT21M46.28125S + PT10M38.75S + 1770664 + The Living Tombstone Radio - Now Playing on Pandora - Google Chrome + true + + + + + chrome + 1 + 1747 + 2204143845376 + 112414720 + 316080128 + 61568 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + System.Diagnostics.Process (explorer) + Google LLC + 1306.28125 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + Google LLC + 24.796875 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + + + System.Diagnostics.Process (chrome) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 5440 + + 4 + false +
2019-08-24T14:18:42.7422991+03:00
+ 19408 + . + + + 1413120 + + + + 204800 + + + + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNEL32.DLL) + + KERNEL32.DLL + C:\Windows\System32\KERNEL32.DLL + 140719912779776 + 733184 + 140719912876560 + File: C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName: kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 716 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNELBASE.dll) + + KERNELBASE.dll + C:\Windows\System32\KERNELBASE.dll + 140719894495232 + 2699264 + 140719894841456 + File: C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName: Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2636 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_elf.dll) + + chrome_elf.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll + 140719325642752 + 925696 + 140719326148464 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName: chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 904 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (VERSION.dll) + + VERSION.dll + C:\Windows\SYSTEM32\VERSION.dll + 140719800254464 + 40960 + 140719800259344 + File: C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName: version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Version Checking and File Installation Libraries_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 40 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Version Checking and File Installation Libraries + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcrt.dll) + + msvcrt.dll + C:\Windows\System32\msvcrt.dll + 140719950004224 + 647168 + 140719950035120 + File: C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName: msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion: 7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT CRT DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 7.0.17763.475_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 7.0.17763.475 (WinBuild.160101.0800) + 7.0.17763.475 + Windows NT CRT DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + + bcryptPrimitives.dll + C:\Windows\System32\bcryptPrimitives.dll + 140719890235392 + 516096 + 140719890461152 + File: C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName: bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 504 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ADVAPI32.dll) + + ADVAPI32.dll + C:\Windows\System32\ADVAPI32.dll + 140719915335680 + 667648 + 140719915417840 + File: C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName: advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Advanced Windows 32 Base API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 652 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Advanced Windows 32 Base API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (sechost.dll) + + sechost.dll + C:\Windows\System32\sechost.dll + 140719948824576 + 647168 + 140719948951504 + File: C:\Windows\System32\sechost.dll_x000D__x000A_InternalName: sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Host for SCM/SDDL/LSA Lookup APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RPCRT4.dll) + + RPCRT4.dll + C:\Windows\System32\RPCRT4.dll + 140719917629440 + 1187840 + 140719918006928 + File: C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName: rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Procedure Call Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Procedure Call Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_child.dll) + + chrome_child.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll + 140717177962496 + 87977984 + 140717247440176 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName: chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 85916 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (OLEAUT32.dll) + + OLEAUT32.dll + C:\Windows\System32\OLEAUT32.dll + 140719946465280 + 802816 + 140719946574624 + File: C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName: OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OLEAUT32.DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 784 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + OLEAUT32.DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcp_win.dll) + + msvcp_win.dll + C:\Windows\System32\msvcp_win.dll + 140719889580032 + 655360 + 140719889658864 + File: C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName: msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 640 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ucrtbase.dll) + + ucrtbase.dll + C:\Windows\System32\ucrtbase.dll + 140719893446656 + 1024000 + 140719893528400 + File: C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName: ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1000 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (combase.dll) + + combase.dll + C:\Windows\System32\combase.dll + 140719950856192 + 3325952 + 140719951769888 + File: C:\Windows\System32\combase.dll_x000D__x000A_InternalName: COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft COM for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3248 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft COM for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WS2_32.dll) + + WS2_32.dll + C:\Windows\System32\WS2_32.dll + 140719954198528 + 446464 + 140719954286384 + File: C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName: ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 436 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Socket 2.0 32-Bit DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (GDI32.dll) + + GDI32.dll + C:\Windows\System32\GDI32.dll + 140719950659584 + 167936 + 140719950676208 + File: C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32full.dll) + + gdi32full.dll + C:\Windows\System32\gdi32full.dll + 140719905112064 + 1675264 + 140719905369792 + File: C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1636 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USER32.dll) + + USER32.dll + C:\Windows\System32\USER32.dll + 140719909306368 + 1667072 + 140719909414448 + File: C:\Windows\System32\USER32.dll_x000D__x000A_InternalName: user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows USER API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows USER API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (win32u.dll) + + win32u.dll + C:\Windows\System32\win32u.dll + 140719906816000 + 131072 + 0 + File: C:\Windows\System32\win32u.dll_x000D__x000A_InternalName: Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32u_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 128 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32u + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINTRUST.dll) + + WINTRUST.dll + C:\Windows\System32\WINTRUST.dll + 140719888728064 + 364544 + 140719888791376 + File: C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName: WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Trust Verification APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 356 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft Trust Verification APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSASN1.dll) + + MSASN1.dll + C:\Windows\System32\MSASN1.dll + 140719887876096 + 73728 + 140719887898576 + File: C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName: msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: ASN.1 Runtime APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 72 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + ASN.1 Runtime APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPT32.dll) + + CRYPT32.dll + C:\Windows\System32\CRYPT32.dll + 140719891480576 + 1945600 + 140719891804832 + File: C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName: CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Crypto API32_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1900 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Crypto API32 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + + IPHLPAPI.DLL + C:\Windows\SYSTEM32\IPHLPAPI.DLL + 140719876931584 + 249856 + 140719876989024 + File: C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName: iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: IP Helper API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 244 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + IP Helper API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMM.dll) + + WINMM.dll + C:\Windows\SYSTEM32\WINMM.dll + 140719835054080 + 147456 + 140719835066368 + File: C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName: winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MCI API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MCI API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USERENV.dll) + + USERENV.dll + C:\Windows\SYSTEM32\USERENV.dll + 140719887024128 + 163840 + 140719887043280 + File: C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName: userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Userenv_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Userenv + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (profapi.dll) + + profapi.dll + C:\Windows\System32\profapi.dll + 140719888531456 + 147456 + 140719888564400 + File: C:\Windows\System32\profapi.dll_x000D__x000A_InternalName: PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: User Profile Basic API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + User Profile Basic API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (DWrite.dll) + + DWrite.dll + C:\Windows\SYSTEM32\DWrite.dll + 140719303819264 + 3129344 + 140719304509728 + File: C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName: DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft DirectX Typography Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3056 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft DirectX Typography Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINSPOOL.DRV) + + WINSPOOL.DRV + C:\Windows\SYSTEM32\WINSPOOL.DRV + 140719787606016 + 561152 + 140719787676448 + File: C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName: winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Spooler Driver_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 548 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Spooler Driver + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (kernel.appcore.dll) + + kernel.appcore.dll + C:\Windows\System32\kernel.appcore.dll + 140719888400384 + 69632 + 140719888415648 + File: C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName: kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AppModel API Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 68 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AppModel API Host + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcrypt.dll) + + bcrypt.dll + C:\Windows\System32\bcrypt.dll + 140719897247744 + 155648 + 140719897281296 + File: C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName: bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 152 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dbghelp.dll) + + dbghelp.dll + C:\Windows\SYSTEM32\dbghelp.dll + 140719552397312 + 2019328 + 140719552479168 + File: C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName: DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Image Helper_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Image Helper + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINHTTP.dll) + + WINHTTP.dll + C:\Windows\SYSTEM32\WINHTTP.dll + 140719810019328 + 991232 + 140719810293024 + File: C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName: winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows HTTP Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 968 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows HTTP Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (Secur32.dll) + + Secur32.dll + C:\Windows\SYSTEM32\Secur32.dll + 140719559147520 + 49152 + 140719559156816 + File: C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName: secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + + dhcpcsvc.DLL + C:\Windows\SYSTEM32\dhcpcsvc.DLL + 140719782494208 + 114688 + 140719782503840 + File: C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName: dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: DHCP Client Service_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 112 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + DHCP Client Service + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (NSI.dll) + + NSI.dll + C:\Windows\System32\NSI.dll + 140719916843008 + 32768 + 140719916851008 + File: C:\Windows\System32\NSI.dll_x000D__x000A_InternalName: nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NSI User-mode interface DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 32 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NSI User-mode interface DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMMBASE.dll) + + WINMMBASE.dll + C:\Windows\SYSTEM32\WINMMBASE.dll + 140719834857472 + 184320 + 140719834890448 + File: C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName: winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base Multimedia Extension API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 180 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base Multimedia Extension API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cfgmgr32.dll) + + cfgmgr32.dll + C:\Windows\System32\cfgmgr32.dll + 140719889252352 + 303104 + 140719889325904 + File: C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName: cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Configuration Manager DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 296 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Configuration Manager DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (PROPSYS.dll) + + PROPSYS.dll + C:\Windows\SYSTEM32\PROPSYS.dll + 140719831187456 + 1736704 + 140719831447408 + File: C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName: propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion: 7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Property System_x000D__x000A_Product: Windows® Search_x000D__x000A_ProductVersion: 7.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1696 + Microsoft Corporation + 7.0.17763.1 (WinBuild.160101.0800) + 7.0.17763.1 + Microsoft Property System + Windows® Search + + + + + System.Diagnostics.ProcessModule (shcore.dll) + + shcore.dll + C:\Windows\System32\shcore.dll + 140719907143680 + 688128 + 140719907388560 + File: C:\Windows\System32\shcore.dll_x000D__x000A_InternalName: SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: SHCORE_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 672 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + SHCORE + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SSPICLI.DLL) + + SSPICLI.DLL + C:\Windows\SYSTEM32\SSPICLI.DLL + 140719886827520 + 192512 + 140719886881776 + File: C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName: sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 188 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IMM32.DLL) + + IMM32.DLL + C:\Windows\System32\IMM32.DLL + 140719906947072 + 188416 + 140719906952688 + File: C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName: imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows IMM32 API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + + CRYPTBASE.DLL + C:\Windows\SYSTEM32\CRYPTBASE.DLL + 140719881846784 + 49152 + 140719881855488 + File: C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName: cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base cryptographic API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base cryptographic API DLL + Microsoft® Windows® Operating System + + + + + 44 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 27872 + 27872 + 40718336 + 40718336 + 349664 + 349664 + 47194112 + 47194112 + 50327552 + 50327552 + 2203768713216 + 450490368 + true + + + Idle + 64 + + 40718336 + 40718336 + chrome + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 4 + 5 + 23128 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.6875S +
2019-08-24T14:18:42.7423016+03:00
+ PT9.640625S + PT8.953125S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 564 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:42.7985453+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 2 + 2 + 13700 + true + Lowest + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:42.7998575+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 6 + 23576 + true + Normal + 140719955419728 + Wait + EventPairLow + PT1.34375S +
2019-08-24T14:18:42.8006891+03:00
+ PT6.890625S + PT5.546875S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 23680 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-24T14:18:42.8012881+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 19328 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:42.8021576+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 5 + 17648 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:42.8084287+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 21252 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:42.8096096+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 23924 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:42.8103373+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 14676 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:42.8109084+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 1888 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:42.8113991+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 2 + 2 + 16288 + true + Lowest + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:42.8118186+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 4 + 4 + 22992 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-27T02:34:29.4502554+03:00
+ PT0S + PT0S + + + + + + + 13 + + + + + + + + + + + + + + + + + + + false + + + 240 + 2203746955264 + 428732416 + false + 39317504 + 39317504 + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + PT2.828125S + PT18.625S + PT15.796875S + + + 0 + + + true + + + + + chrome + 1 + 240 + 2203746955264 + 39317504 + 40718336 + 27872 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + + + System.Diagnostics.Process (chrome) + + Microsoft.Win32.SafeHandles.SafeProcessHandle + 6252 + 8 + false +
2019-08-24T14:18:00.3253674+03:00
+ 23804 + . + 1413120 + 204800 + + + + System.Diagnostics.ProcessModule (chrome.exe) + System.Diagnostics.ProcessModule (ntdll.dll) + System.Diagnostics.ProcessModule (KERNEL32.DLL) + System.Diagnostics.ProcessModule (KERNELBASE.dll) + System.Diagnostics.ProcessModule (chrome_elf.dll) + System.Diagnostics.ProcessModule (VERSION.dll) + System.Diagnostics.ProcessModule (msvcrt.dll) + System.Diagnostics.ProcessModule (ADVAPI32.dll) + System.Diagnostics.ProcessModule (sechost.dll) + System.Diagnostics.ProcessModule (RPCRT4.dll) + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + System.Diagnostics.ProcessModule (user32.dll) + System.Diagnostics.ProcessModule (win32u.dll) + System.Diagnostics.ProcessModule (GDI32.dll) + System.Diagnostics.ProcessModule (gdi32full.dll) + System.Diagnostics.ProcessModule (msvcp_win.dll) + System.Diagnostics.ProcessModule (ucrtbase.dll) + System.Diagnostics.ProcessModule (IMM32.DLL) + System.Diagnostics.ProcessModule (SHELL32.dll) + System.Diagnostics.ProcessModule (cfgmgr32.dll) + System.Diagnostics.ProcessModule (shcore.dll) + System.Diagnostics.ProcessModule (combase.dll) + System.Diagnostics.ProcessModule (windows.storage.dll) + System.Diagnostics.ProcessModule (profapi.dll) + System.Diagnostics.ProcessModule (powrprof.dll) + System.Diagnostics.ProcessModule (shlwapi.dll) + System.Diagnostics.ProcessModule (kernel.appcore.dll) + System.Diagnostics.ProcessModule (cryptsp.dll) + System.Diagnostics.ProcessModule (chrome.dll) + System.Diagnostics.ProcessModule (uxtheme.dll) + System.Diagnostics.ProcessModule (dwmapi.dll) + System.Diagnostics.ProcessModule (CRYPT32.dll) + System.Diagnostics.ProcessModule (MSASN1.dll) + System.Diagnostics.ProcessModule (USERENV.dll) + System.Diagnostics.ProcessModule (gpapi.dll) + System.Diagnostics.ProcessModule (wkscli.dll) + System.Diagnostics.ProcessModule (bcrypt.dll) + System.Diagnostics.ProcessModule (netutils.dll) + System.Diagnostics.ProcessModule (ole32.dll) + System.Diagnostics.ProcessModule (MSCTF.dll) + System.Diagnostics.ProcessModule (OLEAUT32.dll) + System.Diagnostics.ProcessModule (Secur32.dll) + System.Diagnostics.ProcessModule (SSPICLI.DLL) + System.Diagnostics.ProcessModule (DWrite.dll) + System.Diagnostics.ProcessModule (WS2_32.dll) + System.Diagnostics.ProcessModule (COMCTL32.dll) + System.Diagnostics.ProcessModule (clbcatq.dll) + System.Diagnostics.ProcessModule (twinapi.appcore.dll) + System.Diagnostics.ProcessModule (RMCLIENT.dll) + System.Diagnostics.ProcessModule (twinapi.dll) + System.Diagnostics.ProcessModule (NLAapi.dll) + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + System.Diagnostics.ProcessModule (NSI.dll) + System.Diagnostics.ProcessModule (dhcpcsvc6.DLL) + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + System.Diagnostics.ProcessModule (DNSAPI.dll) + System.Diagnostics.ProcessModule (mscms.dll) + System.Diagnostics.ProcessModule (ColorAdapterClient.dll) + System.Diagnostics.ProcessModule (icm32.dll) + System.Diagnostics.ProcessModule (Windows.UI.dll) + System.Diagnostics.ProcessModule (TextInputFramework.dll) + System.Diagnostics.ProcessModule (InputHost.dll) + System.Diagnostics.ProcessModule (CoreUIComponents.dll) + System.Diagnostics.ProcessModule (CoreMessaging.dll) + System.Diagnostics.ProcessModule (d2d1.dll) + System.Diagnostics.ProcessModule (d3d11.dll) + System.Diagnostics.ProcessModule (PROPSYS.dll) + System.Diagnostics.ProcessModule (wintypes.dll) + System.Diagnostics.ProcessModule (ntmarta.dll) + System.Diagnostics.ProcessModule (dxgi.dll) + System.Diagnostics.ProcessModule (WTSAPI32.dll) + System.Diagnostics.ProcessModule (wlanapi.dll) + System.Diagnostics.ProcessModule (WINSTA.dll) + System.Diagnostics.ProcessModule (wbemprox.dll) + System.Diagnostics.ProcessModule (wbemcomn.dll) + System.Diagnostics.ProcessModule (MMDevApi.dll) + System.Diagnostics.ProcessModule (DEVOBJ.dll) + System.Diagnostics.ProcessModule (wbemsvc.dll) + System.Diagnostics.ProcessModule (WINHTTP.dll) + System.Diagnostics.ProcessModule (fastprox.dll) + System.Diagnostics.ProcessModule (wmiutils.dll) + System.Diagnostics.ProcessModule (DPAPI.dll) + System.Diagnostics.ProcessModule (FirewallAPI.dll) + System.Diagnostics.ProcessModule (fwbase.dll) + System.Diagnostics.ProcessModule (LINKINFO.dll) + System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll) + System.Diagnostics.ProcessModule (dataexchange.dll) + System.Diagnostics.ProcessModule (dcomp.dll) + System.Diagnostics.ProcessModule (atlthunk.dll) + System.Diagnostics.ProcessModule (OLEACC.dll) + System.Diagnostics.ProcessModule (directmanipulation.dll) + System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll) + System.Diagnostics.ProcessModule (explorerframe.dll) + System.Diagnostics.ProcessModule (wpnapps.dll) + System.Diagnostics.ProcessModule (XmlLite.dll) + System.Diagnostics.ProcessModule (usermgrcli.dll) + System.Diagnostics.ProcessModule (mswsock.dll) + System.Diagnostics.ProcessModule (WINMM.dll) + System.Diagnostics.ProcessModule (WINMMBASE.dll) + System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll) + System.Diagnostics.ProcessModule (WmiPerfInst.dll) + System.Diagnostics.ProcessModule (pdh.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll) + System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll) + System.Diagnostics.ProcessModule (Windows.Networking.dll) + System.Diagnostics.ProcessModule (BiWinrt.dll) + System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll) + System.Diagnostics.ProcessModule (NETAPI32.dll) + System.Diagnostics.ProcessModule (SAMCLI.DLL) + System.Diagnostics.ProcessModule (SAMLIB.dll) + System.Diagnostics.ProcessModule (wdmaud.drv) + System.Diagnostics.ProcessModule (ksuser.dll) + System.Diagnostics.ProcessModule (AVRT.dll) + System.Diagnostics.ProcessModule (AUDIOSES.DLL) + System.Diagnostics.ProcessModule (msacm32.drv) + System.Diagnostics.ProcessModule (MSACM32.dll) + System.Diagnostics.ProcessModule (midimap.dll) + System.Diagnostics.ProcessModule (resourcepolicyclient.dll) + System.Diagnostics.ProcessModule (BitsProxy.dll) + + + 61568 + 61568 + 316080128 + 316080128 + 857648 + 857648 + 455720960 + 455720960 + 398323712 + 398323712 + 2204288917504 + 970694656 + true + Normal + 316080128 + 316080128 + chrome + 65535 + 1 + + + + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + + + 1747 + 2204143845376 + 825622528 + false + 112414720 + 112414720 + + System.Diagnostics.ProcessModule (chrome.exe) + PT11M7.53125S + PT21M46.28125S + PT10M38.75S + 1770664 + The Living Tombstone Radio - Now Playing on Pandora - Google Chrome + true + + + + + chrome + 1 + 1747 + 2204143845376 + 112414720 + 316080128 + 61568 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + System.Diagnostics.Process (explorer) + Google LLC + 1306.28125 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + Google LLC + 18.625 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + + + System.Diagnostics.Process (chrome) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 6688 + + 8 + false +
2019-08-24T14:18:00.4967237+03:00
+ 19596 + . + + + 1413120 + + + + 204800 + + + + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNEL32.DLL) + + KERNEL32.DLL + C:\Windows\System32\KERNEL32.DLL + 140719912779776 + 733184 + 140719912876560 + File: C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName: kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 716 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNELBASE.dll) + + KERNELBASE.dll + C:\Windows\System32\KERNELBASE.dll + 140719894495232 + 2699264 + 140719894841456 + File: C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName: Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2636 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_elf.dll) + + chrome_elf.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll + 140719325642752 + 925696 + 140719326148464 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName: chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 904 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (VERSION.dll) + + VERSION.dll + C:\Windows\SYSTEM32\VERSION.dll + 140719800254464 + 40960 + 140719800259344 + File: C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName: version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Version Checking and File Installation Libraries_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 40 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Version Checking and File Installation Libraries + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcrt.dll) + + msvcrt.dll + C:\Windows\System32\msvcrt.dll + 140719950004224 + 647168 + 140719950035120 + File: C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName: msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion: 7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT CRT DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 7.0.17763.475_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 7.0.17763.475 (WinBuild.160101.0800) + 7.0.17763.475 + Windows NT CRT DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + + bcryptPrimitives.dll + C:\Windows\System32\bcryptPrimitives.dll + 140719890235392 + 516096 + 140719890461152 + File: C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName: bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 504 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ADVAPI32.dll) + + ADVAPI32.dll + C:\Windows\System32\ADVAPI32.dll + 140719915335680 + 667648 + 140719915417840 + File: C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName: advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Advanced Windows 32 Base API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 652 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Advanced Windows 32 Base API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (sechost.dll) + + sechost.dll + C:\Windows\System32\sechost.dll + 140719948824576 + 647168 + 140719948951504 + File: C:\Windows\System32\sechost.dll_x000D__x000A_InternalName: sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Host for SCM/SDDL/LSA Lookup APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RPCRT4.dll) + + RPCRT4.dll + C:\Windows\System32\RPCRT4.dll + 140719917629440 + 1187840 + 140719918006928 + File: C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName: rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Procedure Call Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Procedure Call Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (user32.dll) + + user32.dll + C:\Windows\System32\user32.dll + 140719909306368 + 1667072 + 140719909414448 + File: C:\Windows\System32\user32.dll_x000D__x000A_InternalName: user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows USER API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows USER API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (win32u.dll) + + win32u.dll + C:\Windows\System32\win32u.dll + 140719906816000 + 131072 + 0 + File: C:\Windows\System32\win32u.dll_x000D__x000A_InternalName: Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32u_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 128 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32u + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (GDI32.dll) + + GDI32.dll + C:\Windows\System32\GDI32.dll + 140719950659584 + 167936 + 140719950676208 + File: C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32full.dll) + + gdi32full.dll + C:\Windows\System32\gdi32full.dll + 140719905112064 + 1675264 + 140719905369792 + File: C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1636 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcp_win.dll) + + msvcp_win.dll + C:\Windows\System32\msvcp_win.dll + 140719889580032 + 655360 + 140719889658864 + File: C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName: msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 640 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ucrtbase.dll) + + ucrtbase.dll + C:\Windows\System32\ucrtbase.dll + 140719893446656 + 1024000 + 140719893528400 + File: C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName: ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1000 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IMM32.DLL) + + IMM32.DLL + C:\Windows\System32\IMM32.DLL + 140719906947072 + 188416 + 140719906952688 + File: C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName: imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows IMM32 API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SHELL32.dll) + + SHELL32.dll + C:\Windows\System32\SHELL32.dll + 140719923593216 + 21954560 + 140719924695456 + File: C:\Windows\System32\SHELL32.dll_x000D__x000A_InternalName: SHELL32_x000D__x000A_OriginalFilename: SHELL32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Shell Common Dll_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 21440 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Shell Common Dll + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cfgmgr32.dll) + + cfgmgr32.dll + C:\Windows\System32\cfgmgr32.dll + 140719889252352 + 303104 + 140719889325904 + File: C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName: cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Configuration Manager DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 296 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Configuration Manager DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (shcore.dll) + + shcore.dll + C:\Windows\System32\shcore.dll + 140719907143680 + 688128 + 140719907388560 + File: C:\Windows\System32\shcore.dll_x000D__x000A_InternalName: SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: SHCORE_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 672 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + SHCORE + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (combase.dll) + + combase.dll + C:\Windows\System32\combase.dll + 140719950856192 + 3325952 + 140719951769888 + File: C:\Windows\System32\combase.dll_x000D__x000A_InternalName: COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft COM for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3248 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft COM for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (windows.storage.dll) + + windows.storage.dll + C:\Windows\System32\windows.storage.dll + 140719897444352 + 7643136 + 140719899226624 + File: C:\Windows\System32\windows.storage.dll_x000D__x000A_InternalName: Windows.Storage_x000D__x000A_OriginalFilename: Windows.Storage.dll.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft WinRT Storage API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 7464 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft WinRT Storage API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (profapi.dll) + + profapi.dll + C:\Windows\System32\profapi.dll + 140719888531456 + 147456 + 140719888564400 + File: C:\Windows\System32\profapi.dll_x000D__x000A_InternalName: PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: User Profile Basic API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + User Profile Basic API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (powrprof.dll) + + powrprof.dll + C:\Windows\System32\powrprof.dll + 140719888007168 + 380928 + 140719888020992 + File: C:\Windows\System32\powrprof.dll_x000D__x000A_InternalName: POWRPROF_x000D__x000A_OriginalFilename: POWRPROF.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Power Profile Helper DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 372 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Power Profile Helper DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (shlwapi.dll) + + shlwapi.dll + C:\Windows\System32\shlwapi.dll + 140719945547776 + 335872 + 140719945588304 + File: C:\Windows\System32\shlwapi.dll_x000D__x000A_InternalName: SHLWAPI_x000D__x000A_OriginalFilename: SHLWAPI.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Shell Light-weight Utility Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 328 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Shell Light-weight Utility Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (kernel.appcore.dll) + + kernel.appcore.dll + C:\Windows\System32\kernel.appcore.dll + 140719888400384 + 69632 + 140719888415648 + File: C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName: kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AppModel API Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 68 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AppModel API Host + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cryptsp.dll) + + cryptsp.dll + C:\Windows\System32\cryptsp.dll + 140719889121280 + 94208 + 140719889138512 + File: C:\Windows\System32\cryptsp.dll_x000D__x000A_InternalName: cryptsp.dll_x000D__x000A_OriginalFilename: cryptsp.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Cryptographic Service Provider API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 92 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Cryptographic Service Provider API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_watcher.dll) + + chrome_watcher.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_watcher.dll + 140719307489280 + 950272 + 140719308049024 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_watcher.dll_x000D__x000A_InternalName: chrome_watcher_dll_x000D__x000A_OriginalFilename: chrome_watcher.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 928 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (ole32.dll) + + ole32.dll + C:\Windows\System32\ole32.dll + 140719907864576 + 1396736 + 140719908019504 + File: C:\Windows\System32\ole32.dll_x000D__x000A_InternalName: OLE32.DLL_x000D__x000A_OriginalFilename: OLE32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft OLE for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1364 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft OLE for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMM.dll) + + WINMM.dll + C:\Windows\SYSTEM32\WINMM.dll + 140719835054080 + 147456 + 140719835066368 + File: C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName: winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MCI API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MCI API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMMBASE.dll) + + WINMMBASE.dll + C:\Windows\SYSTEM32\WINMMBASE.dll + 140719834857472 + 184320 + 140719834890448 + File: C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName: winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base Multimedia Extension API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 180 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base Multimedia Extension API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + + CRYPTBASE.DLL + C:\Windows\SYSTEM32\CRYPTBASE.DLL + 140719881846784 + 49152 + 140719881855488 + File: C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName: cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base cryptographic API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base cryptographic API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (uxtheme.dll) + + uxtheme.dll + C:\Windows\system32\uxtheme.dll + 140719860547584 + 638976 + 140719860712368 + File: C:\Windows\system32\uxtheme.dll_x000D__x000A_InternalName: UxTheme.dll_x000D__x000A_OriginalFilename: UxTheme.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft UxTheme Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 624 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft UxTheme Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dwmapi.dll) + + dwmapi.dll + C:\Windows\system32\dwmapi.dll + 140719861399552 + 188416 + 140719861412880 + File: C:\Windows\system32\dwmapi.dll_x000D__x000A_InternalName: dwmapi.dll_x000D__x000A_OriginalFilename: dwmapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Desktop Window Manager API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft Desktop Window Manager API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPT32.dll) + + CRYPT32.dll + C:\Windows\System32\CRYPT32.dll + 140719891480576 + 1945600 + 140719891804832 + File: C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName: CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Crypto API32_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1900 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Crypto API32 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSASN1.dll) + + MSASN1.dll + C:\Windows\System32\MSASN1.dll + 140719887876096 + 73728 + 140719887898576 + File: C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName: msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: ASN.1 Runtime APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 72 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + ASN.1 Runtime APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSCTF.dll) + + MSCTF.dll + C:\Windows\System32\MSCTF.dll + 140719947317248 + 1486848 + 140719947597184 + File: C:\Windows\System32\MSCTF.dll_x000D__x000A_InternalName: MSCTF_x000D__x000A_OriginalFilename: MSCTF.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MSCTF Server DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1452 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MSCTF Server DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (OLEAUT32.dll) + + OLEAUT32.dll + C:\Windows\System32\OLEAUT32.dll + 140719946465280 + 802816 + 140719946574624 + File: C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName: OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OLEAUT32.DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 784 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + OLEAUT32.DLL + Microsoft® Windows® Operating System + + + + + 39 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 11080 + 11080 + 2084864 + 2084864 + 185848 + 185848 + 2134016 + 2134016 + 9211904 + 9211904 + 2203457196032 + 138973184 + true + + + Normal + 32 + + 2084864 + 2084864 + chrome + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 1004 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.03125S +
2019-08-24T14:18:00.496725+03:00
+ PT0.03125S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 18292 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:00.5228201+03:00
+ PT0S + PT0S + + + + + + + 2 + + + + + + + + false + + + 139 + 2203455098880 + 136876032 + false + 6107136 + 6107136 + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + PT0.03125S + PT0.03125S + PT0S + + + 0 + + + true + + + + + chrome + 1 + 139 + 2203455098880 + 6107136 + 2084864 + 11080 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + + + System.Diagnostics.Process (chrome) + + Microsoft.Win32.SafeHandles.SafeProcessHandle + 5692 + 8 + false +
2019-08-24T14:18:00.3253674+03:00
+ 23804 + . + 1413120 + 204800 + + + + System.Diagnostics.ProcessModule (chrome.exe) + System.Diagnostics.ProcessModule (ntdll.dll) + System.Diagnostics.ProcessModule (KERNEL32.DLL) + System.Diagnostics.ProcessModule (KERNELBASE.dll) + System.Diagnostics.ProcessModule (chrome_elf.dll) + System.Diagnostics.ProcessModule (VERSION.dll) + System.Diagnostics.ProcessModule (msvcrt.dll) + System.Diagnostics.ProcessModule (ADVAPI32.dll) + System.Diagnostics.ProcessModule (sechost.dll) + System.Diagnostics.ProcessModule (RPCRT4.dll) + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + System.Diagnostics.ProcessModule (user32.dll) + System.Diagnostics.ProcessModule (win32u.dll) + System.Diagnostics.ProcessModule (GDI32.dll) + System.Diagnostics.ProcessModule (gdi32full.dll) + System.Diagnostics.ProcessModule (msvcp_win.dll) + System.Diagnostics.ProcessModule (ucrtbase.dll) + System.Diagnostics.ProcessModule (IMM32.DLL) + System.Diagnostics.ProcessModule (SHELL32.dll) + System.Diagnostics.ProcessModule (cfgmgr32.dll) + System.Diagnostics.ProcessModule (shcore.dll) + System.Diagnostics.ProcessModule (combase.dll) + System.Diagnostics.ProcessModule (windows.storage.dll) + System.Diagnostics.ProcessModule (profapi.dll) + System.Diagnostics.ProcessModule (powrprof.dll) + System.Diagnostics.ProcessModule (shlwapi.dll) + System.Diagnostics.ProcessModule (kernel.appcore.dll) + System.Diagnostics.ProcessModule (cryptsp.dll) + System.Diagnostics.ProcessModule (chrome.dll) + System.Diagnostics.ProcessModule (uxtheme.dll) + System.Diagnostics.ProcessModule (dwmapi.dll) + System.Diagnostics.ProcessModule (CRYPT32.dll) + System.Diagnostics.ProcessModule (MSASN1.dll) + System.Diagnostics.ProcessModule (USERENV.dll) + System.Diagnostics.ProcessModule (gpapi.dll) + System.Diagnostics.ProcessModule (wkscli.dll) + System.Diagnostics.ProcessModule (bcrypt.dll) + System.Diagnostics.ProcessModule (netutils.dll) + System.Diagnostics.ProcessModule (ole32.dll) + System.Diagnostics.ProcessModule (MSCTF.dll) + System.Diagnostics.ProcessModule (OLEAUT32.dll) + System.Diagnostics.ProcessModule (Secur32.dll) + System.Diagnostics.ProcessModule (SSPICLI.DLL) + System.Diagnostics.ProcessModule (DWrite.dll) + System.Diagnostics.ProcessModule (WS2_32.dll) + System.Diagnostics.ProcessModule (COMCTL32.dll) + System.Diagnostics.ProcessModule (clbcatq.dll) + System.Diagnostics.ProcessModule (twinapi.appcore.dll) + System.Diagnostics.ProcessModule (RMCLIENT.dll) + System.Diagnostics.ProcessModule (twinapi.dll) + System.Diagnostics.ProcessModule (NLAapi.dll) + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + System.Diagnostics.ProcessModule (NSI.dll) + System.Diagnostics.ProcessModule (dhcpcsvc6.DLL) + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + System.Diagnostics.ProcessModule (DNSAPI.dll) + System.Diagnostics.ProcessModule (mscms.dll) + System.Diagnostics.ProcessModule (ColorAdapterClient.dll) + System.Diagnostics.ProcessModule (icm32.dll) + System.Diagnostics.ProcessModule (Windows.UI.dll) + System.Diagnostics.ProcessModule (TextInputFramework.dll) + System.Diagnostics.ProcessModule (InputHost.dll) + System.Diagnostics.ProcessModule (CoreUIComponents.dll) + System.Diagnostics.ProcessModule (CoreMessaging.dll) + System.Diagnostics.ProcessModule (d2d1.dll) + System.Diagnostics.ProcessModule (d3d11.dll) + System.Diagnostics.ProcessModule (PROPSYS.dll) + System.Diagnostics.ProcessModule (wintypes.dll) + System.Diagnostics.ProcessModule (ntmarta.dll) + System.Diagnostics.ProcessModule (dxgi.dll) + System.Diagnostics.ProcessModule (WTSAPI32.dll) + System.Diagnostics.ProcessModule (wlanapi.dll) + System.Diagnostics.ProcessModule (WINSTA.dll) + System.Diagnostics.ProcessModule (wbemprox.dll) + System.Diagnostics.ProcessModule (wbemcomn.dll) + System.Diagnostics.ProcessModule (MMDevApi.dll) + System.Diagnostics.ProcessModule (DEVOBJ.dll) + System.Diagnostics.ProcessModule (wbemsvc.dll) + System.Diagnostics.ProcessModule (WINHTTP.dll) + System.Diagnostics.ProcessModule (fastprox.dll) + System.Diagnostics.ProcessModule (wmiutils.dll) + System.Diagnostics.ProcessModule (DPAPI.dll) + System.Diagnostics.ProcessModule (FirewallAPI.dll) + System.Diagnostics.ProcessModule (fwbase.dll) + System.Diagnostics.ProcessModule (LINKINFO.dll) + System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll) + System.Diagnostics.ProcessModule (dataexchange.dll) + System.Diagnostics.ProcessModule (dcomp.dll) + System.Diagnostics.ProcessModule (atlthunk.dll) + System.Diagnostics.ProcessModule (OLEACC.dll) + System.Diagnostics.ProcessModule (directmanipulation.dll) + System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll) + System.Diagnostics.ProcessModule (explorerframe.dll) + System.Diagnostics.ProcessModule (wpnapps.dll) + System.Diagnostics.ProcessModule (XmlLite.dll) + System.Diagnostics.ProcessModule (usermgrcli.dll) + System.Diagnostics.ProcessModule (mswsock.dll) + System.Diagnostics.ProcessModule (WINMM.dll) + System.Diagnostics.ProcessModule (WINMMBASE.dll) + System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll) + System.Diagnostics.ProcessModule (WmiPerfInst.dll) + System.Diagnostics.ProcessModule (pdh.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll) + System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll) + System.Diagnostics.ProcessModule (Windows.Networking.dll) + System.Diagnostics.ProcessModule (BiWinrt.dll) + System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll) + System.Diagnostics.ProcessModule (NETAPI32.dll) + System.Diagnostics.ProcessModule (SAMCLI.DLL) + System.Diagnostics.ProcessModule (SAMLIB.dll) + System.Diagnostics.ProcessModule (wdmaud.drv) + System.Diagnostics.ProcessModule (ksuser.dll) + System.Diagnostics.ProcessModule (AVRT.dll) + System.Diagnostics.ProcessModule (AUDIOSES.DLL) + System.Diagnostics.ProcessModule (msacm32.drv) + System.Diagnostics.ProcessModule (MSACM32.dll) + System.Diagnostics.ProcessModule (midimap.dll) + System.Diagnostics.ProcessModule (resourcepolicyclient.dll) + System.Diagnostics.ProcessModule (BitsProxy.dll) + + + 61568 + 61568 + 316080128 + 316080128 + 857648 + 857648 + 455720960 + 455720960 + 398323712 + 398323712 + 2204288917504 + 970694656 + true + Normal + 316080128 + 316080128 + chrome + 65535 + 1 + + + + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + + + 1747 + 2204143845376 + 825622528 + false + 112414720 + 112414720 + + System.Diagnostics.ProcessModule (chrome.exe) + PT11M7.53125S + PT21M46.28125S + PT10M38.75S + 1770664 + The Living Tombstone Radio - Now Playing on Pandora - Google Chrome + true + + + + + chrome + 1 + 1747 + 2204143845376 + 112414720 + 316080128 + 61568 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + System.Diagnostics.Process (explorer) + Google LLC + 1306.28125 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + Google LLC + 0.03125 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + + + System.Diagnostics.Process (chrome) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 1876 + + 8 + false +
2019-08-24T14:18:44.9573029+03:00
+ 19776 + . + + + 1413120 + + + + 204800 + + + + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNEL32.DLL) + + KERNEL32.DLL + C:\Windows\System32\KERNEL32.DLL + 140719912779776 + 733184 + 140719912876560 + File: C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName: kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 716 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNELBASE.dll) + + KERNELBASE.dll + C:\Windows\System32\KERNELBASE.dll + 140719894495232 + 2699264 + 140719894841456 + File: C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName: Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2636 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_elf.dll) + + chrome_elf.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll + 140719325642752 + 925696 + 140719326148464 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName: chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 904 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (VERSION.dll) + + VERSION.dll + C:\Windows\SYSTEM32\VERSION.dll + 140719800254464 + 40960 + 140719800259344 + File: C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName: version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Version Checking and File Installation Libraries_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 40 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Version Checking and File Installation Libraries + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcrt.dll) + + msvcrt.dll + C:\Windows\System32\msvcrt.dll + 140719950004224 + 647168 + 140719950035120 + File: C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName: msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion: 7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT CRT DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 7.0.17763.475_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 7.0.17763.475 (WinBuild.160101.0800) + 7.0.17763.475 + Windows NT CRT DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + + bcryptPrimitives.dll + C:\Windows\System32\bcryptPrimitives.dll + 140719890235392 + 516096 + 140719890461152 + File: C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName: bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 504 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ADVAPI32.dll) + + ADVAPI32.dll + C:\Windows\System32\ADVAPI32.dll + 140719915335680 + 667648 + 140719915417840 + File: C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName: advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Advanced Windows 32 Base API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 652 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Advanced Windows 32 Base API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (sechost.dll) + + sechost.dll + C:\Windows\System32\sechost.dll + 140719948824576 + 647168 + 140719948951504 + File: C:\Windows\System32\sechost.dll_x000D__x000A_InternalName: sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Host for SCM/SDDL/LSA Lookup APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RPCRT4.dll) + + RPCRT4.dll + C:\Windows\System32\RPCRT4.dll + 140719917629440 + 1187840 + 140719918006928 + File: C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName: rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Procedure Call Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Procedure Call Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_child.dll) + + chrome_child.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll + 140717177962496 + 87977984 + 140717247440176 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName: chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 85916 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (OLEAUT32.dll) + + OLEAUT32.dll + C:\Windows\System32\OLEAUT32.dll + 140719946465280 + 802816 + 140719946574624 + File: C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName: OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OLEAUT32.DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 784 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + OLEAUT32.DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcp_win.dll) + + msvcp_win.dll + C:\Windows\System32\msvcp_win.dll + 140719889580032 + 655360 + 140719889658864 + File: C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName: msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 640 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ucrtbase.dll) + + ucrtbase.dll + C:\Windows\System32\ucrtbase.dll + 140719893446656 + 1024000 + 140719893528400 + File: C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName: ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1000 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (combase.dll) + + combase.dll + C:\Windows\System32\combase.dll + 140719950856192 + 3325952 + 140719951769888 + File: C:\Windows\System32\combase.dll_x000D__x000A_InternalName: COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft COM for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3248 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft COM for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WS2_32.dll) + + WS2_32.dll + C:\Windows\System32\WS2_32.dll + 140719954198528 + 446464 + 140719954286384 + File: C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName: ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 436 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Socket 2.0 32-Bit DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (GDI32.dll) + + GDI32.dll + C:\Windows\System32\GDI32.dll + 140719950659584 + 167936 + 140719950676208 + File: C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32full.dll) + + gdi32full.dll + C:\Windows\System32\gdi32full.dll + 140719905112064 + 1675264 + 140719905369792 + File: C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1636 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USER32.dll) + + USER32.dll + C:\Windows\System32\USER32.dll + 140719909306368 + 1667072 + 140719909414448 + File: C:\Windows\System32\USER32.dll_x000D__x000A_InternalName: user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows USER API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows USER API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (win32u.dll) + + win32u.dll + C:\Windows\System32\win32u.dll + 140719906816000 + 131072 + 0 + File: C:\Windows\System32\win32u.dll_x000D__x000A_InternalName: Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32u_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 128 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32u + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINTRUST.dll) + + WINTRUST.dll + C:\Windows\System32\WINTRUST.dll + 140719888728064 + 364544 + 140719888791376 + File: C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName: WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Trust Verification APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 356 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft Trust Verification APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSASN1.dll) + + MSASN1.dll + C:\Windows\System32\MSASN1.dll + 140719887876096 + 73728 + 140719887898576 + File: C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName: msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: ASN.1 Runtime APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 72 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + ASN.1 Runtime APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPT32.dll) + + CRYPT32.dll + C:\Windows\System32\CRYPT32.dll + 140719891480576 + 1945600 + 140719891804832 + File: C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName: CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Crypto API32_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1900 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Crypto API32 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + + IPHLPAPI.DLL + C:\Windows\SYSTEM32\IPHLPAPI.DLL + 140719876931584 + 249856 + 140719876989024 + File: C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName: iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: IP Helper API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 244 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + IP Helper API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMM.dll) + + WINMM.dll + C:\Windows\SYSTEM32\WINMM.dll + 140719835054080 + 147456 + 140719835066368 + File: C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName: winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MCI API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MCI API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USERENV.dll) + + USERENV.dll + C:\Windows\SYSTEM32\USERENV.dll + 140719887024128 + 163840 + 140719887043280 + File: C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName: userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Userenv_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Userenv + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (profapi.dll) + + profapi.dll + C:\Windows\System32\profapi.dll + 140719888531456 + 147456 + 140719888564400 + File: C:\Windows\System32\profapi.dll_x000D__x000A_InternalName: PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: User Profile Basic API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + User Profile Basic API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (DWrite.dll) + + DWrite.dll + C:\Windows\SYSTEM32\DWrite.dll + 140719303819264 + 3129344 + 140719304509728 + File: C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName: DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft DirectX Typography Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3056 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft DirectX Typography Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINSPOOL.DRV) + + WINSPOOL.DRV + C:\Windows\SYSTEM32\WINSPOOL.DRV + 140719787606016 + 561152 + 140719787676448 + File: C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName: winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Spooler Driver_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 548 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Spooler Driver + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (kernel.appcore.dll) + + kernel.appcore.dll + C:\Windows\System32\kernel.appcore.dll + 140719888400384 + 69632 + 140719888415648 + File: C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName: kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AppModel API Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 68 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AppModel API Host + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcrypt.dll) + + bcrypt.dll + C:\Windows\System32\bcrypt.dll + 140719897247744 + 155648 + 140719897281296 + File: C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName: bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 152 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dbghelp.dll) + + dbghelp.dll + C:\Windows\SYSTEM32\dbghelp.dll + 140719552397312 + 2019328 + 140719552479168 + File: C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName: DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Image Helper_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Image Helper + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINHTTP.dll) + + WINHTTP.dll + C:\Windows\SYSTEM32\WINHTTP.dll + 140719810019328 + 991232 + 140719810293024 + File: C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName: winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows HTTP Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 968 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows HTTP Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (Secur32.dll) + + Secur32.dll + C:\Windows\SYSTEM32\Secur32.dll + 140719559147520 + 49152 + 140719559156816 + File: C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName: secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + + dhcpcsvc.DLL + C:\Windows\SYSTEM32\dhcpcsvc.DLL + 140719782494208 + 114688 + 140719782503840 + File: C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName: dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: DHCP Client Service_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 112 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + DHCP Client Service + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (NSI.dll) + + NSI.dll + C:\Windows\System32\NSI.dll + 140719916843008 + 32768 + 140719916851008 + File: C:\Windows\System32\NSI.dll_x000D__x000A_InternalName: nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NSI User-mode interface DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 32 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NSI User-mode interface DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMMBASE.dll) + + WINMMBASE.dll + C:\Windows\SYSTEM32\WINMMBASE.dll + 140719834857472 + 184320 + 140719834890448 + File: C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName: winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base Multimedia Extension API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 180 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base Multimedia Extension API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cfgmgr32.dll) + + cfgmgr32.dll + C:\Windows\System32\cfgmgr32.dll + 140719889252352 + 303104 + 140719889325904 + File: C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName: cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Configuration Manager DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 296 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Configuration Manager DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (PROPSYS.dll) + + PROPSYS.dll + C:\Windows\SYSTEM32\PROPSYS.dll + 140719831187456 + 1736704 + 140719831447408 + File: C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName: propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion: 7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Property System_x000D__x000A_Product: Windows® Search_x000D__x000A_ProductVersion: 7.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1696 + Microsoft Corporation + 7.0.17763.1 (WinBuild.160101.0800) + 7.0.17763.1 + Microsoft Property System + Windows® Search + + + + + System.Diagnostics.ProcessModule (shcore.dll) + + shcore.dll + C:\Windows\System32\shcore.dll + 140719907143680 + 688128 + 140719907388560 + File: C:\Windows\System32\shcore.dll_x000D__x000A_InternalName: SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: SHCORE_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 672 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + SHCORE + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SSPICLI.DLL) + + SSPICLI.DLL + C:\Windows\SYSTEM32\SSPICLI.DLL + 140719886827520 + 192512 + 140719886881776 + File: C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName: sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 188 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IMM32.DLL) + + IMM32.DLL + C:\Windows\System32\IMM32.DLL + 140719906947072 + 188416 + 140719906952688 + File: C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName: imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows IMM32 API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + + CRYPTBASE.DLL + C:\Windows\SYSTEM32\CRYPTBASE.DLL + 140719881846784 + 49152 + 140719881855488 + File: C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName: cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base cryptographic API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base cryptographic API DLL + Microsoft® Windows® Operating System + + + + + 44 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 19576 + 19576 + 19427328 + 19427328 + 332072 + 332072 + 19427328 + 19427328 + 25186304 + 25186304 + 2203727597568 + 409374720 + true + + + Normal + 32 + + 19427328 + 19427328 + chrome + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 15116 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.03125S +
2019-08-24T14:18:44.9573044+03:00
+ PT0.15625S + PT0.125S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 24396 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:45.0066902+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 6 + 6 + 19684 + true + Lowest + 140719955419728 + Wait + UserRequest + PT0.046875S +
2019-08-24T14:18:45.007819+03:00
+ PT0.046875S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 11524 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0.03125S +
2019-08-24T14:18:45.0085315+03:00
+ PT0.09375S + PT0.0625S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 24000 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-24T14:18:45.009294+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 7032 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:45.0102892+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 11756 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.015625S +
2019-08-24T14:18:45.016436+03:00
+ PT0.015625S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 4864 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:45.0176657+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 2340 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:45.0181709+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 22976 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:45.0186556+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 14836 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:45.0189918+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 6 + 6 + 13628 + true + Lowest + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:45.0193882+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 6312 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.03125S +
2019-08-24T14:18:53.1281298+03:00
+ PT0.03125S + PT0S + + + + + + + 13 + + + + + + + + + + + + + + + + + + + false + + + 340 + 2203714748416 + 396525568 + false + 17444864 + 17444864 + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + PT0.25S + PT0.4375S + PT0.1875S + + + 0 + + + true + + + + + chrome + 1 + 340 + 2203714748416 + 17444864 + 19427328 + 19576 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + + + System.Diagnostics.Process (chrome) + + Microsoft.Win32.SafeHandles.SafeProcessHandle + 3424 + 8 + false +
2019-08-24T14:18:00.3253674+03:00
+ 23804 + . + 1413120 + 204800 + + + + System.Diagnostics.ProcessModule (chrome.exe) + System.Diagnostics.ProcessModule (ntdll.dll) + System.Diagnostics.ProcessModule (KERNEL32.DLL) + System.Diagnostics.ProcessModule (KERNELBASE.dll) + System.Diagnostics.ProcessModule (chrome_elf.dll) + System.Diagnostics.ProcessModule (VERSION.dll) + System.Diagnostics.ProcessModule (msvcrt.dll) + System.Diagnostics.ProcessModule (ADVAPI32.dll) + System.Diagnostics.ProcessModule (sechost.dll) + System.Diagnostics.ProcessModule (RPCRT4.dll) + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + System.Diagnostics.ProcessModule (user32.dll) + System.Diagnostics.ProcessModule (win32u.dll) + System.Diagnostics.ProcessModule (GDI32.dll) + System.Diagnostics.ProcessModule (gdi32full.dll) + System.Diagnostics.ProcessModule (msvcp_win.dll) + System.Diagnostics.ProcessModule (ucrtbase.dll) + System.Diagnostics.ProcessModule (IMM32.DLL) + System.Diagnostics.ProcessModule (SHELL32.dll) + System.Diagnostics.ProcessModule (cfgmgr32.dll) + System.Diagnostics.ProcessModule (shcore.dll) + System.Diagnostics.ProcessModule (combase.dll) + System.Diagnostics.ProcessModule (windows.storage.dll) + System.Diagnostics.ProcessModule (profapi.dll) + System.Diagnostics.ProcessModule (powrprof.dll) + System.Diagnostics.ProcessModule (shlwapi.dll) + System.Diagnostics.ProcessModule (kernel.appcore.dll) + System.Diagnostics.ProcessModule (cryptsp.dll) + System.Diagnostics.ProcessModule (chrome.dll) + System.Diagnostics.ProcessModule (uxtheme.dll) + System.Diagnostics.ProcessModule (dwmapi.dll) + System.Diagnostics.ProcessModule (CRYPT32.dll) + System.Diagnostics.ProcessModule (MSASN1.dll) + System.Diagnostics.ProcessModule (USERENV.dll) + System.Diagnostics.ProcessModule (gpapi.dll) + System.Diagnostics.ProcessModule (wkscli.dll) + System.Diagnostics.ProcessModule (bcrypt.dll) + System.Diagnostics.ProcessModule (netutils.dll) + System.Diagnostics.ProcessModule (ole32.dll) + System.Diagnostics.ProcessModule (MSCTF.dll) + System.Diagnostics.ProcessModule (OLEAUT32.dll) + System.Diagnostics.ProcessModule (Secur32.dll) + System.Diagnostics.ProcessModule (SSPICLI.DLL) + System.Diagnostics.ProcessModule (DWrite.dll) + System.Diagnostics.ProcessModule (WS2_32.dll) + System.Diagnostics.ProcessModule (COMCTL32.dll) + System.Diagnostics.ProcessModule (clbcatq.dll) + System.Diagnostics.ProcessModule (twinapi.appcore.dll) + System.Diagnostics.ProcessModule (RMCLIENT.dll) + System.Diagnostics.ProcessModule (twinapi.dll) + System.Diagnostics.ProcessModule (NLAapi.dll) + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + System.Diagnostics.ProcessModule (NSI.dll) + System.Diagnostics.ProcessModule (dhcpcsvc6.DLL) + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + System.Diagnostics.ProcessModule (DNSAPI.dll) + System.Diagnostics.ProcessModule (mscms.dll) + System.Diagnostics.ProcessModule (ColorAdapterClient.dll) + System.Diagnostics.ProcessModule (icm32.dll) + System.Diagnostics.ProcessModule (Windows.UI.dll) + System.Diagnostics.ProcessModule (TextInputFramework.dll) + System.Diagnostics.ProcessModule (InputHost.dll) + System.Diagnostics.ProcessModule (CoreUIComponents.dll) + System.Diagnostics.ProcessModule (CoreMessaging.dll) + System.Diagnostics.ProcessModule (d2d1.dll) + System.Diagnostics.ProcessModule (d3d11.dll) + System.Diagnostics.ProcessModule (PROPSYS.dll) + System.Diagnostics.ProcessModule (wintypes.dll) + System.Diagnostics.ProcessModule (ntmarta.dll) + System.Diagnostics.ProcessModule (dxgi.dll) + System.Diagnostics.ProcessModule (WTSAPI32.dll) + System.Diagnostics.ProcessModule (wlanapi.dll) + System.Diagnostics.ProcessModule (WINSTA.dll) + System.Diagnostics.ProcessModule (wbemprox.dll) + System.Diagnostics.ProcessModule (wbemcomn.dll) + System.Diagnostics.ProcessModule (MMDevApi.dll) + System.Diagnostics.ProcessModule (DEVOBJ.dll) + System.Diagnostics.ProcessModule (wbemsvc.dll) + System.Diagnostics.ProcessModule (WINHTTP.dll) + System.Diagnostics.ProcessModule (fastprox.dll) + System.Diagnostics.ProcessModule (wmiutils.dll) + System.Diagnostics.ProcessModule (DPAPI.dll) + System.Diagnostics.ProcessModule (FirewallAPI.dll) + System.Diagnostics.ProcessModule (fwbase.dll) + System.Diagnostics.ProcessModule (LINKINFO.dll) + System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll) + System.Diagnostics.ProcessModule (dataexchange.dll) + System.Diagnostics.ProcessModule (dcomp.dll) + System.Diagnostics.ProcessModule (atlthunk.dll) + System.Diagnostics.ProcessModule (OLEACC.dll) + System.Diagnostics.ProcessModule (directmanipulation.dll) + System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll) + System.Diagnostics.ProcessModule (explorerframe.dll) + System.Diagnostics.ProcessModule (wpnapps.dll) + System.Diagnostics.ProcessModule (XmlLite.dll) + System.Diagnostics.ProcessModule (usermgrcli.dll) + System.Diagnostics.ProcessModule (mswsock.dll) + System.Diagnostics.ProcessModule (WINMM.dll) + System.Diagnostics.ProcessModule (WINMMBASE.dll) + System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll) + System.Diagnostics.ProcessModule (WmiPerfInst.dll) + System.Diagnostics.ProcessModule (pdh.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll) + System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll) + System.Diagnostics.ProcessModule (Windows.Networking.dll) + System.Diagnostics.ProcessModule (BiWinrt.dll) + System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll) + System.Diagnostics.ProcessModule (NETAPI32.dll) + System.Diagnostics.ProcessModule (SAMCLI.DLL) + System.Diagnostics.ProcessModule (SAMLIB.dll) + System.Diagnostics.ProcessModule (wdmaud.drv) + System.Diagnostics.ProcessModule (ksuser.dll) + System.Diagnostics.ProcessModule (AVRT.dll) + System.Diagnostics.ProcessModule (AUDIOSES.DLL) + System.Diagnostics.ProcessModule (msacm32.drv) + System.Diagnostics.ProcessModule (MSACM32.dll) + System.Diagnostics.ProcessModule (midimap.dll) + System.Diagnostics.ProcessModule (resourcepolicyclient.dll) + System.Diagnostics.ProcessModule (BitsProxy.dll) + + + 61568 + 61568 + 316080128 + 316080128 + 857648 + 857648 + 455720960 + 455720960 + 398323712 + 398323712 + 2204288917504 + 970694656 + true + Normal + 316080128 + 316080128 + chrome + 65535 + 1 + + + + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + + + 1747 + 2204143845376 + 825622528 + false + 112414720 + 112414720 + + System.Diagnostics.ProcessModule (chrome.exe) + PT11M7.53125S + PT21M46.28125S + PT10M38.75S + 1770664 + The Living Tombstone Radio - Now Playing on Pandora - Google Chrome + true + + + + + chrome + 1 + 1747 + 2204143845376 + 112414720 + 316080128 + 61568 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + System.Diagnostics.Process (explorer) + Google LLC + 1306.28125 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + Google LLC + 0.4375 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + + + System.Diagnostics.Process (chrome) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 6896 + + 8 + false +
2019-08-24T14:18:00.6190822+03:00
+ 20652 + . + + + 1413120 + + + + 204800 + + + + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNEL32.DLL) + + KERNEL32.DLL + C:\Windows\System32\KERNEL32.DLL + 140719912779776 + 733184 + 140719912876560 + File: C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName: kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 716 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNELBASE.dll) + + KERNELBASE.dll + C:\Windows\System32\KERNELBASE.dll + 140719894495232 + 2699264 + 140719894841456 + File: C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName: Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2636 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_elf.dll) + + chrome_elf.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll + 140719325642752 + 925696 + 140719326148464 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName: chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 904 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (VERSION.dll) + + VERSION.dll + C:\Windows\SYSTEM32\VERSION.dll + 140719800254464 + 40960 + 140719800259344 + File: C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName: version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Version Checking and File Installation Libraries_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 40 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Version Checking and File Installation Libraries + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcrt.dll) + + msvcrt.dll + C:\Windows\System32\msvcrt.dll + 140719950004224 + 647168 + 140719950035120 + File: C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName: msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion: 7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT CRT DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 7.0.17763.475_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 7.0.17763.475 (WinBuild.160101.0800) + 7.0.17763.475 + Windows NT CRT DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + + bcryptPrimitives.dll + C:\Windows\System32\bcryptPrimitives.dll + 140719890235392 + 516096 + 140719890461152 + File: C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName: bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 504 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ADVAPI32.dll) + + ADVAPI32.dll + C:\Windows\System32\ADVAPI32.dll + 140719915335680 + 667648 + 140719915417840 + File: C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName: advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Advanced Windows 32 Base API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 652 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Advanced Windows 32 Base API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (sechost.dll) + + sechost.dll + C:\Windows\System32\sechost.dll + 140719948824576 + 647168 + 140719948951504 + File: C:\Windows\System32\sechost.dll_x000D__x000A_InternalName: sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Host for SCM/SDDL/LSA Lookup APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RPCRT4.dll) + + RPCRT4.dll + C:\Windows\System32\RPCRT4.dll + 140719917629440 + 1187840 + 140719918006928 + File: C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName: rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Procedure Call Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Procedure Call Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (user32.dll) + + user32.dll + C:\Windows\System32\user32.dll + 140719909306368 + 1667072 + 140719909414448 + File: C:\Windows\System32\user32.dll_x000D__x000A_InternalName: user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows USER API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows USER API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (win32u.dll) + + win32u.dll + C:\Windows\System32\win32u.dll + 140719906816000 + 131072 + 0 + File: C:\Windows\System32\win32u.dll_x000D__x000A_InternalName: Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32u_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 128 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32u + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (GDI32.dll) + + GDI32.dll + C:\Windows\System32\GDI32.dll + 140719950659584 + 167936 + 140719950676208 + File: C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32full.dll) + + gdi32full.dll + C:\Windows\System32\gdi32full.dll + 140719905112064 + 1675264 + 140719905369792 + File: C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1636 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcp_win.dll) + + msvcp_win.dll + C:\Windows\System32\msvcp_win.dll + 140719889580032 + 655360 + 140719889658864 + File: C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName: msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 640 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ucrtbase.dll) + + ucrtbase.dll + C:\Windows\System32\ucrtbase.dll + 140719893446656 + 1024000 + 140719893528400 + File: C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName: ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1000 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IMM32.DLL) + + IMM32.DLL + C:\Windows\System32\IMM32.DLL + 140719906947072 + 188416 + 140719906952688 + File: C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName: imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows IMM32 API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_child.dll) + + chrome_child.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll + 140717177962496 + 87977984 + 140717247440176 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName: chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 85916 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (OLEAUT32.dll) + + OLEAUT32.dll + C:\Windows\System32\OLEAUT32.dll + 140719946465280 + 802816 + 140719946574624 + File: C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName: OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OLEAUT32.DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 784 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + OLEAUT32.DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (combase.dll) + + combase.dll + C:\Windows\System32\combase.dll + 140719950856192 + 3325952 + 140719951769888 + File: C:\Windows\System32\combase.dll_x000D__x000A_InternalName: COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft COM for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3248 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft COM for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WS2_32.dll) + + WS2_32.dll + C:\Windows\System32\WS2_32.dll + 140719954198528 + 446464 + 140719954286384 + File: C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName: ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 436 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Socket 2.0 32-Bit DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINTRUST.dll) + + WINTRUST.dll + C:\Windows\System32\WINTRUST.dll + 140719888728064 + 364544 + 140719888791376 + File: C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName: WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Trust Verification APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 356 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft Trust Verification APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSASN1.dll) + + MSASN1.dll + C:\Windows\System32\MSASN1.dll + 140719887876096 + 73728 + 140719887898576 + File: C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName: msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: ASN.1 Runtime APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 72 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + ASN.1 Runtime APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPT32.dll) + + CRYPT32.dll + C:\Windows\System32\CRYPT32.dll + 140719891480576 + 1945600 + 140719891804832 + File: C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName: CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Crypto API32_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1900 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Crypto API32 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + + IPHLPAPI.DLL + C:\Windows\SYSTEM32\IPHLPAPI.DLL + 140719876931584 + 249856 + 140719876989024 + File: C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName: iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: IP Helper API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 244 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + IP Helper API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMM.dll) + + WINMM.dll + C:\Windows\SYSTEM32\WINMM.dll + 140719835054080 + 147456 + 140719835066368 + File: C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName: winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MCI API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MCI API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USERENV.dll) + + USERENV.dll + C:\Windows\SYSTEM32\USERENV.dll + 140719887024128 + 163840 + 140719887043280 + File: C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName: userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Userenv_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Userenv + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (profapi.dll) + + profapi.dll + C:\Windows\System32\profapi.dll + 140719888531456 + 147456 + 140719888564400 + File: C:\Windows\System32\profapi.dll_x000D__x000A_InternalName: PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: User Profile Basic API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + User Profile Basic API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (DWrite.dll) + + DWrite.dll + C:\Windows\SYSTEM32\DWrite.dll + 140719303819264 + 3129344 + 140719304509728 + File: C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName: DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft DirectX Typography Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3056 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft DirectX Typography Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINSPOOL.DRV) + + WINSPOOL.DRV + C:\Windows\SYSTEM32\WINSPOOL.DRV + 140719787606016 + 561152 + 140719787676448 + File: C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName: winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Spooler Driver_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 548 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Spooler Driver + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (kernel.appcore.dll) + + kernel.appcore.dll + C:\Windows\System32\kernel.appcore.dll + 140719888400384 + 69632 + 140719888415648 + File: C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName: kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AppModel API Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 68 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AppModel API Host + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcrypt.dll) + + bcrypt.dll + C:\Windows\System32\bcrypt.dll + 140719897247744 + 155648 + 140719897281296 + File: C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName: bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 152 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dbghelp.dll) + + dbghelp.dll + C:\Windows\SYSTEM32\dbghelp.dll + 140719552397312 + 2019328 + 140719552479168 + File: C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName: DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Image Helper_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Image Helper + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINHTTP.dll) + + WINHTTP.dll + C:\Windows\SYSTEM32\WINHTTP.dll + 140719810019328 + 991232 + 140719810293024 + File: C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName: winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows HTTP Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 968 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows HTTP Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (Secur32.dll) + + Secur32.dll + C:\Windows\SYSTEM32\Secur32.dll + 140719559147520 + 49152 + 140719559156816 + File: C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName: secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + + dhcpcsvc.DLL + C:\Windows\SYSTEM32\dhcpcsvc.DLL + 140719782494208 + 114688 + 140719782503840 + File: C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName: dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: DHCP Client Service_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 112 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + DHCP Client Service + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (NSI.dll) + + NSI.dll + C:\Windows\System32\NSI.dll + 140719916843008 + 32768 + 140719916851008 + File: C:\Windows\System32\NSI.dll_x000D__x000A_InternalName: nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NSI User-mode interface DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 32 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NSI User-mode interface DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMMBASE.dll) + + WINMMBASE.dll + C:\Windows\SYSTEM32\WINMMBASE.dll + 140719834857472 + 184320 + 140719834890448 + File: C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName: winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base Multimedia Extension API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 180 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base Multimedia Extension API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cfgmgr32.dll) + + cfgmgr32.dll + C:\Windows\System32\cfgmgr32.dll + 140719889252352 + 303104 + 140719889325904 + File: C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName: cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Configuration Manager DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 296 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Configuration Manager DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (PROPSYS.dll) + + PROPSYS.dll + C:\Windows\SYSTEM32\PROPSYS.dll + 140719831187456 + 1736704 + 140719831447408 + File: C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName: propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion: 7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Property System_x000D__x000A_Product: Windows® Search_x000D__x000A_ProductVersion: 7.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1696 + Microsoft Corporation + 7.0.17763.1 (WinBuild.160101.0800) + 7.0.17763.1 + Microsoft Property System + Windows® Search + + + + + System.Diagnostics.ProcessModule (shcore.dll) + + shcore.dll + C:\Windows\System32\shcore.dll + 140719907143680 + 688128 + 140719907388560 + File: C:\Windows\System32\shcore.dll_x000D__x000A_InternalName: SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: SHCORE_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 672 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + SHCORE + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SSPICLI.DLL) + + SSPICLI.DLL + C:\Windows\SYSTEM32\SSPICLI.DLL + 140719886827520 + 192512 + 140719886881776 + File: C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName: sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 188 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ole32.dll) + + ole32.dll + C:\Windows\System32\ole32.dll + 140719907864576 + 1396736 + 140719908019504 + File: C:\Windows\System32\ole32.dll_x000D__x000A_InternalName: OLE32.DLL_x000D__x000A_OriginalFilename: OLE32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft OLE for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1364 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft OLE for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SETUPAPI.dll) + + SETUPAPI.dll + C:\Windows\System32\SETUPAPI.dll + 140719918874624 + 4677632 + 140719919015360 + File: C:\Windows\System32\SETUPAPI.dll_x000D__x000A_InternalName: SETUPAPI.DLL_x000D__x000A_OriginalFilename: SETUPAPI.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Setup API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 4568 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Setup API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (DEVOBJ.dll) + + DEVOBJ.dll + C:\Windows\SYSTEM32\DEVOBJ.dll + 140719885844480 + 167936 + 140719885874112 + File: C:\Windows\SYSTEM32\DEVOBJ.dll_x000D__x000A_InternalName: devinfoset.dll_x000D__x000A_OriginalFilename: devinfoset.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Device Information Set DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Device Information Set DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SHELL32.dll) + + SHELL32.dll + C:\Windows\System32\SHELL32.dll + 140719923593216 + 21954560 + 140719924695456 + File: C:\Windows\System32\SHELL32.dll_x000D__x000A_InternalName: SHELL32_x000D__x000A_OriginalFilename: SHELL32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Shell Common Dll_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 21440 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Shell Common Dll + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (windows.storage.dll) + + windows.storage.dll + C:\Windows\System32\windows.storage.dll + 140719897444352 + 7643136 + 140719899226624 + File: C:\Windows\System32\windows.storage.dll_x000D__x000A_InternalName: Windows.Storage_x000D__x000A_OriginalFilename: Windows.Storage.dll.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft WinRT Storage API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 7464 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft WinRT Storage API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (powrprof.dll) + + powrprof.dll + C:\Windows\System32\powrprof.dll + 140719888007168 + 380928 + 140719888020992 + File: C:\Windows\System32\powrprof.dll_x000D__x000A_InternalName: POWRPROF_x000D__x000A_OriginalFilename: POWRPROF.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Power Profile Helper DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 372 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Power Profile Helper DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (shlwapi.dll) + + shlwapi.dll + C:\Windows\System32\shlwapi.dll + 140719945547776 + 335872 + 140719945588304 + File: C:\Windows\System32\shlwapi.dll_x000D__x000A_InternalName: SHLWAPI_x000D__x000A_OriginalFilename: SHLWAPI.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Shell Light-weight Utility Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 328 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Shell Light-weight Utility Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cryptsp.dll) + + cryptsp.dll + C:\Windows\System32\cryptsp.dll + 140719889121280 + 94208 + 140719889138512 + File: C:\Windows\System32\cryptsp.dll_x000D__x000A_InternalName: cryptsp.dll_x000D__x000A_OriginalFilename: cryptsp.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Cryptographic Service Provider API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 92 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Cryptographic Service Provider API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (nvml.dll) + + nvml.dll + C:\Program Files\NVIDIA Corporation\NVSMI\nvml.dll + 140719101837312 + 3960832 + 140719102489260 + File: C:\Program Files\NVIDIA Corporation\NVSMI\nvml.dll_x000D__x000A_InternalName: _x000D__x000A_OriginalFilename: _x000D__x000A_FileVersion: 8.17.14.3160_x000D__x000A_FileDescription: NVIDIA Management Library 431.60_x000D__x000A_Product: NVIDIA Management Library 431.60_x000D__x000A_ProductVersion: 8.17.14.3160_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: True_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3868 + NVIDIA Corporation + 8.17.14.3160 + 8.17.14.3160 + NVIDIA Management Library 431.60 + NVIDIA Management Library 431.60 + + + + + System.Diagnostics.ProcessModule (PSAPI.DLL) + + PSAPI.DLL + C:\Windows\System32\PSAPI.DLL + 140719945940992 + 32768 + 140719945945216 + File: C:\Windows\System32\PSAPI.DLL_x000D__x000A_InternalName: PSAPI_x000D__x000A_OriginalFilename: PSAPI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Process Status Helper_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 32 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Process Status Helper + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + + CRYPTBASE.DLL + C:\Windows\SYSTEM32\CRYPTBASE.DLL + 140719881846784 + 49152 + 140719881855488 + File: C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName: cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base cryptographic API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base cryptographic API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (mf.dll) + + mf.dll + C:\Windows\SYSTEM32\mf.dll + 140719261155328 + 520192 + 140719261200272 + File: C:\Windows\SYSTEM32\mf.dll_x000D__x000A_InternalName: Media Foundation DLL_x000D__x000A_OriginalFilename: mf.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Media Foundation DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 508 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Media Foundation DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (mfplat.dll) + + mfplat.dll + C:\Windows\SYSTEM32\mfplat.dll + 140719258402816 + 2101248 + 140719258613664 + File: C:\Windows\SYSTEM32\mfplat.dll_x000D__x000A_InternalName: Media Foundation Platform DLL_x000D__x000A_OriginalFilename: mfplat.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Media Foundation Platform DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2052 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Media Foundation Platform DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RTWorkQ.DLL) + + RTWorkQ.DLL + C:\Windows\SYSTEM32\RTWorkQ.DLL + 140719257092096 + 192512 + 140719257137776 + File: C:\Windows\SYSTEM32\RTWorkQ.DLL_x000D__x000A_InternalName: Realtime WorkQueue DLL_x000D__x000A_OriginalFilename: RTWorkQ.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Realtime WorkQueue DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 188 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Realtime WorkQueue DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msmpeg2vdec.dll) + + msmpeg2vdec.dll + C:\Windows\SYSTEM32\msmpeg2vdec.dll + 140719099281408 + 2551808 + 140719099476384 + File: C:\Windows\SYSTEM32\msmpeg2vdec.dll_x000D__x000A_InternalName: MSMPEG2VDEC.dll_x000D__x000A_OriginalFilename: MSMPEG2VDEC.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft DTV-DVD Video Decoder_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2492 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Microsoft DTV-DVD Video Decoder + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (mfperfhelper.dll) + + mfperfhelper.dll + C:\Windows\SYSTEM32\mfperfhelper.dll + 140719779086336 + 1232896 + 140719780219008 + File: C:\Windows\SYSTEM32\mfperfhelper.dll_x000D__x000A_InternalName: MFPerf DLL_x000D__x000A_OriginalFilename: mfperfhelper.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MFPerf DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1204 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MFPerf DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dxva2.dll) + + dxva2.dll + C:\Windows\SYSTEM32\dxva2.dll + 140719255977984 + 139264 + 140719255986176 + File: C:\Windows\SYSTEM32\dxva2.dll_x000D__x000A_InternalName: DirectX Video Acceleration 2.0 DLL_x000D__x000A_OriginalFilename: dxva2.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: DirectX Video Acceleration 2.0 DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 136 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + DirectX Video Acceleration 2.0 DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvproc.dll) + + msvproc.dll + C:\Windows\SYSTEM32\msvproc.dll + 140719097774080 + 1462272 + 140719097865456 + File: C:\Windows\SYSTEM32\msvproc.dll_x000D__x000A_InternalName: Media Foundation Video Processor_x000D__x000A_OriginalFilename: msvproc.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Media Foundation Video Processor_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1428 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Media Foundation Video Processor + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CompPkgSup.DLL) + + CompPkgSup.DLL + C:\Windows\SYSTEM32\CompPkgSup.DLL + 140719692578816 + 126976 + 140719692650528 + File: C:\Windows\SYSTEM32\CompPkgSup.DLL_x000D__x000A_InternalName: Component Package Support DLL_x000D__x000A_OriginalFilename: CompPkgSup.dll_x000D__x000A_FileVersion: 10.0.17763.529 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Component Package Support DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.529_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 124 + Microsoft Corporation + 10.0.17763.529 (WinBuild.160101.0800) + 10.0.17763.529 + Component Package Support DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (D3DCompiler_47.dll) + + D3DCompiler_47.dll + C:\Windows\SYSTEM32\D3DCompiler_47.dll + 140719836102656 + 4530176 + 140719838620976 + File: C:\Windows\SYSTEM32\D3DCompiler_47.dll_x000D__x000A_InternalName: d3dcompiler_47.dll_x000D__x000A_OriginalFilename: d3dcompiler_47.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Direct3D HLSL Compiler_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 4424 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Direct3D HLSL Compiler + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (libglesv2.dll) + + libglesv2.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\libglesv2.dll + 140718604877824 + 13099008 + 140718609347568 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\libglesv2.dll_x000D__x000A_InternalName: libGLESv2_x000D__x000A_OriginalFilename: libGLESv2.dll_x000D__x000A_FileVersion: 2.1.0.9379eed38531_x000D__x000A_FileDescription: ANGLE libGLESv2 Dynamic Link Library_x000D__x000A_Product: ANGLE libGLESv2 Dynamic Link Library_x000D__x000A_ProductVersion: 2.1.0.9379eed38531_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 12792 + + 2.1.0.9379eed38531 + 2.1.0.9379eed38531 + ANGLE libGLESv2 Dynamic Link Library + ANGLE libGLESv2 Dynamic Link Library + + + + + System.Diagnostics.ProcessModule (libegl.dll) + + libegl.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\libegl.dll + 140719354150912 + 405504 + 140719354269296 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\libegl.dll_x000D__x000A_InternalName: libEGL_x000D__x000A_OriginalFilename: libEGL.dll_x000D__x000A_FileVersion: 2.1.0.9379eed38531_x000D__x000A_FileDescription: ANGLE libEGL Dynamic Link Library_x000D__x000A_Product: ANGLE libEGL Dynamic Link Library_x000D__x000A_ProductVersion: 2.1.0.9379eed38531_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 396 + + 2.1.0.9379eed38531 + 2.1.0.9379eed38531 + ANGLE libEGL Dynamic Link Library + ANGLE libEGL Dynamic Link Library + + + + + System.Diagnostics.ProcessModule (dwmapi.dll) + + dwmapi.dll + C:\Windows\SYSTEM32\dwmapi.dll + 140719861399552 + 188416 + 140719861412880 + File: C:\Windows\SYSTEM32\dwmapi.dll_x000D__x000A_InternalName: dwmapi.dll_x000D__x000A_OriginalFilename: dwmapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Desktop Window Manager API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft Desktop Window Manager API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dxgi.dll) + + dxgi.dll + C:\Windows\SYSTEM32\dxgi.dll + 140719868149760 + 794624 + 140719868291472 + File: C:\Windows\SYSTEM32\dxgi.dll_x000D__x000A_InternalName: dxgi.dll_x000D__x000A_OriginalFilename: dxgi.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: DirectX Graphics Infrastructure_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 776 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + DirectX Graphics Infrastructure + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (d3d11.dll) + + d3d11.dll + C:\Windows\SYSTEM32\d3d11.dll + 140719840690176 + 2613248 + 140719841252320 + File: C:\Windows\SYSTEM32\d3d11.dll_x000D__x000A_InternalName: D3D11.dll_x000D__x000A_OriginalFilename: D3D11.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Direct3D 11 Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2552 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Direct3D 11 Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dcomp.dll) + + dcomp.dll + C:\Windows\SYSTEM32\dcomp.dll + 140719849340928 + 1847296 + 140719849715008 + File: C:\Windows\SYSTEM32\dcomp.dll_x000D__x000A_InternalName: dcomp.dll_x000D__x000A_OriginalFilename: dcomp.dll_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft DirectComposition Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1804 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Microsoft DirectComposition Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (nvldumdx.dll) + + nvldumdx.dll + C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_547eeefb57db4499\nvldumdx.dll + 140719802286080 + 974848 + 140719802337632 + File: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_547eeefb57db4499\nvldumdx.dll_x000D__x000A_InternalName: nvldumd_x000D__x000A_OriginalFilename: nvldumd.dll_x000D__x000A_FileVersion: 26.21.14.3160_x000D__x000A_FileDescription: NVIDIA Driver Loader, Version 431.60 _x000D__x000A_Product: NVIDIA driver loader_x000D__x000A_ProductVersion: 26.21.14.3160_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: True_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 952 + NVIDIA Corporation + 26.21.14.3160 + 26.21.14.3160 + NVIDIA Driver Loader, Version 431.60 + NVIDIA driver loader + + + + + System.Diagnostics.ProcessModule (imagehlp.dll) + + imagehlp.dll + C:\Windows\System32\imagehlp.dll + 140719954657280 + 118784 + 140719954669248 + File: C:\Windows\System32\imagehlp.dll_x000D__x000A_InternalName: IMAGEHLP.DLL_x000D__x000A_OriginalFilename: IMAGEHLP.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT Image Helper_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 116 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows NT Image Helper + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (rsaenh.dll) + + rsaenh.dll + C:\Windows\system32\rsaenh.dll + 140719874834432 + 208896 + 140719874861552 + File: C:\Windows\system32\rsaenh.dll_x000D__x000A_InternalName: rsaenh.dll_x000D__x000A_OriginalFilename: rsaenh.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Enhanced Cryptographic Provider_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 204 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft Enhanced Cryptographic Provider + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (nvwgf2umx_cfg.dll) + + nvwgf2umx_cfg.dll + C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_547eeefb57db4499\nvwgf2umx_cfg.dll + 140719734063104 + 40022016 + 140719735659216 + File: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_547eeefb57db4499\nvwgf2umx_cfg.dll_x000D__x000A_InternalName: nvwgf2um_x000D__x000A_OriginalFilename: nvwgf2um.dll_x000D__x000A_FileVersion: 26.21.14.3160_x000D__x000A_FileDescription: NVIDIA D3D10 Driver, Version 431.60 _x000D__x000A_Product: NVIDIA D3D10 drivers_x000D__x000A_ProductVersion: 26.21.14.3160_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: True_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 39084 + NVIDIA Corporation + 26.21.14.3160 + 26.21.14.3160 + NVIDIA D3D10 Driver, Version 431.60 + NVIDIA D3D10 drivers + + + + + System.Diagnostics.ProcessModule (clbcatq.dll) + + clbcatq.dll + C:\Windows\System32\clbcatq.dll + 140719916908544 + 663552 + 140719916925344 + File: C:\Windows\System32\clbcatq.dll_x000D__x000A_InternalName: CLBCATQ.DLL_x000D__x000A_OriginalFilename: CLBCATQ.DLL_x000D__x000A_FileVersion: 2001.12.10941.16384 (WinBuild.160101.0800)_x000D__x000A_FileDescription: COM+ Configuration Catalog_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 648 + Microsoft Corporation + 2001.12.10941.16384 (WinBuild.160101.0800) + 10.0.17763.1 + COM+ Configuration Catalog + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WinTypes.dll) + + WinTypes.dll + C:\Windows\System32\WinTypes.dll + 140719817687040 + 1388544 + 140719817864912 + File: C:\Windows\System32\WinTypes.dll_x000D__x000A_InternalName: Windows Base Types DLL_x000D__x000A_OriginalFilename: WinTypes.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Base Types DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1356 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Base Types DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (mfh264enc.dll) + + mfh264enc.dll + C:\Windows\System32\mfh264enc.dll + 140719083880448 + 585728 + 140719083922336 + File: C:\Windows\System32\mfh264enc.dll_x000D__x000A_InternalName: Media Foundation H264 Encoder_x000D__x000A_OriginalFilename: mfH264Enc.dll_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Media Foundation H264 Encoder_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 572 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Media Foundation H264 Encoder + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (Windows.Media.dll) + + Windows.Media.dll + C:\Windows\System32\Windows.Media.dll + 140719084470272 + 7675904 + 140719084571616 + File: C:\Windows\System32\Windows.Media.dll_x000D__x000A_InternalName: Windows Media Runtime DLL_x000D__x000A_OriginalFilename: Windows.Media.dll.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Media Runtime DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 7496 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Media Runtime DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ntmarta.dll) + + ntmarta.dll + C:\Windows\SYSTEM32\ntmarta.dll + 140719871557632 + 200704 + 140719871586448 + File: C:\Windows\SYSTEM32\ntmarta.dll_x000D__x000A_InternalName: ntmarta.dll_x000D__x000A_OriginalFilename: ntmarta.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT MARTA provider_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 196 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows NT MARTA provider + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (uxtheme.dll) + + uxtheme.dll + C:\Windows\system32\uxtheme.dll + 140719860547584 + 638976 + 140719860712368 + File: C:\Windows\system32\uxtheme.dll_x000D__x000A_InternalName: UxTheme.dll_x000D__x000A_OriginalFilename: UxTheme.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft UxTheme Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 624 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft UxTheme Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSCTF.dll) + + MSCTF.dll + C:\Windows\System32\MSCTF.dll + 140719947317248 + 1486848 + 140719947597184 + File: C:\Windows\System32\MSCTF.dll_x000D__x000A_InternalName: MSCTF_x000D__x000A_OriginalFilename: MSCTF.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MSCTF Server DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1452 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MSCTF Server DLL + Microsoft® Windows® Operating System + + + + + 80 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 40392 + 40392 + 210436096 + 210436096 + 648752 + 648752 + 950525952 + 950525952 + 307183616 + 307183616 + 2204958838784 + 1640615936 + true + + + Normal + 32 + + 210436096 + 210436096 + chrome + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 11548 + true + Normal + 140719955419728 + Wait + UserRequest + PT1M56.109375S +
2019-08-24T14:18:00.6190839+03:00
+ PT2M17.453125S + PT21.34375S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 6980 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:00.7368817+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 9 + 10 + 11504 + true + AboveNormal + 140719955419728 + Wait + UserRequest + PT3.3125S +
2019-08-24T14:18:00.878744+03:00
+ PT16.78125S + PT13.46875S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 14120 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:00.9080066+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 22972 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.03125S +
2019-08-24T14:18:00.9086503+03:00
+ PT0.03125S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 6 + 6 + 8584 + true + Lowest + 140719955419728 + Wait + UserRequest + PT0.015625S +
2019-08-24T14:18:00.9099407+03:00
+ PT0.015625S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 21200 + true + Normal + 140719955419728 + Wait + EventPairLow + PT1.796875S +
2019-08-24T14:18:00.911373+03:00
+ PT4.34375S + PT2.546875S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 22420 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-24T14:18:00.9120465+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 22780 + true + Normal + 140719955419728 + Wait + UserRequest + PT2.125S +
2019-08-24T14:18:00.9130161+03:00
+ PT18.625S + PT16.5S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 19748 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.015625S +
2019-08-24T14:18:01.11242+03:00
+ PT0.015625S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 1 + 2 + 21024 + true + Idle + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.2196498+03:00
+ PT0.015625S + PT0.015625S + + + + + + + System.Diagnostics.ProcessThread + + 1 + 2 + 23868 + true + Idle + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.2201268+03:00
+ PT0.015625S + PT0.015625S + + + + + + + System.Diagnostics.ProcessThread + + 1 + 2 + 24024 + true + Idle + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.2204867+03:00
+ PT0.015625S + PT0.015625S + + + + + + + System.Diagnostics.ProcessThread + + 1 + 2 + 17144 + true + Idle + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.2211154+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 1 + 2 + 18416 + true + Idle + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.2216496+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 1 + 2 + 20452 + true + Idle + 140719955419728 + Wait + UserRequest + PT0.015625S +
2019-08-24T14:18:01.2220167+03:00
+ PT0.03125S + PT0.015625S + + + + + + + System.Diagnostics.ProcessThread + + 1 + 2 + 10284 + true + Idle + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.2224458+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 1 + 2 + 13764 + true + Idle + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.2228834+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 10280 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.2473734+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 1 + 2 + 12236 + true + Idle + 140719955419728 + Wait + UserRequest + PT0.0625S +
2019-08-24T14:18:01.2835698+03:00
+ PT0.140625S + PT0.078125S + + + + + + + System.Diagnostics.ProcessThread + + 1 + 2 + 20772 + true + Idle + 140719955419728 + Wait + UserRequest + PT0.015625S +
2019-08-24T14:18:01.2839176+03:00
+ PT0.046875S + PT0.03125S + + + + + + + System.Diagnostics.ProcessThread + + 1 + 2 + 24444 + true + Idle + 140719955419728 + Wait + UserRequest + PT0.046875S +
2019-08-24T14:18:01.29098+03:00
+ PT0.125S + PT0.078125S + + + + + + + System.Diagnostics.ProcessThread + + 1 + 2 + 8816 + true + Idle + 140719955419728 + Wait + UserRequest + PT0.046875S +
2019-08-24T14:18:01.2912455+03:00
+ PT0.09375S + PT0.046875S + + + + + + + System.Diagnostics.ProcessThread + + 1 + 2 + 22404 + true + Idle + 140719955419728 + Wait + UserRequest + PT0.0625S +
2019-08-24T14:18:01.2914743+03:00
+ PT0.109375S + PT0.046875S + + + + + + + System.Diagnostics.ProcessThread + + 1 + 2 + 8548 + true + Idle + 140719955419728 + Wait + UserRequest + PT0.03125S +
2019-08-24T14:18:01.291712+03:00
+ PT0.09375S + PT0.0625S + + + + + + + System.Diagnostics.ProcessThread + + 1 + 2 + 1960 + true + Idle + 140719955419728 + Wait + UserRequest + PT0.046875S +
2019-08-24T14:18:01.294471+03:00
+ PT0.125S + PT0.078125S + + + + + + + System.Diagnostics.ProcessThread + + 1 + 2 + 10604 + true + Idle + 140719955419728 + Wait + UserRequest + PT0.046875S +
2019-08-24T14:18:01.2948051+03:00
+ PT0.171875S + PT0.125S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 3104 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.3125S +
2019-08-24T14:18:01.6786677+03:00
+ PT0.328125S + PT0.015625S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 12740 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-27T00:13:45.1604446+03:00
+ PT0S + PT0S + + + + + + + 29 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 615 + 2204253376512 + 935153664 + false + 33325056 + 33325056 + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + PT2M4.546875S + PT3M0.375S + PT55.828125S + + + 0 + + + true + + + + + chrome + 1 + 615 + 2204253376512 + 33325056 + 210436096 + 40392 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + + + System.Diagnostics.Process (chrome) + + Microsoft.Win32.SafeHandles.SafeProcessHandle + 6308 + 8 + false +
2019-08-24T14:18:00.3253674+03:00
+ 23804 + . + 1413120 + 204800 + + + + System.Diagnostics.ProcessModule (chrome.exe) + System.Diagnostics.ProcessModule (ntdll.dll) + System.Diagnostics.ProcessModule (KERNEL32.DLL) + System.Diagnostics.ProcessModule (KERNELBASE.dll) + System.Diagnostics.ProcessModule (chrome_elf.dll) + System.Diagnostics.ProcessModule (VERSION.dll) + System.Diagnostics.ProcessModule (msvcrt.dll) + System.Diagnostics.ProcessModule (ADVAPI32.dll) + System.Diagnostics.ProcessModule (sechost.dll) + System.Diagnostics.ProcessModule (RPCRT4.dll) + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + System.Diagnostics.ProcessModule (user32.dll) + System.Diagnostics.ProcessModule (win32u.dll) + System.Diagnostics.ProcessModule (GDI32.dll) + System.Diagnostics.ProcessModule (gdi32full.dll) + System.Diagnostics.ProcessModule (msvcp_win.dll) + System.Diagnostics.ProcessModule (ucrtbase.dll) + System.Diagnostics.ProcessModule (IMM32.DLL) + System.Diagnostics.ProcessModule (SHELL32.dll) + System.Diagnostics.ProcessModule (cfgmgr32.dll) + System.Diagnostics.ProcessModule (shcore.dll) + System.Diagnostics.ProcessModule (combase.dll) + System.Diagnostics.ProcessModule (windows.storage.dll) + System.Diagnostics.ProcessModule (profapi.dll) + System.Diagnostics.ProcessModule (powrprof.dll) + System.Diagnostics.ProcessModule (shlwapi.dll) + System.Diagnostics.ProcessModule (kernel.appcore.dll) + System.Diagnostics.ProcessModule (cryptsp.dll) + System.Diagnostics.ProcessModule (chrome.dll) + System.Diagnostics.ProcessModule (uxtheme.dll) + System.Diagnostics.ProcessModule (dwmapi.dll) + System.Diagnostics.ProcessModule (CRYPT32.dll) + System.Diagnostics.ProcessModule (MSASN1.dll) + System.Diagnostics.ProcessModule (USERENV.dll) + System.Diagnostics.ProcessModule (gpapi.dll) + System.Diagnostics.ProcessModule (wkscli.dll) + System.Diagnostics.ProcessModule (bcrypt.dll) + System.Diagnostics.ProcessModule (netutils.dll) + System.Diagnostics.ProcessModule (ole32.dll) + System.Diagnostics.ProcessModule (MSCTF.dll) + System.Diagnostics.ProcessModule (OLEAUT32.dll) + System.Diagnostics.ProcessModule (Secur32.dll) + System.Diagnostics.ProcessModule (SSPICLI.DLL) + System.Diagnostics.ProcessModule (DWrite.dll) + System.Diagnostics.ProcessModule (WS2_32.dll) + System.Diagnostics.ProcessModule (COMCTL32.dll) + System.Diagnostics.ProcessModule (clbcatq.dll) + System.Diagnostics.ProcessModule (twinapi.appcore.dll) + System.Diagnostics.ProcessModule (RMCLIENT.dll) + System.Diagnostics.ProcessModule (twinapi.dll) + System.Diagnostics.ProcessModule (NLAapi.dll) + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + System.Diagnostics.ProcessModule (NSI.dll) + System.Diagnostics.ProcessModule (dhcpcsvc6.DLL) + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + System.Diagnostics.ProcessModule (DNSAPI.dll) + System.Diagnostics.ProcessModule (mscms.dll) + System.Diagnostics.ProcessModule (ColorAdapterClient.dll) + System.Diagnostics.ProcessModule (icm32.dll) + System.Diagnostics.ProcessModule (Windows.UI.dll) + System.Diagnostics.ProcessModule (TextInputFramework.dll) + System.Diagnostics.ProcessModule (InputHost.dll) + System.Diagnostics.ProcessModule (CoreUIComponents.dll) + System.Diagnostics.ProcessModule (CoreMessaging.dll) + System.Diagnostics.ProcessModule (d2d1.dll) + System.Diagnostics.ProcessModule (d3d11.dll) + System.Diagnostics.ProcessModule (PROPSYS.dll) + System.Diagnostics.ProcessModule (wintypes.dll) + System.Diagnostics.ProcessModule (ntmarta.dll) + System.Diagnostics.ProcessModule (dxgi.dll) + System.Diagnostics.ProcessModule (WTSAPI32.dll) + System.Diagnostics.ProcessModule (wlanapi.dll) + System.Diagnostics.ProcessModule (WINSTA.dll) + System.Diagnostics.ProcessModule (wbemprox.dll) + System.Diagnostics.ProcessModule (wbemcomn.dll) + System.Diagnostics.ProcessModule (MMDevApi.dll) + System.Diagnostics.ProcessModule (DEVOBJ.dll) + System.Diagnostics.ProcessModule (wbemsvc.dll) + System.Diagnostics.ProcessModule (WINHTTP.dll) + System.Diagnostics.ProcessModule (fastprox.dll) + System.Diagnostics.ProcessModule (wmiutils.dll) + System.Diagnostics.ProcessModule (DPAPI.dll) + System.Diagnostics.ProcessModule (FirewallAPI.dll) + System.Diagnostics.ProcessModule (fwbase.dll) + System.Diagnostics.ProcessModule (LINKINFO.dll) + System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll) + System.Diagnostics.ProcessModule (dataexchange.dll) + System.Diagnostics.ProcessModule (dcomp.dll) + System.Diagnostics.ProcessModule (atlthunk.dll) + System.Diagnostics.ProcessModule (OLEACC.dll) + System.Diagnostics.ProcessModule (directmanipulation.dll) + System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll) + System.Diagnostics.ProcessModule (explorerframe.dll) + System.Diagnostics.ProcessModule (wpnapps.dll) + System.Diagnostics.ProcessModule (XmlLite.dll) + System.Diagnostics.ProcessModule (usermgrcli.dll) + System.Diagnostics.ProcessModule (mswsock.dll) + System.Diagnostics.ProcessModule (WINMM.dll) + System.Diagnostics.ProcessModule (WINMMBASE.dll) + System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll) + System.Diagnostics.ProcessModule (WmiPerfInst.dll) + System.Diagnostics.ProcessModule (pdh.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll) + System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll) + System.Diagnostics.ProcessModule (Windows.Networking.dll) + System.Diagnostics.ProcessModule (BiWinrt.dll) + System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll) + System.Diagnostics.ProcessModule (NETAPI32.dll) + System.Diagnostics.ProcessModule (SAMCLI.DLL) + System.Diagnostics.ProcessModule (SAMLIB.dll) + System.Diagnostics.ProcessModule (wdmaud.drv) + System.Diagnostics.ProcessModule (ksuser.dll) + System.Diagnostics.ProcessModule (AVRT.dll) + System.Diagnostics.ProcessModule (AUDIOSES.DLL) + System.Diagnostics.ProcessModule (msacm32.drv) + System.Diagnostics.ProcessModule (MSACM32.dll) + System.Diagnostics.ProcessModule (midimap.dll) + System.Diagnostics.ProcessModule (resourcepolicyclient.dll) + System.Diagnostics.ProcessModule (BitsProxy.dll) + + + 61568 + 61568 + 316080128 + 316080128 + 857648 + 857648 + 455720960 + 455720960 + 398323712 + 398323712 + 2204288917504 + 970694656 + true + Normal + 316080128 + 316080128 + chrome + 65535 + 1 + + + + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + + + 1747 + 2204143845376 + 825622528 + false + 112414720 + 112414720 + + System.Diagnostics.ProcessModule (chrome.exe) + PT11M7.53125S + PT21M46.28125S + PT10M38.75S + 1770664 + The Living Tombstone Radio - Now Playing on Pandora - Google Chrome + true + + + + + chrome + 1 + 1747 + 2204143845376 + 112414720 + 316080128 + 61568 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + System.Diagnostics.Process (explorer) + Google LLC + 1306.28125 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + Google LLC + 180.375 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + + + System.Diagnostics.Process (chrome) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 7708 + + 8 + false +
2019-08-24T14:18:00.4604945+03:00
+ 21256 + . + + + 1413120 + + + + 204800 + + + + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNEL32.DLL) + + KERNEL32.DLL + C:\Windows\System32\KERNEL32.DLL + 140719912779776 + 733184 + 140719912876560 + File: C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName: kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 716 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNELBASE.dll) + + KERNELBASE.dll + C:\Windows\System32\KERNELBASE.dll + 140719894495232 + 2699264 + 140719894841456 + File: C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName: Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2636 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_elf.dll) + + chrome_elf.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll + 140719325642752 + 925696 + 140719326148464 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName: chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 904 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (VERSION.dll) + + VERSION.dll + C:\Windows\SYSTEM32\VERSION.dll + 140719800254464 + 40960 + 140719800259344 + File: C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName: version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Version Checking and File Installation Libraries_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 40 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Version Checking and File Installation Libraries + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcrt.dll) + + msvcrt.dll + C:\Windows\System32\msvcrt.dll + 140719950004224 + 647168 + 140719950035120 + File: C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName: msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion: 7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT CRT DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 7.0.17763.475_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 7.0.17763.475 (WinBuild.160101.0800) + 7.0.17763.475 + Windows NT CRT DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + + bcryptPrimitives.dll + C:\Windows\System32\bcryptPrimitives.dll + 140719890235392 + 516096 + 140719890461152 + File: C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName: bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 504 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USER32.dll) + + USER32.dll + C:\Windows\System32\USER32.dll + 140719909306368 + 1667072 + 140719909414448 + File: C:\Windows\System32\USER32.dll_x000D__x000A_InternalName: user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows USER API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows USER API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (win32u.dll) + + win32u.dll + C:\Windows\System32\win32u.dll + 140719906816000 + 131072 + 0 + File: C:\Windows\System32\win32u.dll_x000D__x000A_InternalName: Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32u_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 128 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32u + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (GDI32.dll) + + GDI32.dll + C:\Windows\System32\GDI32.dll + 140719950659584 + 167936 + 140719950676208 + File: C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32full.dll) + + gdi32full.dll + C:\Windows\System32\gdi32full.dll + 140719905112064 + 1675264 + 140719905369792 + File: C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1636 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcp_win.dll) + + msvcp_win.dll + C:\Windows\System32\msvcp_win.dll + 140719889580032 + 655360 + 140719889658864 + File: C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName: msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 640 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ucrtbase.dll) + + ucrtbase.dll + C:\Windows\System32\ucrtbase.dll + 140719893446656 + 1024000 + 140719893528400 + File: C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName: ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1000 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IMM32.DLL) + + IMM32.DLL + C:\Windows\System32\IMM32.DLL + 140719906947072 + 188416 + 140719906952688 + File: C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName: imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows IMM32 API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (uxtheme.dll) + + uxtheme.dll + C:\Windows\system32\uxtheme.dll + 140719860547584 + 638976 + 140719860712368 + File: C:\Windows\system32\uxtheme.dll_x000D__x000A_InternalName: UxTheme.dll_x000D__x000A_OriginalFilename: UxTheme.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft UxTheme Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 624 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft UxTheme Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (combase.dll) + + combase.dll + C:\Windows\System32\combase.dll + 140719950856192 + 3325952 + 140719951769888 + File: C:\Windows\System32\combase.dll_x000D__x000A_InternalName: COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft COM for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3248 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft COM for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RPCRT4.dll) + + RPCRT4.dll + C:\Windows\System32\RPCRT4.dll + 140719917629440 + 1187840 + 140719918006928 + File: C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName: rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Procedure Call Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Procedure Call Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSCTF.dll) + + MSCTF.dll + C:\Windows\System32\MSCTF.dll + 140719947317248 + 1486848 + 140719947597184 + File: C:\Windows\System32\MSCTF.dll_x000D__x000A_InternalName: MSCTF_x000D__x000A_OriginalFilename: MSCTF.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MSCTF Server DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1452 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MSCTF Server DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (sechost.dll) + + sechost.dll + C:\Windows\System32\sechost.dll + 140719948824576 + 647168 + 140719948951504 + File: C:\Windows\System32\sechost.dll_x000D__x000A_InternalName: sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Host for SCM/SDDL/LSA Lookup APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (OLEAUT32.dll) + + OLEAUT32.dll + C:\Windows\System32\OLEAUT32.dll + 140719946465280 + 802816 + 140719946574624 + File: C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName: OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OLEAUT32.DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 784 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + OLEAUT32.DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ADVAPI32.dll) + + ADVAPI32.dll + C:\Windows\System32\ADVAPI32.dll + 140719915335680 + 667648 + 140719915417840 + File: C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName: advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Advanced Windows 32 Base API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 652 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Advanced Windows 32 Base API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + + CRYPTBASE.DLL + C:\Windows\SYSTEM32\CRYPTBASE.DLL + 140719881846784 + 49152 + 140719881855488 + File: C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName: cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base cryptographic API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base cryptographic API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dwmapi.dll) + + dwmapi.dll + C:\Windows\system32\dwmapi.dll + 140719861399552 + 188416 + 140719861412880 + File: C:\Windows\system32\dwmapi.dll_x000D__x000A_InternalName: dwmapi.dll_x000D__x000A_OriginalFilename: dwmapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Desktop Window Manager API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft Desktop Window Manager API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPT32.dll) + + CRYPT32.dll + C:\Windows\System32\CRYPT32.dll + 140719891480576 + 1945600 + 140719891804832 + File: C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName: CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Crypto API32_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1900 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Crypto API32 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSASN1.dll) + + MSASN1.dll + C:\Windows\System32\MSASN1.dll + 140719887876096 + 73728 + 140719887898576 + File: C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName: msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: ASN.1 Runtime APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 72 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + ASN.1 Runtime APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPTSP.dll) + + CRYPTSP.dll + C:\Windows\System32\CRYPTSP.dll + 140719889121280 + 94208 + 140719889138512 + File: C:\Windows\System32\CRYPTSP.dll_x000D__x000A_InternalName: cryptsp.dll_x000D__x000A_OriginalFilename: cryptsp.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Cryptographic Service Provider API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 92 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Cryptographic Service Provider API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (kernel.appcore.dll) + + kernel.appcore.dll + C:\Windows\System32\kernel.appcore.dll + 140719888400384 + 69632 + 140719888415648 + File: C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName: kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AppModel API Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 68 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AppModel API Host + Microsoft® Windows® Operating System + + + + + 28 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 9584 + 9584 + 1843200 + 1843200 + 115088 + 115088 + 1912832 + 1912832 + 7131136 + 7131136 + 2203429707776 + 111484928 + true + + + Normal + 32 + + 1843200 + 1843200 + chrome + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 5268 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-24T14:18:00.4604959+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 11568 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:00.47136+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 14856 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.1875S +
2019-08-24T14:18:00.4727013+03:00
+ PT0.21875S + PT0.03125S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 15880 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:00.4728353+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 7520 + true + Normal + 140719955419728 + Wait + Executive + PT0S +
2019-08-24T14:18:00.4779961+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 10 + 18820 + true + Normal + 140719955419728 + Wait + Executive + PT0S +
2019-08-24T14:18:00.478148+03:00
+ PT0S + PT0S + + + + + + + 6 + + + + + + + + + + + + false + + + 219 + 2203425513472 + 107290624 + false + 5230592 + 5230592 + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + PT0.1875S + PT0.21875S + PT0.03125S + + + 0 + + + true + + + + + chrome + 1 + 219 + 2203425513472 + 5230592 + 1843200 + 9584 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + + + System.Diagnostics.Process (chrome) + + Microsoft.Win32.SafeHandles.SafeProcessHandle + 7604 + 8 + false +
2019-08-24T14:18:00.3253674+03:00
+ 23804 + . + 1413120 + 204800 + + + + System.Diagnostics.ProcessModule (chrome.exe) + System.Diagnostics.ProcessModule (ntdll.dll) + System.Diagnostics.ProcessModule (KERNEL32.DLL) + System.Diagnostics.ProcessModule (KERNELBASE.dll) + System.Diagnostics.ProcessModule (chrome_elf.dll) + System.Diagnostics.ProcessModule (VERSION.dll) + System.Diagnostics.ProcessModule (msvcrt.dll) + System.Diagnostics.ProcessModule (ADVAPI32.dll) + System.Diagnostics.ProcessModule (sechost.dll) + System.Diagnostics.ProcessModule (RPCRT4.dll) + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + System.Diagnostics.ProcessModule (user32.dll) + System.Diagnostics.ProcessModule (win32u.dll) + System.Diagnostics.ProcessModule (GDI32.dll) + System.Diagnostics.ProcessModule (gdi32full.dll) + System.Diagnostics.ProcessModule (msvcp_win.dll) + System.Diagnostics.ProcessModule (ucrtbase.dll) + System.Diagnostics.ProcessModule (IMM32.DLL) + System.Diagnostics.ProcessModule (SHELL32.dll) + System.Diagnostics.ProcessModule (cfgmgr32.dll) + System.Diagnostics.ProcessModule (shcore.dll) + System.Diagnostics.ProcessModule (combase.dll) + System.Diagnostics.ProcessModule (windows.storage.dll) + System.Diagnostics.ProcessModule (profapi.dll) + System.Diagnostics.ProcessModule (powrprof.dll) + System.Diagnostics.ProcessModule (shlwapi.dll) + System.Diagnostics.ProcessModule (kernel.appcore.dll) + System.Diagnostics.ProcessModule (cryptsp.dll) + System.Diagnostics.ProcessModule (chrome.dll) + System.Diagnostics.ProcessModule (uxtheme.dll) + System.Diagnostics.ProcessModule (dwmapi.dll) + System.Diagnostics.ProcessModule (CRYPT32.dll) + System.Diagnostics.ProcessModule (MSASN1.dll) + System.Diagnostics.ProcessModule (USERENV.dll) + System.Diagnostics.ProcessModule (gpapi.dll) + System.Diagnostics.ProcessModule (wkscli.dll) + System.Diagnostics.ProcessModule (bcrypt.dll) + System.Diagnostics.ProcessModule (netutils.dll) + System.Diagnostics.ProcessModule (ole32.dll) + System.Diagnostics.ProcessModule (MSCTF.dll) + System.Diagnostics.ProcessModule (OLEAUT32.dll) + System.Diagnostics.ProcessModule (Secur32.dll) + System.Diagnostics.ProcessModule (SSPICLI.DLL) + System.Diagnostics.ProcessModule (DWrite.dll) + System.Diagnostics.ProcessModule (WS2_32.dll) + System.Diagnostics.ProcessModule (COMCTL32.dll) + System.Diagnostics.ProcessModule (clbcatq.dll) + System.Diagnostics.ProcessModule (twinapi.appcore.dll) + System.Diagnostics.ProcessModule (RMCLIENT.dll) + System.Diagnostics.ProcessModule (twinapi.dll) + System.Diagnostics.ProcessModule (NLAapi.dll) + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + System.Diagnostics.ProcessModule (NSI.dll) + System.Diagnostics.ProcessModule (dhcpcsvc6.DLL) + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + System.Diagnostics.ProcessModule (DNSAPI.dll) + System.Diagnostics.ProcessModule (mscms.dll) + System.Diagnostics.ProcessModule (ColorAdapterClient.dll) + System.Diagnostics.ProcessModule (icm32.dll) + System.Diagnostics.ProcessModule (Windows.UI.dll) + System.Diagnostics.ProcessModule (TextInputFramework.dll) + System.Diagnostics.ProcessModule (InputHost.dll) + System.Diagnostics.ProcessModule (CoreUIComponents.dll) + System.Diagnostics.ProcessModule (CoreMessaging.dll) + System.Diagnostics.ProcessModule (d2d1.dll) + System.Diagnostics.ProcessModule (d3d11.dll) + System.Diagnostics.ProcessModule (PROPSYS.dll) + System.Diagnostics.ProcessModule (wintypes.dll) + System.Diagnostics.ProcessModule (ntmarta.dll) + System.Diagnostics.ProcessModule (dxgi.dll) + System.Diagnostics.ProcessModule (WTSAPI32.dll) + System.Diagnostics.ProcessModule (wlanapi.dll) + System.Diagnostics.ProcessModule (WINSTA.dll) + System.Diagnostics.ProcessModule (wbemprox.dll) + System.Diagnostics.ProcessModule (wbemcomn.dll) + System.Diagnostics.ProcessModule (MMDevApi.dll) + System.Diagnostics.ProcessModule (DEVOBJ.dll) + System.Diagnostics.ProcessModule (wbemsvc.dll) + System.Diagnostics.ProcessModule (WINHTTP.dll) + System.Diagnostics.ProcessModule (fastprox.dll) + System.Diagnostics.ProcessModule (wmiutils.dll) + System.Diagnostics.ProcessModule (DPAPI.dll) + System.Diagnostics.ProcessModule (FirewallAPI.dll) + System.Diagnostics.ProcessModule (fwbase.dll) + System.Diagnostics.ProcessModule (LINKINFO.dll) + System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll) + System.Diagnostics.ProcessModule (dataexchange.dll) + System.Diagnostics.ProcessModule (dcomp.dll) + System.Diagnostics.ProcessModule (atlthunk.dll) + System.Diagnostics.ProcessModule (OLEACC.dll) + System.Diagnostics.ProcessModule (directmanipulation.dll) + System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll) + System.Diagnostics.ProcessModule (explorerframe.dll) + System.Diagnostics.ProcessModule (wpnapps.dll) + System.Diagnostics.ProcessModule (XmlLite.dll) + System.Diagnostics.ProcessModule (usermgrcli.dll) + System.Diagnostics.ProcessModule (mswsock.dll) + System.Diagnostics.ProcessModule (WINMM.dll) + System.Diagnostics.ProcessModule (WINMMBASE.dll) + System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll) + System.Diagnostics.ProcessModule (WmiPerfInst.dll) + System.Diagnostics.ProcessModule (pdh.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll) + System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll) + System.Diagnostics.ProcessModule (Windows.Networking.dll) + System.Diagnostics.ProcessModule (BiWinrt.dll) + System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll) + System.Diagnostics.ProcessModule (NETAPI32.dll) + System.Diagnostics.ProcessModule (SAMCLI.DLL) + System.Diagnostics.ProcessModule (SAMLIB.dll) + System.Diagnostics.ProcessModule (wdmaud.drv) + System.Diagnostics.ProcessModule (ksuser.dll) + System.Diagnostics.ProcessModule (AVRT.dll) + System.Diagnostics.ProcessModule (AUDIOSES.DLL) + System.Diagnostics.ProcessModule (msacm32.drv) + System.Diagnostics.ProcessModule (MSACM32.dll) + System.Diagnostics.ProcessModule (midimap.dll) + System.Diagnostics.ProcessModule (resourcepolicyclient.dll) + System.Diagnostics.ProcessModule (BitsProxy.dll) + + + 61568 + 61568 + 316080128 + 316080128 + 857648 + 857648 + 455720960 + 455720960 + 398323712 + 398323712 + 2204288917504 + 970694656 + true + Normal + 316080128 + 316080128 + chrome + 65535 + 1 + + + + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + + + 1747 + 2204143845376 + 825622528 + false + 112414720 + 112414720 + + System.Diagnostics.ProcessModule (chrome.exe) + PT11M7.53125S + PT21M46.28125S + PT10M38.75S + 1770664 + The Living Tombstone Radio - Now Playing on Pandora - Google Chrome + true + + + + + chrome + 1 + 1747 + 2204143845376 + 112414720 + 316080128 + 61568 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + System.Diagnostics.Process (explorer) + Google LLC + 1306.28125 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + Google LLC + 0.21875 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + + + System.Diagnostics.Process (chrome) + + + + Microsoft.Win32.SafeHandles.SafeProcessHandle + + false + false + + + + + 5648 + + 8 + false +
2019-08-24T14:18:00.9927237+03:00
+ 22468 + . + + + 1413120 + + + + 204800 + + + + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (ntdll.dll) + + ntdll.dll + C:\Windows\SYSTEM32\ntdll.dll + 140719954984960 + 2019328 + 0 + File: C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName: ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NT Layer DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NT Layer DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNEL32.DLL) + + KERNEL32.DLL + C:\Windows\System32\KERNEL32.DLL + 140719912779776 + 733184 + 140719912876560 + File: C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName: kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 716 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (KERNELBASE.dll) + + KERNELBASE.dll + C:\Windows\System32\KERNELBASE.dll + 140719894495232 + 2699264 + 140719894841456 + File: C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName: Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT BASE API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 2636 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + Windows NT BASE API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_elf.dll) + + chrome_elf.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll + 140719325642752 + 925696 + 140719326148464 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName: chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 904 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (VERSION.dll) + + VERSION.dll + C:\Windows\SYSTEM32\VERSION.dll + 140719800254464 + 40960 + 140719800259344 + File: C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName: version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Version Checking and File Installation Libraries_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 40 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Version Checking and File Installation Libraries + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcrt.dll) + + msvcrt.dll + C:\Windows\System32\msvcrt.dll + 140719950004224 + 647168 + 140719950035120 + File: C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName: msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion: 7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows NT CRT DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 7.0.17763.475_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 7.0.17763.475 (WinBuild.160101.0800) + 7.0.17763.475 + Windows NT CRT DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + + bcryptPrimitives.dll + C:\Windows\System32\bcryptPrimitives.dll + 140719890235392 + 516096 + 140719890461152 + File: C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName: bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 504 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ADVAPI32.dll) + + ADVAPI32.dll + C:\Windows\System32\ADVAPI32.dll + 140719915335680 + 667648 + 140719915417840 + File: C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName: advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Advanced Windows 32 Base API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 652 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Advanced Windows 32 Base API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (sechost.dll) + + sechost.dll + C:\Windows\System32\sechost.dll + 140719948824576 + 647168 + 140719948951504 + File: C:\Windows\System32\sechost.dll_x000D__x000A_InternalName: sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 632 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Host for SCM/SDDL/LSA Lookup APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (RPCRT4.dll) + + RPCRT4.dll + C:\Windows\System32\RPCRT4.dll + 140719917629440 + 1187840 + 140719918006928 + File: C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName: rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Remote Procedure Call Runtime_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Remote Procedure Call Runtime + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (chrome_child.dll) + + chrome_child.dll + C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll + 140717177962496 + 87977984 + 140717247440176 + File: C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName: chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 85916 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + + + System.Diagnostics.ProcessModule (OLEAUT32.dll) + + OLEAUT32.dll + C:\Windows\System32\OLEAUT32.dll + 140719946465280 + 802816 + 140719946574624 + File: C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName: OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: OLEAUT32.DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 784 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + OLEAUT32.DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (msvcp_win.dll) + + msvcp_win.dll + C:\Windows\System32\msvcp_win.dll + 140719889580032 + 655360 + 140719889658864 + File: C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName: msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 640 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (ucrtbase.dll) + + ucrtbase.dll + C:\Windows\System32\ucrtbase.dll + 140719893446656 + 1024000 + 140719893528400 + File: C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName: ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion: 10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft® C Runtime Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.404_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1000 + Microsoft Corporation + 10.0.17763.404 (WinBuild.160101.0800) + 10.0.17763.404 + Microsoft® C Runtime Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (combase.dll) + + combase.dll + C:\Windows\System32\combase.dll + 140719950856192 + 3325952 + 140719951769888 + File: C:\Windows\System32\combase.dll_x000D__x000A_InternalName: COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft COM for Windows_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3248 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft COM for Windows + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WS2_32.dll) + + WS2_32.dll + C:\Windows\System32\WS2_32.dll + 140719954198528 + 446464 + 140719954286384 + File: C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName: ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 436 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Socket 2.0 32-Bit DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (GDI32.dll) + + GDI32.dll + C:\Windows\System32\GDI32.dll + 140719950659584 + 167936 + 140719950676208 + File: C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.592_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 164 + Microsoft Corporation + 10.0.17763.592 (WinBuild.160101.0800) + 10.0.17763.592 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (gdi32full.dll) + + gdi32full.dll + C:\Windows\System32\gdi32full.dll + 140719905112064 + 1675264 + 140719905369792 + File: C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName: gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion: 10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription: GDI Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.678_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1636 + Microsoft Corporation + 10.0.17763.678 (WinBuild.160101.0800) + 10.0.17763.678 + GDI Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USER32.dll) + + USER32.dll + C:\Windows\System32\USER32.dll + 140719909306368 + 1667072 + 140719909414448 + File: C:\Windows\System32\USER32.dll_x000D__x000A_InternalName: user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows USER API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1628 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows USER API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (win32u.dll) + + win32u.dll + C:\Windows\System32\win32u.dll + 140719906816000 + 131072 + 0 + File: C:\Windows\System32\win32u.dll_x000D__x000A_InternalName: Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Win32u_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 128 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Win32u + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINTRUST.dll) + + WINTRUST.dll + C:\Windows\System32\WINTRUST.dll + 140719888728064 + 364544 + 140719888791376 + File: C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName: WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion: 10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Trust Verification APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.348_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 356 + Microsoft Corporation + 10.0.17763.348 (WinBuild.160101.0800) + 10.0.17763.348 + Microsoft Trust Verification APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (MSASN1.dll) + + MSASN1.dll + C:\Windows\System32\MSASN1.dll + 140719887876096 + 73728 + 140719887898576 + File: C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName: msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: ASN.1 Runtime APIs_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 72 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + ASN.1 Runtime APIs + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPT32.dll) + + CRYPT32.dll + C:\Windows\System32\CRYPT32.dll + 140719891480576 + 1945600 + 140719891804832 + File: C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName: CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Crypto API32_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1900 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Crypto API32 + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + + IPHLPAPI.DLL + C:\Windows\SYSTEM32\IPHLPAPI.DLL + 140719876931584 + 249856 + 140719876989024 + File: C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName: iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: IP Helper API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 244 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + IP Helper API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMM.dll) + + WINMM.dll + C:\Windows\SYSTEM32\WINMM.dll + 140719835054080 + 147456 + 140719835066368 + File: C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName: winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: MCI API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + MCI API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (USERENV.dll) + + USERENV.dll + C:\Windows\SYSTEM32\USERENV.dll + 140719887024128 + 163840 + 140719887043280 + File: C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName: userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Userenv_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 160 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Userenv + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (profapi.dll) + + profapi.dll + C:\Windows\System32\profapi.dll + 140719888531456 + 147456 + 140719888564400 + File: C:\Windows\System32\profapi.dll_x000D__x000A_InternalName: PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: User Profile Basic API_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 144 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + User Profile Basic API + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (DWrite.dll) + + DWrite.dll + C:\Windows\SYSTEM32\DWrite.dll + 140719303819264 + 3129344 + 140719304509728 + File: C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName: DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft DirectX Typography Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 3056 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Microsoft DirectX Typography Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINSPOOL.DRV) + + WINSPOOL.DRV + C:\Windows\SYSTEM32\WINSPOOL.DRV + 140719787606016 + 561152 + 140719787676448 + File: C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName: winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Spooler Driver_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 548 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Spooler Driver + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (kernel.appcore.dll) + + kernel.appcore.dll + C:\Windows\System32\kernel.appcore.dll + 140719888400384 + 69632 + 140719888415648 + File: C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName: kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: AppModel API Host_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 68 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + AppModel API Host + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (bcrypt.dll) + + bcrypt.dll + C:\Windows\System32\bcrypt.dll + 140719897247744 + 155648 + 140719897281296 + File: C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName: bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Cryptographic Primitives Library_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 152 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Cryptographic Primitives Library + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dbghelp.dll) + + dbghelp.dll + C:\Windows\SYSTEM32\dbghelp.dll + 140719552397312 + 2019328 + 140719552479168 + File: C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName: DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows Image Helper_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1972 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows Image Helper + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINHTTP.dll) + + WINHTTP.dll + C:\Windows\SYSTEM32\WINHTTP.dll + 140719810019328 + 991232 + 140719810293024 + File: C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName: winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Windows HTTP Services_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 968 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Windows HTTP Services + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (Secur32.dll) + + Secur32.dll + C:\Windows\SYSTEM32\Secur32.dll + 140719559147520 + 49152 + 140719559156816 + File: C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName: secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + + dhcpcsvc.DLL + C:\Windows\SYSTEM32\dhcpcsvc.DLL + 140719782494208 + 114688 + 140719782503840 + File: C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName: dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: DHCP Client Service_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 112 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + DHCP Client Service + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (NSI.dll) + + NSI.dll + C:\Windows\System32\NSI.dll + 140719916843008 + 32768 + 140719916851008 + File: C:\Windows\System32\NSI.dll_x000D__x000A_InternalName: nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: NSI User-mode interface DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 32 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + NSI User-mode interface DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (WINMMBASE.dll) + + WINMMBASE.dll + C:\Windows\SYSTEM32\WINMMBASE.dll + 140719834857472 + 184320 + 140719834890448 + File: C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName: winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base Multimedia Extension API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 180 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base Multimedia Extension API DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (cfgmgr32.dll) + + cfgmgr32.dll + C:\Windows\System32\cfgmgr32.dll + 140719889252352 + 303104 + 140719889325904 + File: C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName: cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Configuration Manager DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 296 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Configuration Manager DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (PROPSYS.dll) + + PROPSYS.dll + C:\Windows\SYSTEM32\PROPSYS.dll + 140719831187456 + 1736704 + 140719831447408 + File: C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName: propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion: 7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Microsoft Property System_x000D__x000A_Product: Windows® Search_x000D__x000A_ProductVersion: 7.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1696 + Microsoft Corporation + 7.0.17763.1 (WinBuild.160101.0800) + 7.0.17763.1 + Microsoft Property System + Windows® Search + + + + + System.Diagnostics.ProcessModule (shcore.dll) + + shcore.dll + C:\Windows\System32\shcore.dll + 140719907143680 + 688128 + 140719907388560 + File: C:\Windows\System32\shcore.dll_x000D__x000A_InternalName: SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: SHCORE_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 672 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + SHCORE + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (SSPICLI.DLL) + + SSPICLI.DLL + C:\Windows\SYSTEM32\SSPICLI.DLL + 140719886827520 + 192512 + 140719886881776 + File: C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName: sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Security Support Provider Interface_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 188 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Security Support Provider Interface + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (IMM32.DLL) + + IMM32.DLL + C:\Windows\System32\IMM32.DLL + 140719906947072 + 188416 + 140719906952688 + File: C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName: imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 184 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Multi-User Windows IMM32 API Client DLL + Microsoft® Windows® Operating System + + + + + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + + CRYPTBASE.DLL + C:\Windows\SYSTEM32\CRYPTBASE.DLL + 140719881846784 + 49152 + 140719881855488 + File: C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName: cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion: 10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription: Base cryptographic API DLL_x000D__x000A_Product: Microsoft® Windows® Operating System_x000D__x000A_ProductVersion: 10.0.17763.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 48 + Microsoft Corporation + 10.0.17763.1 (WinBuild.160101.0800) + 10.0.17763.1 + Base cryptographic API DLL + Microsoft® Windows® Operating System + + + + + 44 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + false + + + 28960 + 28960 + 38973440 + 38973440 + 360048 + 360048 + 45535232 + 45535232 + 65232896 + 65232896 + 2203789897728 + 471674880 + true + + + Normal + 32 + + 38973440 + 38973440 + chrome + + + 65535 + + 1 + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 14712 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.515625S +
2019-08-24T14:18:00.9927255+03:00
+ PT3.453125S + PT2.9375S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 4696 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.0767085+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 6 + 6 + 21084 + true + Lowest + 140719955419728 + Wait + UserRequest + PT0.015625S +
2019-08-24T14:18:01.0784573+03:00
+ PT0.015625S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 22848 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0.234375S +
2019-08-24T14:18:01.0795982+03:00
+ PT1.203125S + PT0.96875S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 18736 + true + Normal + 140719955419728 + Wait + EventPairLow + PT0S +
2019-08-24T14:18:01.0805741+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 6688 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.0817489+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 7036 + true + Normal + 140719955419728 + Wait + UserRequest + PT0S +
2019-08-24T14:18:01.0915583+03:00
+ PT0.0625S + PT0.0625S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 19192 + true + Normal + 140719955419728 + Wait + Unknown + PT0.015625S +
2019-08-24T14:18:01.0936767+03:00
+ PT0.015625S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 22864 + true + Normal + 140719955419728 + Wait + Unknown + PT0.03125S +
2019-08-24T14:18:01.0941059+03:00
+ PT0.03125S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 14696 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.0945295+03:00
+ PT0.015625S + PT0.015625S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 9 + 3272 + true + Normal + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.0951787+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 6 + 6 + 17120 + true + Lowest + 140719955419728 + Wait + Unknown + PT0S +
2019-08-24T14:18:01.0956001+03:00
+ PT0S + PT0S + + + + + + + System.Diagnostics.ProcessThread + + 8 + 8 + 27616 + true + Normal + 140719955419728 + Wait + UserRequest + PT0.015625S +
2019-08-27T02:00:52.309162+03:00
+ PT0.015625S + PT0S + + + + + + + 13 + + + + + + + + + + + + + + + + + + + false + + + 273 + 2203764723712 + 446500864 + false + 28418048 + 28418048 + + + + System.Diagnostics.ProcessModule (chrome.exe) + + chrome.exe + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + 140702356078592 + 1732608 + 140702357044720 + File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName: chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion: 76.0.3809.100_x000D__x000A_FileDescription: Google Chrome_x000D__x000A_Product: Google Chrome_x000D__x000A_ProductVersion: 76.0.3809.100_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_ + + + + + 1692 + Google LLC + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + + + PT1.40625S + PT5.484375S + PT4.078125S + + + 0 + + + true + + + + + chrome + 1 + 273 + 2203764723712 + 28418048 + 38973440 + 28960 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + + + System.Diagnostics.Process (chrome) + + Microsoft.Win32.SafeHandles.SafeProcessHandle + 2468 + 8 + false +
2019-08-24T14:18:00.3253674+03:00
+ 23804 + . + 1413120 + 204800 + + + + System.Diagnostics.ProcessModule (chrome.exe) + System.Diagnostics.ProcessModule (ntdll.dll) + System.Diagnostics.ProcessModule (KERNEL32.DLL) + System.Diagnostics.ProcessModule (KERNELBASE.dll) + System.Diagnostics.ProcessModule (chrome_elf.dll) + System.Diagnostics.ProcessModule (VERSION.dll) + System.Diagnostics.ProcessModule (msvcrt.dll) + System.Diagnostics.ProcessModule (ADVAPI32.dll) + System.Diagnostics.ProcessModule (sechost.dll) + System.Diagnostics.ProcessModule (RPCRT4.dll) + System.Diagnostics.ProcessModule (CRYPTBASE.DLL) + System.Diagnostics.ProcessModule (bcryptPrimitives.dll) + System.Diagnostics.ProcessModule (user32.dll) + System.Diagnostics.ProcessModule (win32u.dll) + System.Diagnostics.ProcessModule (GDI32.dll) + System.Diagnostics.ProcessModule (gdi32full.dll) + System.Diagnostics.ProcessModule (msvcp_win.dll) + System.Diagnostics.ProcessModule (ucrtbase.dll) + System.Diagnostics.ProcessModule (IMM32.DLL) + System.Diagnostics.ProcessModule (SHELL32.dll) + System.Diagnostics.ProcessModule (cfgmgr32.dll) + System.Diagnostics.ProcessModule (shcore.dll) + System.Diagnostics.ProcessModule (combase.dll) + System.Diagnostics.ProcessModule (windows.storage.dll) + System.Diagnostics.ProcessModule (profapi.dll) + System.Diagnostics.ProcessModule (powrprof.dll) + System.Diagnostics.ProcessModule (shlwapi.dll) + System.Diagnostics.ProcessModule (kernel.appcore.dll) + System.Diagnostics.ProcessModule (cryptsp.dll) + System.Diagnostics.ProcessModule (chrome.dll) + System.Diagnostics.ProcessModule (uxtheme.dll) + System.Diagnostics.ProcessModule (dwmapi.dll) + System.Diagnostics.ProcessModule (CRYPT32.dll) + System.Diagnostics.ProcessModule (MSASN1.dll) + System.Diagnostics.ProcessModule (USERENV.dll) + System.Diagnostics.ProcessModule (gpapi.dll) + System.Diagnostics.ProcessModule (wkscli.dll) + System.Diagnostics.ProcessModule (bcrypt.dll) + System.Diagnostics.ProcessModule (netutils.dll) + System.Diagnostics.ProcessModule (ole32.dll) + System.Diagnostics.ProcessModule (MSCTF.dll) + System.Diagnostics.ProcessModule (OLEAUT32.dll) + System.Diagnostics.ProcessModule (Secur32.dll) + System.Diagnostics.ProcessModule (SSPICLI.DLL) + System.Diagnostics.ProcessModule (DWrite.dll) + System.Diagnostics.ProcessModule (WS2_32.dll) + System.Diagnostics.ProcessModule (COMCTL32.dll) + System.Diagnostics.ProcessModule (clbcatq.dll) + System.Diagnostics.ProcessModule (twinapi.appcore.dll) + System.Diagnostics.ProcessModule (RMCLIENT.dll) + System.Diagnostics.ProcessModule (twinapi.dll) + System.Diagnostics.ProcessModule (NLAapi.dll) + System.Diagnostics.ProcessModule (IPHLPAPI.DLL) + System.Diagnostics.ProcessModule (NSI.dll) + System.Diagnostics.ProcessModule (dhcpcsvc6.DLL) + System.Diagnostics.ProcessModule (dhcpcsvc.DLL) + System.Diagnostics.ProcessModule (DNSAPI.dll) + System.Diagnostics.ProcessModule (mscms.dll) + System.Diagnostics.ProcessModule (ColorAdapterClient.dll) + System.Diagnostics.ProcessModule (icm32.dll) + System.Diagnostics.ProcessModule (Windows.UI.dll) + System.Diagnostics.ProcessModule (TextInputFramework.dll) + System.Diagnostics.ProcessModule (InputHost.dll) + System.Diagnostics.ProcessModule (CoreUIComponents.dll) + System.Diagnostics.ProcessModule (CoreMessaging.dll) + System.Diagnostics.ProcessModule (d2d1.dll) + System.Diagnostics.ProcessModule (d3d11.dll) + System.Diagnostics.ProcessModule (PROPSYS.dll) + System.Diagnostics.ProcessModule (wintypes.dll) + System.Diagnostics.ProcessModule (ntmarta.dll) + System.Diagnostics.ProcessModule (dxgi.dll) + System.Diagnostics.ProcessModule (WTSAPI32.dll) + System.Diagnostics.ProcessModule (wlanapi.dll) + System.Diagnostics.ProcessModule (WINSTA.dll) + System.Diagnostics.ProcessModule (wbemprox.dll) + System.Diagnostics.ProcessModule (wbemcomn.dll) + System.Diagnostics.ProcessModule (MMDevApi.dll) + System.Diagnostics.ProcessModule (DEVOBJ.dll) + System.Diagnostics.ProcessModule (wbemsvc.dll) + System.Diagnostics.ProcessModule (WINHTTP.dll) + System.Diagnostics.ProcessModule (fastprox.dll) + System.Diagnostics.ProcessModule (wmiutils.dll) + System.Diagnostics.ProcessModule (DPAPI.dll) + System.Diagnostics.ProcessModule (FirewallAPI.dll) + System.Diagnostics.ProcessModule (fwbase.dll) + System.Diagnostics.ProcessModule (LINKINFO.dll) + System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll) + System.Diagnostics.ProcessModule (dataexchange.dll) + System.Diagnostics.ProcessModule (dcomp.dll) + System.Diagnostics.ProcessModule (atlthunk.dll) + System.Diagnostics.ProcessModule (OLEACC.dll) + System.Diagnostics.ProcessModule (directmanipulation.dll) + System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll) + System.Diagnostics.ProcessModule (explorerframe.dll) + System.Diagnostics.ProcessModule (wpnapps.dll) + System.Diagnostics.ProcessModule (XmlLite.dll) + System.Diagnostics.ProcessModule (usermgrcli.dll) + System.Diagnostics.ProcessModule (mswsock.dll) + System.Diagnostics.ProcessModule (WINMM.dll) + System.Diagnostics.ProcessModule (WINMMBASE.dll) + System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll) + System.Diagnostics.ProcessModule (WmiPerfInst.dll) + System.Diagnostics.ProcessModule (pdh.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll) + System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll) + System.Diagnostics.ProcessModule (Windows.Networking.dll) + System.Diagnostics.ProcessModule (BiWinrt.dll) + System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll) + System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll) + System.Diagnostics.ProcessModule (NETAPI32.dll) + System.Diagnostics.ProcessModule (SAMCLI.DLL) + System.Diagnostics.ProcessModule (SAMLIB.dll) + System.Diagnostics.ProcessModule (wdmaud.drv) + System.Diagnostics.ProcessModule (ksuser.dll) + System.Diagnostics.ProcessModule (AVRT.dll) + System.Diagnostics.ProcessModule (AUDIOSES.DLL) + System.Diagnostics.ProcessModule (msacm32.drv) + System.Diagnostics.ProcessModule (MSACM32.dll) + System.Diagnostics.ProcessModule (midimap.dll) + System.Diagnostics.ProcessModule (resourcepolicyclient.dll) + System.Diagnostics.ProcessModule (BitsProxy.dll) + + + 61568 + 61568 + 316080128 + 316080128 + 857648 + 857648 + 455720960 + 455720960 + 398323712 + 398323712 + 2204288917504 + 970694656 + true + Normal + 316080128 + 316080128 + chrome + 65535 + 1 + + + + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + System.Diagnostics.ProcessThread + + + 1747 + 2204143845376 + 825622528 + false + 112414720 + 112414720 + + System.Diagnostics.ProcessModule (chrome.exe) + PT11M7.53125S + PT21M46.28125S + PT10M38.75S + 1770664 + The Living Tombstone Radio - Now Playing on Pandora - Google Chrome + true + + + + + chrome + 1 + 1747 + 2204143845376 + 112414720 + 316080128 + 61568 + C:\Program Files (x86)\Google\Chrome\Application\chrome.exe + System.Diagnostics.Process (explorer) + Google LLC + 1306.28125 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + Google LLC + 5.484375 + 76.0.3809.100 + 76.0.3809.100 + Google Chrome + Google Chrome + Process + + + \ No newline at end of file diff --git a/__tests__/Samples/Get-Service.xml b/__tests__/Samples/Get-Service.xml new file mode 100644 index 0000000000000000000000000000000000000000..d8181a5217af6a1d901f7f7abfa69d5ccdaded1e GIT binary patch literal 148546 zcmeHQYj52~lI7BguCB=XbXb zTjhRKb+OsaOT7reZe3lnNmf@?pE_0D{J;Nw(EZT;-2G2?-mP^nyMykGetXxQbjRJd z-Iv{Z_f`Mzo4);$j`^)S>JI7K^Zxs{-39%ecK^|RO+V+|tL`oJan$Y8?_W{-j{b5+ zy`9s)H+1Az^!bGT{xzL*(tW(V9?m(WpRc=(?i>2qqTlfUm)*ne-?}g8s%stJ=UVqS zI{HobqLjuS4g#dwZ5V`2&*03CR>PdPh(A3w{6SQY((>FX#QI3;OK? zJ++fIMgn)|^e~pVyGq(4Yl)My>*bXC_WI*TVUI@RS+6^fNixTD&He5@9eY4`a!j)4 zF~!}!r@ulA-}ExXF}VI-QNPbg^6%*>Ueoh`q`uG(q<}uh^m0MxpBA3|{PVMY*UR>l zMt+}0{u%v$bonf?^w%Q!uc;%j*8Pq~@oD#a>Rpb;b5$BnTUgTH(X~(MALQ%wJnrY5 zo-ei7_5PW|k@aJ!S$O{Vob|=`Fy7MttNZV)1%>yTdYDI~1!w)ZIBk|%YMnh~hyGmn zq0}Dzw|}Lvd_hwGS{=WyFXsh$Zx84^9#{An_2tT7@FIyV|p+J3zF-s5>~GkZ7wOlX0A zSC~EXcNO-KdfdmP!Jo*cFGw3c(C7^NW$umJ2baD^_tSh7w-3ncver%Mx4D0A<#lTO zIQPb_)@!+6=U%uCEimur{Ro}VtP6j0+FR-?l4Gj*7(LBm_=?>ePoaWm0l=e1kU-Asd12V%LdO{lhD|xsxLIQ{VEM6)x?iXVQWWBPHCMX62Z_2orBr#a03 z_rBLnib;Ry@q3I9|3F^UAAvan(H2KA952@05uWjko-(|fM|~`TXc5nkxVpUWXLS7G z=h^c)eL{p)GV^16ACM0Y&*%7PpZ*HecUIIB?$(OSVoiG5drJ-b$H#djIgO<=N^-Ls zKK+a2{;nU{*K|)IGoZyRu<{Z-^)*FPmKTP!9Nrs`2zPqRuw-Y=tM!QRO|K;f-9O2D zfDhp){)9f^c_a^D-(#t^I33;ltlw9U4u{!-P>c2Zho>uz`(B1J)bbD~wkl(1$wA53_ znwN|0@7*9>`(q!6JnbVp=tGH=phI)$&YUQXy;jKK*ZC^%Gu{0!2rQ31*c*jNIz(X8 z*mNrzgFVlI#w?q{cR3`N&X2L(qzvNytaoyFE(36c-)R*$1DarkY;dNZGkD_M$)=x`k*tFBz$p;o%3w79j?GNcm7a z5r0atGrlX=voMbFQD&+^>y(8>l$~CS^+#q|Z8jQmY0){p)0&aJ&AR1z2#u+5(n|Sz zeN0)q*1MevwN3IFQq%I;JKek4EOM)+c?7`u_(kU+lQ4&m+;+-GjrD084O$knQbVj( z9gBrg&+!lsG8|406RjdTeDFE1SIbxdB}j~f=Z+aF{3V@VJbrOVjcan&X}(J54QIuS z=;Gsb&IxCvUdzewIkBH_=^CELmq&*F&CWE++}vHS2yyZ~pjwUhgsFfPHb_U}m>T+^ z#hhLz>NAAvgm_Z@32|dxPLOkeQrj8PrTXo!>0`s1d{yWXVkw3(Q%<)_q#XBJnv+^j zYV7!VojhvUG?ufD8(rT{(h>y>XUWFbIGxu3^5t zZRNRY%oj(OIR)mYkz<30I-_=ts`e27ASg!pv=G0_#)SfnLju8@Li`Z#uvF_WVOGi z|50V@Dm%txGteupylUn>WKrhJaW5HctqwBOB#eEjr_aR(VSi4ay!UJM4UDa8BLT$x zS}Y*%IgJgpBXU^EJ$2rSAm!Y-DYlF)MWTs(?$GjUdPKy}s6{0=liSN@yDaGdnd=DJ zjjY5@w}G7+;@;WzT+4AVII3~7(yM%=OvC8bYbLXIcaK$(jDUux+Sw8pG08E7*Q)1B zu<9v|cP$$n!vtiwq(3LWvO#P5QhoDYq&4oB*5PIbYhL#D)OEah7FHH!7L6yNIqfx;*P=&4T066?_XS48Rm&)W_=4W`iExylfTEVC~+L z(Q$2L>O7^KS6We*sKN-4|# zw%{Kt(?6aOX~{KddK9m^N?FIv%6Mx$23oixsg*hOqs{TUKWs%m&KJtKxE1}#2-C8@ zawg~zRSW&;hVwrqm}MT!7Ta{7!-M~LvO5C~dKR~dk97?N+fcoUD z>^R|k)_%c0X=NwSLavf?Ec4@Mc-;fGA|B`crbawlN=!Kw;*mSt*-^#9_i!DF#rNpg z2bG3yKV9tU^{Gdix*o=JR!y#Jt1^-=n}>D3=6oC9d+HBm{+8zsZpZ61pUEwHNLLHl zyF$w2(~1-B8?CMV;gRm>6lqVhR&n?`U=7mUtcN3ml725pzNh`nR@0wHxq0h(-tU?R zW+B|k6P0<`*Us_MSGU8}mceOA`Q_(%+sjPOWlvL0z;WxdeWaw6(lb-DnPv4&MW$I^BM>Jm*7CwE2gxnzrsP zZqi;>l4UM=-nI9fS6QzP)a zSCH4n+_S8Rmz9oXb8?7|LTn#mFuz*W%9D@3o`%NsI=iyIV@x%)`<2wB`26dS$>RB_ zOh&C3%=v}k2pK3TUi~TMJsdxKUzTD3S(_*O&wHhM44}O+Xq&?o_X99Mcj#UZQykK{*_BWvMeTJmxxMbMS4JhsAffe5vQ?I7+l?zqh-5 zEr{iD?ndqRcIAqRySnym$H)a++GIy6I5VwpOshoX5n4r~e^b%j+9!!?pKQLVeecPw z-d?14gujZj51I$_o-58S>?pZUOPlnVQPUzfgWw&(Z%D&%PqrS}m9R3)K27DT?6_I2Vwl;s?o0O@5{*h95wq0tdu=Y_er=z^ zM{z4{cp4wW{c|g?Q|EKIKW?>ty$@Oy*91LTDv`Y1aAXixn3P-nFr({7JJ0OeUVwYx zmi=ztEAWxrx;*DniL_KArSH{SDv{VmeA|xwclxz=68rmWxZh+fpdFE8H~3iZ%Tf$* zRV(fs>-C24><7ZW!?6TE3AZ;H2Momy{EXb%C}4bVo*&FdCO^?$teEfk-CX?s@6x@< z_};no8rTw}+$8@0AM}=n!+!sgBa-BETD$Xs+FT6Ba!Ok_F9Re0N@pL_zPM+Xzq_6H zw0I@$gFm~zcw`+XwBP;Gk8|C9ozoi9Q+l!^(iXPk@plB48kHeu)E;)OhW2g$w1|Ae z$hht<%c4A%QrO~ptFDZhuaZjo+>)_MEw?uM%`@kr#PPcob;|R4xO76Z_uPsX* z)lu&)mO3h@aegijbA7dz?$9CcUV%^lBES5OJTuOOzg8%glNNigzc?yL>(OY8$kE zE(lYe7VZ=n&fmj$DdvsW2tVUZk&f*K9}f=*iR+pe&wF*~X_fm9Nga1=(Dgu1p+=X; zw+=1ct7IRp2U@yU8R_2*v~*92Swqb8?2>m(F=z`~f>%Qfdyue8!+zP{8MAMA`xegQ z&na%gclkIc_C5}E+iy|1R~f4h^WQJGv&9NV*pJSk%5Z(Mc$ zOzL%slB);zW0JI+HF83nPm>5^$sRk|GvA zN@e~quDhw@eDm3;P!HVbUXNIL;aFUxt66uA-o$fhDa*1>nI?E9J9=atx_Z>L@FNR9 zg8gB%oGWW7w^zZBjQ9Sn=!h-&syPze2O=-qlUN?49wDKU?}9R|*rVpnf{;233pxyt zBD|0*SlmgHT}>|W*0PS9D@ciB4Y{mE4$r)N}Q@Veu-ePYJP z{za#KL{Nem{FC5lMyw^334CVQ!oS|0T$koUN@VKe#TM=hnuuDuo1%%#OS^o3iJVw- zT%PNg>W}ux{>Sd#HHXf@7rLFn&ifIWhv&+zn)T~yt(77rBM>s$?iu6N9S<*8tG%bE zKP>hscW>X$dQUM0*0U>ay_L1*!z@d~cez}e^oOA}r7Nf4_fQk7`#lRS-i^9!$fs_9 z16xlZ*|d(!dm7CbVa(+@8q)MD^Vezj0h~A2dNfEYpQ*L9X?$I_V*>a4-8QjHS&e*J z_RfmmyFRpAa_XhaG7Wg99CMtjCq9LY;^hB9(WYb759tb@ zh#zou?`h<@*8T1>Cc-E{Q-7aDLFp`4!`efe@;N0-tLzMS%g#GKH(OI>7>-KJM@vr- zYPyDAQwhiYjp4WRxsi4m>$n9d%-?^UM_ebCY?yJk?o9V7jQqIOe9Rfy*DH#;T-0X! z7w(5!+u!g}+)DeN#{Y2t+{)|J`6KR+Tdm(Q{)zkHHnfbqzk;URwrZkS=QK-a8FA|^ zr;Sm8rR5?Ez81HZz1iNDd*GJ6Z{9QTk=#Nz9?}f;ie{%HV$}AD(>tb5Z?m%xpP9C< zC&$fvPqu#1NAy^Ogq#VmPl^1|D~???w|6x>%j#Ja=4X$37HQcr+Ub)=79kd>@eb`Q zit`LII*|61Mhn^zIVOaU_5MsEf#K|f<(cY{!1*P|3BPba{^5i$!8`gJvNNB0>%Tkb zV0^x7{_Gk1$^-Jv(4ut2(paX{*L&S`b8TH5vwov;7c$bmPP1Z7+{K=T+YoKWaZ~7f zhkZbaTv82+uU8(Yts6WrKNq)_Pn-v>ji0x0@3$9KX^e6C{`h5j<`IPRhD-K}?Llip zAFv9mp8|#1tUEsytS07c`5SI=goVN^yR*)fzRk{Mtyku1?n*8T`Jh}xZu#`7b6Mq{ zsSE}CjMo-1y3nZkGG6OSM#9@gzGBI?J&Z=09|STvCT@bO1LP5QHgK~+GB-2ZHOz6h zd(m(DcLm8<7Frm4P0iDJ59jWLcN0N`EOQfe*h=kK2pU z=@`EqaLI+0tXvIe`aHK>F7?t_((6uJ?6}JOjI;~*M$Hnu&-6I6CKd}vBaVea6jnYO z-Uc+3oQ^?!#q#KD!^lZlR&PgJ%!SvCLcA)9`H%PHJHEW+K;F-Iicrz+k&*Kghb zT|r(OMxC=IpBCh0G412A!@N6NL!0*W<8*?l;?!m-Cs@x3wa# z4TTA_G;R#?dQTqn9U=Sg346WnS!C>keL?Sc#``u8>2I7Vv@O)G29VkFX|n&a-@0tS z*3Sh=<+Qi>p?p9%!{_mqtEPNSy?!K(#a@ss`!yl`HAViq*2c499b3Oq$x@Wf^}5G& zsEhADjWsq5UclqBd@QS50H4V%Y$%Os{ivK%=BwoGf!rInwk7aU+)B-x#xl5nZsm3A zEQR~yR_nLia<~_6TP+EmRJ&{p2g8t>v$6JCZ%QIt)3_q(|bj71^Z6 zhtjW!bgcg3I3$jI*bjP(s~N-i3S%N2$!nxf!k?!f#k_aqYjTUx!5Tf5*6@s7BE`6O zS1I(I=BH9i!udG%cGd=IS*%jYgw~|zrQ*x!MM7(y6re#G^DiuVMA1JB> zx9|6MlPdr>E4jNCZc6j?w<#-#H^I%rUg@*iSiNgu_ikQpu+^_lF~`BD$~jKXY1$m- zJ$o9-Zz`;*g`)MyeVRz!j?85wJ53}m`>l(-wSLMY?GRVha8wv|EuQcr-;(p&R2WXi zPL{UVk#kG7XvE2Q~|u$5Lljn@gUf#2nI z>by`%zvW&@_U7%b#!J;R>GDou^jgOdZW^^%@``yr+xBy^r&2bC&rG=`+aK{+VT<{p z^r{+y2>S|u59h6`;3S8=gElLMPk`U2^Way>RZ4W2KBs$Do8t)22}d`s=y*u0TCnQz znBv7_stn8FkFYm)b?-sqdD2Im4?BBjlk&K)Z0y530yB`-sp}C_S>NMg9VxB&{IXp@ zWH0$$LFBPEL&nF4nxXT6Q(0zv?6lceMh;sCbl86S63^&;iHx=KyqK43ewNW=FFuo7 zEf$OO1`A$dS;neIFGvDXm!akRYqM<9^_@uN7&kQ zo3l;BaY{HZ=i?Hr^t&L2=L4Z8?8?Xz#){HI`r8@(4SO)gvS0Nsj9V+slSr+H2h{Z3 zdq&S7)o`HUSi~_;h?r6-OcYhO_S=q{IOmtItMvCTy~l7p?|5&* zqsXo1UCwBw!LkqIUS@R_OAhVApX4>0a0QBrsrS(JWGvtn1VmK{*~4#hiupSZuPry=sw57665(33>3ORTn)?;Uy6{$v6_a*211_D_o{!gXQeW9z{2JyVnJw zsh3pQ@e}*TJ*0x9;dtB2dJ zDe%@_yBI0?Gx;xbV5dC8XX*WdomRPr&y@bL9bGx!DCd%PbR}6YOXtR*tM6zB8TW>& z1vee`*b;Kk_~a13=kro~l#{xk`ic|6t-oI8p}r%$>M~VsmBB0e{E4D%6lJVx@X4Q@8` zv{M^mll??2^3cCKt4bzEm{ zGqyata%(fVd=$5`^5ZtGlpe0AV>xhJ7Rf+UmX$v#dtDzBXWv(^E7OL0gAs!`eLrX?1wX6^xE445a8_!5(Jxzg*;Ta@4<}v10vWWZ* zw>ZMh^Ewj1_j9cL*-_s2;_opZACJ$m$ojG}9N|~8T*WSRJCzLF-Q^Enxu!69#Qjv9>Jxt&#uCATG(q$UgZhZpgdm~ z1j@s^$i5|`vft-Yej(oAq~F=)HO-b-?*lFYt9|eekAwd68cF@EuRS}bS|G&e^X67| zE16*%)ia8h769ASbY8RB)vf>8qtRe(*L?u94{g=|yOk_*nRIo`^$PpJqnK=x9~~n+a_YHD!)%FBDgPiN6S8Q{Dzi=J#iZ0=k}Q42xt0O=QK+XwaoR) zmeXqaSoLe$8DHC)!EH~#J#fo@x9qy^c_Ec$-H(jR%Cse?g?=4CxC7h5o}}49)?99Z z4N84|4)=3k+=iS}t9NK;Pj)l=0r1^&D`N%zhFc3q;TU{B2Ya$>WMnMgc30RFRQl)U z0!uzE?8$B4N)E z{If@KKe&Yp`sRfGf4i&*Vn;c4o5nn23i%ab&}T*pw}FC*L7=y z?p3nGb~M1~|N62ns~d+n1}v{{xu-Cy9$)2okkySu8h_eruJ2XycjK`aTjtGLbA7Lp zfzxM~P%~2hj<<}v+?@3N8n@*$dj8D$RtMcvDiOn{dqyi)u{t$flRX|kEi0=f8xzi3 zVMJPs5%iggN6^hw`1CJAAnz#0fL#+(kBN-FJL3s``z@iwb;8)XpKC=~_mrx_sZbWy zr~D5gtoNB*ifx^Cou0%i)70h3e!&#ICzR;kp?%!PkHht?7MdD9+jChKmKu_;u8Z-k zR*RbIR(k3>?7f}iNUkqxnnL2KwZ|jynyPT1W10u3<1Wf%EW)fD=mO9G{O_@3-o6*+zkK%HO3E-+{OE zoyz<8vDZ4h|MgS%=ySD4ojjgVFR!T=-~mJ(;E>*5dZF>seMD!T(#|xG`#Ka?g;IB4 z$Nin063#lINa3hbQqSl<_UWlU&{Njk$1{@7`^s}4lVA9;@#?R-pZihqZ~U!$4tTC- zG|shl13hVzB<8laG#;n4uDpIcp3wQ>+Nm1P8{6XnJ=ZUEUkBZvdY!A2?;h!?9UGKd z6RuzCU2&|#GI_KUJ}vX1HPuht54YjW86&_j>h#{ORIcf~824SyzTG!?P<{q(r=J;h z#Lw5`ws!p7>IUA|XSM4y{z6u9M!Jpa!WwIf^+a2h0oy^=qFh7bx2@g&T|{fF$i+5n z@%S{Bp>Y;8tjQR+c)vW>Z*GV59N*`Bo^`JD6*i-Nzmkz3&uGhZ%BEMhB_>X6_{ay}QH36P(ti0xb3(NgV{(n5r&G`JNkDP$~Yb4aN z!|FJXTenX$o+($KHNH-u29Hg#KI2|rkt4k(o-X#1_)Ci3yhls9sryP+#lkIPss|8d zx&4{2lHd)^_imTbGm3riW)bk+Zsme)l{OP4nVV^tC)sZu)1>u-sMs+}!%S6(bn;vh z_JF`{Sn&#u7rn%PrP#===E#jf`3ertxYwZl@L6I69-{lbK0Ytg94-Fw+TK z_!+e|)1Hs5{QXO7&F2$J?o78{K9gIGNzT<<+m_2ca%)>MAH}V-oM|kZ`{!0(r_R#3 zKW?>t$5=l1!)<6ic~9^i@nk>HoZxNRtQ0o)I_VSjm_kkh}iJLb$xt3SwRmiTG7wdT+|R$R{ge66t6X8-W}@b_5qVT`ld z*x#dc*xB+{)-(!>$0(0p!{hLK4$aEr{45^MyKOe+=BhSkV6I&noV3_0$XWKP^0o2m zuVrpcHP?T>nz@jLI8 z=QjCj+%A~lf_Ojd27S<1bLhNR8Il~wSn&vOTgPDW+1z40bBq=r!)+@jh-aiS8BKu% z;2DMyFC-DOU;NzMmgv6sXE74kpj;m!=6s}%t5`_CKHj!`#DWWWbY**0xZp>My4_x@ zugTAx^!u$|&|hl&dl;9^7hzi(S7!H&r&~|~Y!30UZF4;CmhCN3Hg*8U8}ODW`}(cn zuSb9F*(A2HIp$Z)zpKx|*S&`2CGJKJ9`ZppeY|{Ha`2YlDZ?;+#o63%@`S|l z`%YOJwdCQ?NYkWmv7(k-loBGLkg06X5Ka-JV80~&Ipdf_i$ScIL+-<5>6;#7;EZ&= zr<2;p{tZlyZIH)=T(q67lSq4-?40bkE*q!ybMZOvKF!)Pyea&M@ILC?U6xJCSi{bK z^c_}?*EV6-#W)jo-fNnSPV?DdOJi(geErwtqpl>>;t~m`@{A>(TTO;pAfNMVm$5z{ zJ63_CDLLv_m7PGw_?Yw^|Fb-qx3oP8$7|f$o`sL%R$B5jo`(D9R$iyh^KgIMYWzWK!~H%->#F#&BZA!A#UsaFZaML&v|)&%tvyIQF=)K_Q@YUryq=PiJa2&u>#9g z(3YM(hu+P(62w=7Xf@k^AnWl*SP^B3{6gDu&v-^yYsn3LK~m2Dgi;Hmuy&u(8ij2T zSFFcB>C?b!;;2kJ!eOqw7w|J=iptgtSZm8)l|F^US>Y)BosjVvRRN!qR%11^d-pA# zU7i<4dQujp`9+*5@l6Rn8;Zc>J?+u8T)f0PugM)phU=+I`du|T%a2o;7vtEVC3;*p z7*i>u+G=OnQ;rQzkL1s8rhQ4)`;m0|jL^h?l9ofmUsun%KqTjv*6}?>Gao8@a{C4x z(*68G|BfqrSum)p%P8|?H5O8jM)RyW>nFFCcefcA?t$A{H2RDX=#xqvd`eYGztQJWcF1@t4%oc@HOJewiDxP@o>;Yqp7<$R5$oK{0L})+jr#QWvKW zN7S<4y1a?jkB`Jl?!&KZ%4bI8j-Q8*f-PAise?H==%dX~^jVI97J+yzX^YA8 zxjjp>?D&G?30bS)kdV}Qk1M=HYjP2x?Z}TiSvsEVP z>xR!#_O|RP#__H^=G@ltuzWVR7|9$j%g1n=<7xSOZbK`Z!mg%3XEr16?>yyo`5SJB zG#}sRJfU^2^d5FLY@;&UGd>$8ZL|#6`Mk|~LvA8Q6|v9u(U{EKY*fCdxg{HB#erjG zHvg){jmq^ZwqbL)I8?k?w3b3QcZGsiOA?Y?ro(|1t8Q?=y0 zHk7wmTlhuiq&0oo>m$!c{aZXP2ut|)tJs=lN1T$corZ6g{nqizT0a*(nnL_PR3jVe zTb@0B)W19D1!?oz=g8iz%YZg$C?}oA;?*0a>k~J69n|A7OK0r3kK;TYKsE9V^NI(Eez zFy;_f?8ke_X0a^LVz$V|dEs$>s;vrZN6mF$Shb`Vmx0Wt+WhBc)n!*H!UIWl4qSQ`LysQ zx4n9Jvy!7*7?rf10G?nvMg@6ljV;i;>l9VQF2a)DRC-U%<9Saf<0M&~ZrQ3H7in>j z%z)WG%#M9ztT0WiBm1q3ZM1&I#4=%YpO0N+wivngn%ukBh?ZRYW+mTS#)#uYWuC%O*CAHX^agOhzoLSv6m{s}IQ}ZhlZ=~16=h~4@xe1viE|YY~c7!aJ z&+R@WmTH5d6Wri!IxcgV$~t8(u>T{nA^ZJ)?|AYrX*5#YD|^Y~ zV0mnutxLb>&!PR!XJPFeg|n_Qnc0#ku>tS;47RQ`FEDJ;cKQnQ$+=W79P)b z^ZjFtAJPsq=^BKRx!qlV{(R0VG1Hu@lNLP1TF9ErHR~~+YV!wEASRow=cj;gT`gkD z=NkMye1QS}rwxwshXDt6$qPGC%T)c}-t9p7+GI zf;BwpXLcU#7!AQ%OXm4>Y~x=j5U8)0%>ET??75g@w{~ z_F@}B8;)s=n#y?I@^P60N5TGw<5b*J8;(K`b=5Im`)VTIa5Q2s8IDa^v^AaAm3wBf z2Gx66J1+wH=PLK)bJ-P0*u5?niCgzSz5+?cm1S7gS0G)*imk26ntwZ{(V~E|*m$hW z=3lY3ZRD3Mjaur9(mV_7e5(4QQm;70JhYnK3AdGuhNVw>Jg!;ZE6R5rQDwyk+A|C? zw{6U>myj{&H1!d(-@1ATtsg`(r~NE2yh0+JgY#8Ic%Q*3{rj2nh==s=g5Fk-%)+b7 zx96PGC&$n2(@yiqGnVe~k*k?^*WOR#jxj(l5Y?KzN9s^?mCn#woES>@5_c4cMr z>Li@5*|u@fc4g)9UBN}$2A5=6Pzx@)?UmWvmAeBh$Z3_xsmyD(<0j`ZW&93A636RW z{OA3)yOSrh|L?anr(;JB8KGJhT8^9CERTJ2&S(ygXNt7KZNXFrJ+|Cavfg7bRhhI) zX7*a-RL2*rZeE`QIgQcu64}SLG6q%Ut8^`!UY+#Ep{kuqZs4w + +if ($IsLinux -or $IsMacOS) { + if (-not (Get-Command 'Get-Service' -ErrorAction SilentlyContinue)) { + function Get-Service { + Import-Clixml -Path (Join-Path $PSScriptRoot Get-Service.xml) + } + } + if (-not (Get-Command 'Get-CimInstance' -ErrorAction SilentlyContinue)) { + function Get-CimInstance { + param ( + $ClassName, + $Namespace, + $class + ) + if ($ClassName -eq 'win32_logicaldisk') { + Import-Clixml -Path (Join-Path $PSScriptRoot Get-CimInstanceDisk.xml) + } + elseif ($class -eq 'MSFT_NetAdapter') { + Import-Clixml -Path (Join-Path $PSScriptRoot Get-CimInstanceNetAdapter.xml) + } + } + } + function Get-Process { + Import-Clixml -Path (Join-Path $PSScriptRoot Get-Process.xml) + } +} \ No newline at end of file From 3a6946466fa4faf8f317f62c2367c3074af5fa19 Mon Sep 17 00:00:00 2001 From: ili101 Date: Tue, 27 Aug 2019 14:27:33 +0300 Subject: [PATCH 08/14] xlsx case --- __tests__/Compare-WorkSheet.tests.ps1 | 48 +++++++++++++-------------- 1 file changed, 24 insertions(+), 24 deletions(-) diff --git a/__tests__/Compare-WorkSheet.tests.ps1 b/__tests__/Compare-WorkSheet.tests.ps1 index 94e1112..60a1582 100644 --- a/__tests__/Compare-WorkSheet.tests.ps1 +++ b/__tests__/Compare-WorkSheet.tests.ps1 @@ -19,7 +19,7 @@ Describe "Compare Worksheet" { $s.RemoveAt(5) $s | Export-Excel -Path TestDrive:\server2.xlsx #Assume default worksheet name, (sheet1) and column header for key ("name") - $comp = compare-WorkSheet "TestDrive:\Server1.xlsx" "TestDrive:\Server2.xlsx" | Sort-Object -Property _row, _file + $comp = compare-WorkSheet "TestDrive:\server1.xlsx" "TestDrive:\server2.xlsx" | Sort-Object -Property _row, _file } Context "Simple comparison output" { it "Found the right number of differences " { @@ -56,13 +56,13 @@ Describe "Compare Worksheet" { $ModulePath = (Get-Command -Name 'Compare-WorkSheet').Module.Path $PowerShellExec = if ($PSEdition -eq 'Core') {'pwsh.exe'} else {'powershell.exe'} $PowerShellPath = Join-Path -Path $PSHOME -ChildPath $PowerShellExec - . $PowerShellPath -Command ('Import-Module {0}; $null = Compare-WorkSheet "{1}Server1.xlsx" "{1}Server2.xlsx" -BackgroundColor ([System.Drawing.Color]::LightGreen) -GridView; Start-Sleep -sec 5' -f $ModulePath, (Resolve-Path 'TestDrive:').ProviderPath) + . $PowerShellPath -Command ('Import-Module {0}; $null = Compare-WorkSheet "{1}server1.xlsx" "{1}server2.xlsx" -BackgroundColor ([System.Drawing.Color]::LightGreen) -GridView; Start-Sleep -sec 5' -f $ModulePath, (Resolve-Path 'TestDrive:').ProviderPath) } else { - $null = Compare-WorkSheet "TestDrive:\Server1.xlsx" "TestDrive:\Server2.xlsx" -BackgroundColor ([System.Drawing.Color]::LightGreen) -GridView:$useGrid + $null = Compare-WorkSheet "TestDrive:\server1.xlsx" "TestDrive:\server2.xlsx" -BackgroundColor ([System.Drawing.Color]::LightGreen) -GridView:$useGrid } - $xl1 = Open-ExcelPackage -Path "TestDrive:\Server1.xlsx" - $xl2 = Open-ExcelPackage -Path "TestDrive:\Server2.xlsx" + $xl1 = Open-ExcelPackage -Path "TestDrive:\server1.xlsx" + $xl2 = Open-ExcelPackage -Path "TestDrive:\server2.xlsx" $s1Sheet = $xl1.Workbook.Worksheets[1] $s2Sheet = $xl2.Workbook.Worksheets[1] } @@ -86,9 +86,9 @@ Describe "Compare Worksheet" { Context "Setting the forgound to highlight changed properties" { BeforeAll { - $null = compare-WorkSheet "TestDrive:\Server1.xlsx" "TestDrive:\Server2.xlsx" -AllDataBackgroundColor([System.Drawing.Color]::white) -BackgroundColor ([System.Drawing.Color]::LightGreen) -FontColor ([System.Drawing.Color]::DarkRed) - $xl1 = Open-ExcelPackage -Path "TestDrive:\Server1.xlsx" - $xl2 = Open-ExcelPackage -Path "TestDrive:\Server2.xlsx" + $null = compare-WorkSheet "TestDrive:\server1.xlsx" "TestDrive:\server2.xlsx" -AllDataBackgroundColor([System.Drawing.Color]::white) -BackgroundColor ([System.Drawing.Color]::LightGreen) -FontColor ([System.Drawing.Color]::DarkRed) + $xl1 = Open-ExcelPackage -Path "TestDrive:\server1.xlsx" + $xl2 = Open-ExcelPackage -Path "TestDrive:\server2.xlsx" $s1Sheet = $xl1.Workbook.Worksheets[1] $s2Sheet = $xl2.Workbook.Worksheets[1] } @@ -117,7 +117,7 @@ Describe "Compare Worksheet" { BeforeAll { [System.Collections.ArrayList]$s = get-service | Select-Object -first 25 -Property RequiredServices, CanPauseAndContinue, CanShutdown, CanStop, DisplayName, DependentServices, MachineName, ServiceName, ServicesDependedOn, ServiceHandle, Status, ServiceType, StartType -ExcludeProperty Name - $s | Export-Excel -Path TestDrive:\server1.xlsx -WorkSheetname Server1 + $s | Export-Excel -Path TestDrive:\server1.xlsx -WorkSheetname server1 #$s is a zero based array, excel rows are 1 based and excel has a header row so Excel rows will be 2 + index in $s $row4Displayname = $s[2].DisplayName $s[2].DisplayName = "Changed from the orginal" @@ -131,9 +131,9 @@ Describe "Compare Worksheet" { $s | Select-Object -Property ServiceName, DisplayName, StartType, ServiceType | Export-Excel -Path TestDrive:\server2.xlsx -WorkSheetname server2 #Assume default worksheet name, (sheet1) and column header for key ("name") - $comp = compare-WorkSheet "TestDrive:\Server1.xlsx" "TestDrive:\Server2.xlsx" -WorkSheetName Server1,Server2 -Key ServiceName -Property DisplayName,StartType -AllDataBackgroundColor ([System.Drawing.Color]::AliceBlue) -BackgroundColor ([System.Drawing.Color]::White) -FontColor ([System.Drawing.Color]::Red) | Sort-Object _row,_file - $xl1 = Open-ExcelPackage -Path "TestDrive:\Server1.xlsx" - $xl2 = Open-ExcelPackage -Path "TestDrive:\Server2.xlsx" + $comp = compare-WorkSheet "TestDrive:\server1.xlsx" "TestDrive:\server2.xlsx" -WorkSheetName server1,server2 -Key ServiceName -Property DisplayName,StartType -AllDataBackgroundColor ([System.Drawing.Color]::AliceBlue) -BackgroundColor ([System.Drawing.Color]::White) -FontColor ([System.Drawing.Color]::Red) | Sort-Object _row,_file + $xl1 = Open-ExcelPackage -Path "TestDrive:\server1.xlsx" + $xl2 = Open-ExcelPackage -Path "TestDrive:\server2.xlsx" $s1Sheet = $xl1.Workbook.Worksheets["server1"] $s2Sheet = $xl2.Workbook.Worksheets["server2"] } @@ -188,7 +188,7 @@ Describe "Compare Worksheet" { Describe "Merge Worksheet" { BeforeAll { - Remove-Item -Path "TestDrive:\server*.xlsx" , "TestDrive:\Combined*.xlsx" -ErrorAction SilentlyContinue + Remove-Item -Path "TestDrive:\server*.xlsx" , "TestDrive:\combined*.xlsx" -ErrorAction SilentlyContinue [System.Collections.ArrayList]$s = get-service | Select-Object -first 25 -Property * $s | Export-Excel -Path TestDrive:\server1.xlsx @@ -205,7 +205,7 @@ Describe "Merge Worksheet" { $s | Export-Excel -Path TestDrive:\server2.xlsx #Assume default worksheet name, (sheet1) and column header for key ("name") - Merge-Worksheet -Referencefile "TestDrive:\server1.xlsx" -Differencefile "TestDrive:\Server2.xlsx" -OutputFile "TestDrive:\combined1.xlsx" -Property name,displayname,startType -Key name + Merge-Worksheet -Referencefile "TestDrive:\server1.xlsx" -Differencefile "TestDrive:\server2.xlsx" -OutputFile "TestDrive:\combined1.xlsx" -Property name,displayname,startType -Key name $excel = Open-ExcelPackage -Path "TestDrive:\combined1.xlsx" $ws = $excel.Workbook.Worksheets["sheet1"] } @@ -215,8 +215,8 @@ Describe "Merge Worksheet" { $ws.Cells[ 1,1].Value | Should be "name" $ws.Cells[ 1,2].Value | Should be "DisplayName" $ws.Cells[ 1,3].Value | Should be "StartType" - $ws.Cells[ 1,4].Value | Should be "Server2 DisplayName" - $ws.Cells[ 1,5].Value | Should be "Server2 StartType" + $ws.Cells[ 1,4].Value | Should be "server2 DisplayName" + $ws.Cells[ 1,5].Value | Should be "server2 StartType" } it "Joined the two sheets correctly " { $ws.Cells[ 2,2].Value | Should be $ws.Cells[ 2,4].Value @@ -248,14 +248,14 @@ Describe "Merge Worksheet" { } Context "Wider data set" { it "Coped with columns beyond Z in the Output sheet " { - { Merge-Worksheet -Referencefile "TestDrive:\server1.xlsx" -Differencefile "TestDrive:\Server2.xlsx" -OutputFile "TestDrive:\combined2.xlsx" } | Should not throw + { Merge-Worksheet -Referencefile "TestDrive:\server1.xlsx" -Differencefile "TestDrive:\server2.xlsx" -OutputFile "TestDrive:\combined2.xlsx" } | Should not throw } } } Describe "Merge Multiple sheets" { Context "Merge 3 sheets with 3 properties" { BeforeAll { - Remove-Item -Path "TestDrive:\server*.xlsx" , "TestDrive:\Combined*.xlsx" -ErrorAction SilentlyContinue + Remove-Item -Path "TestDrive:\server*.xlsx" , "TestDrive:\combined*.xlsx" -ErrorAction SilentlyContinue [System.Collections.ArrayList]$s = get-service | Select-Object -first 25 -Property Name,DisplayName,StartType $s | Export-Excel -Path TestDrive:\server1.xlsx @@ -282,7 +282,7 @@ Describe "Merge Multiple sheets" { $s | Export-Excel -Path TestDrive:\server3.xlsx - Merge-MultipleSheets -Path "TestDrive:\server1.xlsx", "TestDrive:\Server2.xlsx","TestDrive:\Server3.xlsx" -OutputFile "TestDrive:\combined3.xlsx" -Property name,displayname,startType -Key name + Merge-MultipleSheets -Path "TestDrive:\server1.xlsx", "TestDrive:\server2.xlsx","TestDrive:\server3.xlsx" -OutputFile "TestDrive:\combined3.xlsx" -Property name,displayname,startType -Key name $excel = Open-ExcelPackage -Path "TestDrive:\combined3.xlsx" $ws = $excel.Workbook.Worksheets["sheet1"] @@ -290,12 +290,12 @@ Describe "Merge Multiple sheets" { it "Created a worksheet with the correct headings " { $ws | Should not beNullOrEmpty $ws.Cells[ 1,2 ].Value | Should be "name" - $ws.Cells[ 1,3 ].Value | Should be "Server1 DisplayName" - $ws.Cells[ 1,4 ].Value | Should be "Server1 StartType" - $ws.Cells[ 1,5 ].Value | Should be "Server2 DisplayName" - $ws.Cells[ 1,6 ].Value | Should be "Server2 StartType" + $ws.Cells[ 1,3 ].Value | Should be "server1 DisplayName" + $ws.Cells[ 1,4 ].Value | Should be "server1 StartType" + $ws.Cells[ 1,5 ].Value | Should be "server2 DisplayName" + $ws.Cells[ 1,6 ].Value | Should be "server2 StartType" $ws.Column(7).hidden | Should be $true - $ws.Cells[ 1,8].Value | Should be "Server2 Row" + $ws.Cells[ 1,8].Value | Should be "server2 Row" $ws.Cells[ 1,9 ].Value | Should be "server3 DisplayName" $ws.Cells[ 1,10].Value | Should be "server3 StartType" $ws.Column(11).hidden | Should be $true From cfd89f5afca33e31cabc82185e63047930291c42 Mon Sep 17 00:00:00 2001 From: ili101 Date: Wed, 28 Aug 2019 16:59:08 +0300 Subject: [PATCH 09/14] Samples --- __tests__/Compare-WorkSheet.tests.ps1 | 3 +- __tests__/Export-Excel.Tests.ps1 | 19 +++++++++-- __tests__/Join-Worksheet.tests.ps1 | 2 +- __tests__/Samples/Get-Process.xml | Bin 1853700 -> 587972 bytes __tests__/Samples/Samples.ps1 | 45 +++++++++++++++++--------- 5 files changed, 49 insertions(+), 20 deletions(-) diff --git a/__tests__/Compare-WorkSheet.tests.ps1 b/__tests__/Compare-WorkSheet.tests.ps1 index 60a1582..b4f2626 100644 --- a/__tests__/Compare-WorkSheet.tests.ps1 +++ b/__tests__/Compare-WorkSheet.tests.ps1 @@ -1,10 +1,11 @@ #Requires -Modules Pester #Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force -. "$PSScriptRoot\Samples\Samples.ps1" + if ($PSVersionTable.PSVersion.Major -gt 5) { Write-Warning "Can't test grid view on V6 and later" } else {Add-Type -AssemblyName System.Windows.Forms } Describe "Compare Worksheet" { BeforeAll { + . "$PSScriptRoot\Samples\Samples.ps1" Remove-Item -Path "TestDrive:\server*.xlsx" [System.Collections.ArrayList]$s = get-service | Select-Object -first 25 -Property Name, RequiredServices, CanPauseAndContinue, CanShutdown, CanStop, DisplayName, DependentServices, MachineName $s | Export-Excel -Path TestDrive:\server1.xlsx diff --git a/__tests__/Export-Excel.Tests.ps1 b/__tests__/Export-Excel.Tests.ps1 index 70b362f..74b0aad 100644 --- a/__tests__/Export-Excel.Tests.ps1 +++ b/__tests__/Export-Excel.Tests.ps1 @@ -1,10 +1,17 @@ #Requires -Modules Pester #Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force -. "$PSScriptRoot\Samples\Samples.ps1" -if (Get-process -Name Excel,xlim -ErrorAction SilentlyContinue) { Write-Warning -Message "You need to close Excel before running the tests." ; return} Describe ExportExcel { + . "$PSScriptRoot\Samples\Samples.ps1" + if (Get-process -Name Excel,xlim -ErrorAction SilentlyContinue) { + It "Excel is open" { + $Warning = "You need to close Excel before running the tests." + Write-Warning -Message $Warning + Set-ItResult -Inconclusive -Because $Warning + } + return + } Context "#Example 1 # Creates and opens a file with the right number of rows and columns" { $path = "TestDrive:\Test.xlsx" @@ -958,7 +965,13 @@ Describe ExportExcel { $path = "TestDrive:\test.xlsx" #Test creating 3 on overlapping tables on the same page. Create rightmost the left most then middle. remove-item -Path $path -ErrorAction SilentlyContinue - $r = Get-ChildItem -path C:\WINDOWS\system32 -File + if ($IsLinux -or $IsMacOS) { + $SystemFolder = '/etc' + } + else { + $SystemFolder = 'C:\WINDOWS\system32' + } + $r = Get-ChildItem -path $SystemFolder -File "Biggest files" | Export-Excel -Path $path -StartRow 1 -StartColumn 7 $r | Sort-Object length -Descending | Select-Object -First 14 Name, @{n="Size";e={$_.Length}} | diff --git a/__tests__/Join-Worksheet.tests.ps1 b/__tests__/Join-Worksheet.tests.ps1 index 35d029c..446e1dd 100644 --- a/__tests__/Join-Worksheet.tests.ps1 +++ b/__tests__/Join-Worksheet.tests.ps1 @@ -24,10 +24,10 @@ ID,Product,Quantity,Price,Total 12010,Drill,11,8,88 12012,Pliers,3,14.99,44.97 "@ -. "$PSScriptRoot\Samples\Samples.ps1" Describe "Join Worksheet part 1" { BeforeAll { + . "$PSScriptRoot\Samples\Samples.ps1" $path = "TestDrive:\test.xlsx" Remove-Item -Path $path -ErrorAction SilentlyContinue $data1 | Export-Excel -Path $path -WorkSheetname Oxford diff --git a/__tests__/Samples/Get-Process.xml b/__tests__/Samples/Get-Process.xml index 2895dc0523434e1779f4ef17bebee8e0666b6543..763098dfc5a080d13b06a5befe132db5d5d98193 100644 GIT binary patch literal 587972 zcmeFaS#w-RlD3KK&usn!O;=skBNq3ihE-++NlEDD)&xq`-w0zgE+EAg7Z^ZNV*U7; zd7tBOM#RZDOPmA&iRA_ZG835@t8d}%;qU+V|K8Ymu<>-`e>M&`&TRa+vA1!cXRkKi zZM@z1>&7=5=QqxFzvsHgZ}gepHr{N!*1Lz@`#*2I*U$dOUpD@%pTmu38$YX!Hycm% z{Hz{d=|2Z*?NGlj^vSb&{Z9Y?v%d3gkv+=i$|6}8S zsn;_bKF%{6kM!vm8(SOCyAhl#K4qWW*|@K7OnuHj`?rnTYVoie%PWoiwMP9J5M%VYWB?NeK$Mi`LLVgv#ymxjr7kOJK4zTr@gOR-8!*KZ`JNw z^>$CspX>Q+^|<=(@$`C6^Me9@?$%*bv$s_=8rjqCy+5Y;O|@wAx!+sI8(P_S+LiYj zQ2r(e`^^>y+p-?ef;f zMbYsY(I6bOsg;Db_zrx<-}mYX+P>EHW}mOMwE4M}AG%iVi2L|9w8{5hbh||Btk!0A zG`7w@8rpfQZ@<=e;O3G?&UdZmb4|0V@zn6=+v$C)qw$BD-N7J*<)fL;wLf;N^g%P; z(Yo&+tyYagm$g4d$*EQ3LZ713yQ`FaVdHWq4~-YbXp&a=l#QiEOC=p_YfWBgCC2ID zLL)s4f8NH&nh(p`d!p^Ww)lts_qO9FWbx{lk-q-_QVQoYv-MkDm3-~L@WIE9Vqb|**ByB&8y~4JG|4Mzvpubx@tlokU+c)TkKHby z57Wx#~Hty|hpEUfu@&c^-cBTH;ZGmpu~QfucF4^0~1 zFst($SM>`Q4D0Q(Ei6_0=B176`tF5^Z*PCr`dDLF)JTavX^tly-_q9Eu8r*(8lN`! zzDd&On#->fQvc$F)Hj=kGs??=y&2Bq)B;BTHlC>VzYvpS7XS$=gzdy2e{?@!^ zW^sQQu$Id6iPN%CV$E6_URVFlm<}o>(7cmKKK|pC+pFh~Wv3HgHRxmh?AJM^EbH;h zN&I#9b?78>RuTiPIp;)^)?}XK&v}kBsc}dypK50-9}$#TlU!*OseQCMXO+C|TknT7AzU$lEeKVM?6AB!*WGM&>|Wnzy(#E&)Euw+PdNi4X6v4Yxj@{{^ z*5mv(>#NhYF098>jq&Bc2pQ>j-Tq>?j*sn$=4qbN=L4C5+b>qmR;`DZ3-+e1>V$%P)zLR2c!cLpg3b3@I;(#EMFL*$&f4(F zCH){%TIVv|m(Pr|HZu2OcNS(1ot}qgx0%s0Cn$6#_Tnd5#P9S&gah04iOv*ANAnO9 z^&n2kY&NTsq|{E>J9*pq%{c`iyZgHJ>V$Uce}34zX;y8Eziytla(FhZ2mST+8Y5{R z4eS0vC-38J^^Y56M$aB-J>WQ7lPQn9t-13X*$#ZqU-x&3_l9ju`&N?tP&DyR&Q?SG zU(;WVVwFPBz3}M#_MPWzeGGB?j%<^D59YVz-1_|J1n2odtTu6pH+l~%;-OxVU&Rcr zbyE7W+OwUg+eu|_@8nA`AEbM$TF(e6x5{!>>>TB-GTxi=+P%=2@$gvoN?%@Fn~*QZ zW$}{}ad{@4j#FNe(Twd-mL~S*^KO*n!Aqv_>9NM&`We zbO`=WTCG_yXd?M(FT)z5m_$ zk;&S5*D`6yJ9DpSo?nWLL9V{+vPBx3L4$8FD^@Hm*AE(Hr-T z?~U)z{577-`)Liv^6t{7?uwJftjzRDIIffvLo0{0?C&YG&aQvzxMYlbqsLY65!@83 zIwiG(a)NSlJrXjfc zj^GY%2!|iQWrF#y;@na4g}n;hk$hsIJ3@DqJQCdT$L9|GlT-e5K4ZT8;Rr!LGF^`o zt!BHNR~&s=RA@L)Ca2QVjjR0o#`lT>S@t;b1#a&=>27I!x!BO}BkJ;#D2938?xJQN z^$d%P8{-z&JlOa@74NfKLx0zQSr2Z6k&W?M5tlc5-f!XmX^g}Cq>PQ5iWL2z46gsy zBRyjIJy5>N|D|XA_fGe0v-=$XyQTMTcmMlQanbG1&+K#mar7S^?LYs}v+uf3@$850 z85!KSx@Ql?Th=Pi+Q+}6ULI*gk2RA=8u$15d$W7}WB1Osat|ITV#>_8C38_ZgXHD6 z_w=25*j7KAT|dl)o*(O$hCj0re5W4o>b=MM|BgPfrQW~q`X}q2xH5MP-!B*ebG@fg zOw+|panQbYiTL&t(aBv=mem&6)tJac++WcD-EMtZO`EZ;Fr(Sk&u#7Kl6AFJyQR5p z>*qnYrZ@HXmS|;5qrIbNJ6h#OdPZOD?(HrU>iG8XrdIXgXBrybLGoD07~oDFw*|Ph z^PAR^JN_2UZXc7=&;4#@Hb;2;)uJ7``I*{~sz#k>wR$_^!Ecq5)jqyoH4@7u$|cf2 zI=a5C{elzPTQwQ;up1eCl+Pai*;>>l^|<`jR^pO!th6^g0B)zA(W-exHC~_7f5_z8>-2!-is+;#MRw zEVbM|1D9N--b*{4uT`>I+WV<#2sAAE=WaKrD+|^?r$QuhuUZJK;uU`U?<&`Zb#bQ*KCI7ky9NsLEhfm zqi=tEl<`O&_-=Qz{jDC~9esw(UurWxlfC+K0dM(==hXAKTYIcGvxrysVqMz$4@u7p zT9+R>nl(#m{QNX#C({}ghTdu=-bvm**XkXJ13sz`^iBKznU#54+_aQ!F7H{%XOYv2utizsGk$bBdsQV z-0SAydG61&R%VsAkKF0U&&I6Ju4Yp^gSWSSOF6Kd#u%UFA5*=AXFq2;a#hby)D|Y`q-TF zQg4Uy0Z!LPD%Y~5)zb2+c>w0L{ju{Pa?&ivzB^;|(`Vdmt>k}-6RGa?Ppv1ijn%HL z-6Oq+gymC6Kk8X<1D88`2Sp3xpPXLx;~h7*%2Hj{eAIrEXL>|+4?!*|@tUI-%u{zp z77kUvsAK&|e|I}?Lb{pF**ULGX|MCur0x^eG54C*-T5EY!msMjb{E%9I*KBRI7owB^b5_`F)&zQbvro5&F zR^yfakKbwzPv<@7&%eYdO8K-Z!JHP#&(;51^9=q&XF%ctE#F`ztqSYmfSgJa)7zc9 zzxO-cc3XRU^JuRQI;wg@d-vd#Lwy*xr+@*7skLrH)9L)a?iEAknT8>zY} zpLg0gncmmwZB4dmsPR2PuNLoJ?g`x9*(R$+T?(4;J?Q>~g+MoAjD?QQo zeeT2Gt8)c0Q?o(wzx7A4WRB$spn}!4C6ci9XCIuxuAE0yw&oMM-(lef4|8>_pHf0dfu_>&G6_^x(D z>8F_GfHobe3941dt`PO|MwM^S~g ztpd&bJ|1-Kf9YQCXg*L66`|W^QdXGmuTX0Djwt(?dSE??hJK?}ZmC_}Z#iF=_O{dd zn^aAH?mUuZHPSpn359KrRQtIh+6T?jsmE(2)hh>$Ej>ewIGG--@zx^+pB|b&1bM6zQI$EyF^Qw8Q%2-97el>R@K15D` z?f8}|o>OBidA0w2&f=W%sIoHB5XS*riIHb7d=tv{dUnIs}@5yK_BYWe)??XkCvlhb;RCq_S3KX#nb z^7*ry<~2r6eCjBKcKWqDhgyURY&Yw5=6HYTF3t_vXFH!Is_6hCK|5MIuVHD?qU$>0 zpHogMQID&7pW1AHk=Njg{$A+ffK)do(~|n-S2zA$&o1gcuVhX?t9OC=JV(?DJw}yr z&h}JOGr5^dpCO*P(VgYYw#X}$TQ$5qA~v`BU)~D-^nUG#Ar3^hq&>!)X!!)TPkHst ze5JiwDCj?|EcGzQtA*yhl$<@)2lzr)C)+P;U`|(6hHhz@_@bdCkx#`c4OfsYtGG`0 z;Z^Y8#NZye!-nGH##8#UZwzx?Nv~vr7)4I4HGAUwm&F)fl6{^x!z`xb6}8=7hVGWrlSM-JMYU6iHt55rpLg+= z=Kc3>{i)%cOJ(SZPu4VAn!DRZc2YsYz&*B~bFpypc^FSQn$~f(YX0BkFHfVa?Zz_f zo8eio8nu3gc|5Hz2ya+PAh_l-qtvpsmiS*Ohxkw5N=heAJQXh_O`dnS?{ER*&g;_J zY0^H|uhC2u+tsrJ-{@BnUSgx*<9gcJOTS8s?dci1jhp~988MPWy_$m+d1Fv&+j+T^ zu8x(+YC|*pwffJH~LW2?GKckXFO^k+7$qoGgDb+{(@*j(|LtWs$j%j#TKqXcJyQ`jkc7eahWxk%i}MJ zXbq?JWwG!47`3-^wyonT7xbyJrb*I>%Jt&Rk!PrJ8vIh2)>yGiRtjC$CKr}yu{@J= zo<{TA$#XPYTK{>{BHyKy(V5fqw8r)E)$9)+50ANRe((?G_p{(g zYyr!HJ}dj?k#4*0>gJJs{>;iZ%1lu*r@zcR-FBe5$@6YBcv_)OyEjd)3*Ha&fn4jJ z`}w|hdi3?|pT%>kx~CN)KNqhe=Uzu#zN%jESB$jeS4r%O>|n6Av(^4X#AI-2v?_aA82rjVQG)Badb^*t*Q zZ^<9GYAoP5U)A}7{QNns)=zKN`q=kP4*FTL9F0@@^!(@dP*SY-*FJCN8(7U`8jT}S zd)1G?YBp-_M;hjNGMy993saWEkY_WsQCixi4w^zbOsynsFyF6L`*vL}p@ZvO*<#0( z(xv46@|6s-ZUhtTS zE}hJ*1CjZSD7tPrbN0R>`kVGJ)M(P z`>*)4`+*;7ucuL;eI~Vj_}`qpv3_ciS*O;8y&uOAmnHcemFvieg9zwF{tc{|m<(@?FCA?nFUSg6Wi6iW!82GoAXK+ChWr#A;>XF4>&pRM8 zHcTO@g{f-p>67@WODe(#(a(wu+y^28@X458KUOs;$8xR6CI6%x7>^|d z$HTimCe8`*A!@c*G^GE&{a~@D}3VFK@bWw|t$L0e3`> zKV}fvo?vlc1)oMxf4{w-gzppBo>cV{NX0=L~;~UXhV0(gkf>+-?D)~y*F>7*38Q7kmrPrK#p zaiPHWw2JCTn4DY80~*+#f$a(2AhlA_btPU_>A4s~md!Ca9RaHU?K#w!w^OIrSF&53 zqU#8JNniU&#36wSc)Oh`|=x-V_@$Dp6|e0`+j!1e@*}v^R)f6cWY|n#^ z)^l%7jyBr9wt?+QO;d7XHwP*w5nH;UcfHmZnXhEVP|doAADUxWk`p_PD&bMAmR=G< zTx%aCwvts^;he{Pj_1mMbj(n4f1gRVGS|TNq-M}M8P3$poS)%5{>gcn+^N2eTgZ8> zC)yaR6Vk6-OSB?zDV77fmDseMyVTlDU zOE3Rk6NtL=$B>n!RZQ<@GK}O7Zul}8X#4Kr>Y;86`LEj=WOt2w+-PersYPut}jS^Su z(hb#c&oxV~QP!!`SW@qCVO7pUd}94wQ|4HeZ4_JbM#8GBQPR+kmu)!CB%kir2%XnL zj#XJ!rylx#()peTf}HrHqweGsJ0B-t2>)_b`ol%*AYis(4CJ#h-gV@Xb+HBVmfJA} z@^6>pf`-cyr?3BV|?&ks*^Hz5*#Sb?Z zht*mcwy6C5VY(>opd8y2y#=-}_uT*1*#j3lO0;j3lF9lh+j1<+>s@W`DN8>|+|xm_ zVE!vgG`>WTj3A$uemzzjJ#!h?T43KstwECtzZ1}{8;JuX>;Q425|E)f=FEqT1oo@i24kuKylO2EVvM?=qeoZZ7 zFTK^{Q@syQy-}MWaB!yP{_}e4Fos+S*2i^?;kmiI6d=^(akJc1! z1M<*hV%kIE2y@UXuXlYg2hgRKP)TW(lOJ`w_>_MPx^n6~Cz^vQe-jn*b5qYfXUx#r z>-d$o3gtyuES6iEdW|`lD-q^|$ zRyii8_a!aW=h`+)W*4}WflKLLHP9WYx-sOtbb4Lp!%W{Ex4ik>kWVwUQR<-_mlD0{ z=f5GVJGGNE&3unj?b|LfO1`u+0J=Z709v$DDL;<8^}2jx)JY~SAMN~h=;LHDD2Z?^ zvB%r}5x*x4N-VIGnKjlfK6Pvdc6VJ*Oybkr<~02E{Jz3mjGpS$Sz6WQ!=ejg8J zi0b=zhpotvtUeey=ezZxmmwKNPx${`I=A-3cWb>3#S}`3N?c(agOaG*IeGQ4ygg0` zebs#&`Ao*!_HozRZykG18AIoji`tFLn!%UHpj_=~?tJFpL$cRILpg7q*NmooM$FDoZU1L#&zNDQ(h-6J_(r~V{ooe4HsMg02_2juSMn505x~&M5 z7o|P0)~EAklKwY~*fVnS%!X;3wI9(b+kz&hktUHJOQ^Knatx%&Z#vz)WVHinGI7jJ z(e+D3rTnJ7SB7SehW9muWfv(?j6RJ4zZ_D(bQNY+tMPN2Sp z%qjUIxTEiR3*8aAqvVm$9f746XkjH!q*uWm!5zUJi66>m!5zUJ!5t+}q*uWm!5zUJ zi66>m!5zoV9r&3~6KRqv0PDmI0%`KBvIA}^q7F9XE#>Up?w+ibvc=kj0jI6&~-LpWNtY<#tGRY)TAWh!sP@8Uc^hbt5d*!n4bWdSh_Y*dC zd-H+fnb7DXy}qgcbA#bw_y6ydgLhZ&Jl6X=`VUo)zwi3a??UV;E=u+C-*n@L8ac#D z4;GBcE7jfCDDJ5}a74(dc(tIdK$?7`J)>Usvq6Nf)jHW;yVq~MwbPYllsGPeSF?0P zm_BZTzu(?ZLYoPs$>-vbK$;AsNw_SKCd)e350q82Co9cz0QVMX64y$%r6=!6Gob@n z>HE@%rZs<5wr;xwDJn#Zunfbd;0zO<#V1RLyh4;noQL5 zxU;RWam=17ZLQ;=tw5U0PYvn0pC3xj3Z%)jLiWtp$r0xsc4yunI@z=*aeyt$wB_mftV{M$E~Hg_s%-?bW5ai$HVNmkqW{&sif|MBQ7 zPVJEPm42YTW1sSz=|k}$_EURnrYmn9@!SKA4{ds9<45tI^B}!l6i1)a-z7b4OD+V` zB)Bq%vJ-3gG6}gVUn#1@OylmpphG&J({!ndj?KYb7aCRvylmh*V^&&JX$qJ#?|fEK$-+=V~*7hhu2O5fi(GZr)SBmN$Xhmkc}g} zt;(uEnjG>qj;~}XIgsS5Ya2+D9(xa@$tB$C*p;q(mb9@-r$hmt>j!`Fk_?(1QToFy zg1BTli;sLb^N$gr)8y{2x zGGjQ|lE>S}Y7C^w`x}2%Ht^WGa9iCXW1NIuc2!9JJahd`_9WY%{6Kc%Ll?y%3z>>k zA7<@pSu@3|fIih3?Hlbm`}{)Qk>}lPE~;kQIvLJ^G+825a*_pMg6cO1Ivww67r}NI zt~X|Un5ysGmVHd6F(`3&Vjmc$rUOj7iToMM=uOa4XAuPKM0?CI;>4>d6VUGHDidtSAbepa% zcBk`W5;ZicnU;!P%h4&XlxX-yk@D~n=oM6lB|36^7?bsOht}YahB1j0H`KEstrx@SzdOvy<~3aTv%L~8(NXH$9}kv6 zd77VxDoI83C36i_$*&Jp(rV+Q6^wUF`BdX-N0l^O0FXJxznvuS>EKFUlC8aj+S@t% zcsROTFV4Pso)u@g_n$pB!`i%*3yz_dXPDMx;KfBN#kYoiShbq@OHShX*zy0D+RJa* z&e38?u8(Q6^r?JDQZ94u@2ZbwXm@HY*Su&`mUA8j+3l@I|Fy4A%a~k$-&EVrrNhZ; zvokRoD)M0l}kXReYyP{49LC$BFT{WN*iC z4H+LdKF07C$G-odv*BJ!`rtQtt=b#rH|7<7LeL27Trk$Ew^FWUiEMaY{;>19nc(P= z!Nq} zgX}y`3}~@my5}zy6SD}!s?P&to7Fa%`Iu*_{bUpfj&DTK+_z<4K50jYYg%;GC;_ZJ z_Id0So<|y%A~^PY8}j9sp1g4+KWK*I{?xm53j9B3Y=@xudK3 z73K-F`?4t>FfP~1)lZpbc&5yAwrZaa=bw(*r-9d)Jl0<)UL$#iLwq>r+!lC^$xA*Y zFMS>T5m_9ldnWS&SBz6^P>%D4*Vf9+CN zoF-l)`Q+=w3<9q)@EU(o-g_PE&(VOU(f-KPq^7_JdB5H-sHqS7#%We2qk7i&9X^L6 zHi33X)vjIr+}3^XWe84SCzezRvnd zQud}0Aq-n`PyWTn9ahy@{oN7$eydER_L^zGcKHHi4IE@O@ybfW?XBL@oa`N47^4|1-~t-+|h5+j9$NuT}nuR ztJS$5X@9tLYx$e)dfM_{9aTE;8gq%kbMyQp+_u1L?5|K-qrhvV8j|x;UZJ`~4$9wY z=h)nWPqw;Cj`sEfuW^;46HNzRW2$k&t+w~7lmM;WR;7epoya+rdu{d?ou=B;Ybp~{ zkD6K#Ry(tgxKYPE$*Z~?&PLdpLI|t3T6!yXW!>~o#(AZkz-#my?}ys`RG+_oHs2Nn z{AXuj-qg)jYH2_f^*wjAs8^zxJ^6oDQS}@NqO?_VDLOQYw4;I77Cm`QTI(*N;WB^07DO5_F;wRMggp=@;&rF>eIV9qz?=j#8hc?JWoG4L7# zuMs&Ac#TNNz-!F40zR9&vuxD5-4l3?eWXy(P+lGBUB@cNM|oSwM7N}U&+ESRI!K~J z7ARG=&*?Yt8uzuk%H`x4>&0^QPx(x4Ke&AI42ZMyP$>xg)X`{Fow zueHB?R*tR+g{8cs<7jc6HcC!mj(8gauW{8g>G6miVb||u@uG4Cb6Hb*YwmXX^_@^{ z-YtmXmAxd7Q1S=49~wFy@`mRlYWG(MUSr@j;>md~+vGrh6T%z5oM)ozRLy3%0+hw} z`shbkKB?s#$FjZcP3dyOfi%s1(s+$vdaaY;9C(d^*Z99g!>d2&AgArJqTX$3ZG8RQ z7O>iuP~cR3ha8tOaWidk`XHi8E7QnpKGJ-A_4bHlF-|BEuCfs|KS-i zhY~@6wVjd*r-iY2S-Oi6=M_@NDusS|j738e=AJdabIaMCgHd&3!a^)%s3SE&jd=}c z*5dbuw0K#1wZBKn&OTnO1!~b_b<&RHhMwCe zURfCo^=n6`)M1-E>GadVS)^X|5?XJsjr~W*S>&X+WTj3AXR)Ti&gvZUn||kLvLxHb zd>-jjIUT1=gSF&ELBoJPrr zFdPZvgPJXtW?R|`d0uo40|2T7mE>I47ldxs+3D9rOGF*)H|g6xT&vt=OawW$Qi>`fROj zAA7z1w!N5+J2R6DM?AurmOO`6PO-U6_vJIA5AcNX+MUyHqUoX8r8sxre}7sSjF&Zf z)~;1M|0`fH*12vjf6ql>toJfRL3vh*(a=Z5fm(1F&v&*n_ifI1=lIKt@u5-H!DVc* zYx_9XW{c-JG1KUbU=J^$+I9~#GUZ<#o$-n&Wyxv>I%D!<-jw(5Wl=SQ6`el&C5>@Q zEuf*u48lUqvlD5nC5N&+&Ed&KijdR)_H$j2AJrE!%(Jl$MFV}@PVkzCC}YkUFVGp2 z7k!Er(t6@M&#mCVpGy_Yq1nKnb6P1M@yi9}1g>YuoRTl>Rd7d=qJck$772}<_$0U^ zxFam9#1G}O;Ev#q;Es|f(yQQ(;Ev#q#1G}O;Ev#q;Es|f(yQQ(BNFMk) zF@r#740OgoX9W8%&>5{7H@7VI6c?r9_iw7CM_n0Wr3VYDpgEFJj!#H_#j6Ev1v=v! zMVvsGdX`nQo5p5%rWo{d-7>M8XYEzwEThD+TD0zrCM?&~os(wrc7nkIz%} zFpt;5l?eUvr)opK~V>3Xf00oa6Rlwr?(MsNaneNKO=AGIf5*w^PkB{(B12wM4G z|9z{x5dOQTK1`y$UN8ffTs9NNdsib)^q8+zs*~DI^|h6vryuoux9cy^8B1KZ2i@K# zY0wa=N54-i>Tfij` zySAwS0p{C#*(tOK>V;WapStQr)EkE%v1Q2QMmKHB8rm19f-T#=>vnJS%~5a5wN#)p zI<3?moqmQ_yA3t=I9J>G{830xI=dBf600YbjH#{Z)k5G30xN+@i;Nv$}Fx+X!U&JZqOm}AD{9^ui zzV)<=W%^DGorcCZZnfV)XRIN&I^N?tYh7{*`$rTo&>2^~rS2;YbVl-;){C8`$lg5P z=<(&OZc1huav#1p&;;@Q;O8MjBS#3tr?KC~JX))3%m{uw^%%!1+vTfJ6$#-<;LuI$HM`zVO2y9b5l$BnmD@)P`H8?Lwhj34ZXNGAsw@&JGAFiFKUdbxa z57jG)C!qzc7VfGhERkGK9;NZRMo8ZDRmHr($FQ-^tHwB9pS0HQQ2oWeMf7_|YHX{_ zSkmip;Wf^~Lt@2UwmV*9JB^l=oE@{VPCG+;T(;q;jcs*0%QkY{#(6cOlMM8zEV5xL zDqBY^ssGpSSHMR#G?rY~T7D4OTuX5quSnXIvYCF@MQ$wdNaoDMSeivif>48IeByU2zM0 zY zcyUXpy`8WB=$MQk9V}U?)4^mko#nRL>7X!{V;Hisk`_r;jNd40!(IGNcGRAJ`Zs>^ zJi-H6liW7>zKdAd=g+Ksqs%=d7kBwwhVdE=kKVB5sj81R$4=DOkEBk`zE0~^p1Sg^ z(jgQT`ruRrE(~WI_GHLIkormcf=_)KyRknns(o{t6;w*=b9`Q@Kc|BdX^RNU@uE1M z9OaDR6f!R|V8_rO$G$%Y>9M5avDWHq@7RV$9h}X`roSkPIxB5w-mN*U)=xgxy6?s` zUyk)up4iH9J8gf7o=RHve%n`y6$(7az=L$l^6S8ZbS>A88@%dEa_*hd_e8K?cDimo zy@T~v=i?UJrj$#iv^bs~>avx#eZ{6F>+%^LUq6iDWHBef<6``|@5yz=@p?J1k9iuQvXv*U%6&O-vf3Z%#37vl(xnF^=`oI)}Wn($IWBH@v1@X^p3* znN0QKvs&$G?tBb?F!eYz7qHvFA_E{U}+FH=-s@oQ{V28KR;*bH?cCqk3vV zp~U{iikO#2lRQagb$fnJ?pHLA$dJ9;&)+QDfeWTlC(-LmD7D?k9;lPwNP?P-Yn2Ou zI+?iT>qMO-vu}tG=bZ8abu#(?hvcQNqd(g1m)r&p)X7wtJy0i|PF5d-auS^ct{#4d zkU5D3?`PK`OWw^L#tLo)G{ zSFVD>b2PpFH`@F3y$#gKvHM2O6V4I2#C;?=^iGm0?N*6?+`cCdq%Xmw1sCD&#$(Al z5Z}Jbda%q!M?cP~E>I_3=jD7dR*5=LCv*B~r`G$j?d~bF97M>+qSWv7cNIM?P$&14 z6~n!c_riBdvf`Frz3b}gzCOy~{SSHg9-rpV z^+~ebol4qwtwvQ;EI1VPVOzh>D6rHeemd9{O&$kj=4({;^bdLKxX*H7a4fl8Dy{zf zo%YoU)X9V)mrJDE8-I~~X{T~O$GteZ^T8PsIrX8dljFFu3;>OWTtd<(2;as`V*fyXGD8(2sc@%QFzZ{VCkXK%Lx`Uu$1K z$xo4R#&%UHlsXqb=#=_YpP*j*FM9n>pYLN9mTRA%KTG>FP$w<2dc1UAJ6{IsB;J=L za>OwrpNryO$iMeN{=N5~aZ=Z5@pyNgDy4xs>9NH0=uyQ$oeb2;&4DUO=1obJoj@ZT zL$=J(70HQ3F0|MDpXw!{L$>zO$5;x~Nw0V|hB|pw`A+L(I0x!vpiTzrWYWCp89LZG zF!!SVQBfz)t9}x--ifeY>VB>S>SVUZEvS>!%eVTdUkY#XqI%%=3bh`;4B{l!|EO0> z<;n}1jiWXVAxiY?R<_lvq*moc^#X!Ls*pKUX)swe)U0}rN82<7`umoiF5#t$g1++v!$Dz%!Yw8aSP?GCL$-yZtCV@^(0 zVl3DGxKJkNVLY+MzUz)MX`IzUl_k1kLYb^l%h0ZtZ8*wgYbDOIm4q`nw=Q(jY#xV& zKBwZayPqr2Pu1-Iau_|iR<=x{eMtq!r}PT>Q{#j0hcN|i$W!?AGrioB5BBdJ|CUl8 zsjv=`Wg8YjK5z3>I!ffa7zBCCUlMyD@28vrwC6jw9NQpo|FqCAuS#Dqo4k7I81evk z1!qJ@tKWDh%LJ?@({+E-tCY8NR&@7DRR29KRcizm#*&pfEfmaLcbzsGW^F7(yOXp^+G|JT%d6KBkhilHEQ+Mhkt#7Js zO$IW&@P6ZF7hPn%4)sG1Il86I3F(1n!Vy)*=al;M{VeV8E%kf6=$6YUU<_N4F?uZn zVn9xjj&{iEmUK4O+JnwYec7!zt@*m(w|S$Lr`0-@jV z6EYiT>(yQ9$JCbML9X^U9Dm49`FQ`w5h2YM2ixwves~4H4$0;Ie8$^njL_;(AFXr9 zeWXJt43G^$vcIIitvG$YR#W}>ylQ>Tozon&Mq4{(!s*2@AzSxnPCq^$P&8|Owauw6 zy`h5Z;u_ZMa`*iBQ6YzVXdC}@+?##*R@4QBUGC`ZTKB4rb8Kg(drP|mA8}Sd>cFoc zMDninJ2cD9&sHF|$nOCgl2u!x!;mJc(Ue^K^`k1t+XJ0avBO!VX-~b`wl4pWrQ^Fg zX4{k&u&w?WZsVA&oTp!=`$*IT^{&eOAu3uQ8}hu)xKQkQ^*fza)3=~K=H=LW%vbbX&t@5d1%R2Er7U5xcE_&N#5R+ZQ zY&fBQ(0jDAsn>m*vY$^w1`U2TJ6CxGVJhxWTKGgg!Bu-N8^b+meOnd!ShCuI5t+E= z>%@pe&kj*Wt_OxrL4gsOyy!#n($~=+$-C(1C*WxzVzH;Z1oyK93LcgBV^y7Qyozjo znhJE$#4mv^nkc3JEM!iilaQ++S4;i~?g;J(l%J9((yQQ(;Ev#q#1G}O;Ev#q;Es|f z(yQQ(;Ev#q#1G}O;Ev#qcJ9CWBMr1#8tUNb*CO}_Oa#O|DZb(+c~A&$NEY%wWJ<$U_`FRdw~&I%0Tm-{iHe~s~CG;qbpHt?NjX>5g3uHInCv+ zB+X>EOW$-iMoWFrrlpP(wJ_Hw$@X_DX{U!8Rgr}q7?GUfTyNZ#rrHuN{hiNetM-+C zAWgngG~IuhzyKKJfndT310_BB;IlK3ijP?Nuj%+W#h068^XrEG8nPQjp5*U&1 zR4d`VEU6N4v5$~Bw63NTo!9sFI0JeW~|P674lG zBFFb8N0Hs>PCxq#JZBzVye%IbKAZ>g##qG5{Is`pGU3+q1O45S718dS3yjFXh^$p- z@kquE)o$@RpZNO%BhptUJ@)INS``|s49@<~#huh^-S7TVA>*0kHtT4Wa)xV8nKvt~ zziH5fCw@oOEUA$}>wB|m?)aGdRg0{0=u>H&Z?xO&bE^6d?$kON&Vdmb7?FVy>7188 z;;DAon)^hNAD_D1CHSsiWv*6*%p}ElU1e@c4A=9zt=OTDB~{S^O@b=yjDz}sR0aH2 zkJt3~g3f0<`p+fRXs7Zbf2m?@sDM}WNl*d*U7xHE2Wm4;Ruqg`&_o-7?O;rrDA8L(345F!x!tILFO1Av{ly;`HG`ghcO^q+glee zAm0U(4?Z?%Vjku|-o|MmIAZZI;yh!03>z>I9Pf9?VxZ3*D(CFCBds$R1+RaO%~9-X zC)s8AW$kr#u|Lr1RwI78E;KwlY@7FM+&59f-TLRP)4^~Ak)bbl{iHo6f7?0RPOpm#h@hq<#`G3Rqo{CFkrs_jMJ2*zpPfbaWE#*W>TgrHyRpyy5g=pUQW{ zEF3iQ(q>kokFRY$pQ4@w<)!LDC*ur)@>!@FBnIKE0_38hIAaJG9Y6|IqSO zOMQGs-!X56$Np!qu>!+!75@V-zr`8?!_iPsu+(ziZ?QJk^~pE|=N3#Us~BA==f=jz zdnb$GNW5W*t=oPo_&s4bUe|f;WM+*A6Ca1i_EygTeTy6#81{42ZSd2G+LbYbR$N6^ zABq5v{Ho5>%zF6j-1nptN5Kbe$cp(Xs)kCKqCNfohT=Ts-0;1RV>lXaBmM*Y1MbtB zJD>6P)9B3`-tVJz4pXaTJA-xs$C25z>`j`>R6l86t9{L#(;RF?=5tX$=Q|#xFVGL$ z<}{}tpU+TVZF8zcEo~-965_>BS!*oxp=^gIx@lEwJ&nKKL)-YLW75oq$TvRV%bf-% z-q%WPHlOL`e*ZmSI1&?Q4g2~7n`F$N_pgBAxUM{A zhsSUtotlRF8KR;*1I6g*V|S|BJJK&^JC5bNTvSvPewml?lB|WY<=ngWLL(si=Y^u3 zzjbo49vLkoEMXnMnZ6n%WMRg6W;I|(Gm zcgh$#P%hsaWqXldUPHiJt?f$v(N{XzhY%R`$3LV0ojJl5;S;<*r@yRHAUV2ymmZyGb80F1Gg0Qh zDYuM#%RgllP=0opj`Q~OPqkCZ1MU8vD8usm_Oh|$)R@BTu}Z^RA?&edbWo_O;@e&y-*Ja)E5C zQBNQ_-jv38C_cU^`F?W-7h4T;wKynNuN6tW0XymL*g~3Dp8a7A^0%agM29jfL3*}N~s$NncIVN{Jt!z{p_>G(i$B(IFKWgt1S4(~IX9pi`jly|E;&D#n? zmA5zkQ++(p;Zg)iK z4>Ql@+`Y-UCy*T7C!hTA`938d`0|)|yO;Q`EP`8#l?9UH=1A3xKyrMksvyHP%+2Fe zq8b?z8YjrF0m+dZ=V4Tc#M#4@Q3A^`up9%+(K#i5L?1eKM(#&Ng8Xr?96@TNUg2MK zvc9hKui^Dwm(-w+X<#{~Jtk{(E|%j(tttM5^WEBhDJ(~-=HaoR?&B0%WLX1ty22#Y zw7wNZT+pxK%~7Y*>q^eUDxB`cD-U`dODbPqRFCwV*UucPK)Cst1MkQuck)P%)Geig z?bV|Zx71-Bt6GZxwbt^`I`nOrKypmDMmcJhRhEV;=b$68+AiVyNRF+PTGo6{NRDm$ zT(;s!j;(b&%T{tE$GH`ylT`FbE%IV2Qu{R^Ij%}}cs`IE4b{(lIDbqeN6t#Cm||o1 zKLgA0B(WUXpJhm9?G<;a091b&w=V#@;{bZpgKO?_@B>o${FLgDsmSQ`$wYO7s`QtzVTPlFV^l!VeR~$a2?Ng zGhbrmw|hJS+3}6!++KI{l&YDz6k{KV7_=howW3IRG;FoMp}0>edGWax!CJeZ zvo=_DQyzsp1~T4$8hyQw);Z*N9)@>@eW4PI`|5`M8)eiZ&1I^eG_TdZ=FVvj;v#%* zJ5Mx`SnEP$ z`SxgM=<&SfGL2RZ)-@w>yUejFr~C8$@tC;bNfHfazmg0ZnrDiMo1G1s9r55#x(qlK|sjE@wyRHTZbwB1|Izp$z zHDSm6s!J@cKy_rjhx1d%);mxgQ@rMDMRmk-7}6Ta|2>?$9H@@y`9O7aTJcA_$&%as zfy|XKWdeK1>16dWC@0ZLpsNJBO35L?9l;&&L|7dqU)ZbQj^K{qjv8n1zu=DGj^K{q zjyRQ*zY}MxI9rvnAoOGC$3KF8BszDxsE$O**NGYgs$-x!2C8GAIwo|rgD#W$y-um% zkL)Ycg=~UlHR&7y>Hfw|;7XiPjcRKK+Ujdq@PtwbgNd(tXYpQqnIbu3Te_R7xU zKNS*}dcM>LOS@I-q4qs_Abknu>$ZOGiU*Lk_odfU52c>TWo(IB5U7ryr15t}*ZcZ$ z&9|#nB|j8=v)zsV(Es0U{3+Xr{1MIsqLPWUGRdQ?Jzd&_dMKU%EVToM|^;7lt z(UAptuj2#HT7RZJGpoFPpB&xoq3C008qZDLx97b*QOVdRPkP*rDFrrUIqElh zO=kM^i0Wu1xvvAikF{nN8#kG`#ltP~3tFA>#@(52^}wpN`Uv(qU(Ki8J7At27Cf?K z=L6M|6O*5pR_&hQ6HLiLXf5-I>`Dgu^MBJ0|4HrV{NR*@ulB7t#CO@w|NG)1s$$TB zS$4N%Rc_DX>AdIs`Ii_)sYh0Qn9eul=j#8hc?SQXyPVv0Z}|o*d3?Bf<^JC9blYw1 z?M>|`dvzfG<1d!7A$@}o^K<9p{BP}-?Wf^H`z(g32^>qS3UsJ8xZ&{2;GU=RAyR@9 zBDO8#*i-L)1jMmEbBwdR3IhrXT5YVNewFh%or>hyZN)K~gP=He$ll$H%tN2)D=`JCi%{(OCDcv~{y z?q|s~#$TsDg1Y5+MX|Si@$jB($XELNt5&Og?YuHJyYD+*_Gs0dZw!rQj>Wp$$@YZg zHmAQ@>}GqTh9?@Rj>DeEk_NC!9!mP-AHr5CUs1Il`3TnfE76o$F}_!IpVheEv%U9q zdRwI!)6B`TFduC@o?hkdz)*b==mvuhyvXog%ZYfDP!aIO zSsvA%^!0nmHN5T#SrF@WUpnf2m#z9j@3q&hpX%d5*Z!C8<&LZosE1mke^cGY`72x;LJ9S3j*hsj zuVwW^pUQS&uIzJO50lzw>*P2Gs$-x!2CAb=_WTho>=Hcpt|FWMIH-=-J3Plr`g>85 z0#rxPWT-a=s!gCeraf*$bz~*20_0V#<9KDeynddaQp_6m8h2>S9ceUT7D)4ldUa8| zb$)gqW&PJO(p9SkNH12)63j?$%1~$Y%i}sy!;&h__<#QxxQ-XJDpbk6)QuVKJ-4!K zts<(|^rYHdt>vK_jD0I6a2=;`9p|7VvDz-<`?!v+lv-AK&2b%D_PJ~&;X1Ze>?~W! zaUJ3Gyngi%y(PKmv05a?Nn_jOI@scT``yXuQzs?KTluG?CRrL!w2ypZHChPA)+>&J z)#$r_OEUNGU8~65T(S_1)$1U=)eQK|`%c&WR zxzj{-1WS9#Yy;J?-8;4=?+KAdYM$eZW8LR@r;z?;tJiUHcz?(jc;m=YbRCo9Pot|o z$b)4*KW@=o)DNwVS(n(1-Wr%F%)@9Iob>T;Cyh>)RLXnH>uaCw+Nf*G(kn$9c;NDr zaX!DAuL_HQ3B|Yb_a7hCku%wnwF*?nvPQh$?S(gLbe;4|;t%3dWccQsanhD=ZCrus z7^sec>Iip|QT0L^^f%qC7)KYhn+-(W0@ZPEa<%N<0J4v$$ll7DeW(AM^)xq+T3%Yp{ zwOBCaSlim7pE}Mb?+l-HR?i3XQ5`|JT4L?CpA0x@VMTB+=y*;E{dwD|2v6iM-3jTX z?9M$=O#MW(4D+Ua-pm&CHT=lzBhfCq3t)K^tC=k0yPd4%{PrL@3V&0(ss7Aa`A%O+ zTD_FiGQ=_NfKk=5jDYPZ%N4E8eS2gaK3&U}F@9h)HT%7P#%@JgWV~ioUh39|e#TDV zdBmW#FTPvvZ^#Q@M)mN-kE1%W%b*}$kZ*~IRV&usSo=Qup*~vYkWO>kC1y<9t@|^lAD_=qUu|=$#W0~^TEDCrT+!ZK)*iLu zhuTbPt>@#f_0Tr{xsh;YbL}&w;b&{3Hk;3MZ$3N6bR-Mol6nJ!6*~8Rhi19?+5d<9 zL^hs2rX!LDng~oscB8~}9Fmq$*y@U*&DeSO@!B4Ll-%d6P?M60p6Zf+h>r4{6z|2n zUZ!D6?aaLT`6<`C{FDo#-|_61WGR$w=H9gzqU3a@AJ+AytyQ+i7;nleKwEG1OO{sM z<{GXFd%RI5*5>lDSX+tf$^Sf5wlJr_lmq)W&2|d4wX`L$NkPLj>ng<(#-(1l{+6YC zpuV>>8vHT!^&ZYp9b50fbxfS|wc#Ob#kV5Lh^O=N4s5; zTg8ESm@3K#=AqNc>SIt&q7ytAcsA01f^t?V#{UzPljtNUC$yFGg*^s$1b4s_Vat_# z5!}&_f`sk}-BI#L=#J1Gp*u>RNUwrBf;)mc58Jm5F_A=ia! zx8y978BFcZb_%7w!=@~kE#(&{y7ziKR&AF$u^_NMThu;COSk031s}=K3bzy^1i5WT zy?&=(5Krlwd>Jyj0@u-3DsUbDBC5`*F=35SqaLh^BrV#hKX4tF$mcvuCU6}ei2@TU zC`eQflyP}a(hTfr!>U5c!OKXwbumLhV!WU`i;mA#m)bd>1g;}_#c7=^L)P)B^NPXk z66C(5(>-ZWbl79<{CE1hicc1}j$p%h&8)N&H3Yu)JqTRK)tvd#r&@X(?gA_uq_W|U2;?V_23N0v5l6DB-!faYX76V(J)so9p`Gh z-UwXBy+R`0*1dj^dN>PtRe5eraN}}UIv1p?4_z%%PAQy>@+v<=D2e4gP{)TTX(8vH zby_XG6|1;Z^V$wv$5s4`GdjE8-uTaM*Ato~R8m96*T%N$7cyK^Q11-a z^jleq;A3)+>++Gu1z$_TH*MDft9H*Y|ChKr$s=N`Xx@?aF~nZUBNMoeeR;SmE>Cy# z(arr&)cHM0%xU>v?r-2aA`b%Bk-EqyL4ASi=$`UTS$1#rGY9*xGJlLOb0ySKaY znQ==wa2@ARW^O$tl$~9jEr}Ij!K~BD)!8_mL$=wN=drYb*!jS93|z-IqJuW7sh!qJ zl*GB1h-YQxzmx1Cs)Pgr6VvpC+jYl7=hGt&T*uwc^YU8u_!LFF?M`*z^HTltiO!X; zwR7w2n76o28>`X{|7zem_WjbyGaa~&cP05A>IX}3N5Ad?AC7#-TYjg zhgvLTtx&lJKabTz30%iS`Kwh=OXSPIbsWNVq=Mf%InIIW7`Tps>zE`_dd966udkNJ zwUFL_99+k9is4a1@-NDkKKxDyd%6GwSL(#*($Vn!RyD8AZ;G)IWIAW#CeWo(kvGrvv5rj!r(rxrjzHt7+^W zDk(B&Z@X4$l$O|Su%N)6y54b7%j(oxP3uu_d8i^|AUx(Wy4<}SS;#10E@Bd^?KIFw zcxy8NB2p&GI!wa?!l zaXI)Vcro+3*JpIjI-__#QM8xc=g6Z36W~Ce;h*&$@As`4;w1Qv4atmI)av)%&|QnC z8~>y4o22&f<++1(*|V%FKl?X~NrjB=Bgf>qWOMOe^3juZLjG}D3rB7I)6Bg!>bFyO z9j7(vn0%*Gw&QR$dLPTs{?uA#X9Gc!_+%Zm013gV8?VQ?BMm(y)oSaTDkYMqh>zg? z#?3C~2n|u!o*u9O%p+l*F_3W#>&LwyHGZr0=lfZrevuz#RqqX}i`mvu2CdC6b+#JA z;`1D?1C5m%Ax`J{I7>M+*4hK{=qpJ$R-D#+U3m58X!bAk?kXpbwd$>utDBGTj40(= zcV;^)ikZ_^9aYWRoIhWaD31A7j>zd`X>0Y_&YdUod#Vh8mm?H67p)O=5wsN1%%M5X z#eEC}N&J-`#1G)8ptJY%%5r~Sk5cZmerfX%I(_zIuy|RJmw_PZE0i8{3%V|qOmih! zG`(xd-YBI>$^YxLTbFgTSjwj5V{L1Teoh)e@}f>wj57E8_`V*$UjZxP_kkb@4%^Ah z8%r$^B==|PM)XCz9bX^6Q$D*s2ic6Kd-M4jk|eQxDEx94aR=qsaDJ`z8ntg`T>E=Lk|bY% zRczJb$dxvq6_WQrvYc}b5^mM2RUd;(LiaoR>;9){)BJX;v+3t1U>CkphQlz*BWp4w zHRtmER3A=HL;VbKOP>GYGcoViTqMcMvKGl&A{Pc4#cXFa@*rtfhuW{wc-5OF?&ByB@^e|l-$8rf#)veRt@nIsn{3Pt1?GAb8{sxFkhOb1H#j6EvQGE@>CaSIx`F-5AepY{Xlrj9RG8x*(_p3(2 zO<3-Jq-t&@PD6XEfhxHKwJaga1gd19N+KmbiPNv>*KS>c|G?{W`paF`J;|p1j(=b3 zKNmax{l1e7AG-hUDa)7q5Wd&W!!Eg2@!{+~oYzdEE;3`aN~rDqtYVQpmPL7I<4678 z?dEi4!RY6pNd23nJN1tKlu16zBC8>F0cxj^ETyw`@_*3JuoDw(`WxxHUQ_VYSjNwU{I)xHOTD!H1YU+zje zhvoXZMYhbb7p%)VCnt=4~Aeu;07tOM>}_VJzY-UX`U1FcY?N;<{- zAS#(dWp(S~zeI6XyAWJwVpY4cXQ-;X+ue~4R7t8j*(q>eQVkEP-JJwE9Z%w%wXe&; zE8_Kit@vJd^KnlSbGP?;PTPShiN=|ScN(aYe-Vuh#RrBlxB3>?98626-6g%P%BntI zwT(4UC8sb1OS^-8TV2~T@@jBP94QCZVBhK(+QGA(ofoK*?NnI$>`xXS)-fR2=|Ghn z$7J2n8oiNDZugv}Na=m?RzF^POT2bV^-sumIjfWE-32`as$`%_j#t>&luWl8;&=wf zkSiZ_HB0xqzvRSD<1Kl-B*$}_>LsB+w)WAlgc_)lzOz{T{afXwfapbTiq*$6?Bs8>dVj9AmezGgF#xm`K9+Y!(QrFa<@Mq~3!!2alJ=p#Ma4G9m87n!;T~L8YxG5{wN=b}^Ap!} zUsMFWCx0E)^ycALmK9>B>rOH&DqDhXNX^OXdh}Y8^J)=J_u;h&y|yK@qW16=&Fs8- z^QyE%H3^fYb4Qfs)xu5+Q)iM2mImPMox)Vq;0OXGS zR)2L&$<}=?TX9Uu)=HjbD+yC_ezobes~)puUuxO2dG>&1O5`|?W!?JSUM0`7qT%24 zJ1nWwINVeJr7UE$4N9$Lfp*uH?z$N`imh-ygTn z$M&hc{x13)o5yUB>AKO#fZOJ8rWi zRLQHdrLp0m(P6tOY17j}mE`ofgx=e^+fFj;a&@_4oOW}cK#3+fY{itaVJ_|?XOAUo zg?_7_3y`D8(7=6kjgmj+o*%yhke_Kz+WPge<>T6vUOAM-JO?B3a_67GcVN6wJHMqq z$}?4t>N$kS61b1t&N`0s&lnEkR(EnIe+&Od;66gJ<*9OP^~|3UxQ}xYB=O1;?ZcC5 zlBSO%IlrZZgtDplBR9fJRLXfRZFf1e&-8t$f1Q@@s)ZcWu|G2?tN$4+t-yWkZ~Qp! zqhZ!T<6zg}O>3FYc>8Jew7uF#>l~(5i#FHNT&+FB7tZ9dbz`RptnPAq~rBX_vn8*S@2G|LnZ#}*;afxl#?Z0h+t z`3BzWo_LCsKkuXscgsGAdT4u7beP9Ju$=msUH!Ii$?~>*DLhM@4_?U2_Su_K@|+ag?T?}(PJQ#S9?49(+DS4nOQ*76lI?F+wCCC6 z9<~=611HcIqU7H?YOVRKYSj9!yBB{b`k#yQcv+MS@ArAZ_+c1RZi(G>S*ru@t$JSj zz4NKz7*pbYc<@km2i6Dqznp8C%`~T%_5?TdSvAX;O7R4fLP+4%73!})nQ`Evy_ZaQ z+wEOlN(^VLj!B8Yc}$%1wcXX* z8ShlJqk=(ub-ciN44g;HBRW*3Si;jAs!sY!xhEf#J@Q(gCXeJpm(B7{ugET?Zc&M^ zb5*a&qVek0?G*Y@RdP3FxooMLMWTDJ%VYI#KWseJh+ZkDXi58E&fQWL9#!8TC|mBa z`ns*xV8Lv4Xmoed%_~TfR zclG;7+7dl^uhW#C*ZQo}{N(ty?~~KdLs9FFs0j@`R5QQ5^%~Y5H#JJUquQt1`|_1} ze8g?vYn|XgX7o`!&MHCI?Ja{%kKJMzb2&ymH#R{I#PV9w@pk$Ojh3eql{zl zGtAQZ)YYCN_ZxoPQ(t6=GowvqHSTLAkzVaHvYV!Fy3t$axuZ?_{m^-6#HAgY-}-MK zQ=X9+IFG&``I;W*YCGQt&f{Kpcg!VH;5-J-BUtzKvv~_XW#Bvp&LgoXi$Dd=;}EXc zEBS?pnI&AeyqXxN{X^M0+~MSwI=8PJYpMKP{lB|vx%@W%+`xHEt6kcEw>#_niB|oY z>XCDU5L*#!e4K&v7&wnP#RSeH*mYz4mHgz#i~bupk3+Jt zly5a;x$TV_!YGvjUUjGU_p%4fhQvpCTc`M2+U4`QDZUN@Y2Z8t&Lf(dh~cih&D6g5 zLH?wtqA+f<|DxA;yXR}~GD>-0cGnYq-}UvFRH|{sGQ7n$e9q(RH*g-8qKyX5BX;xM z&T2MZEIEa<4F1*U`oUkk#9zN7kM_gP1H3%i6F85aBbv_Upf|bCHTl3(t_D8$sanUm z)NJ>E6W_U|h(+K$ZdU56q#fJTP6Wh`Lv@4aqBCMmhJVRjZi|e0 zy`14H>E_K!>u>o%+wv1o8~1e)$+9}A9-$;JdVE*QYVhMYk5mp?C&xK(9xZP8t7IPZ zz)6xb3ia9!6a@x<=)G2WiV{){9na-r@6(gdx z7kYm#vPBw`OYyvx*7Ug2_scqbw>2Iju-r9a)jl=P^NzlSmN}4BZgrc{ILqf(Z;$A@ zMT$8CP}|vT4f>f=@jjnFyZKxr{#ASVN5y%(*5$8IN6>HyF9pt{cGEQ|S)kDqAX8tmz>pFUePn^Tu#-u%PZ=Y{5{swg{~)d4rG)$b@a;mZPOJe;Rb42 zQe%s{qwO_er~BwvwFFTTJC*SOcD|uebOk8hKzcxtNuw{RwSpba;^4V zS^u|`oWw!js|CB4RBv}^4f=LWAUr0Vqg=Wh!s9%wB-Yybzr=T>0(cvZ_V<0e(`Rja zT(;rpj;*yj%T^M)RduYk zXka^@EVd(3yT3o_oHShDv%Tgn*sVx^cpJ;l;_i0tFX_Wh`eRjh%k%nNWJi#-m&`Sg z9p|2ZlhwGT$PcG_>YwlF9LKuPJ4r(yb_!p`yq>0v(iYFH6ta##$d<*ofc9d}K$E^OmetAUonK!{=ia;-~P#lWs}; zQS+6ZwB=hHS0For_<`0o?2U1s>gs-$Xk7Stp%J*ucf5x8<~#AFC}0emkTH^L7|4#? zEVA8UuM&Tct)6M^Kz5vmqR46mvSW_^h@}R2V*J8ngG?Dsbm@hQCrc;d&A z9q|ufA469}3%>-i<4_;1bI5NZ)ldrI3*r@*G?%M-<`F{ruleW7y-8~|)eqwy>TB+t z=At`7WyF-sV}smlp|>`4$DzL3=2VMbvRa(O@K{~dkHw9b%%s-3@5fLNZR4MgOf#Er zH5=mImqlB6pz*#ena^}@K08Bqgc^u`^9a%-QF!ZjXqL&NiM{^&KzD?qS;ai2;-}`Z z*b00%oK?j)`(F9``p-d^TlKnIr`1o?$KbJgWXJfvj(Pd}(s&Aa(fDLNi9FSZ(^IQd z&T~$T6FX?ubM#qomtMds4G}$t`xzwVlg7=OxcbD}8tDRK2Y--cq&)h1`^9 zhqm78ms~CA?2+b{W0LyH)hXsUBTdMZKzGExS|TL^-7#^_P0{vCMUCEwmhlW)rppkY zBpIBv#x1pgwSrd>X`0^}XLshs#AvyX@kw45GK8$ox1UG&qxwRIdBzqauJPh(RNhDL zk7Jr7&>dO*KzDRn@khJSlAizq-7(<=@{5tq#O3OO!1my(f zgj{uQ=syN`1a|~?^tr-c2X_Q_1a~+$^dEyef;)mc`ds0!gFAvdf;*fW`j5dK$ITu1 zLrxdn@rok#LlGt4|FNh+pgRV-W1u?*x?@6FW&vrh0CH?uh0vYk?~D zc_lor2A)={{(gJ4yM*vUJtU&@Pl`RUouc*-RTJ}gCV4-*`i|uZL8*Kqf9>tHkBUmA zw{kxQgNcMNpLKzH2L4c^0oN3g1= z(OpXKMxZ<9IyaXxQ+0F7b@YliVE3fw|0Y}WPm+UFE~EM{chvk248B^bcHkr1(`QTr z?RU3O@Rf2)W>@d_aTQBFSn8hC^Oqh)e*cDX9xBuLP-6~sN7muLwIaDiG0m0WSz3Ld zL)qipaQH=S)W7GR(Yo#9r|0^2OM00;gL^AhW%7wUxu9-R10Nj8XZn5GQSkWZ_Pg)E z8;ANdRMPsrvX|1^KSq69^8Vh|Y40DhCwz?kZ?F2LSFuI&c50sNk{`f+|FxTQ!qwQ- zEwl4orIn$59p0O{IEoKtE$!&%e`|exwqx>QU$h3In16P9Wpav{JE|J0R~=)I`V#A4 z=$(vAo{z2grR4Ga5!5O1iu`T+;^DpS=Hs4d6>B1Y?G!OaJ%&+-6nG;$ea<(AMw2LT ztUpjJ-gnyaeMYlm-jJAI$>Hog-8@=tlqOu0^@tLUUm0C0_ z#%aURBh0c%@qsp!z^UHX>1~x_Ofx%%%Aq3KtkmIWdS5c9KzDqn8{6b7EJKw%D|wU4 zg7@-{YdfM_MO~)pGVYSx)AjJ?q0t zabF+L&il3a$Xi^8<5zc`N}Yl3nERydxkoW~#I-xKyrHE%c31oUR`mB#ze_xVc}@#^ zgkSJ*BhVdvr^sxz3Nyn|h8v22c|Ds)T0hI9GDI}ac!o8``O^^P3}3Ld!p8hQaumZa z*UKHv2kJTK@@`vdh4itD$`wlO;>&ra9#~H#>o;2Ee`Rz>s*0|Y;~eOYf$sRf#6zn; zXd#ziWgR{c89BppV*p+cbVtxUt>Rp*9vN$k&M*sT2};Oq*#W*6raca{_BrMt^;@YF z_^lqV=`S@gcl4igs)`P#(O9U$GH8gL z#=i`@BRx^+^2?$-e%n#RIn4qjxvQd#OQIrZ)+;0StKd=f+j3H^`t_2^mSBt$wZ5Rf zsBvli(dw#QmD^L;0A4Tbk)DwwY}UXX*}NXpnP=tntCyFO&d?ZX34Xe&aqJ=kdH`VPC={p#tZzhIar};48o`G-M^#s%8!4 zcI9K`hEin`oU^>nt65530k+l>|GQVT&wu)-@>GM8Gk96ubroxD>@H~FJf1AhBNfo0 zslMG|w)AmU-@Ps_r=mCXGhHvbMrD3>O4Md+H5ca*t82+z1LyH;#CZfS9x5BNys-oP zJecD=Vx3M^Fi#r&v~V67;}UvrM>YB5<2-V{T(VYtYuGbdtDT=`=bV+5LrvzF(#s&C zzSpZ~dOUmN!*I=hMx3G3HzrwO9papEzpl@wHo*b&Rx>?90d6))xJg9+tF+tDcthUWvWK8RIu)g|mad zX#e0n_o}brd|W;9iGTT1|L+Uuk(dIz^X2CqIFG|PkJl8}Ij5ht$QS<0B`A;m-iG2m zeN?e2j7Q?S*v41&7mUAFq`I;8J!Uo3N9!E&Gv_eIBhhNSbVzKZ(wJu?kK_=sXh+`c z_ceD;b1@z-Xjh1Og1-shkL%5ToV5+(aj37hIn|}N#Y8P4by4$yCfat#R;<=K<3k?e z&#Lv%HvZ|@G<^{R2X&Dj&>rcdmELSd)BUCSS&Wg>EOLjxm%6@fC5Psj^8T+JtIIWWm`aTtB*lBiB1CJk$Vn9)@Yx0f^vd# z0&Atu75+N7Be)~D!?~gV7~B!u5!}(|3V$8k5!?~n;oQ)F4DJZ-2=3@}g})B&IBxF1 zA9A`Fk7Vqu6Ez5o$G~_DjK{!u42;Kw08&;bZm%F`Xn+qp^hr>Fa)iq*>5HueRp~5O z-0uMljdis`wO7scyJ+pRvCNW}in?<<#w)j`5!Byr@27^zn0hJeUhgU=rmO>BVmea& zvDRMur~>2h*#c@^#k+bes=qBH0x&YSl+nM{;bXDCsdhD4T6VYQO?L<4lU`lXuidib zJ`S(X=`S^)_PYAGmQfD^3~ha{|Gw>R$AEQ^T5jKWN2j%!Fy6ZwaiYh1wbk~1YAZ!g zf$>;hVetIe+r-`NYwmkXz5aX3lcVN7I}2@YcXauqa<$sqEhVAf2RzKEru;-+hrhkI zz-jNU_7qJdx7!jJ|%lJ&(cq-ixn7;<;s-n1KQjj z-3R0@?}yL#IYFxc_x_n|S~LWen!vt6qETrA-L$Fq_GN(|>Ze^- zJd|7TNt?TcwPcQ~w1)*q^$u=L2gc()(cW#HN4Glba`{R>5Eb+7@=Qi0vz-OBS+js2 zbr$fJ`q`3hH|s1g9`kB534x;YR@6KIFu`Bs!d;MC~r2^v-Dh83~ zS8<1PQz_kQp21a=y}X_JH}X%^KS4p}x{TG8auTFdh@)PcDb^=j+Sl`3Q?i6P(rv>T)nJ9s_N>AGB6%%>l7G|$#d=g{1hp@-}!LLc%saBV3_J3Uyc~h?NL~NGD!2K(YUT{%L!{Lmu8a~GkAd+R7>~{=`6GJX zg_^+|*^Jdau>@HT2JKw0br4-F#hl>t?ziuRuukOz`rk zJPSf5wNCRYr$dzplO=`rKWTJFP%jxTxR;mpdwl4QLoE-jL!S!+-7z5@)zBU1pe2=* zT%tR+(rL*T|Bxhr!&-N_Y{k(XTdQ}Ltt52Exs|1pT=ZBib2({*n_O2|o)&pt$AbuP zL)z}?XAOT#+WGI@eqGUym6F{wli zo7ZF$^!LYY^09qtuepodza;wu-aZ{bN5LhnH&#amn+tvEoZg&-ANN_V&_`cEzcyauhp`O`GM{DqOeE& zZtu|kBx#X$+by}AGfvv_t&J4EL&>t>JhSFb$zl&3sL z3e0ii#&&`e*;DENmjh^wjBOtJp`FeH+Y!5NY{mPyjlN?!HS|A&r4`tY_7mM;7|Jf+N z3&dZ$EF6mF5mmEY z1`&}~Tjn#~zK?#WkJdTlR5COlVkfpY#3z@{WvU;aSFNwPbDE3qXvmwyrSNoqS$xN# zzS`zgLtuo4iHH*UCR(zD(x&kphk9rm|8#Vk*$@RcY(-+y*QJfxu~C=cJA#af4qyfG z2eXz==R@;MUQJFUzYlyz&?#BRJg$=LlHu&Le+7KUA$d6zbtxmaw#OeO`MK3xlatU1 zYd_S_5FO726qH^1b6hgg4cKpPZ!~l`|9gN4FcgY5FP{JF%TXT(%ONd zXnTsIo#}47?ssr=BXe^M<1 za=AWsl(vc^ncuRcE^MCDNFGs%=oko(zPjb3uQin(Hf6bNiB=QcdsQB*yZb@+a}0N= zodas9ErIZu??u{)N2(BTOL78qx(AXLkF_s>@VF}qs*F)78~v1| zMLTu6Rtkj2T4rHRr95{^%_Z(5-Q9mD8zIS#b#>+g=}Yim4WsdKr$g^cucsa?!_kq3 zb9|H%!5|PGjZenvtOvqlPCxAuBoH1;Dd93A5FX2Q@mIb+f$&(@CrO*Tyl>~p8trY# zRtSVg&ZIxcZVH6Q53(ZnWNC1h(((#~N4p_<@EHMac+~^paaU)2JYa$F7zmGVbk?I5 z43dvCH@cG>ci_pT=j&sdz0%o^m{~%hDrMiQ1akz%@^kh7?yBWaozCBr)HcsxAUyt( zt#&C7-P5|;)x$&EQ9a!5T7J^EOg{Kpm)|Yv<$-X)(2{n7|MsXZ9(OPMtx!MyKz)?R zjn8I&E)X6A;Snn>M?n5BNt8a$o>f=h?P{As)5x^VPTQgHrYX9#4w3{sUTGKzkEU%5 zrw%FfM)A1m-5J6syfSNVchv{}ON(^Qp@t#s?Hc6;!sEVlLDDQa-dw3c;K@LEOee&l zn8%neHxM2J;c<*U0^u>m4#(Ch5FXuIoqV(@QW^-4oLI^;a&95E`>XGEasQjLTm#{; zUN;GPydj(2>%D`OFoq)eK%Uz7vOM@pPVBt;_N~1nB*xZ0`shWV@dm;pD2`T3^r_Bh z-)Oh{m>AcO>O0kHYq`uC!^Q}N$3S?j=O7Z7b?H*p`MWJo0a>ry{GgiFr%s|wRR_tX z)&Jk#+4okFBYT*Sg66N?do>a7fe{*A-iFOxAS}tu-W8D$1A#$H0!lK>u%G_^o^}e` z-FA1oa}pS)6os6SbL_TVRW6t9dZL}6EI2Xml)JLkX2j=fhS2m%NzPKvP~@)Vf1qD zNej=K@EF*RJlh35X=@hX+;VQo8Xa{#jIFDcTMcB=W!x zY1Mq<<2EilIOMkYd8N6OHbE$H;+rH z@xpUYz}Qg8RGJeSeZD?1+sD}#8+#U<#~YdG5kMJzmjz!u;WS4siZrK1(D$LaF#8kRESH-_AzA zS5Gr}-r4%}wAJa79$6nP=_@Ba=5y+rEb;I9##5LZ^)X*A%|L(F-fx^;qBm}{`7K4H zUUm_#!!9};STz^ARW)l4PWixog_U9Ci1D`PUPF3PyTleiE-9B4{e=lXqSOvn^C2fS zC&lrhj?T?#6Y-YI(hH~N|8A$76r8()*#xnk#-+N>0G8>PS_BJ*WPI{cjvE1s;&%Tg^BmK9vi^*B+ml+>( zUP*n5qm5XUg!9^UX7BN}Y6gt!MBvlgCTohFV!fxLVcWWUh!^u**1bgHsA*K+IHR>dVn45K2duR&;_c=7 zYLWQdFCQl{hLZ8g*{x!i_ex`X#>I}wJSmdcXOrEfmCCguv zqg8Mo*Q6(ZM8+eUN1Sx12SHluWYQ&m*H!h>JXz&k{oTx{4N>#i*F4n9_?m&ZOP zt(n&HT!QgSi6F8wxUW@SuoV}(rw#8M_E6taa4L?|c1PWP=nzlqpH>aN=aT+*#$)ue zzfQ&@vN7D1H>tOuW3z}e9%DQm3o;hzkNwHJQqOp;xaxBLA*YyD@) z?pZ}S@wvn2j;I;Da_w;K@VO(`iTImq$Evjh&*XD59>d;wZAZyQer(sk8IR6*bjG7I z9-Z-MbdepMTHVlzcL-o)Flf)-c1NFd#$(&6-5HOZ7Gt}5g%FC@0|Fu%+>7@>WoM8jru=>kNmXb$HHd~w8|f35g;!{8&S^2yJRGs@t6`D zr+OHkpEDkzHjy3l!6!N0s!D3OuV-vT%e>t#sp(k2PvJ{(o{jmG( zeqk&g$zpHGf;`cUsf!DI3aE^iRFAQ`ruAejpRqF@Q$9(%E;!>cpEqsREOGX@rC~(1 zaCf})uJ$nq{Pc&?i7-dsmu{hfXvPPfNrG1MQYU-cOGZy2)oe(oAL)xyZSD`}o$$Pt zl4i*aIH~#!mW;X-Mh#U_fYc(X98Y#&zzPp{?4<0Zf=nr zXy)N0L;lo82%UbSTJJ?md0vr#-R@)rwVjtwctQRo*|47I-yLZUSx|@}gm?nI_d?^$ zZR}mWtKXZ>ctrlcJ?_UFind%mj<^tOF^h4y$m;a{o_r;i+Vfn4EZfcL(-rGal#+4@L-~V2+_C9&M&+(dO&-c=--Ol&fm2ZizrN7USHfKCCO7rNWHP884=egj)%+>JH zN??8Vc$W7-@X(#{$UHN&Rbgh1wmtNeGamQUTWwM^?A!D5s<;l2P!*ab=f1f3-)rgGr z6f8F)J4c`VnkD^YC9ZbV$*W10TH?hA3s#ZavLcTs_npVJXIpje$tJf)&YbaxR6`Um z#b?u1U3=d;XGaMlSCvBY||B4<20 zi8vH|DgQuElZ>B6sAnB!4Bc2}6zlnV-v&+4-#bjyz@PA$}SQs-E{Q z=jxU6qFR5{O0MN%biQM>&6cavEMiL0GQQ(HRua8!rKEhvC6d}7`>oC{w~ljOit!y= zGk4~tqvomVUGN;8isojT2=U|J_bK)UTr8$l9AI*X6Qa{%?@{Zwd zVZCgKjW+ssWcPpUMr>%^DZ%NEG3#&G`)8GjOyqQwdT&RGde)tX;uOoi{3oJh!H3D` z#8OH8-*UQRm~VLIG`I2C4N#{$hEYEox+CMWjA+)Lb2kuxE!XpOj%XyWo_9CrJItdy z2GVt38f}&vlS-#MevNcTeDA5uVG8(o)ab_bok_(;c1e82sgwO_zJ%V@$zK>FAr|Q%}UYOwRX@y>Ln`YtLAz zR!Yu0OP}z37x&?|HW95kW!;tbaZicoeJ?8;vfqU==eIXl6izC$TFIZt^lNEp<<>gg z@m6>1EM=0Mgvsc1$D5jkn2lnjf_rwvs>9jEgNgZmeBS{rxY=7%n`YS0e!R`;j#!gi z|M6;5-EZ+W%C?RYbKBHXW^Vb~%A%e;$`U1E{wf$h_jj!hh{;V;4w=`_W@YeY(H(i3 zvuQWc6&PYpcSIsTYOn5%qQ@cf$hwqBJ#luVzrKdDO0_!{;mhajGA36k5R!Z(y&t(gUp}<4;dd4eMxa!&GmD_CS$eS6pztacp8=P1O@e zWmwnTHqE6wvdem{`-bd@KDNl4F$81V#>c5#S6iFP7Mv3Y$QW`=$Q=Yt}V6>iwxcIvcAIZI}tLoK($uh{^SWV$FnZtU(Td_ zKDr~;V96}@=b$^5ttDDBjD+HAGxFx`hcW)38Rkec%(%9f>#506dMd?g2~n>wmjw@U z?1T!pfu~Qu#CTm^Vj5d}B?*qvL+r?$2y|W^dT>k83(DF*)`)Uk6&l>I=fg^ zYlmxxYe&?F{FQ5mYlmw`t`qS$*ACYX*N&(U`776sRci;kbDx*%$X@wLb`6~C=v+tV zIy%?UxsI?S!o8+EBXN7iHs?A%UywsEvRw|e)4~~_=Se=p^kya5h|^suP7jfvINY>TWHfTFBe_D~ zY9F7wQm`mOrdIBKa4I#>FL%4_!6Bz8)E7qMzRrd1tN+4nkd5v<0D1V^$K5hoI@giA zpNHz(zvu?Tb@l&WrE4Mo$ezY!Uw`3dMtE0yKX0l8=Q=LohB(*Jqz=|6)P{Z88%q`{PHBIXRPgGT zWF$)OY9DduI+o9Erz2z9nalqOj;5?~=1)EN=&RdPw97+Ds_+00yOji%$I9;K z>bBLvjwE*|ze}DZQke4IZnI0P>}}^d#{4L$MY^j@2yn|D=-cFiTNC)RtSPZ(zjj&K zI9tptmajz1teZ3=Or&wJ1sKf; z>Rq7pIoFX)I=MxP(G%=rkhr&s0z6R!Am@YbsTcYCJdW5KNifl~XjyWLI<#PBf%5m2 z|F;ww9Fq0k=y{EsSN=r$j|pEX@>-_mPaEC*edYfx%aU^)(e`u}3laM?YBQHMS@tfR>qv$fGM8~* zxy>Fs*D=mSbqike%u14XN2`Z78iz0^2H%$$|96ZIy%=e-50jk%!j7kX>=6}^2gyiUg(I9 z*Yqz8LUyr2wy_)CtN+%&m-RQx^$I_7xN|W&7EyCdUXlBf?tMa?Yitu$#}iDLg~i?WpI8OLN<` zkR7jfJAzkrzvT3|j#rcuZcV2O=dmO6{IAp5C7CmzI+B?)Ilz~TRGH4&O58GmU}SHuguM7O?3<$8uG~!lQkWgoAY-(V=4VGEVcqVwXBpe z;XUn7pElL8Z`sibXF7fjOh>FaQk-UX8>8o)KGTsI?L+6&a0+w|1M6nhLWi|(ZcmK@ zg;h`UKhq0S`NZSQdsa+Ge1!h^L|?p~+p|62F7}T(Jy^jZ=PZ?w(694p7IT@7_*_d` z>rBV5kLh?xUNYI;nQO+p%hc;JrXxP&^+|1x^ErFroaAM_mUHV)m*_|vm&p4P?Iuh9 zm2Pbl))yz$@VxivxilV-(;fdye(8^$w{6VFm-?S?_5BZ>mF08}H~07*e>qxzcxuEq z&&$GxwJtX%cjZU2i(X&BmRXzWIaO8(PgGLM*CYn8WHhi@^?2)PF(dPN^7Aqy%g<69 zpE!R-8L}M}#-GzDjKj2N%^c3@l{ejq>n+L1EBOpN11VxPKQ2o-zV4Qb)~d#(HA^6G;e} zu+cQM`RLrR9e4*sckoKq_1)4tHo`giYeO}m$Br~VRTVvN8@d%{U;rn01smAWZunj%lOmumf;k4XBY=Owq76mR3CKVwd$bnH2;#4?jDl>8{uvvI8) zt1Coh#_5!&Q&+jatf$7FnSS|Mw(4~z52lad=MSCSu+uqKQiwp{vp~+u$IQx`TM{;u zxsdoU`#!m}Qri5I-e~p?_xS!e+)8ZUYqg%N3cskef9ZUc5KY8S3A>|c^`X|IW1}){ z5Azu0RLs&wvcK0bFLoI}U5{bL_mpFq@$dPZ#FHEUjfgd|Ym1*TKjaYwD}|rq@vHKT z&K;JI$7jDen}Xb*mj`$x*{^%(R%=?LS*ToxnSD%uqotc3%{YJN)~H^3OPOUW%ColE zwU!$5R;;ono}w&a{3ZD7LzyYj-{(^?FG(V4LqBp6q;R#d6FfXtSnP<t>`s|zgsxSby|*v87|8Ijdm9j$Fhcgkz+VGXn1eJyRtR4vx3VNG+}Gna^ojblZ2 zUH>vVt;Etf^;m0ab+xsrv;&L;Tv7|DfgSLRon66>*4D5?DGMzrl^&nJTtnOQPw(&3 z8pxEa_+dLj_ng{U$ag2(d6-1@)>R*pz&vDehEVQs4!o)RBeqw}te@_Ld_EE;+|VU6 z*Pnxgc`_>;a@~csS;;b*mb6;p^t4crB;vQMCFhbbiHdQiXEij;JPv{lDaG3Qo@MZS z?d%k@`5YQ1HfxEzw#V63pGqyL~ zb=m65;chLSi|xTooma^{+_1(zP~9;iIE>IEDNFj>X_#@P`nA$9ne}S25hDThRiD!^ z;~qfGYFa0@_u$qBqsX2L7Ct5Hte zuDV^#^~1HpwZrF*Tqojht{tu&t{qVy@>i}Mt{tu&xlY92TsvGlTsxvZ>4-?(`lGa!*m*^(=cQHyFBl8d!9R|VLA=dNNs7x#BxSu&f_@^liNF- z;0kwjxDn|z%m*F6>DmHfU&yP%sqX#b+!97=wfiH73EeVUzHo}n-doH3xk^gYrk>Dg zm`=mol$_qvy`aFee5U(SoBHjCD#0w3O{Za!fq>lZSj`%5GR=?tza8i6H|gG6*$DFV zQNnrMeGGSG+kGCVVFqsU9Z4}Vyr~V1P*G|I>{M6K9PV03Z1#}u_iE`;Q%)Rbb zVxLuYau#bIADPRYe5|$Rw!Z!){hyZb9j#7&(RX}rzKgOWU+$wUHd%=>_W)^UZVmbUD^I-p2gNk(!b=E~|G<_9nFj z^j%=onpHTfCk|&Y$U_j~@wD^geK+i>zK5}t$?7!B=Nh4OUu7t##8=6tOFoe$@%n8^ z`r}Wrx>}@uTzkkk2xX%^a`vM%`JSS2ce|aryNbm{xl*#f!jB=7Wyo+mH#6sS9hP~J9F~^J6d5FcE`HRU z9G1-aXHCL{mqpe>vOZ5`Kkw%&9m`W%E|*>^<>KpmMPE7vb8dddTvAs>!JJE#3TLT< zZ~l{3ZRkO}eCAnQjeprTzIhpuep${2T9cBzlt{mvpEWvKK|B9JpL_{CmRioSbap11 zmXk7B!w%U&%SZz^wZi}TlP7RTv%`;_#0=*Ep7kW;%=wgpwDn=VZmg7cIzd|2=~4;O zn)0Vc+E&3mNNaf3ow|Cb`ES1~JI>#%P;GWE$rt~Z^9=Z({)#_lnPu&rvc~WVXi=J5 z^>cGK@ojb$W#ByXf9vbd&fdhU>W`6m|6^m-p56C~JPFI)zFKm`T=FJluO)4D@@9J+ zZbK`EJ6c0J;|++I{Whlt(%i;oiXRRQ?B7RDs?zVE~5c_E*@vUKa3$c zXC94OI;P+8U8xkXPyDOKB`4RiyOYo7_B^$5DwS?~J9u8^9ZmcEFl_R=;cNE)Z^`r2 z8Ji(GVZ;?;-hqq~Vi(hG&aGoAo3*$IHLxaxy=jpOtYYrfS+DXl^*xDLOcOWzt)f0^ zysnz(kVK=L*huEyKl@6nMz*v^T)el zyb8OGoYgoOeX4v7mbb|yd)RAZ&Z zmB4N)v0}(BHdZDD{KTd?Ni&ZNr2WI|Aw4CMG+A*nr!ZU9yk{#folAz%t-I3febvUj zwe#{1_-#!mjQ{78omlH$P0x!{GYDRE(ASo-#;m}y63cdzvWE6)6;^Y3Ys=3xRvv#V zOBH|VN1dXCy>^~pyma1)lv3`nhSuj# z@0Qd?gt-ZuKs2LeOkz8xYOyvAYnt1hIW$XpE$jjYE@La7)!2-&U8Nqgwv=mXYfovf zm{zdrL~gNIl-M>Z)4a@b`EAcWz55@=1NPsAPP!<+P3vt$rt6|?>bs)a)>R+r)%(i=#PR#tKo9F6hf5-MPotPQ5 z=W8WqGV9fJan4H5iJ38mU$dIlkM@(OjT1ASnCX&Z8j=2V?N~Kof!_6A^1`S_fe>BLMYW^U?Mb)<(qlTO{$ z?@)C%M8ezXGI64FcCXBdnSrzROdch?pnLjB|2Q!-Cjs^uo9*^F=7G&Kz#^L=L+npF zvDjX2ID=>GE4x8>I4d7)du?Ref1rDX;fc3&JN$`eEHn%GiL+V$RF=oQy}tCkIJuHJ zsTgZH>741r%rqJiUx&EF({nH`FX?Wmkrl{-txC6Ek-^1|(<01D`JBDkyO^+sD9IqSo{GH5RutDriPZ(`qjniwgBL(E1*A zrJ6c4B6l1?BJ)&m{M}c4VER zUU9>w&&Mc}hMbr=B#SsPb1Jt`PTCu2YBOs+2+G?Lj%Z#$RB|p}Q znPp!kC3Y7nMp7f>Vls~ar>2qRcAfWAN#ZJ%eOLlDh^5|IVedlxAMrUWy{V=m}OZTmE zdp+s$dXdY8tZ3~vc|Nc5^FKk^4mvRtKM|Ysq5GFr+gr(*&CFYh-2Girv#FoA^|u|x zmdSRo)7{%&BAKc8l+H*HE-rL;(&xx`t(5iI1k{>uHWqoz^^Mv0v8+GwAtEdJZ)AnV zKEknoqs(bX-TZEvdp5P7q_*LTqQ4ef$|_7LeNN1Lr`%~!=D^4D4sNM8ZY6uF?K9lG9f{SQTD>i+>%`2t z%z-`|%88jKJt6P#&+_lSkwo<~&y!*4BxjtRnCZk!CuZ8roBm`LHXTf(qJJ!6=5=Mi zW=;KFmqTz(5yuqq!eiNC8&YF}N`USct z{Lr@So~7)k)(_=!Ykko7hQ54K=KS1@xwNj1mN|z6MSq)3kF3mA3C#(W#>#9P;k=B< z%52M#oVF(=WzNeH9c>>Of{8O?8K(BNcM4hRmoRhE`E~VFfEwpAwcJ>|lMpV)SpsSM zLhPeXwVYqlm%+mylQ(^d17W|LEYiL|$C_Sv&7>vLbZ-_p~5B`e74eMw(^ zF4|;iCNo;yoEa@zy)aLfXSVpRRGMqV$+2gujaR7#yUCVn%9ID4pPqT7T^{a#Zk)R% z?Zp#5(0)Gu;**E`!}#1Ey1#LvG5Q1e-K%Pec>=e(JvmOI9_kA@gLnjCgH^HdCrWl8 z_D}9(r1D&&AmD+)Yr%$%*{WDa9Oamym{T}do+I@oJB$5R@boa8h^;Ic<(vVyp_*1n zq&z#h7~}BKDtx#xmgU&zH}%OWdga*XO{4O@&KZ7lK3`rbg>uF|pRd*OdQJM~f4{Ut7y6+nm-?@+X@5G;J-98-JO*D#d4? zPh7mJS(@kSuY-dWeZ9m*b}-JS-A-Jr6Bn<_d%GY%Zk%M^XJsuVF7|7y?b+l$?>KW0 z8M@T@)A+o2qit;&FP$f>*UX#}(8z1!Z$a&qKUEwN2ur4VbH+n%|^#f#l~2mRv} zmJT}_Mt5lO`ch_uzj-56tE;U|rF}=npVBXBT?Nw!jfQYzg>qgF%P^H1+4 z2WiIoUQ{ct>-mwmCF3$(m$i+3_fmbew%z{ZnK6H-vGm*W)Iz*J-O&y)@^Jfew`8xd)bnYT&R-S4$bnYVbGjexNGaq*3#XxL;nsz7; zWKB2kUnx6C`|NI{OSsGrH40D^p6N93rd~hne!H)%AbkerNtvF`UF=)X@O!kQWOXqj z$Uk+?lALju60a_tkhOQDgoSn)aPDG08a4_gqN3%yivD%!UF~Dw+{N-;gLGu#xV#gi zX-^umf1I(%^uX?Q&Z7gbk_4FELUQh+jYn#iR@vLe>%FU)X``chn?AN{-lk5?^650^ z%%SE$=D7CKN*?eN#U9Ai;oQZPtCHsSaPH!6cLNIsE-XK8)TH#IgJ!bQkWb;<#kTA^ z&Rt~gwK;d__tZVmJR6N=g;_P@>y5G+v0F8d%5-*5k?y@vj(>jbME3JJ=5I6g|FP!PZGHV~=KJ4Ee%>eV&392s?M$OKbDyd_OaDW5txvxrliEq> zc4uRgox2z!c!3^=724B&+#H!M>&3N10>?B0PVbRc!|Zg{Y-7F_n=g6JU3@P~5NDQ@ z5}1#Pa~J8UxR$H!d5n=PoxAAV#WDF9+O1X5Kb^bi+{HWEN#nfBnxb_N7DWG?yU4jF z=Ps7ACWUCqZF%?bxmrFJR*5N$GzVDA}&H*8NbMuN$*AX)gmg}kI9E@`*^YGd87T47uke0}S+m@kp zEHf#3I4rl;2Yp}V%jYe&v}bydv8c~m0$+-#^Z7i+pu8=st(7>SE5W1N>^#Km$J z(0R`hiHmb{M8}!Uc4Dy%Z9CeZgBO#|$@6pe*BFdu#j$@U;V<&}avsvOpIH~x$%}K! dXwT}O_E(sB>Rqj?A9a3CC$q)hj~whADJn26#mcg`p77ia~(P9~n7TudT8U>5R z@!J6*M*b<<^`hxKngz4vRWuGJ-TXhLjjx6Nb8#G!H?|deM0+cIC>0c!S#?(?;gMH=VM?j;8C5?;G+_#6DaP`6yqa_&Z2y zKUk6hT+cIgM@NID8r| z1AZLlD~fUjTZ!+1eRV3_sbWclJK46JgeS7v2i*gzknR##8#7I!)?f<^9^+s*UL0lm zOixu@qN#E<$NrgBVG>oBQ0zsM3Fs&on^9Bi>Mv`u=-$F4KF%i3MK_{c(5`D*j?&FF z9sRG1^K9GF|0JtTmAJvIFqu%k%JrWrt#oaY3CT>!<~ki$@uUO!r@#fJs!tlT%_YpB z^f-njBVZ zaylNzAoPF=mgefdZ`+pcy9S_BuKxL6$%>)x5>VpHFa%shT9O|@P#4kc=;YHPh;M^` zuY!fN{dG8@=myw#)OpK_A{qQR{ka#-mP0_OSZH(nR^asUTlml{CH7=uib4(IUWokq z9IBiK_9hDaNh1GR9O8Rxh@ZE5?UIn3S~GSKJ#qaDNkYjk7qx;e-|uU(aL@|*2WPc{ z{X1y|zg!aFAc~;KYu5_SE0YAnG>N@XoOiSRas1jP!F_F#VEG40$fTe1W_iDpB$OO1 zsQI9q_CXY+qTv71qJVs~^b9DR8P(0HB$$Tws~j26e+Hu!@spedli{<>_H5gh)H64C zCMv&{38DVH+em|9dk1O2JPSJS`uo)kO0};*kOp=0L^oK}C;uxP9nYVLi)AtY+FnOw3uCfS?rAbi%_J9|2T`D^f%Q4+ugvM_c?bVOh7WK!WD(+(IUNnhaDEv( z;#WI4{#I^BHJ;G3f<@z1eg%BkzYzgI$wXuDv1CMb9A`irt!7KOxEC#as#Zv}*z;_3 z8%4_^Tt(u<%x=Bc52(a+E#fkY*pt&Z9zI`&GBDd~o&>#QPq}Ny)#EfSQ3z{G zBKjQ5^^zMjF-%S9LIV1V4u#4)ri(eB4eutw?J!(GL?6{f5St?egQn9dBKgQX49B&c zB+x^gM$wdO$PAzPO>XrcO8r#%yq%$s6` z0=ocL(lTDtamCM{hm%z>c%Ih@y32!x;TAss_blw04PQ!bVXq+eDOuVeTuvbRit%wJ z!gCueAVPW!AMWU68Lznb;q3GBAy#;36}M-OuZmAe1)waB@&a&)Gx+#z1~QFqu`7Oq zu%euVA%E#}A}ltz0TM{)Xd1{&T1X<6Qy$$6myfK>=YJ+4c#HtAM})C= z^9dH3iZ_H~-(_CojO~BICQ8Ha+1}ZJaWr0ymUx4+U@?lrIk^tOyR*O0Z};unHE6ly z3#NN3m!#vj$(PPmBx|7<*-Z!U$1DJMDjy}d$;cT_|I14To z7qh3~Bpi$6(vZ?yIKn|Re;2e3^qlvD_$h=02xfAnT_GxRv5ZMv-HeY0C+t4 zGn~Qr{|RF0d8|-plAmGVG#7#%I&%e8#)x%3W0TFZUtHhU)fpd# zZmeC|Wr%`he5BmE8vbMs4wP9KfWy1o{W-gkv8{E&Y1@>l-FNI`;*TnN33q}GZ0XVte5;FsyO;r3cm@_>;NS~At9XOF{MWTSF&Tt zfg$PId-pXt3@*MdXdazue3c=qk{nS`YzBbi+Yt2QI-Ws7fATY5HjC^Kmn@;k)q!j_ z-6y*n_3)q1mhtmV6wa2C;auCc;d($Ej`E8+BVEkyqoWh@hj-bO=>Oe>7vFwrns)Y$ z{-4ut6n6n42~QK63=cc>c+w%~6Ta8SID8<$N@g;nJ(*tlnTBwl@5d}9U4X8Uj7!&b z%&y+~13u{cRX7=UAuw0hAQ=;s*WW}E%&`y1Fhipg2E-*NNrr1VivOSg-AUyL{_W#D zh~Z#1d*~$R6MpQJN_rk8#MtTcZO?+c)dMqLr}HPtXyhBgK^t;Q$4oO>qd2$?CXh#x ze{^XhnhZv{mynY*>d%8w2sxpI#b~3;;p|}r>4(Ln&SwvkaPipr(GJ~A{K1}6fy?z zYF5OG??F5ZCZ@r+6QM%hPKgq>Z)|Byq^3XzHq!gk{(0y0=AzS^gy8qy3v$3hc=jC3 ziaZ;>&)?+aqMuqFO`8?2B+h`If9ZZ{7&>qPmT3r9t7n%btd#=P&~BVM!SH* z-eb}az-6pA0VrhWH)3ccc#x4p`Bw#0N{L8d#q%x8w+(WaFRFPIRt!>|M;V!h;tCAt zS-K_noz=&cj0e0*6p`g06j|=TV?w?n-&({MzV(Lo2)Fb%Yy@TsQo?%G4z29i zUV(rFUVIyF5-h`j+u#l01wy}cXG4cpR+~xFOq<@KisRKmmty(6+7*!nYbl}%)>5=v z+}xXNxpsZCrFT1M&s5>&&NJ^|sqD*Aan^!2bM4ibrNVu7L}X=3L29UQ#L!;M;R(vF z(E!HmwN+Auf*dnE+kwk+*|4ZdVw#2x zhK#~>i<%_9t-Frzd4M?0f(F9?Uh#>j(ffEsO&8(rL4*yaY4_^W1y5PTjtW}Xct)6!1bnq<@N?_F{=@WRzV8o zn;KLq5RgEM52k_vcP3H|k3)*?xd01W87DdfxI&ef#*LF={k#ek0VSTpd4PU3zNH8! zMavEENVW~^y@dxhmO%%0$S4@E;-J$TP9_)ptGRfSVZ39cXPRzU7cRelUQ9 z6Cl0N!+{6#D1F@`G55&1htb;=@==7v^Eyxjn~X_(I}u>y?U>1>$#4x^x15DBymR)? z&R+?bEIP36cnAdyAUzRm9Db(hwkcBairX4x7MGODA#D+!?D}=n7HRZ9y2l#Ekv&*7 zC4!Hth<2evQV*c9Y?U9R?8>SU@F+;3e3QaQesr%uKms7X1_&wuue?Ptpbhy(A{Iy*G4m2(VEd$zzs?Tnh|54-z~q&rvMV#R z8ioX1U}cJc?&(x#%Wl+x8rqF>JMq$v_GuR$cA3vk70Laop)w~NHI#c5U?Q6lN<#(} znyo{s29eUupu*lV_t4jD)A3z}Y%w}{W30$nz(YYxc!7I;`RR}aG8+hhhu=Yb>lO@% z!!?CO`1f>c-fB`IF0nFoPzD&4? ziARTDG@#eoWrq5v{`qY~-l~EW%6hdOQh|U3Q+&-gH8}W4KRAA0;W+Nb7Zz!Xy5>Xu z6H6gsjH2Ge2r1UjYd{fER`6m-c~LD{D`sjUhF~{_{B#HjW)A_GtJP!~z9G+;WO;=h zvX*@p);dJ<3b7pfvP*vRyNzla09A{vI=8G{=C5B|LG9c|DmCVmP_C)Lq`bcrOB~-y zaA6aNmIno~w!8a)#1Qa>HJ`Yiubx-kB9esDX*rNc8nuNZbRh>IfvBd#g$PtqSC&F; z*doDBL#RSh*drCQLL@jM+W=)V;LVy{IlZi1X0Rs(VY|cmd=$mB#9!@tC?ZLek7{Vy zfRF@ZpiBwmmzx{juRFfF;tw95OTfu?nzvR&E|g(SSr5?}R@P%DC+@&zIP|m5LqzVNIhWNVU zYo2XwcJb~wCVhhn4M0ahgp6m{P>V&m%rp*U6PFjW{xbCFUB2&~4*oAO8dro3w5f;} zh6Ybi=|)#4PCa;%3UGPLJVL0f_1{nl!L@-; z4Df;$4Mv3@#Tpn7hBF#VD9p1%WQ^cdv*;dU`XuiT@*PCzVLIf}&{8QCW@y=554iJ+ zaEH7ygl@eiaHm3+tV~~&MS)fHlL?|;HdaeGv&*FP{)gVj+h(3DDM+DwQ)5a60um(g zHCMObqF$Q!2h!TP{`-;mIwIVTz)MyNaYm5@#xp&rL@XVzPV`r?d>#%&{772ztwhi$ z=(PkDvS}Ug;WgodDpmL8<3l3fsB%k1y(LiCWx9F)!{rxvzOE6QgQ10Tt_&9P*`O3; zxM10~?>Garx#)K>knX(=wcd%jdln!a7`s{36#O>PM=71K22)eN?Tr3n{xyU;lV{ ze)?(9P)smO4CS2~R4S2>qKZTORvTIyo@PMxldY@`7|l(pXo-HZI@Siu03I(ySjpQ8 zHA_Tn!P_$MCk6@QX5%!uh>)$D2)EE_ zE)Mz0iLgLoa_J+6{od8v{@K~(+spoG=Q4`EujV9Zcfk`7;UUMBLxEkMRhPrr!)o{t z6i|9Tdzgfa$Ic(0X5lgzclyg;y1=eFNWKZss35;GJ<-s`cd6)?jm;pBQuqZr8-a?w z%arvcltLNK!$xyMBs2vMR0Ek!C`rJ^b9CExp#H9Gcob|50vB7pcnGBzO&_^@se?8W zM)1l;M4h!Rd~*?b)|wL&rX>Vg8=0Tz0dHQm zUdxK;fi@M9gK63lV&o=ACms86n?6pgj6a8y#oCi7ucNxJ`oW!-Z>yjpkE+7l#g%v6 zrH!)7^!2mz&mZ6auSTvz3Q{QF)DTjEfDA!AKo2N#wV5HJZ(Rl+0(If;14w-zykX)Ro~lMljNFTjmN1-Ah|py>8GgXxU|@|IK-PlwAe znt=m&*%1am*dMRQ{?Oa35WffW1DAPJO|%OlJ55!;f0#Z%oxet4WW*3dd8Y=FN+hIE z0?Ff$)+bf%s87q(;7O_NuGKx?G;F{5_+FL)ytWpt5xlJkCA~lYy84Th;S_ZFPJo0@ zQokC`z~dhua0F2L)!HJ)&M(_59Dq=@l&bXnww#I)d5Le1OI9C0jj%ObyIyq#RaGwUydkkt3eHxtn#bJ4bb{lQP{ zV0OG7v%^s)@ur-Y>f3r?2C*L$}=@Aly;Y3f@hf!u?v^wvN2J+ z!qE)!Xw_D?9N-XxTJz1v>t?IxHL7S-kam0<5e~#QJ24`17j5UvI6GWsy!OisNT^k9 zsh1B4QhApt9`@qBrR(rrW|-fN=9W8+r;UIFOAO_m8Yn7}kbs5hlM4-#D1I@j76l94 zh3F_%tpxN&9L95W$R&}ESLa5YWdM%_B3``j-Q*vSZ!6*k-gYPWL5J&P0jHhbWVl!a z3mVpY8!Vz#3|AeAYib(Imi*)orpD_rHT2)S2JdG3K&HI*064qMKOdW8y&;n%ql9uz z4K?{p(Ebvff#U8^n^)g3Tf}g5(;zk40f~fS5A*}0Km+C7$?b|9*y;dHzI^@CHyCV^^-@@te@V39AM z2LTZ+3QqGaMYt$hwjQJlmxte%(L7BgPYscnBp33NK7h#U0g>PS@u_eWM~mnlLJCpo zM|E4fpt8%H_1ml7<;D5+pb=PMiJ`nx14|_mQfPtNBEBnsvjcZ{kryyjo?P4xaV#6& z&uBjCie&(=eMNAIr=v*-{vz`6__iXv;BA!#30_c$ACM4XVo)I2Va=}vETvRos(kP3(s$2>S5&N<++qpY&cA2T(yZzTqQ;3?qfS3@pVtLJaX+K+C+716ovu3&J}SaYbpffiZH@7 zZK*_WFMggcBVvrKKi%5`c&x=A913LZtw5Hq++Gc1#~yM&STRRcL92F$v&+2mtNv;K zx|xfQf)vU(HB?j}AVUhz^;}0Iq2!|CMlBB4bd}MBxWNI#!KJ?Zrlk%}6ss?TiRogv zn9*;>w-iwVYpFCfuuaDgCK?(bNZtI_<4_TcRD^uBnH|a}5?($?h@vi2K2#gD3l+P} zE~iJ%{!JquDux!yIW<^Rp&&&IUpL?`LK+~2qJ?i6B>WaNnH6Z^>n5ah?8d4{J_fIs zMXO>&4(^M273UP%bSHq39JLA3(}Q zA61L(0?IBk%|Fh9UK9tPPH*6YPNNyD?B{cTxw>lvVwBWT?y5m&JDL(0a(&(R;k8-- zl}(Hm8w?NS&Om_(x{;^bJ?VgT%oZg}%Aje3&Z2R%L1!g=nU;qX;^wDMi11e{#SGvH zb|S%~toBbR7Y{Pb_f0o#QQ@|eNA@d=4N0jmHC~vUWLO5@`rstnmy;}cTmd~THVj|5 z{K}LIYm~??Sb!SZjgkJN6P56z6xs!^UFNr6^?QRq8v&}E63R6-D3$k@0FZCFCZw6j zKQ?Ly!JUlbZ5J>M1KPezqgh16s{=s!@_Fqi+Cj7--$(?Ngc@AHv~;UN$D_8-p%@DB zn7v+?8KiCf-Zsy=sH5txU69yio;yiB(7p^~>U^mkEzD6vxhDk+cx!1HOikl!H5wvd zz}+~!YVJFv@|&o?QNVy=z$H)WU=|Au2&2JUyHZcx7JwmV0gneFXmI@E8;jtfXuKl} zB#*$q9l{5W!~X;^KgomP@l$&}!NOp8sA|{!9)^cR=4CpGHFR2v>e^*S{BZmPStkvZ zWn_t=ypsY+@)8~ZNhJ~@j`+TA!yD?(h8Hl7<2qZ~9lCAl@b+g@Fd}6DuX9BdVVT9Z z6+wh;+foL~Dah7r1n(@RFBo=AqeDL3;R@z88zk_Iwc^UNVJyLdPEhTX9&BVTEFJB{ zIj~exk5XvYHrZ*$`zV?=W0#CGN+{RVP*UDsf+L>go0hie4GQ?5Ty@n^%pUP!Ko=go z+CdqvjD0*Zh$xctiEk)E2+~k#gV?^YO~ZxD46XWe5qYZx2UsF-Db>0!e@x+Kt1K3VQ%0)Gnm#GBcjs=3fPi#qc4VJv4GR zB2YxRsD_y8bYxHi_vV)EZ&*nls?Vz*lg5$8wsp^@FeSR$w(xxACX2uYUPp?EQ_?|1 zo{|nq1cKxpem`M#)1%Wc}oEirN<^GNJ+xln?FZ zmj@e>l3F9*$T_#cq zd?3AdUsKo6S0yKS{Vn2&z`Y6y^Rhlw{9if57bDufoZ=3#re#rgt?@ z)BeWKR)sd7E;@x+(tXMIZ3Axj5f5OqFR(G7l#ya166<$3duCKIk(YTC)3?*AY{H|H za?wTUs1OM4gy4@T^(cjOSZ38b1R!^p+4Jv71oT24S$wwsLkZ&y7EQ-eD zvoO)NfP_rI?Y6KYuf598@&G8W=hB|OUyW|HCh(+!(4v~DKA_0uy==gipk$Z1_5Ba$ zmzNFQ*fX?H&PhQecm7nNAVClxo=}8`4L3v(L-*~Z3_U8?sKw$FYlrk!F0{JEBI5wB zZAAb{nZ-8~p(EpId-1~A4SoMHm`t*)lfAgVc-|cBk-ga?x}_|g_woS*lX+A>v}=v* zGUxtBI2%Vl7Tv`X49JI|5tBqh6Xm2DQZ}I^ffkR{iL^F-p%((dOx*-<*c@3r-!}}$ zF>nVibKtMw3(Jv3!U$eHiU{*1{j&Y!%ks@dq*-fD1fi`AmApVJ%;9zb$&FML53ymd zIX29-e)A{biQQCcF6`_wGk+dO_f6HfXK10EQ^QOZ3Nm={JliCXVabLC@aSCs z{pczhuO<+)Fpc8pK4ecEo#>WJyKI3jFrEWvvBo2fnf3E9A)?C7?Z-dKtIHKCNTN*{ z3`}o`z5fg>gh^fL7LwQ#M9?X1D5_0s=G?%^uCkA1m=wW(ENb*+bp&1$& zDCi^^y}XHS!t#*U(h~Ui_~n-10^d%wMsCt}1ZP?@LvErU41#~i?2O*&*Zp4IQiJ`oc!c6~P{lWPa6p*PzLV_^1;TmwQBd=tP zBaG%I)h;*p%)x+`4=H9+NZSHoq#WRNp$INl@sy-P@y$e7Nt=;x%r{kn3g#adNidrV z3=?rzUEN;soznfYODpE^HrUC3QBPq0zmE6xtfcmvSB#O$JF5QLg^pe3^@l;cTrI;% zBhbMTLwTo$j!GmX(BVM!VqK?TCoF%%~#70(PG&M^l;Qr?#X>)+3kHb8WP}v=ZAFPfXXkjfzf*v&$Mk4tG2ms490We zNg4S=0NeP+q#WS2p$I$t@1kkL|1RF5h`%#?1a3X}-$nf|{hiV5{O`Y!Hs=>6lezs| zV!(Sva%oPdlj-fwTg=j7gyaZs#e=w_AtO(UR+&m&A8@l{`Yu!12f@!JRZf4#Q0VGM z6n}3-XUfUSGE2`5YNw>3qU0+^Y|Ko`7E2`S+eVHAWUMw@wh}-&%#bf7>PqT0dPtMQ)@5NdzPTBU|4;(*^mA(JYuPn+e2~5k+~aKFx1LN&-h7z=`dan z8!>ShS}5n_Fp|aER-qt64|wp(h6?J^oOBdDAeqqJ&Y1CFJP%5!NL^6dfQMxLytWfD zgJBilRD=qqY0LNC*MrX0>FwaOGmoREa9kc8mG4O9B_F?FUJsBHJbP5-+a6G3Z`TaJ zxq*`1G6*7%s=`!mTLO_?rosORXUpe#(2P~W5<_{XhLK7nWH{ z_I7vL9=!PLSUyRJZ^jDAfQ01$uK`6Q`I2OKCNJp@$ak!GjZNELcUxFnP|GH z3O`O^$Q&SrmxLGZ^U~pc?iLM^{oP#i0*~s7b^&FVN$2pE(kx6K*J{KvS)+$?P!22E zRYO%OGGx)* zU9PrC#cLE)r&lB*K@{E6bl3Le?C_bp(#$k5IK6GP-6D zoh0T~ptBh??J{TmbhP~EP5kq@5inwj32UwfKb1&G0LOH74_-9c@DkrKHHsOV0}dI_ zF?R6C7Rvx$<%$r4w-rGJZ@Uv1f#D!U{hvvNll$Q)0Pk45cpOg1uGm*G#zWpZmd(+J zC}l<7MK78yhv6)Ug*L};K^M*!Jl*3f^w5_)KjdKPC-kV+goRV#B!p_HRJ*4h<82&e zRiwXcc*agr-aQI*HUbxampSVnC&6$uY6MyeQo?$bz>*ibtw2BmD=sOd<-2mf6>i5^ zV8W}S98o_Rj0e?Md~)Ctx6l@LjAZ#`pz`tZ{Is{`s1o5MX;tN_#qAnt1#Qe@&Cf`5 ziY2?Lb2=IYi$!>sl+PjtbrDp|lQ<)VU4rFUEgA^3`eVrg;9i><@~$kc<10a?WG#sJJS_8MNfmhbRFKJ+EWexPQ z21Z!}ku&@WoOH@K z>6CHODdVJ5#!07)lTH~Y-7-$PWt?=&IO&#g(kqP@=?A(X%Fya_Jd_IfT^1n&1{q`0|qFX z6WV!WIqlCOR3aZv_-|ntnhCxLScXR}ANe>!SMpiFso>JL_84<1kx?in8pTkJ`h5h| zoz7>&y9trhB?MkDf|{Myv&Oy2aIq+k>})xezK7f;S&;inJKBxSrYNBSQ{>>$wb9vr-r9s z3R815HHV3NF_ZM86U053w(YIr7%DYXZB99BL)13M-DFb06$(cgE#+3vyQD&vXot(- zDVQAP+XC@SLXDGnc{(1)@U`JXLr8}1`?hWAq{uTPj{F!2M`?W&csg$wvVzOEBtPB; z!$mYZIw22_-v<9)1)QMg?FZTPpCD`-P%YInQ9OVO{6{A@1BlYoZO5?t@F~URoDHaR zf~+U$U}(DkM)Th2_CWXFnf5!~>sp}hHQoGg&3s3I<&4u>WG2VSEC$hXIN5LlNl&s! zv7>y-JMh7ATbVA1-CgPgju*DObY$bCyOC@!$oIwy7aX=%0^{8Fa-pvK7Te3v-|5CX z&FaE&$McNsw-@LibbqV1R~PTr`W{oqv;Tg3Ot*b{MlVjqxkf+iF>#OSns2(B?lD6f z0AdjobGr~O<3J^&tszV`0o5M+MIel~PzYeN2jAatd$|rt_+ZZ8hwT;OCq&zVbpDOE zmpjn3cRHY$-!(L-^5T12Z!ZWj!^T(bF1T&SJGPEt>fpr}w#n2+8$Bi(XfcQ155mr$ zh>bc7el(<4LGfa*IsQqQY?$X~G{yW3z+TaKC41e3*B_CO}ujD=2-caxi z_)+1rqGs7khOP1)KO29t1@k@&_BL z>V=TfhRTn8rl&)6!0Ur3_I~*l>?lZLp@BlL!m++*jPeY~ZhL(@>bHuv@a5+@_Bt4% zy$%?axMI>khlc%p3`UWA5MMEp86b3H?|M0c)51eZxv5b zVMkf|!84ISR2GcaJVtr%G_UJHDMiP91+G3g7j2UIshh$mY_uQawx9N~T?;i$H<^yi+b(n8{q_^+VEOTzHxnE4y zN>YusLlRT?USeetjMIF--4v~=Fkv`}k5{ARq3~f_g%5LOC6=hlev+4`TFb5kxZ}%G zWm_*PN#$XCZKFye!an1xMt*V8vwWhdyk#e69 zWYBoldi=67XGS-=wwP9sc9AB_SY0thnuWEbWMgt9D8Nl;BdmCE@JJ-tF2iQ0u{B&HX4N+U<+-M^#Atl8qVg40H$8AoZXqW$u||7 z@2TrqAQ!)73-hYju6TkcJ%xVmKVC=6@cvmidGe>uOqKM9_ko~9*eDo&M!XqS%qlPb z-vvoDjc!49LH|8vM>3MAY5?G%1z(FXQ5+YGi`f&D-jo(0fNs>kda>wDqQw@43ep^2 zfdOpP0?zhdE^SL+OX7qEE2q-tRiYa@;(GbhBuToV2Duf4;Ko}TcXMD zSw=su0T^pE*8`{(N{I@)j{Y^ldb;i$PC0^%RFDqjpG0^#OB9Gd#KUQa{BiLW@C2R^ zNdF_(7oGkiz|Z(=52^rsA4IpS*;hFKRU2&GR&^oG)pa!2*U9U~`3WSMAIva?cF|tl z_PH@Sp6>V>sR=8NN7=|&dl$3&=;(y}fib~gc7Wdvv5Ge|rDko;TE4B+n9bV~A>!LJ z%SsnxclEAr*0v6!8|IhKENbbF>Emz%2PJs4p=I$>qGYz*dHSwWfwYS{@gS7$=$CW4ch zms3~YNYulZ*^<0{3;!b=GV{p+U-{!4`6WGIFu;;i5|*2_CWMvDe&ib@*?2`HptuAP|j=L5e3 znN!I&-pgWqUWj;F=$7V?ffaMKM>-6H3`#*4=xm4y?9CTlYlAk&KhAHj&o9CBKfAoF z4GSzWVbN-2$ZowVk&uCdZa~F3S6;>*1qT-@)sYvxph4#K;w4jp4QZJv-2kHno=8@% zv-;InVjY^sSC#?1))T?vdl1ipiD~fdM68gvV|HC?3osfNybQ?I0Y4Za!fYTQlww~8 zcGCOP{(0y0=Ar{;BKRuz0v)gre#Qsz*cW)XZN9;R3oyE473cxf&~A+QLp`~0HjaKQ z5a~y0w2LSPd)>4fL?K(h5mO`4hZ#APfpU9;N0m|{5?t|oD5zo^q#%H35umtYIKFRe z_iix^=vm;9sq31`O%OQ`c%3Lh%ReZz+(7|J@)h~kBEayiH?&Cboyre;fEp-8nfo9m z?k5sz3Kd}0Zxz219~D%QRvhaZwo`BkmT3*@M|eG0liiW#2kQo{mrwokTd-Z4aA_5! z&~K*3mz%)SU<0}MQm9? zmDzHmMb?UZ0p@A|M2az4wtejDYBgDgZ%8yxZo81R?AvfTJRK>R{k+b(RB3;n1K;>iyZ1+!`d zPYO~foqm&Ttv!LnZ;la(e9QRFf>290A_g1i z*E9zFbp~p(5eUdBp=?tlKzV-|0KlUhwr`VLjZFZ+aebx5jN211p6fvAeA#$)?1_B! zygC%kiHC7mZcRuUDUAu-r01tYh%kpKP|q;$!+poW2?bdePy?wwy8#zibYt=-3+}cY zsG;2$aX&iYr5)|lvW>vTG&hY8RFmAV8j7UisG;mr<3u$YGOW;S9Rj(Dm~Ms@P`Fnm z+BjHfw&`Gx+t&dLjs?7iZV50P*W2>KoZmwHsV3#nWj1?MFCk#H!$^p)6M;Ml~7|#PB>YEi`Sz>u~aN zBUWFP$`uM2FrH(3o*bd-00zeaUjK=Jp=d0+ofM6g7KdqV3m~jlsn>yAoF%+D*trbv z;$i&EudM|9`Iyec;Z;#qy=w=aFIfHPQw=$xcs6@N@0KiHMAQCCraT*NwjQ_ zu&IYlqswX(FYnSgo!Sw+EHRXMYHX=QLIy3qX~DbP^1vtj<^l>GCC_YQVvb{r5ATe7 zw5Y0R{nWu0mIJ&h6rlxgDvKD{^*1?Z?0G53L3zU#+5m|5n zMpcvoS%4ba?d2iMPV>>vK11++Lzf|^3^A1dYGkQILV_&5ZktdIjnrEb6+Mb95Mt$! zLkN0)LV*Rwvve1bMK)d?U||`+t3nZ2hU2H!xRS({U!Geh{x@#4nQZdp>CG};) zwsp6@%M5hl8;O^Vxxo@rDC5*RBOW3#eH@}WMxW$Zqjw=;E18Um?IOHS(u7D+AkfgEyUPme)=L9JwgfJMj(Ts zg|beK8C59AK*RDp!?HI_PItBk4GXSmbX#HQG8$P?-YV6wU-RU2X8pY46Hx)*+1=EM$z}xoLC?Wesu>EMAJ^cy^hSm-2(}8X}$*& zq*U}#)z~hon7hnTzr6tnwHg7Hf)vU)HKtS`AcGVgf^H!r0 z-ru3MN1HW7iuLnKSA>*!4#p$>YJ5u(QHqu=0m^MKjg~6#0004qpt)o$(Dt5Xl>MuRg8aNigP9n%!67P{)r)NHF$2 zkjZb`J1{b}PEz}e?|8tESA-v?GS0pUw^jwgMHNyiin4IviWefN%$JSXl5fl0Ww!Y! zn%*@PxW&*yS*OO2DimZ0Vr!o5z{_E>VNpZGGz~~nRJm;N+jSdEAKxQIsGBuJ7zXef zSHzIs$17S)tOANKOoqWqS$SyP1??&6DR z7#nPF?0I*3Cx;>ojAuDIeaX66gpo0#3~G`-bME8veMHNpypPg=!4t#yfkhK0yOQq_ zfh4cU%pb!Mc*Qcw+*?x0A<0p4SlUmF7q$IS|8v7ogo`q&%M?aU|FY`sqL!Bh5n zJY@#dG*#`hhH+&NCJrX^s3L6H!r5g8{pkK-`T#X!8vzlP7|J}gMN^4{1V$j8-GE~9 z#PKCs7ATCE8kA?;s@@8WM;vX<2ZFH-;Nd|;5xlJkCA~lYy84ThbQU~oN{a>Cj{MX_ zdj(3x-iHsX#LodwV9$mRhZn9$f^tVvUjB8&e;G=j!OMpcRODqUiH%)u%NE&XuKeP0 z6vgyKi`tp;1u2wqY7D7BK!PB?=IR!di{C8n%keyTuSyXhkDDQyYkF|OBOR|!{zn@gXItb-U5M)05@ zLdTc%%l4Bm%QqJ>WUV;`leS~OU=EPXm`?bR4gZ==5!ZS((O-hpqsp>n+}UL|{8j&R z?*>x48}Vwf#8BpONCTXN8`^1y{BiL$b)qN#QG`?UABS-;{t6Gcj=m2fs4e)l(m)a* zvQ2oq-J)T`8~DDUF8!8;>1|To%QH!#B5}M8aHs(`@wg+x6v>;Pr-Hz@6)_5LOFrG& z<5)&l)4HZ+YkF7f+^xdNvUB(Ru5)|77W_=QBEiUT?^vs*OT+uzu3lD^$u{6+LjI8r+EkV>#66wHvcbTvY z6gIq@-(_|^(dD;IB2Y$5ShVzZzJ_Wo9Y~5mPz21T3BDpCptmo+OWpw9#&-q?0blu!&cqas-MuKp=TrW;t0}47(lqEzM8qfI!Ht%i&Sq>%SlM!~ej0Dn6+V zyW7YyTwGC&_S++nwaZNWc^utCox(;;AchwDwTPa%9!^1;dhfob{+^<~NfinbV1Z;5 z+r-{%M}bARTpHemN;G;YL&kF;-leW-qgp?&o<+pCx&8PjR7w#q>P3?UZ7RVFEiVkV z?VUb-$QL%{J$z|WQW64?4>cuU@r6DFhV2?P%7qryMWdrhdOR5OK zJpVWkNHomsp_3GS66kDZy;!@=GpdO7Y|4msNeIpnb($_!&E752)W@qzGd4_3>* ztQO^q6E7cX1W88~V#~;~%WQgD>SZx+#O1}%LRqKAk}4FWAmZx=B&101FHmd6w+wBo z92Ure)J+c_QBkgP3x5~0d|u~?#tPb0gblRmPVl0~m1^k+@l!aWg^ZuVF}S@11M2`F zuP4QYc!*K=^2-O1a?wW>M$3q@%iQ`;{qx)N>(7lK3PTHJog7jA)gPQ+na0;D6r_ma z!b89`$8m$uF5Lk`20#dvafMytY8Ke?QUu$^|0P*}8KkThK^)AU_+}!Uq|M0pZ7DO7 z+(-%&JK)Ca!HwU&>U}EUsETVD9d?;9e{ls`nfT6YC(P%RP`1gD;d!wPrhp9P{Ux~I z!;>YJtC35NO>lvDom8=gC@zrkYy;BmW#esw3&QGobuStk;S`v~Hxe;H(r72f#no!E z4BwFLlE3pyKO=QcK~7OHTOKafUvrA1P8`YT@$2QA7!@}Fsx4YZl3ixmFBbD~G-)Q% zm!XBSPL3woIlBr437&YK11TN0AwBn_o-3%1PrXm5prd#~#`DNSxyog3;JT8mp9c#O zQ5aV7O+{Qmo9+Z%`oU-wlUw!vY7WK9mn38>@mkSE+z&?qKjDK7@``K_at1>;+{;In z3c`=-jFwSlmpSy14y}LF8Zl4`QYho3n6k*u=oJXaAjO4?4JZ`6nTcX~u0=|$pc0Nl ziVI`GBlc1V+rmVVET7l9BBDUrY5LLlmLi}OEnABH&2Pgyr>o^7*eBtLK7!G?8IHa~ zaiGoLd_@nBvWn9^1W_AsEp&d0^>oINm4#l9B&I;ku0CryCSX>jN)60xKgxi=}sgK zbnftXj=#XmD2K@4UnDY^zBhz!yO$3wRd)cYKH5bWdzV@7*UQN?sjSrq!tmr!2Fg(; z^9WTWB10P2Hvu&^d>q9td6W(Z8W;{T=Sd)aGe9Hf01qJ|*zo+~TZ@3BYOQpRnYz>Y z1NIJm#;^-Ft2!y>8#6IAZe?kywBE_32(@F)rOf&Zy} zWzP~rnWsjTN+e{M;%QJg3&~N3Q&I=20zsa`Y7$%p(KovzJo%1+@SqFnxZ^1CZt3{)Esstl4}cthy!#(=_U=E= zMz>M4JnGyA_ZQ>8AL+I_q24^|yk&=i!7lp){x9%1pq5kAU7^o<3$L_=U)I9VN?Yiq zEsW9@;`-OtVpyd#?9vuaX^T>x8l^lnN_lFQ^3*KlsaeWXvy`Xsu=Tpst#REf<*8Z9 zQ?rz(W+_k2Ql3H?){?bAvAwbur98Dtd1{sN)GFnvRmxMVl&4lHPpwj(f|I|5V|FP| zZIP$PZ`V}Y@mo-vtgbtLPn77zf~e8QIGRCyCJ~SFF@%2Pr36x(9+DWjfR;os z;a)l-k+tt5C?Ik^8{SQbcrN1=E1lUORLJOE4oFH&HH{Bu0GW{{oVxyOU3 zzl?!jC)ZIt9Zrtl=6@*qlT+gQRM}0HZHBa5I?td&@+91e!>8er^CA|_nU6pt7+^Dw zg2f^!APw~=KKCE5qh)yi%pB+nw$Qdwe0qN$&VZQ=YuJ2Vo;AF3Em-5&@S1?gnKgxw z_(l6LMY!v^fKR6LA2&U`4IblQIA*^Un?lA+F(R_Q60cm*=ygssJ~V!dr|6+_PIvTAe6TXKUb zCrY(@MoYPg@_D54mF&CA;3=5EO-8yO5SMg+IgFR5<8ch%8$PuK4hY|eI)FNf#9<_o zA0y!?^j$&`^e@A3iMAv^-Uh=(G&?#WIb65FzgNLR+J2Bt{|T-k0VdL~7sZ2+)LOq8 zXnpvG;yTU-)R-U(Nm|15K>i!ed!su8Lw{!)?{v4Tfm;RA>i%0Z-;t=*Gtp{Dh95-B z;iT%wNf)xLsy(j537u>RjFX%i(x2gd<>fG(1+ma(4a><_;kGaNPj-8inrHmxru1;@ zOdW(Rp886yGg~~NwRP@E)ZB;RY&;24Q&o3dZYySZAOIghWD9DFnVxQw@|6<66#5Xb z)GS@7Ka+rEf{(YuZ~+*0{sdYCcH{a{E}KsQ_VjoLb#N%EiMUiWgd@zV?c-vpX7Bu|78mh!qs#_yz>W(iQV95AiaW=2sTw82@w%o z386J5bxb>Oj$_!y+dOBtK4a-Xf`3`lJQp0kzAjWi&A>;zoHTq3z9T24bkEYIAUBhA z9NqEhwI-)N3l5a~lpA6V?^71t&nzqXwxa);ZA-o{-(I}Kw7Ys2Uf5WVy(bNsI~(w) zvV?h}zy(rjUsn2#^nw=-lSuz``-lHY{*%b`o6l>}HYu%?^@Joc!B>7kd7P;!5j3-( zM9+7>uQAmrhr;bkY&nndmycm?VW(4)&#QfrcDMS?u}kb`hJfdebU#{}eWgT*|WjR9muJ6JB`xO{W6&B%2kej@&{ zlgY&XLa^=9UlN`XdjLBTT`3MgiKpjFpE+}|N0ZbM1QZGzS^WL_1{#Q-C(7xY;qsBb zz0?pUvAjvY!wtMx3%3`=5k28+WleB=c1Os87w)`<_MH*m5YVU009Xzt^8!Z*M6W6t!>~2m#tfnxu@BcnK1yLm(E;EsX$!uwd>Jr6(Hv+OjpeijJCP0nn$a?S z%hBNdX>=T+D`6Mdf^K4yO2%7vQ>J4nzWaI)?8_&5ne}X@Tay!W!L>-FjhSZ(-hyk< zVI!4zjZxjT=$MQznHo);Klz2Z7JZI$WI5y?RtEzL%$&HW7C0yZh&*)EcU${D9by?tDaZ>q&n4}tnQEJBX6iv2@&h7!ul3?#q1;w5 zoWw5w6^;n>_VZ>K#+T6#*-5nZ^Pcbk5#wK>1%igpy4U3~|7C%#@NJ%4HOGBAV z6R!SsPad2kk7hEjOs#9XP|dP>M3Zr4J6*>XqNY-1fd@6YtQ(uZAmzod2&({P{vv~# z6!*#y&%{Gib{(3>GojmnL?h8lce&ITAx(^!vD<gQw^^xxCysbnN^X9D^_i?uxaH2w2p_5>CAq?w=4Ep61BM2ju5LsKRQ3}D@( zJOeOw1Gy4lJg7BJ>daP#Y0>q37%t9#LNu^s(Rdt}ZVz<-ooT(ZAs*MaJ-sZBOZOnw zi}Qq(#c}0&`X_@-dDMZ&`Vp&fO}BJ#%$BO^Y+Q(W&9g>}h*yvGU{xCzGF6~DWZC!1 zhNUIc7R-RGn}i>bKP0L$0X?;OEuJNd&4w$0JjEne189N?b?*q9j{cRZGA_}CBPVlO z(=LislR__jE&f%Kvr>%DrIXlDGsx8-GX%bw7`u_~D>0jd)Ec7Y@lbD{B&7t#@+}j# zGwcm5IuB?9Uqoj{$7*i6WFzx{H!z z5!h)wG>|6bp9CVZgBhCxko=ytV2@uX`R7GkF8H+$$LXAdbAR-Xf|bjg!^X7})R z0w0PCyKGM?9Rj8mTPauRxde22Q4CK8(hN`8zFpr`;3H!`J5oXyB_tpKLksQ1fdDJ! zXpeLlCNW4U=mMP$F+uI@u7?T#IKRCQ{Z14d zT+>uPj4Q#06pWy%j|*PN#*jkB0A53iVDUYOXThZW6>51q=5&>wx0$VH`v$W4_(_Q; z{S^D)RfNv_)BgFsU!aDC@H0Nx1N#CG7Yn$gAkZ*&-~x`e%@LAY?OCJ=>e{YIWfNB|)thcb}pA<^F8m1-#w39gWWa`22NsU5S4(Lp>$jw%oY z1r`|4g9Ih;MLpbBLnRp+yZNw|3I z`~luOxKrrRvSy35Vl6U}-H)9DvD&KQ@&~Me>QyJXk+xIoCA*W%oh}Vx%}xLG=Aw}| zsdGv)8P3%%jxgo@CE(&)wr^>hzP)1_E_wW5lk14oW+B7b204W_3oZHLd4(;a3T?b5v8+&oooahVN`+YfJA1zE z!8+NOb+T6UHdj}>FitR$MK`9xG=Z2kWH)n$iB#IruIYGfVFVj1LKx5Ahu5=5KK0LU z!N1kSGi?PalyPc1qyhmMOh9QQ4GuKYyJXb2r8|zBl*1`P{dl29Z4h7c!342tUtZ_e zAejwPte@9)h4^p=#aJS+qreP7x`80MI7Z7W5f2w z9^j+e20+zf%Xq?u-ZhOUKS*risu4UXNTG~V<4FYqQao`yc;A@Bu8AiH98XMrV>pqH zkXuvffp`-qRa-HIi1ug5+E71Vm(0N;k&A!gvKvDY!CJnC&kgBNF+R zDHXcq+rJXhJ+Hk*bK+qfmRl2&MoJvm{^A1W-RVujV7A;#I2BBsXV}5(v@fp{q?NXZ z3An(@6alNW)1w*}odwj;Zk+3hmv*#I%lN=1d^C*@RFmAVCX+@mf}@7APmL4RXvnZa zvvmmMCStl7R@hr!fcqLro`5RLvH|OW1;+wj|Fr}dj_YlCSHW)~e)27t5HN9m%mZNT z4=~!i*~TRn-JPj8$`Avnq1|2pVz3!|O(Vv1@idx$`w`9>K@5%>%5pVgRHGq549^48 zLen-3nIi8lDvPI}w-qoRJpAd&5vmSga2(+Ep9mO=#-iIv(O7A5nAWxc!roi=I=ArZ zIJ_6wxeV{(Vf@Umtpz-Rb?{>z@MK?j;#lCM1#gCMkwSM)!%it&eo-Z*fD@pGcH`hg zDf}pjbmW%q!2MmOa<4}5@-B_#6lyvUC?o%f)f4DnsT{D0+$=Gad1`E_L_!8FzG+zw zq+Q6y#cwV&!=kqxsF>r};=|)29`u$CSO;5J4)Cf_gciK5h%9(pC9qhUwWVdE+*|z0 zS^ySU2S4TkSoQ@hx_Zksj4ZeSqdQlDEIHR&!V*LIuSS+i zBqYejf?cwY^nS=Z6h{&RvWF0U#VrVbsd~|doiaXjb9jz_I*kx`xoI@LPV==T))~PY0 z3I#c6c($X;mJM)!6K47Fm1tL}rcNieqEF6(3YyUbNzJdUE6R`9DG^;M8U z8K*{~3Irth<7=*NLFtpt>>S5~C&g6uJBmLrp6P*mPC8y4GpATSugFEz>3`^byglbz zi8zzAYVkr|Hm!p#^LlI<=QpqXp2#<<+*-9+3~iU$>-`UxUr61=CQ4#4v{2TmaiIzY z88BG3ZMmBkd^b(oQ_3+83^1POnTo(b=3KwYB?_~CUgyh@fqpo?nG70|?+bS=EnT4W z9|LfAU4{>j%Qrs)@_#y?mf<8^KJU%yI0SF~BEehg$9EdGIrb2{RWAFeVr&^xcA4?s z|8Rauo)KvVQ*v4;>&h^toPrEfz|{qhMac`~qL(TLJd_Fb+EtET990auPj(n+3K|f+UXA`>gS;La#DJ=#s(tqI(FBuuR6n$g zA-l|hAKgDpAE4@MBOt;OLz$;WkxC>aFainb20R%ezr#Rb#MGd`qRKssf(VR9g2S3O zO;`r-@F1cH-d2Q?-k*P6{Y8p03(;VV4b@zD7rbkFA3m&-N9a0N!x_A6ad^j&B=^4F z_d%4mlP@1eP?1MfVaqtO%WU`0=ePZfkJpXB2tx~Hog787w{ELYkb#J%88#%lOA}F1 z5P>Ad?F(oe7g@OcW;Ne{O|MVSPG2{wG8n}~JmM%rD6*8P>Xo}iBj1f@fA|*o_X8F7l7LAo3 zi)i#c`EGnu5p9^JEyWV&E&!Ngu<>I5I|P=1v=6jdzc%ePigiANP-%NVlD zEch=M*H>4K*eW?Clx-#Wk$kR6(nDUSpZIclv6m?(swi5?~1 z<#~o>yPFjUu2JUEf+tjTnyf3{$kc%nX8k-uh**L)6~TmQ+7g<40Fk0~y86AVxBauT z%eR;P)6QiSeP7LqU2?dEf3=9R`_hjU3eKVGDb?)hT{`!iV#QLyrJ`Rpb~}0PhPKPR z_Tl(xI1d}LPgr6o^VGOfiG&PTbQ>}fH_mQ{$8?p|=}`ZduY*yPQ~+xhSXc&>Aq(DC zgci1KOW1M>vNeM$UY+dhW*Qyx=??y`*BmhHC`+%te0P^h>QSZGuAQRqGADi>NB00J zjohy=v{2Tm@uUg`37kNQU)$8_#k#28QI}VZyLeJ51v0W4FP6frzYI-oZa@A>iWvx( z-XfTwP07bdk7UhdoqSqAlF1E-6^Rvwj|IiJ4mT#RIOXJbznGWHJE{O-XN*^)WlPqG zzRTSAdGsSD8mk%bV2Gj2D?yJcB;@d+LAfpRG|2|=VR{;^3XI+bqSgq&l?HaAytZT= zHy8UsO7Y|4msgc8L_m z>cEP~1s*iSOO&!6BFvQa*omofI-kP>&%uNkC>`Qp=GT=T)ei5Tyn=U6l<(5Le1H)o z9aV@e+b6rsho>d#7xPBU6NVPbIyIJ5p&$hjUpJtruhiFsf{1Uy3%!a669tI)y6M4F zi^^4|PNOPWidi%lvwU95is*qh6=4Hyx)Z$UaV6&aLHrbs=;J3(;TTMmgPZFWn<&JZ zM_mCgA3(}QA5|DFBg!uG-lIv-(B*qh31yoaP0IUAump;{L-P8j@m#v;JFYTb5k(Up z@*|;2Wb+le^5vId$;Zoc_+k|of_Tu|PQ1A&Pcm3u$jNvGb7Sa8( zvnKPX5^NbecA4)EOFsQHXb3)7Vkq;}2vUiJ3`9t#2&9*6W{|**hezrQqemnhLtr$> zx@tamk!3&y7)d@}H6%gWDvc8S*&u#$gb4ovR=yBnaxHkU4zFBEE)Dnd$`u4SDmGZd zHV7`Rs6I-iQ5FOY)X;8>upgbUvX1s>88vp92TyBh&=vCJ+xk?PRHXoSS%n<$%4+lnaksx z2#VQ<;M<9Kn6;}Kd}en&qw@!>mb#O=@EWtO>0NL_YJcO05{)Q09+PKQpny0Pu*3UZ zuRTTIu+3dx=_te%-S`S4s$wQ3BI#u#wiU6w%dGs1tE=QTp!T!CIVF^BQk3gw*Wu;; zB{&2aTe{w0JllXrg_Vn}4nyMVd95r0ML3 zZ2de~h=}s(=OFuVd{Yrun5He|;1@vw>DUJ|(JqP@ zyUf17>h}hJHWHtlQ$pD$MUebNUfy4VA7G4_x@*X9SWx`XEzj|`tm6V`4Sv*fOf@GVi{3`>&g(!jTzT zDC?xSlG`6uD9C`t2WvvxIHSdfT4AJm7iw4IE-W8{Vl0nb4T?c*TOf;!0X$%c(30^= zh|LnQg=yMSUQ3cFMy^EGFK*Jkb4aIu1?lv8Fq*ok%(gg6o;zyueNIaZ(i3+6m^;MX(OT-&bsGCRQWL= z(|l3^S(!}0OQyZ`B2|NW@{JR99c(ekKs8{A)v|9)f`>Xdu) zsPmQ`3I@CE5BR^p-+)?1QTN0?>n$vS>Us;iw1rdJ!Yys#mA3H9TKHON3%#_3QQD%E zr+z6<{ZgL#r9AaZdFq$))Gyo69E8{6t z11gaZ@^HoaKIM0m0forRT9on>N(q+HDCMbM%2U0Rr+O(*^-`Ydr99P3c?#FdCHyc- zd1{pM)DU@k3{MAfO8EFKD0o&YAHOH+{$fEC{$m`?!v6&0qm%pLWDy*{eP6UZe#@Z= zN9Xv$u?UsxXf}sue8S z*5ob#CbK@oTJximqA@~SwgdxSK%_U?$N=koV3@3jWRzg|eQjEVO@`~~iEmaih}ebg zARpsP6n_tA5B*?C$oswy=`TN*G59Yg2`9~!DG zyX2`D?mUu+=1m+%akzYbA3^EH^V#rjLIiXfuUPrajxAZ^-ed@gJ=saaFxZk0$AfF; z6vFTB<3ZG4#=x(W>nNTMC&zE|Kl~THbB6y#{@533el3@&+)yy-7SHA^g9NRW+ zkuPf;fM;dMDH4W-9McQk>7LFEO(0hb^$yCLKCt@LwvjvOSr_AX*M5k_qUVZ@S0?lAdIdl8%~*PJ9Q+!`z;x%i?yKI`VqoyG#cq zCEF0`wh_0Px;@=yK2-FVQ*CIQ5s~Ww+Jz&6J)(3{*?viz4c>%>YSpzio2gk4g1F^g zGrC~Dp?gNT*K`ltqPyQ}AY_|3a>Qt`3}8h+j;RiHmDmt#CInRk%n1q(xuw>PXd$&_ znIs3155w7b5~Oag^|xv=qe3{Ck`uFK*_IELu#khl&<9RBw(t8cq||YmB00<^=hxd| zxPUX}`4iwgq@S-FTiJYy!#K4J6!uNg5;-wu5}O-&Fg)n;0G_BR4AV?zu7=?ZDyFX{ zL2*zt+0ZxsT*h0_RgO{#@y;K`skIyY45Znb;<@UW>cE7=`r((5SyP)ybMC4MaP=V` zPCMj}i?78bn14kHaaT?@B)Pa6RBi@P;B<9%?n`D_7yuv~kQgI7t0mKv1SG&1zGcGm z0_*8C#lp%{X)3Omzd#a05(-xFEyb&*q9x%Z-&%6r)YZEt9LqGZAyXC#LJA79olmoH z1XcYzj`ij)EG_9@bmWHs#*lZKnA&i-K26Ld%tqZ3eNFoF$a<1qqrCV=8xcd+oRNR)j( z@+!tZEUE6^IM4ltJkFtXZ zv0jsN%9=@>2=&!)^a!duk?pQ@(O1Kt>?so>@4>7RmY-}_P!PG-8H5ocDTPN=^Rp&B zXEF{z6VBYZtCjMcbJvO&I%|%=wlBmBl0T2HSQMVPCG_`a3Uz(IfcS zYpsQS40HR5JWhTTxmVk9NaDG`7QrvDjqx*;HLtOJSQSFpJe6`&~#y=mjSK+rK z03Uift@U}K8t%pQ`JfgJc;fb^|F3>68UvUJgsIk|!PFAjTD}&+atU_K0$g>q)pUO` z520jLy)}VCIlul~i^dYfgeX}4`Oobn?#rN0(@ttlsL00L`a5MwH+As5i1OZg8eFmO zt*P8z^)4^Yuj}o?bl#8VmU}q_#a4?<|FT!B{{kK$u0`PE46c#l;M3_1cqE~g zEVv7PKKGZayING~mF@uUBhH4)VJ%8za#!HL7(M`q)S`58)`!zuy|Y{Y^y>2BeXVJH zNsp2=OyoA0M~e`q^?Xwg?K7(IWaDa$;Yila2~;GpQpna9LnqMXKIS-x>nm7&A!CiS{vXVP#!$bYufEU!r7wcmh8{Q zpQA~?|FM>j=j!S#cp?YXI*y{V^UojO|F2piL>w8tdP*30N~}Y2e+Th(b#~ks)MfB< z^a!|8Z)1!BaI-grw>y`P&9R=PPHsm5p!PAC)SE@-9>0eR?s^=_(5O(kwZ0Ux&1=!T zil;;)-qs?LP3%)W(~llI$?Nj9CNl_rE-9ry$@lvKUi4bz=t<=Q4k~atMq*8B5gQxh zdh$J6P9dtY-tlGvJADP<6~TFQGJIYw!+MZ?M~mcH&&*rxGm7F#cvlPeM&o*Fb-aj!dZ+1N3}$If zVFg}LuPT&658?&6lAvD*LWRi_<=`i!FO=8%`12r|Pl7uLm#anQ%jMZktq%rnjlu1w zem#do@A9m!NAJ(e0Wo0eoVikqu}O0=-J)<{fW1*~f2E}A9Kz<~$6CU2^B66ot6(`K zr@7>Ey`F8t7RwUJ0*W#9P5~dH35lMZKZc|H z4Y_(0A$BKP#iQVc+NRCeeN;`tiS8oPl(jzJ=^Y$5E~C+R5UkoqynZlR)xG+e%@_4f zEZL#APXXlpWEEV7508*yL!u$U7gCE|%aG!dW7VSarEh$z>Hi$xJ=8X+u5Rj?7cd8^ zqw65Z1w4q>BgQf*{tHN7kFV(=A`9>B_QQu6r2Ez)I$eyW^(gc}uf(V0;d~jy4eEg2 zBwCH@`!QGX1bn@y(D*qPN$|Oxgi&ZwPy4A{I-Ab@w(Rc9}E}Y|C~fWh=>1t2HyF4+ZfW6K~=Bf zVElirg7~@C)XpEt4ypg;`{#pCH+4_kaL}oF+RB8R-ld!Zo;^YQR!ui>Mw6m9q)>Mu zqu>!-D(T%p_e*eB-#dRDEyMeiV){hk1kynJwLb3C5MKRlN?(8r8t`Y)J)f<>1f|y| zwI+8x1Q8xi$h{!(>Nxd?UG~W**EFr3@p^UHcWX`Ls{iGEJqp0*vv4uLSO!zLV61P} z!!G#eP5iT-n)opZ$Hd7{i#Lnmv?*b{4wl42O71yfx6B}!jqLP#Yn;F-A5L53bx_!P zwN^TNnv7S|@y}XB!YOQv$C{S{neqaIh~fd9@}(fi!XVH0kvDba6TZaj0#c(YV3cL%lGF8KqK- zP1l30Lg@BUGWV0(PLcT(bXrZ#cyaULk{*2O9C@$%^=_cXs|E9d#CBJZ5Q99Q{QvBI z>u%$?mi7O63M0SzV9+kfl5dTi0EzAH@^qYdVyDsvD4?L&N}{i9%VWt&hl-rSd^-ns7m-k&(3)_wbCNCHUyTZ;zcM;UoNXl+(F zGShHrEh2ZlZtGIh$?n1lVJg*xCYYq#$Tj35D-`iHC5qNgt{L>{a`56I3|5a(v5f+N zrLUD}-u#II;m=06>uWOo#eEKSrB!tQ#%Ej3dyx~5uDa!f6TBPF^xm1rKlGm02A|v4 ztuJ?4dxmUc-AB6f+jjSQ&>3h6p7Sp^n$K2vukU|<94zNr^O(=Pv8E>7^Y3AYVeZ*F zcA=N~ICzTRDj`g@J~o~*fZ7jwM)1B5Zv>>1iw>2(t60pZ+rKUrJ_1g(7Rb--9KQ29 ztna{9u>j9{?$~o;!J$PE&$FM0!@d@c7x;4M%EK7IddOP|3zpV&?!zZ+sd-Qy%_m!5 zNXJhj_)R>IYFZ~Zp`t~k?~J}fcZ}RBedt=6?!ca_?^A|2AK;bdtIpk@0|YB*@n#xy z17B;mBr0|GiW0q~>7V?|?$w{&tKYA+rUxUcu84h^&tRy*wMT0r!2-^iV{ASxD%0S{ zbfRY*e2K4=xX9Cp#K3hhHLY2Z8%In3UI?9j?p3sAG7W;cu61ubnK{9et|4X`=poh1 zc!33Sl^6hS}$ni_P zzH#xYKS1aQE#bKnBh5wlbpAXF=Ywax!vs1*Br==2q2}{56cYfCrmOL6;^>~l_HDOr zXlHZ`Bhu%=(er4 zY1}yrz3Upn;yhw%_Vviz4O+Tq4>N)JP{$hb;x2IG0tGF;f{IpuYPJ}^BAve$8CZ5= zPYgXe9tqUYd~bwq4&Q&hdHgk^s=VQ=;?e1)}@P9%wAlnGNV_KBv?BX6Tu&dV?>mo2K5)wEpYAJv~I3JzMb3 zp5xfhKK}wwm>aFd#1`5mQkdv%lCigdPaxRh&6m-U)|%JnZd>cto!DrItFX?Um*|+p z&y~~)xz!CR#RKSlsHb2Jo%@S$*3r9xw?3cW48LgcC4PQQ^SbKrIP~UW@SruF+wP5b zf3F!dvIxROhHzQv0(pu?r)c$ZWRom!V7I&ouRyY48%jD_M*4xJ458LLK+ShnM+M8y^Cas%3^W zOFA=|2B>p~{TM>JYjGuVVhsXK_v*-@*43K}DI^1zf4$EPrab7Lg^^EEJLz3%5GP9w z`p!r*=g9S}P0v&0QPa|YkA@@6)YbHgdU5YPJ@0{D@DO&!p5Bg`J@4Qy9(s7`)YP7! zSv*X}dKd+l;n$%bd17guX=M7)Oko~H!|7VjlH1-N6aU_sc>gZ&+vkgYA@9FXqj!z^ zx)rNZHTa^dG>bjFZHh|sB0Yc7F{|<#b&ShN;1-^*wA(NmM%AkGWn|gWa)oU%2-Brt zoO}gcQuoSiG*M@P)XdCkT?k|4JF?vrqcEe%6ueNN8U9_mqql4NvUU}3%4tkrGQtWxt50}9>2OOq5nwks9B zXbGL_W`z%pu{DcnORf+GUkx|fHB8As@&ibcK|vvmq@XP~ z=VLFv`pA)obR(tzI_{{H75JYcH;&w(70h!mLAY|<8^^tI+#4P&3H|6|b-ZsNTgZ_c z({kH$9^s8~9!G8*v68EIc)U5V_l6@kj@$^2H-{ru9C^<>65t9_8Ut9vcO99*cMNoPjV5ZpLk05_V>Gjgv4Cua{R zUf`a7x?msf6Yr7CdxlP|VOq^<#W0i(Fj;%zFOs#+P3Fp*5T`1V0Oo0d+*AL?bl}GU zf7FxGCvG0pv!sWd6R0k_oVX_i{uoh<(l4n4d*`oCKH}?i7`v(<)A7WGXIA{S;x9-v zz{y#EXjXbwt=u$fmFnR1(~#Q&aqpoYIuo&Dy;rT5E%0B}j|3hF-KxEcQMTp7rHhZ8 z;i7GI0$&-p@8n)gBgY!TsHpAG3kkRKt>`X5{2J=njluJiGi1RRzJ2m_5Z##n9PzJ+ zb1KaP!u|gA6IM45vhR1=abVGmY}!lM-V z=-mzY-I{laiaq%Vy#mLnsMS@UG)sH}bCjaZ=Y&ruXRY79#x9Ou*$tcjU@^n{h|GjA zksS__Uc{Nbo}Bf((ZUb>hp>bs)pKNNB0+e0dhL61@LK&_@YkqE`}Oow`#$?<#9~a^ zkO~rCNSQQ$M%tE*vRSX!tg>191rxtmdXsV4tQn?Zmf_B52q!IC>jKAi6iVsjr$##< zQO9V3;1N1%%%D=jAZZWmIWh#Z{{Q>mQrr{&ca87?aANjYihLZUG`@Yig0PNuW_&`q zcBh}Roy>WcMyyId0n_P};dCWB;4GhIJT9AM3w(xjO^;2~EM8*9MP*BleJHWufA&K- z`RD z9r`H8fp1hG-Alh*wBWx!zxSQR7@IBaLLYxlImtsuC-{Qg=&{huCR2|mL+&^HgsSO; zqTeNxN)J{U+X}JG8CfLo!4UC|iAKuLjFRGJM}I;EaX0ABp5fd)R)BEa2t{TBSK1~g zaZ~owA!5f!fdLIA18fBY%%)Wl*Ts((i{=X_06#n*bt@r~h^K5O!cXaXK086@2cSi= zpwsq{UJF8mhDLZ?G0f(#M&nnrIy9TVS@v&Lvs|khjcT>}pN91tIV%%*LT7=%>(rxS=zS2XROJM|Z@1MlCs;Ngm0 zsoD72%sESYQAF*a7{_bhM^cn@psI;2LfqKJf%4Gbojv#`XJnPXC1mM;H)g@NAE+zS z{zm_E{w+z4M)(;K=6`>^@KE8&nUH~Jv`vnqd~?z)M#p%XcDYinl`EE6HN>V2N}_r0 zzd``YUK0LW@Fx=q#OItH@!^HR|ZTEip$dD_QekTeU->B~(CA>Rkn#mfWls6KJ zVM`_Lq>X4i0KLCO%_NNmb9dx9lj256(V=9pQVC_bCa7Il`UTew2>24sog4gvUy5wk zsWlF=*-i_!4%#BGdC(tbcQ*1@@+U!v(M5a%=UB|5tYmL^wzWrjKMN6w z9>=uhp){J_x{^MnBrG?<1tLgN86PVVUkCph3_D0g`gL`GPM({#Q8$~-s@-hZO|sQQ zajTT;m;r$~Z1 zCy-26!_uYmio=V5X}+x}$kTg%p#mwT!U%YF(tO*aq)$cpK(sAUp|USY->gHhDz8YX zq)&H1feD4qGk>VIv5;hh@-V<|A(_;mqci*bR`-`-f?2ceX1yszdnG1V76MQ=goGG_pbpzM zB6ABD84Iy>076(jFX=>pplsqBiQtg(l5e;dV4$X)QfC@xHY)iuU`5U5M?PYNVVr;a z7}|hEY+OGvL?|}AQX(7}EsCSHcYqczX$_4X07gtq$vn9p!AZ?kBxJB*H*F*#AdkWu zs1jA9-lUl=GE3}AO(KR38_EkYV#>zLUx7A;jhF$v#8n{2 zHxOJCXMsO)OGsHo-kk9KkGvw~Y+Ls6oE#jEB;t^!QZmT#v36DiHTfXR8U4KTTjPF4T5#82;t93KZc zsKcM?qW1pnRQZjr6m)w=3CJ$y^;&#CNFIt}AI_>E>yl@C;=*`?=ON|+opmswHa-q< zEb;C8a*(<(q$tI_mRIna&O3fls$2_^Dy&yr3*NUQ8i#MeyT8a<@D2cU7N2sH7vG6u zCzj0DQ|9?W9+>dSGv`5$PU4Mv<Z{(^~ug#GEy!9 z9~poc?Ce|~y<~`7bGEU9wsZ-2%FiXv;|9q0!2*&Vl2ODodvq1mdi<^=GO90j!AjB& z@-Z@}6+*rV2V~WEAmp>wY+E^H!NEED%%*A7Y-+2KuR!QVzH`=z8H?`B#98UWM@Egv zKN{{sIk(v4v?qo5&`HQJD5uJ2!5Qq&bXN!`a25Dx$!d)un z^vjwve4&~>P9qA`1<_+D<9xwL?2IeV&yUO}VQ8CDgcu`zu-#t3RGWVt=NI$>uSP*m4G5T4wSBS?Pxzi_m zGw*emZ`)cfh%a&0+*CM0#J7LyO=s70J2IuZ{vk@c#QQ6961;Su-3cDB;`1QdwPw8PN)%Si7`m-fSRpr z^-J_-OXlq$5L*j zd~fdd#5xag(7!q)6Bn9XP-S5trcth&`3q3oVeN|#iye`{IUhz-W!;;21mR6B8G_)R zoxj}koQRO1AcixFpecyoOm=N;@qIo&;NFI;{A68jUG24Mi$Q5{S7Om@wNq*(OPNChmwd;;qVh zGw_=ui+ZEC%5+1h6~odmNiuzDsEg`GkwvL7p^@uFuyIOQv=id(e`eJLr?upBuTnx+ zhJR6ptPTOI)XOO3P^mX+as?@w4^dnZ4lioA(TbFjV00SsQDkGm&demBOTr&MeCsTU z!QxvcA!hlQt7`EhrNr#Y8z-U}7X(ixH`FAMwk!#aUz~6#vMS5!s8eWeORXPJ)FE;Tb|qwIyagV!Tz!;i6h5$vj7R=m{5-EuWIpyd|utJ z^W9yLN`a_3tiAOIpF5XCUh9+u9X&jv5T`DY#VZPn>J?%h|9I5f_W01#sTMC#PO^K| z8EVn!-(2?*nWjZ!h>7SHYPbc$n5}Uk~jQs;DkJ z@o-3xV+)1>ToHAybs+Xv+nrDR*D1UT0KE9O7Qx(_%jDx~5uE#2?JKH^!*xur$Szey z;Yy^fjV50rx7HnS50rB25$Y|*aVeph_ha?M|W^wQ_#HIU#6oP-$I~ZdCuBIwwjZM9)9H92e)vO<%n8zQG zkV%gt2^wW0S8LlSj=2`i-eO85;*A!OWMa2nEi&}l`B~STHFST3l+y3y`@J9un%1P~ zO{I&A3UZtRi}bEuD<_2(1!9x=RHd+6@6 z-PihHFl!8NZU=e>iPmLX*P{3P<&Y>aI(M#EW89^>7#~qw7;rZ9&R0xIN9~!9pR_hh z|H%*io*O#kHWxjv>**$pQb%!AYj%Lmrv>Dp4u^up^GMSSI|@d+7R#ASF-Gqe@Y$ab z2g~`BH|qQd-5JS=tw#|qJpOVqa{E*_-HqNy#UyTY-9%DqeZKR1TsJQL(RXYt?JM5E z9W8aAerEGP@5Yi`dIuChE+$L&(tCV@+dpxs#23|KSBSiqxH+UrskVDUyc<-$Y1%)> z_m7x}9`g74dg=w{KxMQJf^LUnlwWiRW*5;5{O{tlk-(2BWDSg%;$> z;(YAPkzI6$G64C)mt%c9=5jHCtyhch^u35a)aY!5B`$k-I@U##WD_v#89;BCI^{?r zXo20+gFhknP@Q!WM{*LqLZ_oCN&4i$P-`|{IyZyv^_AB5A3DMJ-zWYHvG5}~FcPn8 zkwcLHi0b9S9sl>zUA$`1>O7GXqW|Rwo#Aa?_r{Hjj^=GE+1&Ik*GE<%SpH^c>xnNG|iyg znJuA$(q|K`$z3_v!pZ|oQ1%LGyKlH@J3#xMvBZC%i0%y9b&3NU8#6n8mIdNKMsF+1gy51TmxaH%v6(2pV zmCl|g`}WO{ zggyVa77fOaGV*%R+N^M7rZpM0h}`wMtxHWOy9+0TsZ`U-50i8o2~gZYJx0Y39RMtStwi(YPZS7$Ho{$Blj$$+bEqq=qWd>K+j8EEoOpEAEhn7d z-EgM&&OH91XJi|EZeO>)+-dC@vWayc>CSK4-RnVTpe1|XtTtu;LuQFTS^%X|hyjjjiC zuz+*s7@JRPIn&_BbfRY*e2K4=xX3SXEXslFU}{>kA~%kf{=E=7{oJc)&14z`b6xA+ zcrtT>CtX9#G|=;uco|QfCCs;r=dES%_kcW-Y4XzBEd{LSEi{qCc8t6 z#vC4jn!YE&!|0o@X%x6TzxqRK9b@MQ(oN}Et%zk8DP=Tw2SO;|_kzb#8bzUdg@Id- zgSVuAYcVH*BPh&&Ia58S&6rk-Y_MS>=!RUBBV8PcGu#D$fxH7ny1phqiKlt|+@-~Y z3b|`z+bMqK-K_vO0KLhVb>A zE%jbmVa~X?IlpRa9o@FoHjO)Hp?6(FSe!>p&AuL)yFp9$>|rJ_AL>{`Ufcz4T%e%E zS5VRFPt6wN*O}%G7M7jZ6GKn5dL&Ro^Su$eIeh>1=JD5ba;Y1f6Tax`i{zazau*Er zUwRfONU!Ng&>M7ne`soL1Ly@_NSD+35o$UwLNpEf*VhpEH($0^iOGz*>5SlTuXUj4 zWlfjS)AkTC6?q^t&xB3b1MD^(V2c0bU$k1Y>AX z8j}QedQNq-5N|2E7v-^oASKO&747pc@PxV1;zw+uT_S~v-X zYns@W$2RlGfn+v8oUJXO4i~$Zjr>j zP{%#-;bp$m#)p8UY9X08b!IXRzPqp3k0GSH7FQxC)*#SyuZ|pQUA?)GYBO;8*Za(1 z%7gA%82Kc%lirmEakA8)?~F8aj$F^$^gKl#H7))3XgI=5T}`j37x&)N^B(904`FBQ z>Ft==^A7Ifp@)}FP3;Mq#lvK*hf#1DejWOeCzjTkMy3zV6y{MhoUZjOx$XTi@$a39 z_wNF~eZJfmDgTA!_-Fq?Qa(q2lB!Xv>Yb#9RK==P4N`|XEBrt@Cj|ghU73zqO{u73 zRCOX(&XW$+Fd9bHs*}3z^3iggFbLD7V4QqaPg)3j}&^e8u;*b(bvx~az_#xA&F!D)>Qg~APWt6s@fAIlGw_2GM{M-l3l(RG1^ z^=7kHx2+nA1ggFp)+TfZFHMv#hc*0+tP1f(_zVwL5|Y21g(qir(~`J-z=4Fc6r4q3UlY4#)GfPFx70pDLRa{i zR2ogQQf)Mdhf2=D<$?^?nUOREH;xy;ji&RA+$+J!*#n9fxTl{kSkrOhJ(79PL~bLd z)vQ(wL+JpMwI}`}S?kv_S5ue`7lEf|H7PKSvD%`=iFJi6o955ZrMXn>Qm{?M%StXjEg)GF1%>8Bz0 z_#F2h`k^xsJJx&Edf5X1RsBfdfzYkms~BZlK3ux^$Qdr$RwwY4f%{JG7IKuqL=08XLE8?6=^MG)_KmCN&&4cXwo%VS4(K%kB zFyG0U%0CF(mhOx$cC)yNiy7WWWF~}(>~N6uBF^mfW3Bt?MYu^+0w)(f=uThWo>*=TVefH6a^d@ac1&J@DOqxF2= z|NU<%?uq}qM)&|YF?%dUK8{iv-@aWzSVucEKA~K@(@)t>=DbTIR;8a{F!JG5zbFmx z6<+Yk7$T<(=Z$jRY}BhP-z7Y^%awAiT(Qh5h5L#lkDYjEt1UPjP?Yh(96@Hfd+(>u% z>Ci`&4t%--py zOXiavwK6suqMb9cNa=$i;yo0Nl%E+T#m$cXgo@^F(49TQ-Fd8l<+u^b&IGQsO-=@< zoTo#?u9A5M)C?s9Yy|^svxZ9z&v7u1b-YfzH!qw3{D>S@PtN$8N#y`6s)mU)OXko8X?$mL znaXY=(Mjr|-X}6zMQ6XvZts{|J?95=t4ViF&D@x2rfuSSfC(1!Eg9FFNyn{hJT5R0 z0(#wH={+kr$rfrU2dweCgZH21&N{h0G7kCqb5`dF@n6agk+CRSj;rovh_iKyF zrLPF(LB2DJ#b4K;PEO1Dc)WlY15npC>PE$?LK$dOo2-OSrxf3aqBUer-soGmDmCi% zpY8ax7hQJ;RXSe#KC-0<1J(`Ou9Kab!Vce+xf^t65B|v+`N3~V8~R@j=6w5s5;W~^ z^grj{l00gJ=g|-m8^7Uu^DVCz9?C*F6Ec|@ZJjZkZ^_I*o^`#33y#$=nq|{4#KsJk zqC@nBOVJnR8)HL|+X%yp)s15mCw&U0(RS~bj||;X>35>I<%V~VI^G>K&18*G@*9cA zu+x%u(nd6HfZp?>W|BsOxjXWlNpYj3I8icKsf6-f6Vx~?{c?-6!|u35bLV~`_il*o_t_7{KY%gdH*?)1zt z8}HsY{u_f<9#)d&#R+_bB*hA!5|yXtzA3 zM$=nY?x&QL+#z2s75lMz@pbU8!LWlQrC(R~7X-W6Y*y`N!*153a#ktW$py%&@b{?n zTc`xPbcpi zGEa^S)Tsu@uoej!IGB}sy$Oq(Y+NNc)GfUEGp z#sFUGiC}@MA4qOtRrq!yR><2G!UXguh2fGPj1XZC5P%}aJ^~n|{BQ}8?Zkctd+eJ) z2NuH5_y`_v1s-)8d#=*2Q@vm}*rDFQ$`f0F9tv{;J?PB#KRGMj{i}vP6rvQzdh3~& zA_-0_k4Gu7c7Z7gIVA(vL6wz6B)HOO+BV*Bt<9`Sm0Gh|Atqm?7OVso4A`(uyD9}T zePBs=z{^AtTK=Taau1^iQ5gBwBEayiH`GYfCzT)e2sK9=6uFth2inAv3jpGYvX6aw!sf00*6-?u(V+<>3GDE3p6$MM00XVtrZ47Xt*Rvx?^o4nR^HKmf3UiS(NUhpPX zT=Y0|*QN(SNj09zfs~Ru>%zBdq#^l?)10t+3Q0yv$v7h4M4U-p6V@Ogfth9%9z{|9 zO>q+_VWwuoz`Nl?J8{_}FZ+gJRjIF^IG&EpD_cG}km)Xu*h4Ji~Y09l* zI(Q;u1TP##WQqFBxsS{D5iw?U9}#UBwWd~YD9$cFFd@PmKj!hiwRoL}#IQMk@ zXT~bcD^Djrii{m==L!v$#E*GIp|?VzDDVGD3s<@Yv|PZ{TUjZ~@-W073}rXwAY{+@ ztImOv+JVuDjdIyFI-R$_z=tO-QmKbZEHNeXiqU8-5)u?@npF$IAq}a^mRhT+)lrO~ z;M%2pGr@SaS#J;vz;3k~mI1s_6w${SKch~0^zrz%BI>YhH+;ianI8BdMZ7u3^kyT( zG$a>4#50pmN4&=Pz6ZbasMysFJ&rYuWOk!jMR5Dh9%B+4A+vs7 z0E%d$Y$}2Y)AT@C@)=vI^xz|%K&$s@&~9ITx*VLBE`9&|a!&B%_zLr3LlXCIID1<_ zS-JI2<>gl7@lIwGiA}Xdf7@ZUbow*BML5O=9R- z2Jj+R6ys@I!E;#DK-6tTQO+0y)Nh#l@yq(c;PG}M?qr|Itm&W zVh6I?Z|TaF`rja?q?K5$-pqds>)`o$d|iLD*Y!ijq^S3=Qb-km38*Q%abQxo`IRIN zj4u0(j9qm-7+cmNA%hkYepo}IE!ntATa;;3Y=p2B+?mwa(zKug zp|@b4@XsM{6-i*49H1+ZWpJU5TP@>altRM167ZpUhhdIKv@ zZUM4@nzGybLzaC8(vSS<&VYrXrR07wuB<~r0xO6(Y*cIJh7l)DtAhLa)bnPtniwV-q=bQo4Rqu z2+DVikMKT2O^$BBeC-LC(%;7FWmO6t?^~Nxa-uH+`Rf~Js8VfQrC=&RlQsQ-m3w~G zmbRn+tHgzMoP)JViZ|}fD}Y*v)O>QARASwn~?M^+ogs?0{lv&W)WNP zZZRZVJ}+!V2zd#TkH)tY)sn2`fxNY1xIi(n(RVj2Rmw)ms{DH4y-nKTBZ&M>K*T;| zBFHzukiu=R6cmTGbT#%FJpV@8Y5@bue3=VnJLMMg@=xMHkWgMbt$nwEjhxtV3k ztkvp9VSP8XR$(+zw8SoO&tPuvn*c?&eqPXuYQ-{e7pwIOSu190@w)=!ysJ{_`RRx# z(OXVJ@7G&QD$Q*|*7DZnu#R@AzlmMStQ8g|-LbZz+Qmw#RDc}oK5nda09H-lP z!1NbyW>uCuF;Qitl#DCJlQjrP@uY?r59;0_zC5TE56j#bPIm5gl`WW;*dl=3(a*%U z65lnVR-{}e-*PV?BAe0yRE#4?{9QoeC&!3re=9{K!9+m8MkS&8JhzJziO2HuUekgpkvuF(&16BcsH-DPUQ2>M}hJ0I5 z$zanChh8 z@~uS7khR(iTx1TlZExX@!oNzx*Ey-gHGg_74cx`EH*$})WIwD+lw}kedEdXTvDW@q z3dIAX$v)%2Ve20Budgr5?VB&!st8L=$-H7jS&M`OQ>b5U%^*dZL=mral|p)4bGux( zWV|}G5oz?f4y3RQ;Ne096})H!bKjqo$BUH)E4J-{ELL$mN@+mm2=%1B@SfcTzo_^q z9dq4|JZDmzpz6|@JuaO`H{(@j_Bio^r_wLCGh7MBr9tR~ZtxGD!?FYMHmO9aKY6NK z`F@x2p9+WrqsTs^zrVYSnL8;v^ZCeM>_#^cNh%pBN0h|6wE-ast{^rK7AHkMS|zU3 znl<7>yUhzo!!}{%+8L~oW*y&1vcwl7NXH5D1Xz@A^cVg|zNGTatj3jFikRb>RPj(%(zh$E; z5yY%UD4^WWN@G`p7`k99lWIcSXeJ4SWXtD8tOy;dmLg}(c;Dx7>{=%Dj zA+(d=&58#e^N|S7B5$Lm6dMHIKa3<=%Bm9}6IXAcx9l^be0=}-1mFCfzzai5$vQc{ zB(Ev!P>=vjwOX;7b<2dpv4QEUVwg?1S{2-wln8?XZ6qv_XI|U}VI&M#1u^Z5KR$OZ z`(lnN5o451_o9y^$E!PqsV0v6;1_dLNj{EBV&XDZaKwHdG-0>9Ob)#Ta_lp{9A^5@ z!(o3X$idK3vaT38)}bIljs~h(#wf4>ax|M}WlQT8YStoY@9x6|nf3FsR@6;iyxCJ2 zQpo30 z7+Ol!6{E*G6eQ?Tts*^1y;_m_<0=hXcC%Q)F3>vAlceY^TxIN7yH5J`MC)Ld&m)2e z9zpiq_@*LwD4Xs@>!54!Lilbi=W~A%5?A17Z;VHGx`+p7!Ef5-_Yvy->SW>LFyfDhy}R z;kLnx+|qf$Dni99SS!<&wAo&C4}7u`3CH?%3O}rpHw)bb(KkxRbS57-{;<$M{QjRk z3iiBG@EsT{_8GqpdwZ{UaX#qm1Ti>jO7_WdBQfHvM?-=h4dmdj)@|}kx4|2T3B)0W zuPxlOFkaKxPvA)QO;&*jo;Ie_dncg2+I-{dh4<*qoC)Fg%$XwGfby0$K3q;L@})|& zzTngydrqnIBXj|2QMr#Jw0z`z?MP8waPZzgwyfOxGD&s#_jSDEp71Vvr^Blo_o0M; zy5oPI)K5yE^1t^7;li6eo(<@ox7_xe#~EDqy-`pGIwIsafG__N87zJoJv>eyclAWV z5>qlyjxWjOd@T~>%bkzM3#{Yh%(RWV*=#hL75Hb7Aj1vd1rhS5u~n!$#u{Grk>JnEHc%4R)fZFtn7clcPwYrL03i1|pVeHloD4 z8-R#ew@~YRI}|})FJ$`NosCPvfK?zeU-WU4jlt1y7i?`6p8AD3hhuPaqf-K@f!ftJ4_jt&Yv)G+0-P}Tt z(@#B4ew}{0zW;x$j&O>C&%1LMx#$rIHoTRt!1M7?70xpjTh;aiDl z5Vaz>u?`sQAorqdTB7JrQx4&LWGCesM+~~i?6C+y7(igB%QNDL2&L1vi5RT?iw{^LjGEfXHVadg~kX)A6p&$WGHBC%g&>eL2!BCMX5xFVW((`mlEtEgs38tnx^=p*>AG~acsHk9aRqzSKD z6VIK6$M*}lY3qX+q#8vw-uI6pYaRflNIWo->@(_|7QCi@S9r11PS?v(Q?gHvD2a}; z9t{bqKxJsywL00mqLf#9?QR`CNQSE-0qM@XcBKqh1uQg~**#3{>%3|dG~Nr)kdIWN zgGPzqqY@%VZ28F8@{@-Ss<*sMDjmYd3NK5Y>_y}h*fkHbzvBWNi^i6}oS~eFq#g!+ zL%I6r$>4Q1y7B$+BzsUP4r#YUhpo%OkR6=fz!?`Wl<*MxV2WIe>dF?il`TY9vivBG zl{A{GTGWk|EzFfIDl1!vT+XefzLKZ)l{~Gl8G5i7oX-YN&uB^ zKw#x*;m^E(yW^9y2WJwvr=Kn|lsNswVHQW{v|FOP$kU;@W=YFQ(4q^i%qS z{~)&}@`vo>vs_%9^mxS1Ry>o~eJEj2t~iOe&G7hxG=YSpS$75S3mfK?#^Vt~mZ)~AaPW@1Aydx(ipJY&Kc(>Y$XTBTxHTOKb%K61giQuH|dfhu;Bed`0Icmht$ zSb5MYZcYzWy{ZZT-O+)%^j{PpK{4W8ftGw*uZLH)I_mA#KHh;U_Aq?w162$;!Y$BL z1WU&UkY2HE6ta|G7I$=_{zlip&NI0rJKh4PTy}3<;~rRWom%r?HH=Dq+jCV$U@>%Z z`N1y2tFnO7>jf$oG!>Z$f4&o?ZM~3h(lrlM(>CpG4Ht@|T!d8exgP#N6~CAN zdCLWrNX%uLAMcv?_x6`ifQZKPZWXEL_KHk@ zr{~?bJ4{y1tbDw~^!N6aD25v0X}7pJec7!xkIqNYJKMgldUo}aX&)~4RDxSg=sls8Aqrp2g$GeGZu`(vZ zTp5#LiZL1adGH?RvU#kGbAiohMSMwx_m-B7g4_Kn8Y_8P5qWy32$aad{IfF~Puw_& zvSRagr6hPnh&Z4T5wJC)E;GUo8Z_;j=!-9OgA;qLil-G+Kj&{YQJ_K;n{eZJ0pc#G zdkV70=L2h!Ic4D%WHMHx+KAJvi1Wyrat#@0`s76|4e7xI;1BPPLgo`E=e6f}vnV@% z76wpZoj7=}dwxH!<0zk|{-^N>W%q|G&2S)ziKT9NQFk_^fsn|VqqF=mX*y2$9y~6b zX^F(t2c=(rG;06&`iJj7PTa38I+L&G^ZCRZ(Twq5qhJXoW#X{U`Li3y{a-WcFauzZ zagO6jSW`4_E^?!8Rca*na?V*Kn!F-!4jBm9o>9mqpP(~a^Xi;A+cINi;seUbZ}=d5 zOEIlZ#$djsnDU@rLmp?VVKmFA#wIpqvf3iCar8w?(HG?#W6k5`C`_^+L*%V)%w*&& zn8pWB$ytz&Gx-&A(}$2N?t&3Gz&$>O5I@M}4UW}I5;I7ItK?lE+VpAioA`@fUbgb5 zkjf5bb0K9iyRW3p;~f)kf^~W@oAKm~+g?Qj6g6eDW^xf1Yg}~8)w}~?+({mKVwZF7 zhH-0YxQSI3oD5k6iBeca@XO!`>$=3_2!B(^a0F5=A7aO|Ap!+#u4u@i7f!HQ7Mj4iNS#hK6;_c>`(RH<@PPJXQR!?LK8cUWHWb#V7K@;5w~zDP+nAeB$i8k zFNvaV?*`mGfW0t84f-IX3NwrYcS#dTgf8VZvdury1lQYw2+Nc>&adx~m^Nmkur4|L zM&Ylv*+x-E=Ap_Eg{6(I83X6RjkoVvn((%aJ%$v2+3y1S|6l}(A&Z(bt0TASXip@R z>P-^)D!m`9iUEwa@nIqDQ;EoL^LYDu1w-Q`0t~smZS`J)GY(A{o2fuwe$y6OA`ZbdzF&LMz4o zCZbZ73l5DIwNAAv_R7kA#kEPyLXxl?|6n(6N8!)T%~j_z%`~Y)gemQ~9hvB0eRC%d zT1)!Uxfyh?ue4}PgXhsA)FN@-{&L=jFxDaxxT7aTqHEE(>9=l%wiXF4VcXVw?Vjcd zL#*-C3%zHTR%zLq*b-r@n#_G6@^`7lm_OROU-)tCS(S&S<}oJwb^Z+t(pt?Dd;UI7 zG`IDKNz=t{O=0l4b4f&!j$C7_$!$H6tjNUHBu0K(F?DMi_^f09B`61>zd&jdExybb z{)028InTGA&)k1m5IR~D37#e|x)b^CE@tke?9As(U6w7eXYo1@gSpm{Vk?Bswq5=R zpWLb5Cmz2{bs0LN9)^$fGTp_b|H~(dMK*WxfhfGygmn9#FZ<92;(Y$wLDbct ztHq1)(`Y`zJ+Y=Wi-d|6k@nSqa6{*-OoP!>PZ+lR39?j;oq6akqLlbr6Y@sL|F1>i zF23j8>Tzc1{s_CX`7-<+FI4Ue3?W*xqNG0SDxocZ;of$MY2BZ}IH&vN7H$tVGUpK% zSgpm4D`UMY%Ges4dK8%Qu3N(p#BTUH*VL$I;S{N;96f&ic+}G^?uJA%Xda}O2}*Qp zDmi!EtHJPGiy1HX?i6~`4{ah)BJ~veUa##wpKEfY-T88T@n71D0Rm~!z=!!f9QL(n zJUBt9|7E70{*Am%uLU|l_`A1oU!2KA7f>Hwv`s&k-K#&lSHE9teVgC!`aV1-Uc1-5 z$AuQ9u@gG(kI|De(=?ilaRBv915P*zpO!N{Bqo|utEI;hY?cw^{LGs#C)7Dbi`?}L z?oa^s^FEM$>d*R+cCUkQd9Ov){V~VQ%w0T?`->K(mpO1?u6Nn^YdX2q)$xe2diuD~ zH6u)em%tzCZ6b)zUQdgul!EqSPrP+@xo_^KULU)rJJWnHnUA0J7!=>*fw>-@a?2N! zr5mEC!fvQuxgojJlbbKOm6Ipaoy?Y@s{= zaXPc*lvY#r^{!aSoD;e?&e-$yB+pf6sDBq8oD(~WmbMNOm)#33uD^_@&T?EHFP^v7 zalQvcifYZ`{L77=IqCei-Mt=k23qW#22Nxu&|n6P>n&0rQs<;jy|IUv0xcQ~H}IE> zkvpeXHsBj{do6+&UKr3@gq#W=NkE+b;Kq^U{HJacNCZ#PDy#DT69?!T!kCGpZ05`q z^^Cl{RXwwQnKLvyq9oV8Wx^xZFiBQw#bCKk@U>#P6pWLv1VEP6sMc#Vq*T5xI#j+N z(@Qa$SP+1WWml{48E)q4A+T)hiyirH>hUt)9qO*$Y*-bmo-0_8A1dnu9x^@DqX-`N zWH90oS7|hwW*x-^)L#v26S|+AHS474X-yI%zd>;Uy0FMKF0Mrol^2j_MNd5ZrP=@4 zy`g>Mc#u^t#Nsyme zx9jMc!@>B9Dck^(3xsJ~4ZCX9Nty#W?h0LT533-)f>ccs$D{c`)(ZHe$P`a6yAhFj znPvs)IBA@hVoq6mzIAT#Nq9qH_+NGnU;+RO08<*p$H|1%0V<~1tCy?Naw~;_DiyP5 z*UFWKtWHZ&%!+CBtVUUq8ar~*Cku~k0*Sl6S;zg5q;uvM7CW~mt>ciB;gegsgtcS# zSQ^5G5UzhSw?u6UrC&=|{!6JpabC%9{aLAxxKwxs;unQMLUbDyM6S?}mV915dWHSf zmeE&qnMJoooHAMuM~G;NHZ^-X5!F(BGUL#eqJx-)w-gTtiMVv~wl-g#vQchNqG*15S~XvB*B5lWDqEx%rgry)T1YN%zTR9NrmNHqlJ6pPEgh|{bbTc-m??B z7fWvvlan+W%-xaaOo|&_!s%v-V5MwQo!R5W3!X~9+@dP1J1)^uoWVc%Suz(5vhm2D zByxTrswC{MW=?;Vp(j!J?X+jmY(2eW1jWoeo9HU>r!1N z75niE|JT942Ez^>U%#&IF9>$C*{s?~uSZ|bI6DAklTxsg(y*4qHbi^TsY(QUKIA=X z%6x)HgOI=ig*92p--|LSNlX1yV&_>7l^`mx$go~5^_og5;?RA zRaO#_;7X%u+s$gl%BK^hpI?b9m0Gh|QPrO<1{Ms66tgxl7mHdB?aIjQbyN@@SP~xa zGEsz)V8a8;+;F8_O*{zebeai79 zu!Pi+HM>%;ZU#$D^lBEJ3yCQ#Qg@Ic8zqTt!3T$YRKZkRfJ(dL7LN@gfMwtE8$vz! z)*^sqtx5C*-dogi)x!yfmQrZT6_VruWE~0;u@6Ii1)dvn zF|5=^>^R&=rFko*J{_)Ukpf}6(M2T7=Ov;j$DiFr0NXL&OcdY=LxtA~QF^mR;Vo@k zu@FXm19wE?iA(S!r4=noB!n6%C8)g{Zm9PQXW_X4KYLN^uXhuZQep6bT^Qf?2nTNk z2R01Ehf+gSPkYMK8*jvT3&BB^c_vhLVs1AlXPX`bCDnK;hcbY%9(=n-8ZHC29?)c@ zl#G+(Ok(s|gMb8PnpML{Z#aKx0oI6M)zyRzSb5rg$#-Zf$<();UShm5F_nZ+ow5h)3t zG@7JbnkCd^qkL52Nfqu%+gYnHo?SCdxpgeBTW^9VGDh&iQAC!g&z!5>!1oa`W_2GC zZJ5hjt=>?aU4CFfggJhIt>pZ*NK$uV*qlFkqf%CQB35Z$c{&GBXs{%H%p(fD6$(Z9 zJygbo)WVhOv|27;>aDDlWd&Lds42TK2jS#w-E*L%c3^a3qg-~4PPuYCdZ@$_Q!=j@ zjn*O|L7}EuwNM?jA$8eOqEM|C=LS-3c(qnzR&BH1AQk{oi_$?MmI1s_6w${SKO>)S zl<$gfE20kDcEdM(mFa;WQpB5cOm8+qOha{ii-Dp&7 zWR8;!tA>;9jbwJCSvBe9YqxO1te+QvBAO_hieSPtJrI_VoUWw@e^DB=dY=aE_T{I` z!FlP@_rEXa1W%5yFdsG~asP(1w*{1yTVE!lSexCU-d*+?*UnYz)B}}_l#+49n6d@| z8Kju?S_KZrQjI|gDW=(ov<&5qsX#@+6F=&?tF>aX%=nRS6GK_H{#B5&n4@$it+C3t z6cHtBc_2W!ai@Oh!uo||jN|3PEw%8nU%FY<@U>h|{bxj3-xW{wQ?h=hw{NED14I ztnh7*+R0mKCnoIDKec*NxbKw$@xc1YJ_F@rZ%`CgpCI!(tr4z=CwYQOCUU3(j_SG= zr%O#8esY8eVnhYo7|o@yT8CZud56SD@b)T&sSLCwF$Q zD+R(~m5k~>HOP^mlV&^gAIhV(G$g=*vM*H_k~R#ICq+#PHEET) z(8PGPYNH_!gV{h`DCPh!oJHi|*u^&%p`)O2A$C~ywys>P0jiZ)t=`Ok3+v!nbhKZ+ zmHn!A$e0xM{#6R8SjNkuQb0}Fjk!7TuNlJTSCTj|y6iJDehI7keVn}mx$E`7g(aqB zUNN?;MM4HGB>b>OD}#xz-b!1PX;f^4uoT>x)Y#IrpaP+H;X=1iN>~o?qELhubz2cx z)NKoa#Ww6MeT4sBz=Cz~+&luyTLFt%eB^elrl>ct^5hmE3#ci(y+35xXCVCuMRj%s zEDS9r_lt359SRayLBwIBS~E9{NU@N11F>iDgsXb`h?-dD0=X5##wR|>-eYbg5+lfN5OzNK}z_4JdB zl#+49D6$3tDTvr+vq1|FZlIfx^ex+^hC~AVN~4AfiG{1&LN&>j&kI`-LSBO8qwy_8 zwIpkKAaAW0E=mJ`^xX|hm9kN?D!-yC`r(4+nKz#!i2O}J#6DyqNY&*>d0-1Pk~L#V z3b*~Lad|^oOiEI!L7=l)2K(whgXjNf!wj?&FRhf4uv|9Dq59o@b$=;{7&Ryra-ps^ zaMkL~!i}x8Z$a}xL}SI+xgwITo<{}|LmtQ8>Xh}8Mulp}_DO^>?_+-YW8o?n>8}c} zWjj_k)EibQeG0&0?fmroZeKOjq3~g!;pMadyB{h0#6uklG4>gremm&g>`0}^NGTatj1_ATkOD;$wdO67jd26Z zl!;s?Mqzz7wN_y?QMAM^aL-_F@0&btWb5Yzt*BNk19!1nuaLE3rnbZPjO8Tse!az{ z(%dFwEpJ^8>u8tyo7knyT47Pr9cvqJV3_KybpT`nie4-aj3@gHOn>oaR%N*p^&=yt zWLzgz*;0ENB|F}IwAx&G(lN4 z8)Zwj@tY#!HBC!9G8{W??7swAkR;0hUgnFcMcP)7`VxFdKD5xb5Fyll^8Dlo5k@`d z9H)khB{E>){oi}=Mo|TlH%WVSjP;Oc-ER{(h=+=m)s((OamvF(Qn4L6hTGRvJg^KIzK;{2q@S{Wit&Jd=msYDj{naWMvrV-v)Dc zyqC`Gap^p|S%6Dt_Bio^r_wLCGcQD@{6Xl1ZtxF&tH{pY+h`nS zv+#Jmf6QRFxs2^^@On|(XC!&I|M{|yLrqNH+L7ceF(vclc#+hOU5kVaFc5!dnVUM= zA`Kz}1-DW#NW32kU+pYfL&gAJ3W$K=&7UT76aXQLA>UR+47TloVm7+{(r0%v#~V2| z7(c%wW_%pXs1(|U-#=t<+gvI3;vIh|4P&1%;xL%^dOI;jrIeIxD@Kde{bf*LRgJ1` zY?uhqL=xLAp#tO8RPI{as1^xSq^sv;tB4aX-fTKu2P7hjxC$Idspz%3)MZN0c#in+ zaqt12g#|aT_m2Z4sApleXav3ECYDB z5J3em8o}K6k@aP<(qP55J&?sJjz=jC$Q+@bv=`p9yWkfUAEnF{C`*!iEGo;h>fO6d zRe$nSxAOfi6G&7*92iCR8U6j;UCi7`*_qEr{$e+}iAYk(NI9Y;)~yW)NpJ1n7%58*@UZA!Hr3YFc{EA!V-Dr#cdEq z!hlr})4urQbLX-z=BN@eM%i>P`bcuTx>H2B#gQNUVvZ`w$5Ba4T*eBH*w2F|>~@#Q zp*KK|`aa{!VW$5)9QJpD91JZb>xz+M9SRcUXrP*9i~<`VN3&^GwzO`cW-XHT?mk?Q zSwAmpMcw4Zn>~dgg?zrL2pmk)18XN_YaO5A3qr_0h7(uwC%0%NcO`DSD@EX8ty=Yc z#+wh^(GrQgcY+=aEhX!U(PJG767;B6k)EVptw{ZGm4+?5x#f#H8LmoF^cJo%cC1|| z{d%HxFw5r=K?IK=`)+(w5j>Pl_o8*sHFzO>x0ds{zX*vd@Uu6@qdQ&1gEMmZ2_Kb^ zkE4YA+d+jT|Oy+XLw(?a!@#Qa~{F4(3;Mgp-d0 zCn(QWaL(SpNlUWXl_K!K__5E3^{YX5C;CWCN69idY9x=$t9nZSgSuVBRGXj`iylepn@M7PvOK17pQLQ)FqS zyrqo~mlKP8sS+)(Hg(6IQ|kN(T|k;YJ7&sKC)WKKuOdiMU2yQ;Kenvg`Z7uN7Vqo( zjB+16JWd~X^+duFQ!-DEFNt2V776m@&d1}08w4k3rft;CW~0%pz(0%l6m9@7h>$mp ztwP-~o>i#=U}WQMW6hE=fCmgwMPZr6w-v#q_4^;aKW^|ACS*U{i?Y)4XAj=vauJn| z>NzubX(2N4@{*tD(Vq2j>{--RUU`vw|9GO@@=6hLU`=J8@$JaM)F1q7uoFFnp`~P< z97Pf>WgQAK5V1_N5hdQ;07T5Xg<9v^p$PJNA=B^fY+Mos@B&u^k@>=(2d@G7a(q(} zLzt%PJc!iGM%k>_YZgjC{Q@5pTCJjt+P|h@mXQ(J$Q7O--&9qP5Jv^6-O0l{1xkLV z@i}6G+hdOxgtiY{XEAz`wr7%qF;nH6w%z;XBSTnfYU(@T=*f-s1z4lxjTY{WJ8^M! zNytgko*+Qx86`Q2>w0_;^#j4Zd)7aguddjjO8FCSxp)hmoH3-7eVDz?B*-EzB<$8! zc8`ZVIm>Tup~vZ`9w)y}KV9GdKQ`>=6n`(>xDVa&KToXsJ|otHr=3NrXQYG$mrAGU zo%;&5l#{d8Z(n0JWo25|ARqySCe#bts%@CS9gpNRpRe-1qki`=>K4hsxU+ZiM6<}2 z&x<$_5(b}J*Eb!$m52sWD}o#AfPrafqk(K%qUcXk4juEF@L%xV=QXMQiw{^LjGEfXHVadg~kX)A6p&$WYNt5rhZp=vD8Krj+&BvazsgVl=Wyx zPz5SO!>-lI-W8?1(rb6?=s_}E6$wap=Cvzj0FN0Wu+U^?_b|1u^QuwMcrQRhK2nJe z8YO~{N{Ae>UTVX(`=kpBsOhUb}-qE#3APntgSMs#FlBd;` zJgu(eX>}z}t1Ee0TglVfN}kqM^0c;+r?r(lt*zu~Z6!}@D|uR5$cyw|ixNPk8xUA| zTKF^X-|qP2?7^7??&+tC3?)uKahS!?IqlYLLgmVz&Ea=Bj(lc%?$lqr4nPna_YApf zDX7)#gk}PHs$N;2EZurCQlAXN4}f~MR-;NYABtn-+5=#-)(YyfMOb#VO0{yu2>CuI zXK4?~D6aE8H!s2{gsfDf>WkoNo>zUb57$FJ%ALRX?#&(tZb$~GnpOA`QyZRqfUG&! zSWf$kw+NTcg#Q+miec4jO%l9Ml7cA~B6P)4sz#$3y*V+S45xID!dJ;hiL}=XAKBnL zGv|Inc51j-vKuwIB_)kp69-P)>BXkOW@Q)W=O6~wRtAuDEfx*qPlauP)VQs@&^8l{_Nz8n9Xn8 z|5>_$wEZxd{xe)WffVuA^A|&pIBWHXMj2ADR;do~Dbu5pE~h=D`Ohj}{%SOS zt=L1;{>^OsW?N+&LfWo2|I@I3Bc*HGqDB?XV(5p?M3_Lej8G8O_)$l)MxmcwIPpDX z*5-~h;ShhwihaD_*&!=FljM-$!A$Y?bv$E{gk;W`&f%&X&6>IG;WFeS7aS`^kHep* zV&B-eK2M4SF+e6FFa^*mZcffqWKeRTtW*@msPIU)VJ5egI2MV)jK<6#b=TpvI>%f$n~)u zq1I1z%Cun1f}y0g<@tKQu+=PfHu?EZl-(flM;`;Xv~3q!2g*aW)?untYPH7411I+V?cE=y)!<|zRQ=;cwB62ns~>m6Z>}j?hn%% z$b>>~3cKJDnTWqb`sAyHOco4v=Ep;(pUQ_~^nA4qL_GhnjnRm=W(XX)?lDxolF z$8Sr*Q&e$tY9)skqoQ!nj)3X!^tStEhsj3#+XuAg{k{DpijhV*OvTN~VX8Dg5HRWb z_HBC6s}GIJZ+7FiN~LVqnvG_&`tySm9$PkvM>8$qbtZ8v7UR*H#ZDJuOvcK1H2Cu7 zBO73OW1P3G#>yCs#>yCs2JZqMS@`%-R>ol9HBzdf^M* z;Iv&qx?ZD3^5-&dm5~WJib%L|yZ})H)Hemm;`4Dd$&|7X3o;kWKvYSC`V@%M$eMBu znP`l};UkUU!35w5?~X!dFDA#e=XkT8KVDAUEC8U%I&km-0Q?7D$3;FOUiu}9L@2vI zTxmiBNeC?U$cwtO!3=~%&K8}ei%GL@!c+Qj;Y>>;ggz+!@}p7v$Jal6|8e4eZPA#B zujljm#2e8B@n5saNhuRoea@5JK&tk=0W95>B2;#WZ$k}4VYIauATsQF-y}WF#IvmK5%zjX5^LWQ( zIh9xTU^e5)8MnQP1}JLECduSNEmprNH%p>2zQHr6LAZd1Lb|Chu;-kPoiMky8(9}U@s0) zgFeV8!VKeZUD84lmrGfV9P>{!t@XB8!tx{z^y@n$sEyettXB@dPxxzewolZddC84q zqua*7d2r+1dzPlTEn|xzv0wJPfc`%iK|%nd=FI9cIh9bVOVB(1_;{woEG(kkWyyuLbAlReLUY4%9=lo#r zsHSZqvQ2(_>EZaMvB=nahK;HWd7|-Vi7r%GRH$tf`<#f%N-jDy`c7x+9VETEa(A$` zNz6i$rX2rZH*QDa&(6(N=Q7PNsY8S*=(ru3=rZ@sojhnQ=}YHk(7nFWqA?AgM~hI4 z#CiM6c^}77i%8&(o)8+WMdPO5x*6J9B)BwfTko}dnjH+05>qeqo?Tj-Wou$fnC~>1 z`$FXJQj0Nvv~|DmkpGAiQSsQ;B)7ah$J1k z#@3MAdLmhAiLFVD{IpK$)->>0$No!D4nlu{gd|#gnJ@eYXHGMnZ#|#6|FR%-v?dZf zOlc)wmvZt@@cJO=7!7Ao9Kb2KXJ9cYHRqr)!1TK|vMw+#VRLxtx>tkYxfU~C?%gT$ zq#xQuphW5^_Pt))eLmOZNW1gp`r^N|7Xt*+qJa|XtTt@Ukwzw7&Opm^y2 zGR6VaGYvT5Bz#)V^pKcnPOX+6OR!l+kn=NdzMN1W6)ketGdM*7*w6bw_NhPXL)yI# z!sWddRrkjnH#2wfK<+PElwRh*fw|sgG6K6^ba zrcw&pk3I3$+2y{un|gihn(j>V!DK#u(qmA3j|b*@c*-qbOqOnlQVP4FdgX@XPET&W zoyBAtqe;H4m<+wavJa4Vzd=H2e)tbfmmm58E()n$> zdp+n3wAeWfoXAw5!3-GJTcj$a&PknmV-GI{S~M1J;4c>=cTTTtz&GgjS_Ch=Frc>x zITd*BG4TX&^Q8MGLiC*DRjj>tb$a_ zm8h^(?$Sap4{OE!MOVw%aX$Wq(xFS>23Wyj~C_96Dk zz9RcZHZR>0TT*N(*aapLStP5;`mu_2k;V$)Z6pa?!E?_(Z{tB&_);jlHNvAGE{DSe zwBUKAzb3qdpceVbOd?xg!;24M5#2&=_VP8k2yr15Gk&WZ6z7uZh@~ct$GQ|7Esb`O zoUYbynMJ*9d`UJR*kBjK*=rs@#)*5oxW|<@dY^&wrj{NTs77>O6wm@?9IuiHy?iUt zaoNa>cZ=ayZkOAClj*nwV?G(3Ka7i1E%F{#PuqlY1w5E8%2;D4HW^OB#3n_y)(g ziA)d$b#z*4W`n?;(koH2hQjiP?neBK5XDeyXN4%b67YV^4DnObw2SXJLB#p@6poLX zAqtjUgX_%-LY4}iT+SXR;qs~V+h-^a8;o1HBIojNbdC+;rhzsd`jdsv_gTe+{F$F2 z0=J+GOQU}Rs&u9Z{7;!4BF+|po7K4Sp?2s`f;Pm#k>87pE_E+>c$9pgS{FUKOFEGF z!k0A9E_Hcl=JgE$805>k8vp&o(#f!U)P;sDHNj6tKC8+7oDy%>nb^BiMDw{RX!d3%{RH)&R^VpBZ0oJxV0Ir@;bh!~ zw=P}N+wk71m81zGL7WL7b2DgN4_||*1>qR0T6Zv!FvKQ% zw`tJrSghc;lfndK(-Ry%dN39!Qh|>E13A35z#XrZgo^D2I$$C6jE~^4FU7#sX^Rp% zX6R3H*KZg*#2c6=A@D^|f*x#g$ztLZe#m!!)zBwJrmL+YirfXL2}B`$-J8IajGT~x zNDft@N+l5vu6Vv>`L=-)z^aT@g( z!6+O~Ji#E{**yvzf;2+I+>nS0Owc(mxeW- zG^otCX{zgN`oi%zumlMt9Vi!UuLny$^eVmTz;Q3}ljN z9F?4XDLFnTUu$tna^OinH0w50v?cc4fjoYYo+X$M4MGK-;ZzML2wFm+jlNzE5~)^L zJb=`pz!Cdks5fj&AclojE-MW>qPj`L3>nFH_ku#roo2}q zO!fsP4z5Ecy2jJRj9gGnoQyn2$m{vB5oQGiw!$XF0mgw~nd2q3{?%3r7}Nl0FNn zf&<-$#hB_oEZPv4H^=n^XO|ur5h0Er=ttT4>!8%`$gsJ13P&w?SV+rHq$82)UABZM=r0e39va9+JhIbC}+21ThWSfrEf%^y!e-7~OXV z7^Bl89ua0=2;-oe8=OcoP`a=MG@<7Zm>}A^!c!~37hTwiLKoSt7gE?UqL5*XO(P0j zp-l}?2wFnc$?>EP1s-h53ESwPQrv)I3Cc>sHm=H~O zge54mYwKYiwfddzhyKOI^@r>JdFy&U|FK#iJUPC?9IQLo_6=wI1(eFI&y!Ku5VBiT zF}4}kPSxyG1C@f5ka2QMsX>4TDZ1+z;Bd^<7=)0b>t3Q|2yaXh6$PI7p}0G|+BAzP z#rmrtC0alMO#)hrIDjO#5NRoCKt z3BnOs7;+&{+;s0ZlB8*z;XniaZdhwG-*W!esWL_0xn=$mI>bz=DK@yWn zL)N)C^Lna9f|dI|IbaPxh={kV@SLW* zF+Bm4BQa1DcB39e$h|J?kq)#YH(_I&aq`HIbn*Qq%&L^C!3IT5$UaKFNS|E4CE1uD z_ewn)9N>WBFE$vG)(nzIrA?%ov`Ag>VLZq7JmqLaIR~ncgJKumn1v2WV<~o+)~2pp zqzhIjvs&%Ve+$+@v*`G`zPH!)UB;w{_peY$Nx%fC3A<5XBHjE#5<5nhZAQkgz^ZmnFH%Rv@ZI=5Y%{;P(ii)h;JelEG<5;ILDJ7Me+xl_`ULnMe}1!Qtm zX~EdojVsm8=#D!;l;cDDFY?fC8n`s?`}G4B?s=gw+_8qT%`o||edBvxjayAWDM$$! zCr6PQ1h^n#>Ar`{53Zq`p!6-sa<##Gi4Ap@9VpKxUF8O7vvdlgj-I7&H zik3U_)=J@`)t`@k1aZq~Yc13G9crWRE@+;FL7G2DrDR`9iM7i_kfO_v@W4tmlA5t3 z(rsTg?ylZZwi!JC*9Az@M!d9gNj)zgxX#gNBwSe>$-(@3gzY@S3I=6%dhAIS3oA4bw(U3x9+WEEeD zTf0JS6Y+)>9!v>X)Xq;&@Aj&pc7+ey3}45RQSTao$AP7}-m{ z1SlL=lh$_=YZaOgMN2G+dj@fPU*~zFSU)XjS+!!d45Dhig4c?eT7&Nyt4SRG{uw5f z=QcrW*>^dtG8}f=c>c01f?Y@k&@!J@E%LUE)aT$s_Mw@!QiKru$?Q5hG1h~lb??VQ1^G@Tr>} zrC2>Jxmj45E{Dq*{$_Mb7F0wnrH~@h`RTz}K!J_a*7JbDy&%X@0r^D~5UDk|VfYa3 zSD_S=fJaT|DR!$@4Yn(+*kE51T7)!q)C@rn9OY-2qsdCs&c7ds6O}JL zUT+^W$ZakZc{{dTZ8MVms`u%-2ZtJ&yp{EA_NL4ysK{4O%T`vgcnN3IX&sPAD8f}>M@mJvbA?@|7>(zM4~K&f z;8`fSfxUfvAU3&B%YPpySx1}wG+}!S%eTaMIR$gVA5PD20A>biqiuSN7ZGaqWRI>)M_1UHNf|- zPVo1;PyoWo7_Ub0u3omc8S8!VH45XP5yhe)C1e~QIWpTz4FVkCFg4SIw1n&W*Xjn! zlPgh@g?><`X4#sLov2u(Qqe1l_0wp;0!Px4ZpC5-uhmxIqHw6a2%}&W|8HyXxFqo_N#R?RHTU&@j_D-q{r1a%XN#!b3q&7MxU!d3dsN(E?7{37mej&K8LI? zQKi9(Y`Y_iRT_`d>Z3V=dU6qk&p|{lDm_Z6B7};X(#u-|#ATmF9M@gEC_-J*!K&FJqRK{N{{?criEnn%s( zCM-!IBl(DuS+~|8#K9Ga%>#>*ARny|R~+9#KD6*Vb?)h7e@v0$UkZ6WT;G z$snXyJ}qKd=n%DJA){!yW1S@NaK{EOcq-{d;WUgvJ6Z0nc;GP{khv=DM@x|#1l~T3 zWLiqq3E+vVedsOQj3^)9KR$tPek1Tg&=Rtak1yG4N*xLufU#}E^j%X2g<}oVm!auC zxLQeWOhSZ#0WC;a!q2?83Bqs~Pz5m;AOHGvdEH}kRIwN%Y`PVFBs*SL)8S)~Mt;zX zIjSUwqmt-w8Iv5b_k$+ncIU~VeIUm+A7Om{AL~VDW2;8w%Yn$=r{b00$MBa^{2SH27IyrjOp};{8+lKTcu5EDrafOC0 z%a<$I60HMzq7=Q-Ri;nCb<(eAS_iRw8WC9VSQg)nZpwm(u<2H`4!nji2H&mKVlj_m z6d60llx@bNkDo@1(eioJNDdQ{n2>pL zRH;RR11qiv`A955@jfA}=(^>g!sF||m%w;7df?~6n36S%_#m|KWq~DUR*f7cWZNC- zB^RGMy{v#>>K#n4=m;l=11C_PO>)lOzDbL-*@Yr-$M~_$i1nNPRU`UHN=L{tK5Ar- z%vHTPfPr2jEK}oGdldqPX}D7DTBwJh;cPIRHSVI7E}a&vEL6;vwK83Cn{7q+fO)r2 zIM(k|@WX0_vp9&5zHux`4$jO6Yr2veh~GX&NcOx?@a-5Ywi&+;_V#Y~<9YwG5yYUV z3E9WTjm(Hsj|K-lJjlUsyB2z;TjLEx2gE^!ul3apG@h?*Cvc?rCRHE;PaD(e{cwqW zwduyUQTQ0nh7-i^*>D>C(ZamNjdzz53w@~;F0VEX#^JDa`7;gx(&n>crmRDM6@e7h zl7sj5v88hB^CZ-C^`kJ2S(VlfU_AKlwFTBXTeLN9vd7+5dv8J-k z_;$#`)a(DV--w<<&=Rtak0P0tQilQ$L`+@xlEk}ffQaszQ0sg%6oI^6km*4ACuF`)$1Z{UOSaTQL+ZK(aLYkC_pB5Qx6 z2SndgRF4pj3Ph%(hj$E=bjS1@5y9=L#|s3s_k&?Hdg8Vx!q|za(oHXd`_&^sm}_e4 z4dc;Mkm?I4ww`B?>P5j_FbUx5l9A&Wtsp?=c^C(nQwQ#pr9*JA7XD439^t23Awd}-P0jY&dQsc>2dm@OUbX(54ZRKj|}@cg}=A%f`_Z| z-%lWA(+T-ot93fKf#0&<-ILab^6&G096^qVv*a+gFT&yD3_^m#(XtJ*gp@{0h!tKz zhP>aFPmM*Y7o?a4!<_Rw_YK%mPR=@id`sC>lxeL&fCCCXs27&$teLGYxarFji)dV&mkKv0=9HwOR;+1M_vhe=uQ|TuYHPocLnbSkqAbJ{ zG@fl>Z(d4UMAyecomvA=GDRa_eHEI7(`mW9E30O38f^tZ@FV!|INx=uIkxaZ@I!cK z5(cyQ_4QE3F(#E`YxeTZR7M#rN9!%|Z zUNt0*w*oZiBen3LNh0{9gvb$F4jEhCdFY^c%k!ktF05VfvUFLzYMcUgEtbXKK_;i7 zu`^%IpqvS(9tM6xK`Q3!Y;-rD$0yl?iDk<}+D-OB<+?v02gf&X;t9smHKq?tk!qn= zwlFGNurn)(RPxlQF{$mS37>l|O51S6FD zz&KeC&M3j~M`>P&Q5F=#GIaFn0$eTgs>k-Bdhkd2I*)#U`$Rv8(*ZOn@Q8wa`2!Tq zG3~4|pZ1q9idVx4{VfbbGeHG}RL9_}CLD+93d2Duc?-PSb{xe=F$1X zLkJJ>uLN7j0A!jiv=lDb;@Gxnvs@|31=B!sp%0S-x9ltUTsqAy&g_gmN^J2Qskov{;?k(I}ZJyYO^NP(m{Kw`8NBWg@jC+n6V3^d2v_ z?W`gw3mw;Oj(O{XeVyWOPPG03%DbdHD>-x5!E-Ptvfk)$fc5;Rc=Xb%sR>6|nevnQ78D4(@E8x4JBQlQ$ zA#&I14YW2$SEqKaMM;d()`jE-Jyx-p;GjPg(LgeRr z^mxdaL$>kh0*7tK0FOp@!_%elN0yu`L64muC`axdyYB-fc>2xES7p?aH%F-D8=|<+ zhR)OV{6zo~7$e>kXz_P-4YWe%$uc3u@8O*%xntqJ&(oT>K%alVOOGEqPY@dmJPac^-&Q(W!r_)fr5Zz%RjsWC4VG;cLxfLTiEnon5K_*icn|_R5?(tXM4s09w_oD z1)Bw_Fy1$IpsKHYro(Z{!Rvm905$tDo4?F9Q>j$Wk_Y+057FjFzP}y7S@Iwm$DycC zpZ9l`T+?(8@1jRO9l!arR6}!eaft3=*dq3Km`u|(56}#8U@jDfW{7I%9&dS+`-IXh z&-5XY!Qmm(uk9)!f2w8tkzD=-jx>^k^PeDuv7y8CD?RP*?V4xV;7WLKhspi5-6Z7p z1m-Zwo1+ak@?hZ8L4_o`ga@*k6szWu(_kW;3ey8^rK66f+y!`XNeq;ZpmMLR%e9{5bC0S-w) zQ3{sr+O{r;Qee74gaX`LO;8eOiJe3!BtZ#x!*B`F7Wmm5^2L`!X|gF5Q5I+}rscc3 zD7K_%N;NE=c22YR={$%BCIGJR!6+uaPIg?o!*G`5%Pb-QT+)GqcDSdvQ5_%oEE#7K ziqH;z2HczmoG4iAk(YEQqZts1k}Qk=l8f5!-Glc$>A{V!VNd^+m6PL zk;ZKyBuSE2B`8eb3F*H?;|YEFDewfOT{*^%W=8@J`H+J!oDH5eL`O>i+v)F z&1?OZV9r{%jsEZ6j{=oSREFGm}eO!%VyC#{rFW; zfXOcYG+bW(L|KyA8zdgBhI2Ats$oN|2*I;Oc5T7d1wdccRF~}X?r`)3f<4*nZSJbO z!=L0GRkw7IG5p(07bHd=jtqNG1G5IxG7~R2sXGxC>dJjiSe2+09-4fo8foNatgx#4JXc%HjVTQ~1Z_-Oc57o?>#dX(U95nvR>1Nf`1ym^>&g>C5F^|LXQeiN?b?ye15(z3(+s1qC9w!KcXya)ZhtB~n&$2PG z6~wJ7GWP|^-<1+${<={8!jI$7G#*xp#~AI`#dlbc(rQ+)=kL=Da~pq{JX7k%6#Abo zuaQVnk!xfbxs4}MRF~M8#Au$EO5K%6mMRg)Sf@l^@+QY?yD9ExQ_C&9Xc)3toQVQrQ+jjLcehQ{)pLqN-Rb?!e z_lhU5+duE$=t>Oz+`qiLy!oO;<8h(NjF%tFv^>DZCniBYrFG1Lcol~eHPD<-0_CsT z8T_fVklX9a^UnjtY2fVesx*oc5gUKli?5I^NbR_O?Hk_}SJJudb_U9bIk^X`^}m$9 zZ46L_j$0EF`K}AqR4#7@jZ8>ICf{72tBR1T-lyvxXai{?|IHxkrhlcxi}BNFF@k%d zqcn?*iV~5Fn?B-(%2$~#M^iOn*qKitPt|z1h=VA}g|9TBa0H3}l_-2o?|GlqI5P-- z##gh&D*h85s)83Vgec7lllr8pgm&gp@c9Z^*yl4a&Z&O6DCmNXZ1@NUSf#~{jj`Gl zWo(YY-mS8ciMp;E!w`tw_;sPEQP1Kjq@o%sEoS`lQBAk_IzW;^@gTiSpf z5~cAl9tJ;0Pf#OL?TS8z1E^*i7{-(MX*E+rVx&2BI%+I|%`yTxKMNPD3HDJ@B6m9j zrzimS^By4kbUy2Ww0rHxt9vD?!OsQU%!23v-CvX_y(|C+7HXG`|D8^*RdqaMte!qb zs%C`g@?|+6scj+2Nh}kE7>} zb(|kdBt?~GasK5_&75@p`Qqxff7w@J=X5ztOa%(e0ONWG6^2wfsnc*A!b^b?jVM^o zSJ5a~;42&88|d~*1V4uH65k^DROomDaP=cop<}m+8f5|;-FA>`b>YjD^h|uc#iatW zeuYmoIU*;`zNv#_t_B%qg@ctkfhQHwMKVsg2mo^L_H4K8+)b_v4^{3*^b(B576ZWf z{cRguhkcx&j?YGZ6#=4~c)Y@Q2Yapio@tnFsg?k>GMHo02Y5*I5Rbz6-J`+4AI<{5 zdtY~L?5iYR8`B-K%(|%BX;L1dH12w_h>1^BmXo;mtM+h?eAU-*S%&JlY_ zu#j>$=>|+3_7e9rfmZ`@1@OR}oP1r!2b$zw6 zO#IZGlSN8AypFx%aI|cL97mpvM{XRsv5bRh`yw1Z&Ol{3?u{cikPLxQK#;a-A!FL{F^TbFJ!S#*Om3NZP$Xr)9PpyX3?gZU`Ttr4f9cTr$9sl8u``eMQrHRv>cRaGC99wphHpznkV_hIGI$DF z*I@0KJ+=nmLI|#Zv!I1-3a#H;H}jWPZ!&yEzs_f^9z>^tXCV9_jTORoP)Xnl=2Z51 z>EIReCpLfu|4Nr`V}r2pGG({M^l0>%fEG+X{WS@FfS?xn$xI?!V8e?KViDa!Zuasu znFw)_T&9UQmrO@25lXJa4aT})rleGHw2S0)wSLPi>Sg0gvQ@zbyBN-1^Y}4N+}p)H zI?SEkXW+c4rN;%z5#49SrcmsjevilgXocR3$VNgie) zawH3rIn-ib(iEnMLQyLN3zOEhf(j|Z`G)8)<=!gUm9Z)}&`<@P+$?{dC>l#C5{r)c z&LYx_I4dGDj7&X7&xKBoP|Rn|@U3#RA#64HY^A!)STbKNuV&A~Nhk`&N*i@1^CdrE zi;5$JaY)lx#)LFOQkg(g+|AIRYstlR!5&1cH1x^ zf{|BoCNnIc$TQvcTsr7C+2_Kjvy5GI%vsJgkIV~Hk863jnw)W2P#P7$R*Xw#JgGNs z7W-Cj*m5kKC(hVF$HA5CD%4^3$S_@u6I2psI`u>HdsY`y9EQogF_ssJi17{_{#Pu* zYNdfFnj_(yz(ePcZ*Y#ANCi<)N5`dRItbh;J!SP%LKH)-ofe|#N&wW=>|uU#hW>#_ zhX5@Vm_sL9xSD})=4?1YJWqzmVg!$=A)t6N%`6C|9z6wP;#2&IDlC^8MZsM#f%=yD zC*wB4*5r??aFUYaH0m#cQ8=8)8(o9%%?e_cib-A09w*`QsrB1uC=VNqTev3Y@^ADk zsaqG?dT@%xnhE(cUpv7q${Gs(M>nY?45f20LJ8F!C=ZBX!&q0ee^Kc~dob@(e& zVn2Q8|JMI!e{czJu-~ftGlE_BeW;J(S@;2sG6!Hb2?aZ<5NmQwM7S58Do3!FBj1b0 z#Ez7Ra`A%cL(2;5oHKMoHjPi-usvOcbYo(UsSwdM$m9dY6vu4qt>0jFSOm2}Ki4%V zK?tG#C24|45N86&+zeXR!`C2cU0h$&!=(qIkXNnz!vCLtw^CNXf88#y(+C(~k~<2Q z3X%7RoHX6`z|;QV-MA;&4ke?(E=(IZi_?*-^Z5>FfwSWRENw9q8kY)-TqP$zyI`*h z36+IENlVy?*ym76o7m>U9=Yhxmnq%o44pMGL7rVhO&KU9vrvNtk{GjS64P^qAQzOc z=(!7!p%w`qIOvA!`Z(qO8sGqx7<7+Tve9Nnf07Fb2OFR=qzhn#iXemELSsn5V*oAn zSg=TfxlMy^$6^J)ofIY@ou1(E(Sxx-k$zGH7|7$b1^#%gBvx!M&;bjfXM6;YeJKWz zNppADA>P13$s|D!HoIgYBPjfk@BXTxPl{AmTSXMP4^R_`LO8oOfhid|Ap?;dszQ}Y zA{<=te9Q7}Fq!g37AqZ&?;D~d`y!bY15f&)S-+v8EwS$o z|+CeZvVZ|+Q zC&l$GS}2klGD~24H+ZAoN5d!#mh|jdv0u-Q%%wu$0l6@`?GX<41qT)wh~M#Z$+`zY zC`i&Xu`2@@>BHAF(ol)8)qtiTC1e~QXELKt4FVjP@oi0mpiYA;_k}RySYY6#>n|bJ zqCZuSDKH+CcVkl17hMS{zK+eSSUxQeS(p*EWRXVHl9*zqCghLqmTPZ_G=x1FQj+iP z1;r)jPBZTaCi?;t2brO_iYC-&7i?LfC`x5`iV2{zkb6kji_n%&&e-iP?6+IQ@Jat= zESDP8O$1r~)v$v{RLD#@imXM7gD0Mkil;$!Y2NrkJh8z&X)|jTjAuEz&bN-KyrJ+I zK?_F~S&}{rs)PgGhsBucJ}lZ0w|~d=1ZS5X7!e_kAHY_2{yHePJ2Gr8p2AV9s6Uaa zG_N$B9Vj%gBznvv3hfJpk~AM8V?u7>%5_>L7clWw=E)L#w#zU?9}HnP;vf__RCNx7 z)OL(cWRy$O=v1o8qlQW(F(LEhXjF>?2ZemyHlbE1D%Z_gvxF$*IBAL?(S{dV&tN=D zcRgeQV8>HIA(8>KP-M|(IDUq-zDe3Ex-E-3WZO00@Hh1;K8NYeMiA4G0S^TGqfdvt z#^~wp0AqA|#3RD&3t=2|bK9z(Ltuhv>k3b;1YdMvCkkC;yIx3P$B06PF*c1Tbcr@K zKp|)eStrMnIuv+tVtJkcWy-mZT4Ffa+(>45zOCcSSF>lom0%+(l#kfQ5eqGbqgOcE6Zp7%e>lfr?9Iv9F)q$7&*4=6rhf^j-9OsoGJh^i7ht!du zUNe2OM8rt3Lbp9?C;QS)bg)amYxP9B?}d_L$4IixK>5@g6zZ!_AOSlr6|ROSWr9K` zQm6tPRdp@SmmnOGg&`LL#eK(sNPAu#_yb;$hl{LvR zTHLa_Q2I?7cVQN|l9oruVw$79V_FqtSIPcVhO~ILUoU?0=vs_Ln?k_%?A=sgG8_!1(l%0|E>i{BVA|ePO^^M7s&ux=&)iu zZ_9WNvw~dQ7U4GGi3=N$xVekpFzLx5B7~h7?*HNe)7#cI6^`SRJ4Y$rPudmG? z1?!+$bhKaX%YNnTGA2d5e}zISmGQY7F>#XuYQk>B&54d8VK%>z#E#Kro00J=u&Upu z**hSGy&AZX#DvU~V@oX(JZM4ThYl_f#=cMpZBe>rSP;S@xig8e#Wz6(g5J`FZlIKq z9H2!Z3oYWdEV78(N`b}FtPOpHe=T5vbz3<);v&Ak5Yl=b zTNl9qS`MM*3Ps44zNbX;rh%^eLa&xiR)dMyI&Ul4Ffnm@&kKd&jy05RhRJ{J z8{hMC+-mwsK}yItIf~REzy%RY_dQ&Ha1GrArEl3RH6$d!H#`UGvq@LEfof7LpBA<( zguE=Xk4Cp-)smv+j=Z%}xM=m~qaQ)sGTK_pG=7KT=(`J=Ct;B0&rvDa7l>H9Oav*q z{0I-ML?fvgOCsI&RpZizvXm63R0Bh2tqk^%-Q$G5QZ$(Z@~;cHAvEHpl~ZDtn`JPO zqeyjsE{JFjC>4C6E;evEt}or#Li-kIJ`mApXpJi(`RZxO$70CiIIK=t&uJu8JH#ni z>FKbF2h97JpFWV+q&k$sRXcoT7jIah^pSuCP!o0|^lT_rMeTNBpPlL%wzkdibu399 zR+C917(r1JvQLf^^=R<0LbIXrvc`Y+mSKgxVKRDOgC~05m256TD6eC+qF6vn=p6yZ z=1y7k5uzubo||o&r;ct}zl>X!zSAu8;vFlLLlVRQYQk=B05P^1p8mOidDoCiQIHZc zTaFbq2ylVIhm!Lq%Eq{cWlD!!Cz`arn^>#Rd?;FCN!&9w1d3w)w4h~CVzmsSYQ2Kj zikMo1?-{E}9RB_pCY9$lL2KD}IjrO325pJh+vA4rNQ;ubgU5|p2Y@G_$ShvFvQTX^ zF#RQ*nZ~LS^`jsqWSksNY7pS!i32en*u7&NJTdjP;iPf5t75@b0P+=oCb|{-u938A zGjHfy0TJGmcA#P$LE={diFb|>$^I6KvK?EYwi#0X_3CDD_qji41O-T9LgvYFpcV-Z z5`YJj3lV~AnxIU_g0dwNUk;&SfyVQ7Q#mpmcG`IUvMhpKNCwa{pH(gLwv5#0;6wJI znYL1d5c|o~lS4!Z^_+5?8bm9|fCcaW;X^n|Dv<0Y?bR{XgQIotCvXt*ok~t!!%BvD z4-18q#6Y!vtVc_50IEjcm5#B^81!!cynmxNf-VIqA>-uOQiA{&SzM^7jx)Zmp<}ov zz>#E&OMu1oz*Q!rhXM~S zd?-k(3FNoC7>YD}z>YiqK{2=!=a#S&z2*ChaG_#12HDz=Q7BYyYJBr{)Y9*it zj`B0i(PX7*=id*+iOQEAueXmG-pY~WBrzfL_;``k zj;%$42N)24XX@)Z+Cmyc2o&5%!9ekTQ245`Xbm0%ssJNgJWUo*00b$9bXyiN$hJF* z*|_SpJ_VBnyph8Oqvv2=bkXkI1%}oR?A?x_)@VbnHDdfbhLxGD9o^9$_ z9a!TrTS0^Hz)A%rG#YoGCDu=ieO8C)-QE6~+6n2VEJ6sIqK}a#FljCn105bz#pwZv zqw2Cy(fnv`YPAlw8sK|ZC;0naC;;JPj8~(0M=#s@He4P9HwS^kd|;=|61KZd2%I6vd|C8)GS-`u@e=GR4RH!v3?p2Sl~!n(yds`;I-Nc zTohT^F2X1n#sAwHye?2BuEo=9s~<$q;V3xPl08`TFg2->_wDN%wf4VIDDD_dwiyQw zw(frK_V&7carZ@86(NZUnI}h-S|m7_g8gb84Hao(MZC~d1?h41&2rtM@m$bGxY6e- zkU}zmh6@%{;6-D(n9m{WOH^sFBHQlBVwHMM zz(Wu)JXtQ({^pG;L=fFhP(Zk!#SnrFU0^HYYC@Z6CK-ej%cn&w3mu}CEMycdcdU~n z9`4xS1y3ctD4d2dXeZ0P6%RaWDa=)AKjGwZgTUK|kxWaeIsrU!wGX{zn-S&X`^P8n z&2I!=2wFnc@$n^lO{qhH12DF2n7(W3-0a9gfH5@P2Ujb}jY)_wFrWnqOZb@=H$fN< z1F9hA;^SYRF0XrRjw%*ogiW`ik7UQ|YC3!j(#Q{bF-Mi;a8wcCzZJyD8Y=_=Q#447#h z#PVrGV8LTqd^fr&3m(FzThTi38p0TSw^obAJc^Mk@N+nZM|Zr4hv6uoCwx>w4o3-j z=g;mn_P$VL>=;wF8IL}G8ZAc4=TRd$Oh{rv=E+f|76}flxE|yqu>{5Ygs`IPmV*k9 zum4^GtJv1c0Zo?FB?G&ikgspeB8*4IQ3|7(8Gfq{I+YMXSy}s zKy*MHWcXTN-9Y2{+I9j*if>W{BJi{^o!$?Z*jJlwd>e(2;cPfT{GJV`!5=NmTikee zIkC`}YIRY0wP`R8hpo$>aR87upB*!09r~*Xq^Oo0ytj`nm0O=DsrKNRWo$Fbef01+ zeQfH9gd`?p9v@#ay`&Zi^ySXS<0x1zPtJ5pb9LYId;|QmP>|so@B$I?y0%fMJB()< zHUJE7yiKfGJO(>u~H@*i~M5k$d}iBHZ#q5wT-UWt;KskcFw&|7X7uJ%ykpWE~$xGA*SJ z1s;f)y6z>3ch>+B-8G@s`DQ2rdA%UhZ*w*-4g+X`%Yw)vnlF~GOZ4UFrYwdKP3t^} zxNWViyRKtG38>$|2j$}`oQ&I0`&ZZWHe^KB{zeaozNx4lAsiJ*?T#MaF;LPS({n@w zx2GO2|M@p~cMYS_6SqB)9E_MM-Si^3Up*3pxu&MxFdjVxslEW#D1M_TxC6S~k(8(D=O4x_k+eCsa-59z{r@Aweoo=J)R|pv3(H^A7>B}9FCT4m?fk%T0*Sw3NqyVwtQ+VQoSI>EEwjT-??wVmU42| z`Quy4rlL%14FVic@Ik$>OlQpm?(j&C^Z5$zJK}c_%{5U5#>U>sGtHt{J}u%{Na%m+ z+}>T%tynZjS|Qx10|vULj0U`ErH3LDsUUjultUo=i<5E-M+|h4*`o|V2tXjGOEcn# z2(8ooL<~CbJjNs0-$LP*%l~>ioT0NODr_^_yx;F#b*`H!14YncmMq7G?6O>k0tXm8 z&+&}4{c<58qb+sp5CQ`l&qMcV=`uHQ%q_kKE$UcgSS}agXj1E8T-bCg_NE%niS*iz zz;QU1Ctd2X`1UPNH8#IcX6zVMwi#u9)$JzsZRG@uIVB<6`1Ysls$JcmgD1Y`_?D}! z{X!0ztYnI^5Kqu}wt>BQDQywiFA8;P4Lo61PfJ`DO~NUp#itvwY6hp#RuBX~g8z>5 zU8ib83x7uZ5Z;-D!7M($U+_&^2U3mJli7IRK8n;l078+tVm)pbDrAp5?e`@3K-}=(W3X^dK6}h6JRIdF^r;Kw}0AEI66jJ($|- zylO}qZv|-3M{40glSJ@I36UeV95S}N^Uy)@mgh;OUHDkR%hF}>s&NX~wOAH^hYN5j z8awmV49b~s>S5qFl$*bw^j~MAyZJmm$sSB>Lmtv@vJWcP{Q)^RzJU`@FqX&mfhkfg zEQV^igR0j9 z)~a}FYgIh8wJM%Md}jsMZLNx@P%XKVMiozOt%|3%R>e~&WK%T{C|y^68l_Kz4F!s- zT2%5>ujHv-$y2?Or+Ot%^-7-Vl|0oec?#ha6&wS1*s2zlJcTFkDjJnMH7a>(usl8e zP!jd*)BML4fXdYp!OBxKpN0Pyj8D!UhLdG*`r%`N5~m+1%%bR=UO5(`axe ztp(J%i?AR$3W|~yj8N_aOUQa~MhS*LO7lXDvRxFyh)ryqQP@6I5B?}$=g|*%itYz7 z8o)6iFvgG!P&B6+^J#wxqj)u((BHx^G}CqA@yPPg^AV3-un?vz+>xZuErA> zAph%sq018bgSPJ(-qHkPNXM6auO>cLG>3@&$N9?T9-{r4-CU6eOyY-v&hQlGo9o^M zL$IIBJUV}P2xq`Xf+=M9G0hZODius|Y}>S1u9T#LX&|Z4hsi;J&lP+u9rgmjE#wsh z4F*q9FdP$K$s}Xk=n2un_>{aot>QZ23p&NPz=NF!>7!TO1_+n0p7Q0JxK?YRQGqy``xex zy7hsj+tRXLK^;IJRURVn5mpE55lZ$cf<3g@kf@ND?yLl zA1Jwd?7k0_AV*AQzAEFEyg9}#-ABHsJalX5KwZyY1UP|V;%(uU2FVgd!oMDFK`AQ3 z_cuLPZP^6g!tnwPD8IvFG^4!F_kFzN0K{Ai1&$c$X~f41a@q)pHgvpxp=;sgGrBYn z!w8N%?;e@#Pq6S>Wv*T!SNvv znFB_ftzy`FI%I;IR!#KsU0ZWDJYRy5B?n8;WA`UY?tb#_PL!eR*m77{i*oJ!{lS*9 zHG{A0)H_hVW< zecsz)^1v~p1heu?h9)bCHt(wRL3HfyE;E>6BS6&s>he?No zjYnjH6g`z56-tN6H#~1sqq*RM`36)b>(}<35LmQTo_cXL>jQb}-P<+KhbOE9M5bTc zZ$b_=%)_p{dE$taI8+}k1FX+p_s#3rsg~A!rd@jLih!CPJsmS<=C2RN=4WO4g=Ak z0x!rNpvnda6ip#AplDb?L7p)$kLrO5fOmW_iit0r9oOzKoFxe~i=Y6Dbm5?V@afH3 z$8A2#&Y46fw1b}kH^~7fEEcOBNp~{90g)(Kql*+Wc}7m~oqmjl(-sP=U$%bx={bM< z_Sby=I0?RWaGb=q^TlEkj&RcWZ^h)el#%;B<=w79`hQ1rJsc54Igw|PP075Azz+z3 z06&rPR>2YluTzjZ2Mq)XpP`lwXrlB$xEql*;A-|TKRHAHKxC+d0U$l;rp&0!eSkUn z9X<%%lFh7BFqm#h%s-vA>p=2O)6@JmXy0sOBC#!WNWN$*`J!}VSo3%_iV0p+HztyD zN~Uq(Svhn05<=Jp4H?-_ke)sUxe`Rw@1-z8z`;`L;8eRrVS{j792{*|$hG3EiumIit3hYyeqPGI1sqd{J$MG21>=uqs8Bq}}*| zC?*^<19At`fhcJgZUBnmv`u!5G?oiNNs`VgfnfqrNDn3&Q0O~W0Vp8u%5irzKN57v zha80Q1a=L<_XLLTg5_d98v_Kg@q&C$F7YO&HZZYy6Zj!9ikwEatFM?Cxb&BVTW~uN zURb*F`$-ak`?XJ92*{g5(x3-q1hI!{3@>WI3D(7|hQ#wvIM?;2U_$aF-7&o(igY9P z3F(+a?-Tm|TI>^Xyk6_K1a#KAZuEx_LAra-^4zy=*wv8julQ|={~H*ABFmEI#Oew` zl~ICgCEO`#_)b4Q9T`YpBrzfUZu4oly!;9BmK&Z8g0%YGLPKZWhUyUl>ri%YNzDr! zzwu<3cZZ`VknG83ZKA?-hoS}4ba{}B^r+lRc5^WSf&L7Ha;;4 z@+qxj7R0MKoT!23d=e;s)z08grG?yHU!H#+C{6?Ci&v#l6ph&U!(M!a{6T8R^=sew zuDFuUZMQQ}M$E}Qn63Y%^lf8+Dsl5MvD>L6CI^lWK@)hT-@{#H&njLbUB);3B%5O0=cWk!$llKNp^gt z356pl1)xOXYkJT7tj3u^@H4)eEmrZL@KP1LfFVR_R+!W$RVB1DkAlxv$izOMfpJdt z%SAyKY-GbnFu*D;ZfuOzt|()3tgBHVD!pzj8bIvEuM0(udKOP1J=IW+pFbbfbc?S8 zBpDPB(#r&@bt@`4U$1WZgL5Tjyxa#<(35^D69FYsO|kEGFM{WDMUGrte!2blKgx>% z1X7{_ALi3w&{LxEFkHs!UuGJr-^efUwLk?3{|uwxWjL9r0_wwyvgzmg>gFF;H-FwL zeVaeO_U7P0@p^UJeTL%V>p0nrh#ERiJw+8H6%uwQ>UZG64)#w zkn^)}v6^5f6(w@FGw_N6U_b8xvQOu;9!R^_e!RL@q8j{Mz|Aa(9?<S* zxW4+R#Pyf)bhsL~$Il;iW){MieaPt7sG~@Rbel4Rm`Yf*-?piEj~nD&V_J1QdXa3Yi`qyG?*^ zGfK5ADgl7g)k8)+)CQBXSb&n>u*rYDw;S{$Qm};3q|N zk&II=3xJjdIrtr1g-J40xgXI>FdADP0F4DT2*7tZNwX>#j_pWy6OUK;?x3Me-!l!< z#TBQ;Llu4K9^z3L$9psw`0HB`IO^+=5{`D1C$~tCUuwX2QTP_E^TIJ4bB@?c0?w7YNjG5Pu$Q=}3EUF#V##(yb%3)p#Xt2x zn>mOHQ~G0ysjn83*58t6HDO~<*7eoOvh!1OP8KQg@H+O2!_l%0avXUw9=UPk#xf43 z?Tc{uI0KdCxHpd6Kr$4rZ~a|K(Ha*=POKl48**7NPcMAJ3xsZ&9wbjL)hWX3g_jL< zJ7v1UJ|^3|>t_?L{4I_~El(C99p>xQK#@m_*^FL{F^TbFK7S#*Om3^4h& zXr)9TpyX3?qxmSztqxSt^{(6Ir>vHSs~CFMa@uUb3SNUG<%h0yO|M-FjG-5v*aR|n zecgroAqu~w7nVA=XF)D$#L3_(XkCM~WA@k@fD0kG{>_3GwkfoJZ{5saTD{5e75zG& zwR#Yq3Z8-RgEUwO-$5mTD|qhN=WRR+3olc4YfO(up9yHe^GbhBcnLu*@{^fFw!nrL zAH?*KKy(Ya*~{1Dq!kWekzA%zl@m3~bi@*&1zF!S=7tMmqgJ3 z8|-2@d(8vLIDu~$_vkQpdY^$^rj{NTC{c7zRz66m5wVwbg5BVfhyp728Xkv$2(9n? z_Zujdn{3kb@=BdnaTp!$F6ZMZ!NWX6j%48)>`R)~WnI#`R#YKHINuN*rUYCiyE0bg z1{$iwlbt2d6GdYwMPkuG-&sg{5oc9IhS_B9F?ud^4u)brYld%?qYYuJ!DlN~YQ~cJ zYI!w#9!^40Fjm^AGnp^>0b5iYVaYU>F(JjGyn3Nc=8K{kAPS*$!K76cMVU%#Srl3l zM=6Ows}p^uw>87@xv5k#!vd~Y;#lRR4R`|!qs}sRb%$ikS-~}vsQ6NkYk9a@c|+s} z1WWWRD2)nWE5?P3TwZCW-nd!pTfJe+v2eCHWdj`tSF)?nhn)=5#jB+1ekyq0kCKordpwk3@f(jQQef@o*(gN{qhd=R)(ddlkO zgeZnuJ1<1hmB9C7Zit_nrd@o;DI(6lr+9qK4NfN9T&b|CA{r;(QUfS&b_nYKQ); zakEQ0WL@gs@aSH(ZhCZ=bRhAKFKM3L>hjLa^BV#%$cJ?`{`(0$5fN~Oy3mlNCiuzF zXEnK>Q{wG9{FN!OpFZ?|>;JPqxP&*@Z`J)7!LCD1Y76pe;0H9y9Dvy*6zr&KEacW; zOj5WPo+?MMmm}Yc#`Q$Gc)|3cy_$g|{cJcv0GXWkoHKMoHjhu0jFA6MaI+y?zz*Wf}3q5dUlf=Cc&0?6D9TGzwZAZkH820a`r!}AOO zfBxM{SpolbyTDE(V1P;PC|oK;;vaI-blU^Z`-6Amo@6_ek(L~#T%FH%Knt857hq|N zq4>B|Smf3W^0N!}s*q4w_>;7Rorrx7<+X`zF6@zu{(PCzjn2?n6BFdwHPkSnl*~d6 z7D!^uqBDTzBf~3t?gC_}MS=$oy5YJ$NI2fOLU3?RQ}+Z}UPaiTTN>0v_Q6HP1;2&H zkb=hmTI#W2kpy#_2HlRu3Vu5&Oh7(8!QrC^V}T+S_y{nN$7>7x@mfi&*j}Im7DCVX z2p+90u~wgbvLLagX~h8NUV^h&7-Z0BnOtZXJH#89Cn4}*m!JomUb2`tg&*?WUp4ee zk?Lxzh$8m^Y64LRXZI#BB_k(fU>#JcB*MWJ&$le!Hc(;Nb(9XrhitSP0SgT1!7Ci{ zh+_xLRjc&2B(Wx?8}VCm*UphO;{h!bS!nqO&J%K3uh+Mftl5f2?LpA8b>8(UrLV8N!VJPk{o!_56$`w6>W)q zC-({}x|B5-YKQPd1x7<+zgE3wWXf7PP*wBw3|$WCT7nnVAXLyPPStRNpe1A~`g%D? z)Lw`gl0sw8{>c#fBsHs6^_^mQPDWR*pXh z(GqOObTd|fXAEUtCx{uQa+Wj-Z)oF6g)o#m2u3KZxCQQ{xWGjVMN&g%32g5MZ`Au} z7=^)-o;@q}>)DaHR0upE7e==|!oj}azybsDu1sE{r#+#JD#Hc2frOnXv{?5b2&v|P zQtv1*bk;-~(uc2Uq@faFs{u_xidk@m#C)8|UK45%;J}OzC8{B))8NW|A>Vi!`E^EYP_5qr2tW8zK#1PllA_yL&;Q=1#NZ z2qyai69<{0w~8jzXBTW)p(rZD2}MlUi^3Cjy9@j67%@oy<)#rskmX+uJ9tEe%#@?Z zTBJC5;`yk0nu*FttzoUQ!98g+YZZ)VIl9ibj;Xw%@EAc0M;2L+p?%bwq5fLUu1fqhh*{Q9HuuLK}-0OBPXzmOBEJyI?wx1F(KUPR8*n3R)d_*>BygW^p)WTyJqoo^4vd zj@k(mH?pS~NU%$9`59)vXd>PBLP@b>{bZYg@~Jl{)K`Zf=_Fsc8lIF13Ykcu3UE}_ zSvFsSa6}e{TnH5R9Rnimd7XqXB*$ntVs)YP zn=q*nq?pPW*;RPYw|w?8KlTiaAPj!*6!rFcIo z2k7^bYgI1!-}I9^xz~jPVaH0wHsj=xAL-)zOPJNrQiBbOnvi{zdXYZ477^n0XmEf7 zs=wG^NLn*U9@RFHYSKdBfbksL^OU0z+&10c4Ws zWLB%a`ES8GXciq`*Z20izRQ>t@%|MGsZ_?N*D1)JUL>yrYQk>B&53@^U^c&y#BR~W z-DYI`3ask)Y4#3CVXp=*BrzfL|_U>!6!kHE4oVA17Au3@*OBd0!-Thp0#U*B%+MkFkn#lWwo*W`U94jD` zqe=_L#%^4xc1CwhkMK6_UdM;_U*w_PG;nQRk>h2n3y=d=Y_&>#~R8u z!{opAjqiCmZZ-X+ASGm+97Spn;DU&y`yQ@8xQ1?m(zk4u8WIxV8=eF8*`%x7Ks70r zPYYWXLSB~HN26P^YDv*@N8VZ~T(tW0(T^Z*8Evg)8oxtv^xXx`lQ2m0=cttIODVB- znFvyJ`4JviiAGX0mPESktHz}bWhp66sRoA5dg)f&Z3fT(bpd9eM!d9gO3ZSz&?7mD zRQKnCh~|J&!58Xc1DE6a(v2;&Z-M3m5sik{xFV9To|b$phCGhL>Xh}IMpCt7^CZGB z?_+-YK%NiyFp>uA(ra16>V|m33Z;((ENbVcr+0hRP`kp1ZHBL7N%F9oOd7!mikgsp za-66~gNGHG4V9NQ{=2sfE9?!E(fb-a(fcmnOtyw!ZhEsQTn#7|>;*73cgmuV5Iy-F zn5T|zS-*^1mcG+0^Wq&VltU840BXW+gk=^o{8INLVV`uUT_MIc!_zugw1_3Tm_)v1*MA;bEuuSQY>qL{*cN1$Bnh!-wEQxytaeH6qd81fAEofP_VzmsS zYQ2KjikMo1?-{E}9RB_pCY9$lL2KD}IjrO3#xL@?p*zx|qz!8udoWCOYaIZdfZ9V~ zy1UK5^p|jE8mmUskAjqtadJGVL4b=V4#aq1_l|Y&#MIY@lg8byiUn5z$XEQC=vM5z zM$)RyyrFLeM0iu$fr@biiC+aI-Z@4j`&%f=cC1ruGo<|M)y?4UbAQkX3XsHv%#-6l zEfO3g01qY?A_UhoL79#PWlJ{kn?mFHx~Uu)4m)i;e_0k5D3SrR%x6`Lye%X3Irxx$ zXr`?cA;f<2^yCl`LOrJ(rv}jqGGM{`fA|oNk_seyNqcpS_26jT`w1L`e5aCA*RYZy z-orv6B{5K~AM4Q)9Du6PcV)BMW(<0_f8M{*8$p+Xl#p?9Y^gzji!3fwRL2?L*U&Ls z6W~a)#f26tz!eXix0(l*V)eA-W?^Nz94=@0o6#*+*RJf2?o%jnMI7ODWhAkkU=!vQ3OX)GXyeH>9#ClkZpGq zvvJjHeF`QEcq4}mM$hkv8Ha-zhSWCv_927X=0dTzW6aoQj5rv~yWK{NQ8^_c+vI3b z-Jb^)rmfkQwq_zk9g^5?2o*4%BXZZ;M77AEB40f%TUo{8C7eyCbwDDa2v>m}DHYw$ z6?U0oG@c_q91cE!XQAW<_V)3C*yKVnw_|kJX5=^WgS@=?(g;2fw1ljaBSakvJdE&M zxZCUe(ivj=6AItnEH4#|XPJWJyeb$$tiK8+kn?OXd#0PQibUEBecv7F5y;J!nb;8_ z4hSKniA3K%LZlm9DB^aE4%>|9UPSYU)MBA*ZX#$2S;t3*ER}d23S4yXY*WYTz#5O) z3L1n5Rw^i=(YX68v3^?YvpPiY?)J~rPDnRp5klA$eT+1LNpqnX=<`X4#sLov2u(Qqe1l_0wp;0!Px4ZpC5-uhmxIqR7g2 z5k|o%{@>Q%b%82zEuLOm{UCY{N5Qd{?7^aksY#8zZ(rA_wf}`eamQ$~%{Xwdb@zL> zx7Y29yD!SB2uV!HJUOD&BEi8F>{sh(s7Mnl;)SLvNRO*;mg^Rc=YlrEjXqa_6p{fn zT(F=5FB;3md=6P(qDq4m*>*=3t27>^)kkv#_2eQ7pM!{ARC<(-xo$_{a3W7obv>Lt zu7;06!K=&J<0M=@wSN0NgDc^<)sKg9u>2d%Vcvn*PoReV&Qsm;_dAdOSU~I;MYb9J z{UeBG!K6K0EJpLF8Qp{>DP$xcQ8Me+8iY8w0Mi1f>EJ z9=W%#voJedC=hpyEZdAJzaK@fi?|VMS3ye1I60EkAizTqFg#f<)c)p;Dnt<7PEbI& zpT!V@3|(L=<7z^iXeJqi6w9YYEDIf?mMmlxEqAPwBp&YA-~~@5y(pZ9F=!{ty%i5U zh66HJrTu6ra)ZFzhmlN6sX75XakUSY#9}Vfr#O-3M1I$&E>fFfgD62}}5y7dJr|4g;zn=HlaDpDwR^Y>p}xV}wn& zqK{<9>uL(7nl$o*Ud&M?IUJQlhs&7ch`k>)A-6kE4($Uuwi#azX8KQqL9Y?yAZQ6$ zCr6Gt6gbG?K{d-11=c_g-`9-|ty@sD7LxWhA1+9&pO&?(Zt@b&p5hooKHZcB4x;If zwG*_pj?eIuaq`r0u+Q-RJGW?McO`1O3q{~=ty=yz2YxP$DOt0K4?+uH z7Fcp-)yQE&w%w6la`CCt%L)jl-of;Wj&O1~a02DoBWBon_Kde?bi-QR18^@C5tpkoflp2WNK1N9PyioA%7%R3JzYg~H zZujGP|FRLppr{Gi$H$G#h*OUS2R%HqFQqB-afWeZhfAl+Qa+0zs)H3(Zl2Pv8g8#l9-Tre0<6Dl3FCtmpdPi zqhPr_Inyo8)qT(N4e-xGL56F<3q;84+D4)7FrI1H05H7qHnC>$7(fFCtD=z1qT90I z()shR?q7HC7RF>h+={Z&na>`=$5oV+j_M9);H3qTiPzWkJdgIQ!?9;!S9#$@?(O4= zaLWrt#EvzUZN|4l7N%bRpZ!Mk6oQtJb$k@bw3Ip&cpzfxx|by0T?0gP*MwTl&Dpp(44?%r3nGhXzF594(U+r}vKT@%t@9w_wzanIx{e7Ypnd}%6dZQlhT6Zn zrney@vQ~IYK%1A=?EtbY(+ zU9drg@+aML=@vRUBS;DR5PO?QkcC`G$gM5xo(_3(mb!E0o15uz`k_n7uhS2=_y3O! z`#FWbx9)<6tMT7YY=4^(>&vIcBGn60%z|63)BMhT1Gbctv(6viQZ^N3T5AyCfPxR| zg=IQxCUA#Ga-7dsc;6AfduXnSGB7swPM&EN#qwzp$3jB?Q|I>Xl5WMKLDCB0MjbHF zHDxs5O^X%%dCDO;AH_+zg(C*K$m~%DAOs+g)1?`4M1~EoP%jJK) z9nR2M6BV`@ZQk$qt~%Gvlz}2>F-w-?LUviMLxBSfp67VR+J3o^kkOVpb_jt1jpw2J zv~-!9IOY~#gBEoxGAx&ia5Sm)FfMGm6?;<+=R|sKN8mUd%abnkSbY1Iry84IC^L49 zD%*@Qzv^}q`?hj|#hj9mZG8JvcGa%#&%qO4b9~Fy)_x&}Oja^QS%@cSJlnwDyp*=%VPwFaIrtEVL{izeZ8S}yO(su`R{TR{-~2>v_Hcb%#YE&LhrLwIKr2DAA1e!(|w z9f(27li7IRK8n;l078+tVm)pbDrAp5?e` z@3K-}=(W3X^dK6}h6JRIdF^r;Pz5YFnb|#<+UvY(NE&YiXwXM$;X#u`@JR`gBeone zw!HJuLGhO7Nu^!*Si#HEW$_|%3fQ$+7Jr8ea4H%*^VJN>nQ-c1;5U?;zn}D9XQR9M zJU+=DR2)qn(r%u#K9EDfVAuTt{V(uu@H~@IgdBxTpK=SgvV~XK!mn!KXq7GW$`(dt z3zkEr)jC!s4ZE^MB~P77o;sC0bt-x4R`S%XQ?g9 zt>md!$y2YAr(Pvby-J=!fuizRFYRQnlBZrJPrXW>dX+r&DtQWtIx5!USMt=aGPftITL_Pa7|FH$2ac1k6!yg5X9%11?izs9Jga-G&9H(^(y)l z>DIH6dT1DW0NZs9ALpRrj8STTaz?ZkQ0FbebRZxRY31xH@CfBTCueyN&M3j~M`>P& zQI74o;1z~qaXF)~eW)J%QNGTjAMh024`MU`q*~EXL0;hiMRTe#pZ1q9idVx4{Vfaw zBJaW3*|KqQF2O>WuJBoOLpKbs6bW#O_bB)(&7nlv>&H1{gTI^&?WUB1K@s4P* z7yE3Zpk*SpB-@y9v?x|2{gX|F+IChEl!cCq=DxH!;;pawf(ZWl=O>>=y0MZYcO5(j zlau@?DqnxlI(IW26)?|^&}loR^8t}>9b4FO z3$8NMnMR+4K4o$@?>BbJ6;s#FTu!?b0z4p z`vWESkKOly61@Fp_Ny{%$(tt!$`^%PH*}z`=Pv@Bz%cQaa7(aBYXKG{_yHeb{qPQy z+_iAu2TBe(%so&SL`kOy5MQz_p)YttCn{5l*sIgdPt@fzx+V|92u?Zg>R5RdG~0&i zRZ!PW)AIcdPZs!oJJv>5LANdGw|n4{J6pZ6b0$BQ=`jN zHh-CIq-ZH2mf>2yx$(*3n;~Uqir-`RhlzZdJAlLF7!G=vE}jU{n$e#%-hh)1&?S2W z!q3LP;2YN7&XVVP_Td@Ub@EXe@2U3^57&kChmo~b(!%yW2$>DTt55ZL54fAY1V)bv)*(y#R5yEkA0huZ_R znd`r{`-A{PL}#hmX0Ag~EdkMYXns(1`&%2F+<|8NVOxLLM%#Bya4|nX6U4i6pQv%5 zJpF*|dHXp~&L0+JY1KA&pA{VBx1cy3n3n|j%Zkz=9q~!oUpB#~^f)1_-T~kfXb$Vd zQtJ?=QZguKAu(($wJ!I#V50@AVyRISiahqu(W>GH9jz*U(9x>m2O;LGavp5_AQ;h! z5Ge=V&nwmfkAGDy*jM)QC@h!DEh>4cSMn6}gsPcV@>FMex~quGB(mz$a5kO`Fr9&7>4FIkn7r7?ix;9iJ8T}o3KM`huwWDuUpPDR-C;QE&c~}s zP=vo3q+19bZANc_Issw{@z!ri99}#48E_N&u#sZPb5+uv4CO;4O7E>jy0kp|H2B*+ zM#E_frI1;+e*5V;fBW{=eEv8IzIAX!;J5R|ViJyUfs}8>QGw}zq;UOIYF8@G!Vq5Lfy7FUNr z0&2-L4m<;OE?>eJWCoQ=CHo0VvBV%(f{6OP6fzGOR!Wnf8hucRJVeGiC9ztZl|0v5 z`bDp=JKSSSY%Zt}K<+DU^K{3go1jh)Vl$qcQQJ#4fUGH*B$|pdtbSDXA zZv2=_FyesMqgRUhOuKMnEkR3#ijd_FY1A@;k|cFw0>cELkSJHUP zrT4Mn=m{iyvf10*RdEOo6zrJ)qV&us4e727f9okzUx9QvCEr5BNI}Q$v4;Msv_j7_vyL^+5jrk zzVTkW>0c@FV*E5(jNqQ=D9s|HqD184rjNLx@>QnG(Ns+scIFev(l{P2;vh;Y!6;2A z96{L|B?@2Dd){X?&J2Q|@zrdxivNU{s^A3-Axg8tq&}%Cp`CdYe7-^^_W2BqbE;o1 z3c6q;8$N;oR%vl#W2|;X8JlBWjRH~Cd}Gl7VmE$WC~DNRcnX;qhid%%`KYE_d>tUk zpm>m8CPNHED)Qy))lGkJuEdO&`(O%s(oba~phT)E_TBD9@O-YQ_FY_lx&8P*%8LO6 zQlbGL=F?!%Q=;)OT*m5OW*VyB$S?4_3F0!7%5R25949*bM!QvDH=`2Z~)az1H*U{KdokJNQ^Y6PDhO;uvtbR z=V#$!HNj3QO5|>5;1vbHe%=FQpU!7Jkan;Acy+HtHTb!Jn^_P&p!mBehKg;;U2`>4d@xyz zpVSzX-s1stLwL$7-|VML-i(z(VZUMe9^5OJ()H#TY|0%9DNKyjZu6$%M>AE zO5po51IY#Pu<>gn%gsK{k8<;S`kQcN33S`0k*gOvq1f zn66Hj>Y-K!Llu4K9^z3L$9psw`0GQQujlKoT`JvE9+2q{l|fuo>l>;@u+G@)#b6~q zQCU%vq__^hEJ(K9QKpDt3`Q}s7!fk`lC0xvg zdZ5i5#Dv9bFvZkYiz#4Zz$cT`o?)Y8*7eoO>d;VgP8KQg@H+P5)$%#=kgRNUO91GvKwS>q{v{Vl#9xi3K(G8iVP+r$@mz-SS&rt_d?z& zqvxqNPEbj9gE9>;I|eX`fC|9O4~foCRMGX0+qR{peU<4dhTgH9wwU8W=b)%`plcn| zYi}g2@Dq=G0!g^O?!x(y)ZOH^cM|`eB)P;HC;g|Obpzgx>0_%8A%qb6Hw{|Ur_lPn zbvt`$b;pBO^6PBc>Oy)dL? zJnEaymuT^U4|YD7zNQIelEk;md)h6r`vt@Wo!O%80^RuT+2eP_?G2{Kfggc>pzq&r zp)q{4NWlp~K#1F|cp4pjTrI~_MuusM94o>t#21mmE0SE)+|0s=x=>aj$2eUOQ6elO ziik`lu0&L+gNEy7Xe5>RuxzYSnOJ<%caoBx;nZC7|Z3s&Z zKHGfB?Hj6@ub0=;=fOC{lCffOoT%cRB@7b+&T zG+j+CxFji!OJK{!Wy_`%8#l>)D>m$AE}V&%Y~b_YHvB5wW;fY1UAjEDg3x^Jhv@gD zEA*C0beoeT%w!vm{*|iiLUkZAa)NCUJY4+o4fb&rwIDL?WV;ls2SFc-&qT#*LS#d2 zT^AyIl)?Aw>BH>gjQoMAhX9l%gu_=`xSm36=5#P7GLMExas-dHA;!y%@)+I0YWNh4 zm{0NNKqOiOcflCiJExyaN<_WMAJ^eHW+x%)&4Xb$7^{hHAogYr7bDqAT}>ay;qs~V z+ZSk#9*kPFCH3+j{C8)L8f4*-e@Xs)Pqa+fpXD_oD8&Z>c!4WlD}vG`h6r9Sf|3U#9g6USup z?#UxOWR+9=Z0d74y`OTDtvdRZIkg{O^ndI9yVt*hJJ@ge&kKrO_kG*)J&RtTaqa*r zCRDML2I;26MMR&XuPRaOo0;z!F|#5SsvMs%ziCBfol1r$6zlk;gzd>XYkOmU#LW$QP1JF0@(aB-@We({j%zoAVC3uaFMo7;ZtX7Cy;T9A*y4;OEQOkcIq z1ONa2Pb(G${J+n08Z-h9nCOfm<-!#HVPBf3J@C3ebT#5$C-&#cb-V8(_0f6Vp00ov z1Ut^b)3yp{(%wv|vPeyG_Ol~v71cVM%Ae(hKE$l^lQVXiqfex&Kb@v>p$mMr!~}J9 zjdGZrNCx^=h=mLsbi;Lh&~UPGQE+fgQ}>XzP8c@m zmgWK&L5PYAaSN3pg-igv))T=ZO6E2Vo=(IHIh_(Fpq?JG`S`&^pol*y0SprH+Jbnz zR+KBY7wCYA@Nawsk9`>it}cf8WGAcC6`U&7QrLknV3~%Xn_Yn(VtL8z#X0;?ul~HD zPqI>1wIYf-2B-=|VS?SOz?6g?DnO!#@=zt0i3C?X-?Dt$FyYj*jnUyiDO#*wpc+_U zKo4%=NJN}C;O1$mhzY_2OCkeaCyLPWFIp$$KCW!TQ;Pt@Q*UXJ;5(Hc_6Rjc9~9BL z@GsW~WjN*$YY_d>u=SGMTSi~5T8~!Z+D^;gmBSjIol*g(SOe1B;!1<7eH$0MPOA5z z<4Ir%Do8q(;R?kp>E=Mq9Uq?ZRr^BX3X9AgD3}esXDlHUhmN-eDpe;f9vege%f97z z$oSx?MF7jFNfHH5E!s)kR}_hv10guYxBw%bINphj=PaL?agZrq<7njU%gFI11zWRS zk{UVjhZf_8GFoQc9mwSe8(Ko;P~ojNU*fbJPB6Ssr7br|k_(U`93*NV9QB56A!-;^ z`&OKF#D}G33k}u!bU0{kzZrm;J<6=nBDRQR`n*OI_4sqJSc31ECleKTB2eLWf_cMO z&$3S89erG}5{7mM!H}dCw;-I9Hn?b!OlqhsLH*qjje5TrEW%*PzrCpTQX&k1 z@PM5dPkV%eeZheR4r17tZ0uULdr~w=zkey07k0IW>Zo`j#!Cp|RGDi+^daVSb8@!r zMnJj7uhNtQjE&)|8fmyf*yVsGV}%M%jx&kVrvL*9%=osZK~g8_dnDSBD9kt(IC#Ze zjBL51I77xWZLu_c_9&ypi{OkneO@1mFp~+2rxcL}qhww&1{ycLbhli4N2Fo=$xxEK zxf>Mj-FcB5!DL@x0^vb5qY3xfktHir3ex)%jv4wChbQ84N1tmLG1&O!su2UJ@?Q=+ zWK2+QtDS%d&Sd=sKe53d54d=9{3?eyg7&0n+_qTA=z+HQGk3p5;ev@+W^Ms{D?<{ z*%!h%XE{*GSfPSbV@d%A zGDy)~$AExisl|XoiVls#sg;4Am=q=oT=7Gp2e`GV7E`kM=RwM14jnXUt5u#-M3juO zAwao<(x9sVykAh(X0%=etqZu>Z{4k@t8lWJNFLRdVIsNGE8XLjKL26gettXnrQfxA zqFnc=rf3*R>P(d98YP!Ql8hB9I5mI1rM<lKo3KHH~%Lo}nC`WUNrZsqv%$ z11X+39vpkLEiDsM-x^M&Ba{JkjXIETa;rOD7&meMMEpqKb1$@C7SV z1bNpPh0Cb$t37Y1hO$PiI#b!HCV5zo$CY3N#|;&q8YhbJkYR;pLxTWKo-D4y3VX+z zDZXZ#j_=Cji_6#!oCx*;7Zi=wr-!hbp|>`3QZcVT+>9jCPWUHvj$-PAfqSjvFdIHDVOwAwdjiA8Er) z^p;h&NOMHxRUB$vz<7@Bd2)m*0~nkHc%3U+7z$$1?W7=9S{$aeYc2?TgME=)d+#j) z1m?lZ^BA7HxA5F1liKn1iz+DvoB%iUF%C|YiyvjtFuK&4#lD8Hocp-^AN0T~cWc2i zLxrctmO?CK&_e2$IJCp?HjXRJu;^_Em@C44Aq5B=TYM8*62jBUiN8P@2`rXo?U-b!+*|z2;tf^jT?fpAAM*$-`vMkSz2z!4RPY6i?py`305|lp zw}&isX1iZ^palrIKP?R_DJN9&YD~$0UIHjS=~y3yNo@lt9#r++sq`Wl4;*72esE#b z^fq{s&Yo9)BAA2|sLan3i6|l=V%{rO;Pr%6(TN=6ss^j$^+*6ktdtEMD#nmK zX@@*q#Rf|?f4T%pmHWk)E4okP)mZAHon7mB12q(wW!ITjKAcVNtGWkac%h;r+6Bjq zA{=CpVQZf4=<*0D)KoB`%?S9O6iXVj6rfozSP8yYz1NBn0I!ur$hi32q3x~;AO=I) z?tIxOJ*5N<%mcu`oCq0=4*1-mWlLf(;2&%NKaLrJ!VTYk;r5*D+B3daWP4<+gb5exvRiNhh;rG>6cbexF?KbDBXuT|f4#o# z-+k%zE4lDsnW4f{TO@^8NYDgq0~dT)@)%qcO-#pv23WgTBxF2aH%s4Lh-kum5FRB& zJV}LBz$U?Il?DkOFv-81$|UJ8)=*0k+yvo6IE;E(?WKU?G3fV~acx26Y{jmt*fzn} zFsh^!*2(rkzb#|~l{Z9zU1}D6o*)dYU=17X&%l zCBKMWqAV*{F??X_71crt@F?io5|?`3U`=5~ok{B#cmMA8D{^Wvyin1p(V_?k8C>|# z+FV2QH)@FJzGXu}tepVE*FDYhB6S2CijD3h6+!P7fBa#_I*$m zGQfbFZByU278V5R!WH~ZctLK`p@m{)@mDedI++v!iHIZE9}O85or`Ol zBPdurM|?OOe1H}OiWAt|#|LJSqiU{Ubf`0xoHSIpy8XKnd|-H?qEjP85e_np@LV|C z>sy9Z=_D{}H}?~aXPHR)NEwV^=AVZWqzgwdedftTLn0<4-?t$sv&s$qLZV;>v9!9{fuu#I7rdKvrV0v16y2X zm#`o_@KQmNcje`)nECT+U$h~*cc1@^{e(QJh!7|#`4~*9bTvJl$mSva03U!k=~EsK zkM1Ur?7{YxeedRke7&Oz5O&6BJzO<(v+dNGD}MQP5w3zt42z5vDmXcEB)*pd3?#r| zYNiJXf7`~_>INy8s4$YzI4D!IY|W=ZR3cK9u`9Cq^JpLfM?}d}iI^dyss%2xe5cEB z5e!%V+3LT}Nv)Xq(`&02ES|$*aO_Hcu;^iGN+<8zw>1i_e^eMm!!nS<3V??T z5mewtV>zGApfSrL*I~udHsrC2^HEwo@{VAhTrR@rV8Kr+-b%-?sRL*kXutC$a`}3f zDI}^O8b*;iGsu4gi)k=!59agXY*CGEBCa?;^ zQ3TQL2nBY45aQ?pUzyYr+Ql+SAS9bUuVO{$z$it?$S51ONumgM>hOZAlI|j$ge$O4 zmV4_WbxiIMj!OHfb)|L)ynPr+tdzVRAX8WSuv_ZPC?DNFK0$1LCGf)VLPaOXm*h63 z2nPwk*tTK%uBn5;v4!i)&~zU{t#&a|U_c8BmXPC?IN&Y_BN0Fz#9V&->(kXumn7`) zq$0+kq_x;1$@aRQ3?73x^MilGqe*f&CW#J*F~t^pKWM@(cT_DjY?suTUk+~iPyK$k z669cbp`ueGM-dJZ^G*g5i2mQFRiA7b-e6 zdKBRxK@S_+$yly!NaJx)^ss!jfsI~`kl}2HHVP5Js*KgaOrJ*t5j>XJcjHM#@IXmx zu{!7+!WG1Bt>^REVnsrMpTiMcy3daWb?Oj*m&5HS;B9o&=a><ZkINIKT<6NtlVh0|5AAoj+w*~cO0A1WQhZyzHRYaUg64P!-} z`Rm|s??fH!;JjKz+DOI?6`ve8lB;9xjZhvE^zfhtKlG3#*L0#=2{$(Yafss!JqDrh zLB{j7dJ;!6DdvF)Ty0F!=8-({=SBD!P6uNm@9AI?{L!May(gU}o2!XMzErET9PA6s&lzD!fmgJ-h{6nfcPwuWVi*qK!&`o?Ud^7c@WiQ1Hj0}D`TCo0^k8dG*NI`5nL|* z{HycV9o&TpkzBPHD;KlrL-@E}M6IJbgDFI5L1yA+6xq?AbvXVk8Y+(-pi3TA z5e?%=o%!uhg{j;7cdru97Q+h_og76HE2Rhr8Hkv=?nQ-nw*V2{H65s@s5mPrj1;IJ z*qht%RK<-U`*ykNdMvOv*&885kb z37woVtk7qewapaBA|WK~(ncSThdepkT-?GF+x0wm>&#eRK2?^fp0N@pT&(AL0R|FK z@HJP5mdaZeaED8BTF)0f@1U3fxsN zTHmO0OZ9)T6)y1E5*6yqHt+Si*B3X{w1HxH2~$?%LULFx!a)KIp67VR)^WK|kkM8K zcA&sO#`DN|S~<-fj0I-?ys8tCVY!@#!*QXDag>xOc1F{}X_-~FyJ7>07(NE(YTD&@ z`VG&&A5Dqdf1dQh{}-H`=^hx^=t-;!OQOIEMt5zj*Hcr1<%K@P*%EIjGS{s$%bd0; z{dnHHsw6a*GRHm-6%6eoZ@aG@n=?#cak0bi7YxE6pRAE`wLjmq~%h2M`i8gggXVYsN? zdBO+2F z0|mx|%)!bkVo9c-2O-n(pkRkuj8Y9ArnRGeavQ8(W{V%Ko7phB58UW_=Pi1RBJzPVCJGk>CYATZ0YT) zGYdUQBy%dUOE_-Aw2OJXit&&@3MBDCO%iR(mLk5U&SgRog%0O|k4-tx9b8_V0C-&} zI=wRD0(J>U+|b1c$)tLA;>1CIHcg-jKjINf_Jt+y+{?wSa#SHSY=P97X?}UzBR%jy z>6A|W$XKC*lUg8YKv4k(61ebO7wTRi4WUpsmIo$?@>qo81&n7pz9&yI*(EABxgyG@ z&nr6#SWK5-f$&t~-T6pDrM5hFv^(I%lZ0|uOGkIrA-k(wrCI;>uR+AMjw-u`QKHU# z^2=^zAdzrF#U{sy#7mXF3HrPgBA{iUW6N)~QHZeM8C7soNG`O5--FOx8;}O zTF)D;DKAu=x#W}O%W^jSQHeRh@Ipl=#fsFWUxb4cEqvc{40#bL94!op08#l_akzji z1>LQ#1iNhhyrLBWgAo-^Dw-7xX+y53G!`+5wQcoakp(Nb)@W;xd_gdY)(43>k@Q$R0@%j>gIX87n02{vCV3kOhyb!iI6A&U|#5kkG59pA^Fj6`dMIig1vC2o#?JwQk6j zI%<-{#op0%jbaEH&V*XLm765Y^m%0~LI};gSQct0g_71{k6e(x$!SW+ro-!qBZqw9 z{?6~)^OruV78^#CI&;|<%Rw-Gs^nTFV}%M%iYMu zs>cp^0^>PYUdj%4@RI50!AT}4o>H_&GRlUmk<62PHGLXPhry`DZ#39DwB;24=12SF zaO@L9S#9n;U8dx00hz+03Z!9tsWYqnF$n`I9R!?mLd7OUmox@A|9Kg>IId&ZTi1Oz zeS;*K>;Nt>p6NmwqH>a3+@B;N!0GIHy(^k32%!iqDPcp%^4DUvp0~QQaX5Tsf`a+^ z9C74ua6~s%KIONMBgleBHABOwQD^o#b%IQTYVJ!|W~lJw*pb{m7h)lS4;Ql0P0;4j z`wP@I*}cdX8PC@$?0zc~0IzXH1fhPh+pE4Bg^IRNu6A^Ea~-mq z>%EuPip+1>nn#sk!$?wR_BwPWx`md7(7K_t0g|yo1t&+5BOk2}St8C~E_vR(~;= zE+3%56zq`IY&aW3WbiS7t97uwL!5VhL4vP&R0%eW9d%~BPgj${Vl}7)Js4i7=+yX8 zgo6Y@JQr@j;i_WWOLuM8R#PyZ=hV;-mzjSahM=S(iZG;2;Yc_g&0dzR+kUHae%C*5 z&5!r&2cA>{Szqtk9*NuIh)W(-g*BrHNc-yS|9~%*{yT-y=F9BAp|)Y{t+|-3r>m1Q zTg>S`{e1slq&Rx-bvnG8%~mI^yWrt^^v@HhOMAky0%rYN_$~R}JZXK{`2D8W=l=rF zFi${jUE!Hc3L}?79Cwq4mCM7Lb#i6u-!1(D0I3lpPe)^Fd z7_OJ($ndn7O`&Db=;Z8SFkS|yA3kQ3ryscU2*>C2+OY_i+u3vuoz6#5)q$)x3vA>w zC_+Q5J)lf@CdV1XKpj0U+wZ)Les9ZxYAYpogYN88yOPHVI49AomC# zVe^@jv-AncD8b;z#(PmgX$Ev*rUiQ>^AMi_F=bE4NBIi1_o4Y?FIbTQphhT!B+`^| z`2ZO?M=a<4ceq%s2V?$Q7=~s#y5U+nHSuL11STRp3RCed8=6pWWFSUs6k2-CNRzXV zv)OWWH67fK$x2-<*6cz}PQVHA#dxq>X2)Qkt@*(pf%(mI+Mo4S3lQ4bExD!}pMFUH zke$%UWer`_jA+>XmF$bS85u7lW(7(n9UrR6p=`4s&2Qpf$jyY1y4(C)f=Cc0-3E^cNovhA3^z2u9u(7uAI9hSfI zwvrG07WR`mBKnQ(CtnUku?v&H736VYRb7s76&*GhxRNjHg8Rufp?mo5IHlW=#3X+K z)xK(LiU*sAD|MLY8{1wwv2(M7bb3x=_7@b%!1_q+V}D6=7)l%fOGA`ywl#EJ7u#4M zVa>93+*r2JwiQQE#m+MQHbg{0o}YYAHovvhv2yQmYuOuif4Twpv9;>8v`TL@t!=xW zjv+|Von}Jq>m7HR-quWXe8oP~+Lnz!*!(tAhZXI6n<3ExF(L{63^h49Ac7MViHNRf zlYw!AxDO~Uy(M>s-v%X663uMgHa&gEJ?6Jf8=74qkfhvXa5aEE*Zdw+$4Tsak5%q7 zGz<&N^QmZ)CH`~K$=3KLD~)7&+coiXS0N;W_H3r%?&{qz+K|Y#8R9BWk@mgI)V>P=$<*Wo$(*`99q0G6=ioigVqvbXhJ;Y>Nc3eA2E zlg!oF8@*p|hgFVacHYNpk^pm6L%lm=~wp}%1=@_TEV_D0IL4bt+uHHURgVz{p2IRg&lQZAsLXOL?Ulw z7h%U8RWxuYXGdAdj&dAr=R4%Lv!h@&ZIgs0Y3!H8TM9{7uBMLg5ChFmH=?)ck&{ir zf)K}?5O|*t;3OO%j*H`w8=UUv2B-VE!RbC9Un_f$ynuh=Hd4=)n7w%vqH~FthpXku z6mpP-QJM<0j{<5x4W^@U5a$6}8-{NZbu5He)97-D%(gubtYzACToRcrJO+_EFk>j` zL`q08sx}HLjRLXn2H_HdrKy7zLO(at2a;FHBFpK!cs6*SY1JDs0y-mw@iW3KGXAn-Iwb6PUq*2eV#zutjLB{-YE)o|UF>n1AgfoL{wgS7GF3?nh$#4j+W46chI|0rQmP^Th8TWtF#Fr>(V3PlJm)O%sVPgXM4$ z&Ph9Zcp&}yL#4zX4dboH7Aq4#6IvmIBBt*S=FocGeYNDIL^l=RdLdjsQ*46ZJ94?<)zkPwc z2PoJ{gUy%!;3c`a!V~=hPcRCFNH|eF7qjUK^h&Vce&5KH0`iV@>+~Si3Zmp88;4V? zbO5^1(~@8D7rnW;*nG!SA;h2b zBx42%+_%9sFZdGU$K;XrddD=|Vklz#j5NmHlEj9wP!iP+h+voj6gCcu2NeFqkO2y) zyUoNRULFxTz$%M|?1w9Wuro&P5e(l2%lT|N0tggSqT~x1U&P!3W)^Rxidl?eUn7q5 z=v@m*KJhP+wBU4r9#}d6^@{UJl=}Cz#~ldRlS7;v2yBq#syI!tO9m425viy_p*@|P zUHtKFS1@5^5~nwH2PBn;Sto2D55G?M6K=Ln@Pwq~$g$ONqc?a6;?;YWwp?k$5;Ki< z_S=&Fe-H#oe2U1K*=33<;pCCRQ&L@*m-!Se;!lI+)lZ_J#S#uNYqxE%MG__ymeQTI=o2NyU5eCwoTKE$B3goL)Mxd(#w5SbCb}5w`^| zsd%kK2dXR;&ehZrDWYk%krEeurZap2Nl&iayA@_JU5&=$xH8pl9R786cYAdMt1zm# zTZYNU^WIgdcS(+Y~ z_6hPKOYwkew|9N36boARoqpdk%jBMx<%grjBwU5h!LrmVtszyfq;Ow|`dycLi@z?* ze&NSaXc`aelG~W9*ZFstP^sChVa?xz)liDbb*EEOo%B9k-4K;jX5$PW9w(1w7s&Ey z2&JRTy~k`)TB7h-Nv*i{5(-&^nN{k2=8M_GU>=s^F?(4MKBbr}pT;j`U*t!ymh9|H z?@~O{wpTlU)|Vg4;kew6iIA_Bni+*Xu9N&Z2`oBwk+Z8|+(LGgY z@VXQk24$8sm7uYIB!N^Yc=@qofm8T|t7k9z&{a$n^> zn1G%1vow?8Y*Nm!?{qGM=kt1=NR^(vFIo>)U@_-~Rcz)VKNbYt%FN`g7-TQHs-Ouo?tE zhfi=lUG9iJf(n1=H;^wNZAhf?f5Pa!A@ zfc?A+$Ud1(yP)k}d#m+*DXziKIh@Rb#RECNl;ZR<2OOA}J8b;tWPDTB#v{&Za7UJP zBTSYr%h|BpA_Dc<>68*GX<+ zcpa>uJ3uvDXj1bWI2dj1to+5&h-m&%~ocoPQp9#M?5S@@iUcY6?FZsGHyLv23CJcW!V z7C$NK6=PR?kbevxFN@tFLzzAlvNxedsdA|78U6`;6d~@OhR8##kl}eg zdn%;qF_Gq`u3R^`N7esHA*!R8n1D3pxq(C-IvQ%$vo9Q^_%F37N>| zW6A{>#p^}UX-HIJ6uCq;AZ+4|>gQ*133KkIB?%BiOO{iPaje#6*>YD`*EJE7Q?`xO zN~(`@?;K515#e=wN>;)BC_}cM{ZSf6X<)q$j%%axwNc>UC`t9xUCV_h<%bCL0HIr^ z2Zbz2`)uTlDLe}2Fas*a81_caAB7s4T3smbkCMkH;Os<1&H_5rc-NzJFXWvvdY*b? z@=0=oG7B(5NOBBd@&FZpnI96JpQobh9k(qnAF9k&G4zh*wB=RaR4FUE)-g$)9wF5_ ziD*w!NRnuM-G%d^BSh@W6HfY1LF)#*9n;5FA3_Kr^luups86Bwd+T=g(&~-}ujJR+ zwAF>|REP|OAC$R5bQvk~R_I4dK5ykoSah1IQzPs$+5<$$XNeXyyE`GLMZGhl#1>fa z_(sf0v(3Xaljf4xh#Mr)(YeA@mu!c{$u5fB)%q>*sBb!7qNNHx*!f`k zn&yv5^4>1*$+x-aegVmwTD)DL1KTPAO9<{H9EgU`0nW|%7G z>*e+Ic`y#KT&$SrVmw>Q^R>7v!VS+@B7_)!Pvl%$(oUJhlf%2i2d zxd~{eg_6&Rr$(3Lo+WMtl6R)NrpZ@Ti`FlibCyV}Ghj2$GNHk7D(gwd6;j27mL{uh zu7`AgQ2m*tq;ctM*|=;qlVTq$$$Tp|EG^f-WWwoqy#_uDZo{j>?{zjum(G%t7+?4y z`aS6cxMd36<|GL-*?yycr3yPbcCv>ONfC&Qoap9=xSDiT!kPSwmLu6MTrW4g7zBMN z-el1nGRGfX@6v)0*-%&0)#9}~gP<{CKzUJ!>`?}vuBQ*PlQZ&%Eb*TZmJkkKAmDlm zk(txMn8-XDBFPXu7KVU!vAnR}Z(#_!_;9;~{aIchf>QA9bjhD!<7Gt=qCdc&5;FuZ z7D1mZaNtW>Qd(x?sE@@N`=SRtexO1JJ^qn+ApF1=ktc_`^kL!hjR08O4b;`yqDK+NP70`lE$2s`f zNYtcKS)>*@``MATiZa?%{wy!_A!eOJ^I&F~qfex&Kb@v>p$mMr!~}J1jdGZ|dHVj;>PCwmh6=Mg!fMptjzJUTg#M+YCk&wd=_3FIk4J5QPbKuL4sNcBlZ0ph_+i39fj)W%)LA!;+1R;)>z;zCms+fg*Ezk|mR%pv35i zfCUEh;0}(&!--Z7U8aoQE@Fc4z>>&-*NGyu{EJozxsU7G@YEu}@YGvcB=}C{hdn~g z8!JvqSNneK6vNrLy`Wn!-F-)_f%?-8VNG&vnSO!FuQI*|Y4N*qSd)0lBX&v!oLVq& zXxO5*HCOmHu5_KeK02NRmY{y5V;Qc!9W43ql+WMlrC&vD?m)F{9dJnq#37GIH!;Of zsXA%#*dPK}_AS3dz6Vb&0$4^(QYd(8W@fREi~EWqF>@e<2e|Meo;W^mGM=-1V#YzH zc#Wfxvo9mZmy~PGc1a36@rM?phB8`a-5ti|hrvdcP&rfx6?}oyayY^8LX|f8dMQZ6 zR$+DlQiOvN`kq_n$5i{w#5T?y*%hFH}5#b6Nz zOaARewO`DSEak%B0Xs3C_6P_2f&+^r`(Ya|MT7MFzqRX-X^d2=@?+`IF_JA%o+zyuni)r=J_*Y; zh5l?*jwqhk5T3M~w+hCy99@@t$I9HH$OOSFM-f?~XXac32mTomWAdL7(S|wwJFbW9 zU4CG~gxP*zA0_+mf>d@Vj?MW~IBaFzCt{Q4mFLrdK?76b$2_9YzECJC^3jk@gD+)N zmu zZ{4k@t8lWJNFJ4yVIsNGD_vzEKR;()5fEmqTH$Gr*2%uC6CM20@7g?3u6tBdG>jy5 zCd$XrpwL}?4CU8pC+c!|vdIt?B8Ms<(Xye%=@ifrMHq4+QQUV7$h4O|gu;+V(k~%F zU$HeX9C8iI1=Iudla08=g-w+b##InOwpWSg)rRsg)x5!HA~D?|>9iX5jUxXnc3!UAMY?)V)h|8j&0 zW7fm@A0IG2ZPjUT9IxCZM)7|9S76^Oj#U+3h~Uc=-KX(tOe4Se#g9J5EcTN#cCDjN z!~-=HCT!N3Cr{!?=igt#q?uqj*xVuK@T%OrWy z*+gkcW9EVn<2knH$_3`fs)^er<|Oenho#lUuf6$ssO9WY$*^9!S`xAAo`0^s$a zh$c0XP()1aMs-)|f+y5>=3*sz6CXPW%ip7A|x#$C=n$ylL+Q=>=$22v2Qbl;=h z2e+_INcooCN<%^ce8Y2~JDYNrJD4Wf^m%0~LdeT9`Di?)XqIG@4Ml6kaM9|`hChN; z%V=vY)A$`)qc@i{&%z)tpQBN-FQde2vJfP8_(3_dE+*9k5Xsy{9l*g z2C5`VE9HcWO^qV?&r3l>bHJ#OD|Ot#<+#3bVWa*nuzVn+(a5W#I$5$+>hZKkb+|b9E^$zU~x$_bF zOgvOmh*4*H`j_6-T}38E#tIdj8Y>DgkOGAd4d+c#jd2Ulln%8{G-ZD`+^W!gXj)<^ z!ZVoD`!?4b+5CA$E1DJSWw6M%D`Zs6t5tZPu^z9&-@m|1rL|4ST=v}#>v*~Gi(GE# zj4Wmjb*6^~#!R>QBTF3^-8@(x?Rh>ELo!)ux zR<8tIGFGVI)YwvhffQL>=%`LBzHeb;xF*1nVu_<3E5H>Gg14#%mTdOC<`!XPvK%a@ z^qcXNBB)@LN=U(Mets|!P+%do^)z8{F9>opKm>)oAN){ygDZv)Y`vmdNC6%NgQvu$ zo;O%SSYg$fd46&C?{2@M3l4@CDmpb<6yYF)3m+QNYKZ>E@4|iPtiEevpzdjwCr@%O za~IACfLF~TVkD%3Z6QJiL)uUVN7O5UTySh&!yH{!ns)xZHxGv4V62X`x*1F#*Mr9( zzKDWCGFQ{bakzYH{q|)VuAowWZ#7s2%YX1oMYi|$gBZH6++J@VGuUM=6Z;-+FRVH< z$*;SgZo06kiOaimCOOLt6`mX~lHRd}SjYea^6yN2+dx|=g9wR&I~f=x-wzsJRhF$G z69BITM8F8=Pvbc>03n7UPb(q@OWRP+#&x&#DHzY;jvN*k|9(fzI2_C{l)mA&4;kDt zN7Y`u;+wKC>dX-bhk2({i8CtYgo;g#7WvQ1pu)5@+tRiygs4Li+Z~|-#&fW6tzAru z1S-Y8Zs(67uPgoO0am2_;5J*0Fi}?6WH6w2WF9@YOY~) zs5A4M#6e!&{#^+^FuYLFsS% zcN4=46`dR%l3MCTI7rdKvrV0v16y2Xm#`o_@KQkwjmpDknfdc-U$h~*cc1@^{e(QJ zh!7|#`5199NOh?gWb=?NP7lDGbeDyW=0|r^t97_}-tXL;kgs=C0m9B0t%s|o{7!Y| zdS8BBz#Um7hDF8-6`UM765mS!1`^;fHPeH#gxki~>ISKkt1yz$I4D!IY|W=ZR3cK9 zu`9Cq^JpLfM?}d}iI^dyss%2x`VN=jA{egzv(MonET+M@J($mj zvqd$wiO3Qaq#RKa@75NKB)9^(dEjwE>d~UO;`k1Up@rXt7pkr-PTPGFZW- zz$+IKTtvC?Pl(n_-V?Q0GUxMoXEqAP^alOYY`Nm!@`x{ob3sB%0ij#&?b|HEN=Fr9 z!^l!+PWkggCmuS0=TD zcCkzn2+5|;t5^{_FiH_JGRlT+k|@HRI=tYjq`L?w;R>vi<=&bH9@7DZqtc#|JCqKA zw+|zUm6EpuWa?@kc1xWZ<)iz@Cy33j1YQ_ksOaSQlH8^g;UEDR+cr$!HFYpJws3tJ zn(jlWmEy#NA`A>@LBSGv<;7hPMk0Vbh`Idu*QcwSu2`c=#2A#c7JDSwUe^=IaEmiP z_{khilEX1cbU2JDw%GeY6Lz`F^w1uV!>%*G9NhGu`u%Pt$ieVJMW;rNA{->h;Xyac z7zMUK4&T>}9lcx7vlfc>R-Z1&%%9h_qHXdLPM=mQ3i&*#2pkM)!`2B|TE}bn@hG|$ zI@oJ?|DAiZlCu)G+))+StXIpfGvB-y4A)S|yAt$Zc%hGOyng2yuZZak?79w=!oRtKF!xPsWN^?W{C ztVk&Eb2x%acRGoO!7$)o_-KS2juGCKvot7%Sz?Vm=73d_`bMg;k)22}|3M zU2^&9qMI}jjH84386Dx|aNq>mvnlr3+jnV67CWi}8^(`1GuCf=*Ok~KF&|W9a@0sJ zne(2O00y~kH=?2Thfawu$gu&yhmgZS-ZgksI3imzd;s55^Z{Oz62$MfD*C5XXs zL&Yb@jl_vljE4k0JgC8MyB4{o+u{yH2gD(cukFnZGM=y1lQ@!nlROZCtBuLzez2sm z+C1^+Mfey_2V)}d>0km?TB&R)adS1X$d_u-_G*)06b@QfKUV=j+H88Ply&I0B2c1Q zvGLwMw&X5-nWoyu{d%2Q?!$-2$zxSlBrG#jcyfG6?2gA7DWUH78GyIX*W?wZi+d^Z$lq}L;$?P z6+vXan9Y~3OY-G-QV~NK(jpfkZd+^XuIrf40_r!2L809$+R*z~*Yq}2MAkMMPmphl z^&^C>0;S!_#XAK`{!Qb3#3Z-J5igM1-U|kc;ggh}DGtWGDo=VD+^-)Q#!^>Pcd!~h z1+l#V-Y7ZIBDf320UTWtb`qx*B*;8NOAd8kj{|A`0m;2J+aJtVM;0imf8r$SM@6*NSyDOebM1zQm;6@QJ(6!QNAbTxQ^`|9=j&)7= zFZkx`nmF$~$0J(bsB%m7f3X!V@Yxa->dZFp^}5#=H`TO(Vt5HtR^vi)ST4dr0t}w# zc*fRoxloYNRt9#Uz(B_H$az{h&0PX>v#-Hx3=tWY%Xv5)7rGcnNo(;p6$nn`=XL~+ z!|^=n%813c?|CY)_)(qFFsjsp41r}3IsMzHGr{t)e|GWfGe9iGKSKIoA z94c9<3}qBg$auCvqj@=Nk@zn%b7~7b5oXV8ToFye$z-#=t7v9Oh-yI)dI|nJt#=(; zjxG8b=|%X(I1Hw%>dZQ)4XxfoV14?CB_$)(7ZsgWyFBUh$ou1w8bnVPvWHFITZ=E~H} zm8qF4Q!`hlX0A-lT$x(AGPQDLYURq*%9W{=D^n|1rdF;@tz4N}xiYnKWeP={Hnq~m zu7pAzc@()awR2@^=gQR1m8qR8Q@HZZn@g@t?Od6HiLyD$>4yzfFJ8@mYyqfTFA1zX zEoRg3{{^FyvxmWW8JvFjn4!e!2M)71KBw1?MY!C~rgMn997QoRonSIsy!L>h134>( zX49&Kj+O9CAP;*gdnPNlo{ZEb!)y$o>k#@wlQ+aMHt2zMMvZWnO~M5J^imKRVe^@j zv-AncD8b;z#(Pmg8PL+o$L1kE19QoqkdN|pw)hcFAA7-y3}Bidr>I1vWEwC)M$Qq- zdH)?QR_nod<69V-2~hw%?R@^kCz#l^Ra_x6Gl3-+-t6S#Pxfp`G2%7L&pF^h5fG z|3e&>OUIk`W7=fXs`9*N>T49NRW+Q7RkrHw~f}dN3@c_*}#1()kZd;(~yn|Fj4O zBlbJ7S#JCb@vv~p9;@M#uz^O7I*~y{k8F0)Ms8n*gU2bXws5#?gZd-li(XZnc)TPy zB^muKS}0_i#4Je`=E)gS)gmzj)(dD0y~@aaPI8;9scc;xi&!YWfl|it%8K^fP4FCy zPtv`Rt}ULrw;C)~8;KG=cxOnpOx!^eNfe%4K^)cBLAYYpF3+F*cn1-Uv+2nhah%@; z|Gf^DQu==K`p*#L30M(-z1gB4l5nkVAHsv6vWRQ<;8Tjzx$M(*OXd?jK+5X=u6e&3 zR$sUN(7iu2t?l``t2@SjXeRvE>4!_vri$L8KU)pPk{2*c%fwzFdXh|1@*o5aBkx^9 zX>D#tlkdUrF?Epl8{1>*ElKy7W|4phqWM!Ch!*JF&~fAE}yF5qc%=2hm1p9KH6u zyBytcyX4Wf`6F2x)W5F2Lt=HZ?4e(i_}^^L7?1LexM z33CBu=nfyvN5Gi;t14jPSGwQb8!#EZeTdHSUprU=!H{@!2zyCQPOqCx-9$F%J3Qr; zkMP59R0}|q-`1crrS99iLX_%e_E+?kgDT%9M@=^c-JgUSi#ckpI_^Tu)5y(HgXrGP zYzM#;CZOAOa`Q5r+`J5j4-1cxiyI|3F9WXda^BSCgPJ9yxS}g{W45j+!%Yf4mRmMT zu1wurnYyA(o616oqRl@IrlWBXCsG5(cvb_Qn(w0OUNXk*XK|`elxcwd8I7vg1n0km028vv{Z-Wnk3dVNtww= zIl?R`^)$JsPP2O81t2y)7_OMLm~7Y1Ae?q)qxCq*QUY8yl7si^^B=fK(0s(a^;?vi z&<=hE(jo_vv{-6^M31xS4TQypUpgxxlUC$}(CNp;VA3LK^~=_8KRxFk-~O7-9>>AA z3z{YI?R-8TheKL4{#*8PQqClJpNnnRp!~n1xt>j~*tqbFCcSD;sd1^4?#8X>IwjncvK;h3Zif^Ksp*VoZrN$cOlU-ahYB5!j*)nxXAO3C9D zlhs+yeS%qxCuiL9QVpOYWeaC=*%znLsZkZb*cNg_;)k##6iah9q7LH+klYhP93W2O zA}A77vWgHm!xE2;VdAlbKaylv0-A0!;f@zY1Ptkr{cr{7b;gK1Lg2e#IiF2OfPP}C zV1kkS8phWzw|1Fz8!bo{p4it&7WB1{{1*QbNed1J=vk#hb3D8h5lGDak zCyn0VA&6J+Sz7kC4XYXo{bj!`>Hh~okc7a9oS9vQ=LshV(!@3i;*Xz~5*V%GPlM&v zPgthX%xuu11*}=XQ^SVF5lG~Ja%3T11_O{+blF9#yfYX+fl`kadwX+I@uvLAolh+t z%y9Y1r2`rx%}s`ZH4C~lY%)#M3q7DRIij9A_Cz#PHgZLy?{tQ*AnB=5-Tida1#5tGt=)O8-S)0a$zt?0oDbog z=#+Ykgi9$Vm$yA4jWSZVn2J=<0hzjGEdZBO#T>wgP_!^({zLb+p zKlr)2p3c{+KjD%pcmYR9skfr6K9w~>FJ_D2%Qf+?&!*s%Qh!OLJgE(@p+FQr{SH`llSy1xDMbE$9h=hyBGf+t?D zKX)D%r8tcSt3mK{_%xW7befD{1D10Q3|8aS(|TGCiHYTOaZyeruvmtm=cnO(J*M#~ zrPzI*LO>J%`*|0TeKMPNLEF9dR_psxT!Wu;IGF{D2XcNX#pz`ZI501F*!a)M_@=Cl zN1WA@$3M4y7-9;-ypNy7@W@yRd4mrzI~;=A)-_0*cS^ zfVm-D<+eYL*TD)}D^$bvHdv7}JvsT3Q#rXZt>kSPzGdL(V+dwU$*Z%(5Mo{l!hWWp zxuC+<>a~*TCLiZ&x}F4!@~SX-=Y;RwU=+^EX`b7we)+R-@0|EiN?Gf`;^z8eDXG7V zCWG~;Jz6~PY~%b`5-nQlEzbYGE9Xu+|8jZ#xp&noCC#P+js~H<1>#a#@Xx$Ktj7c+jVFI zCi%SRP@B&&Pa&g;odL*LmTg1Wu)`PwLOaFnF^ z>8{1+`9&w3D6U;N0VD?q-GWX-Hnc-R4@bhIa1JwU$jghGS#2CzXbyIvoIm#U_*0aw z86R=m26ecimr7`uPy1Al0>v`q^&^eC7cgQ(F$&RZ&Jq@C;g|Obpzgx>0_%8A%qb6 zHw{|Ur_lPnbvt`$b;pBO^6PBc>Oy8JLfjOLsr;_3|8jI&H?Y;~YwQqz-UHMQW9lr%1VEgP4uby95HB=fDiQ~7H!YD{0CoNgE?xDg-8A++4DWoE@6L`+a{EP z?=wyQ1YG$d5%f=q8G;vzpkxIOe1wkti_nJIIO=0@_DIna9vvkesL)A|e@u1Ehof!am!DK90jQ1P>g&*k)f%1O5BQiCQ{`|&mZx8A>d{VTYE z{g(f{pxB|glWqB)MX%2|X8;jZa&!?DJ82dhHQ3IMGO2Lst4b96X5Kp;BAr)kJt$N; zK4E^-UQZ#6emWQvNk#iTl?+cP7Vt?4+mm(36EnLeRw6od*lmL=#WCA@>o<72kLz$e zYQt5RuIX*KZq+ul31PwP31D;EZ`}-DgGCFnG5Fy`9iATe|M!1du_)mGeV)^h5pcgm zXA~(Hrs5C#(md^f7yO~C5%)Qf0h^e5VOvqt2VRD(I-;XpH5S`&;>qQVuHH1Mmb|(qm)HCSYVk6lV&kp zM26SpDu7g=Z-rRMzyTW4xjtw(*|_Mb-!)C$6U(b)>Ry5kI<#yBFoFOT7orv_LkgJy zc&#UbMU={I8a$nd6>>TyOh6$$Wb^TZi9iu6d;%CG-n9kMc&#W?Y%kCO6XD)PQv6_dyvBR-2!0p^EJkdL74f(jDt+^8b>2%Uq+5E zDc73qk`#F24=qLwWwgw?JCMr{HnfDwp+czO3!Ik235FM{v^kK7t-|aAqzDIz+6PCy zVOxkAM!j5CoO86r1xRd*kl}pO+6=#xuF-9-LzwCF8d22a&%t5|zGI$DRNx6m;dX-A zMX{b`ox(f%xMC#?eGY;lNh)qZFe&Y9(IR=&P*;NbyCD|!elb{t!IFP_QSBG=BTKn3 zc)(7Kr#-^KzTg0Bs$7Q|f?e&QIx1d>@e+b4Rpy!yeTX^ToSbdD5m2u2t2E^RV`KQL zMjEaRb~&KQSfPTG<4of8DZoGiGrkQmIu>nsB>JFGm~kv{@QUqpGO)leQ(!#P77Np7 zk1|@k2+oMp=k=ioGnt@xN)c%=O6C<4Ga{U28x)s)cU~k%FxeNF zIK&NI>jet;*^woSs-jIe;h3RMad;vwcl5c25rd6it{O3r8vo_6L&g*prW!@IVkN;7 z&nIouOrbX$l_QELHiReb=BVw2{T=M!&5#*bCGK?76b$2_9Y zzECJC@_{)MQV&Zw&M?W+R-O72O9Yw}#P)&2p(4oi=*%ltU$! z87e$A8Wmz8K_O@$Z9wF-RE(T6y6QLTEEL&J!|rZHBHD13vqa)83{LPe*>lOh~saAJ9$ zVL|yg*|0dA?CvD9Jm1#o;j3CWVdl>(KoLz)QV~oT(uS~v6n1Sr%oeTQMdw5B^77`x zP4B#QGn@Tb&k3F!Z($BL9ISrF*?s{fcj?P?6g`4AiYjn@U1NG9*Rr!5sAQ~A!KpE& z00SAM=&oZxz_HX~Kp{nkF5uM4Ku=5x69qmA^mT_@n`$v7n|~gpEauQZlQvrADMdud zC>sKlyI?X~1>pUHqBf)TB4}N}&3@}{Jza$pA@r8km8sJMcC=2|vPtwvx~CjS@JqjI z^F+DsQBBb>lGK?fA4h{icXddTj;e*1!;?*hs1P|+0g09kEl#I^jwr&A3yI>sV?d_8 z>>(6}Jd%D13Hpkyf#HyAST3L*pr35SEnH<)N{oji(H4rosSqwK0#`(N3@qj)+Fb;9 z!T6ZcLXZsp<(5_PY=5I7SM*?#SDjwG97BsEfiiVfJgv?g`iGM?>PfHcZ^#vz8=gnh9B;FXT3##34$a#&R4I4!|# zCK4AGAmb3g?=bn7BTN`SF&Gp0fbnUoPJ`ok>}Pj<@T3 zyIpTGCk0=>sFI3xyeumPxS@|RCnr9OL|FVNi-ysq&dm5Vc-8OY>K#zPz8tu)%uwN} zv850T8MKh}Lx;8p6K^O`UzDyH7NoE!&P+JA_$HV@@U(KGI~XOb1b9^_LJLkSA`4Ed z1QtuPc8n4JwSWcY!AtW9Ec*f$UA^ThHdF8gjP6_ovH&;qvA2gTbtcjep|eg^z{2oC zrLV@7A{->J0vV2;?dV%(q?k~41&V>~0xJ-@-2jaFWP^R zi+1RmqDm*eNIEbvOXqDB8)jadU-PIkY}i7nGfn<$&-k7;<1S~PWUNrZsZpc=11X4D zy6@5MgIm}pq?J5d^Da?G)pqdhN87%xM=le z!ymz_Wwf=HY5WeY(VI(}XJL?+&(SE^mr-IhSqKt4{Gc0FVUZNfB~dQ>ym5I)S#CSh-eNN6>_DHJGdOzS1xSSzXg^L zWHcID<%UQ)dtUR281gs@^GnuCh?HgrUV@c>9ntWB_deFA57hO552I+Xt~{1iY;NES z7S%oqumEo8V~m{*&8oQ7jy}_{ol$4{I@Kf(>+!e}jNrJT;#1>9F&;9k&}?WjuF3Dc zRajx~Sd8A+;ELXN6^n~e%G-FYI1%s~x*@>WJt&LcLj23e`=(C!)G;jUmkG<#8?7>r zuUJ$MDG&p=p^v=*#Hcep{Y&rat|F5nV}%M^jTHqLNP)tKhVv$=#<+!NN{3n}nzFwe zZdGVLG%c|d;TbyuMK*t4(TXUsUIvSNyFy0Ayjq3#8SC*X{QV2OR9f4F%w^y0u#T4- zzsTi=?vSioIJ61xL-U;~wl?&!v#^v-*?dL`(Ru|fr>#+CvMq{!kzM|E29eG41IH35zkOI!ggt_Q(e)dNd5 zdtP&kurgT=mQ(u8cuEmeFiIt)U^YKLm(J@&F^8KaJ? zC}O)KRKR!+7Ou66X^}uhI(uHXiiX8YIGs$2fJDR*jsguC6`hM~8ZsqVJV$&u9DIPt zLd6N}?c)Qp$Wb-dFgnzk`Ay;=uWtXY1Roe)sOZ!PQG|mGBRm(*_B23ai|Y!A7~io~ z2i${emWdSSErSuv{PR$P1kVQ3XP!(nBw{l1eH*ePNSLkgVn>8HAcRmB5`Fs!5if95 z#Wjo$b>?%=7qf@hV^P}O#PC8zCr5|Z?9gY5?R z-pvX5dPfx??2OTRxN7QVyUtwi%dd-Y6;xtaWUNrZ$&n-Ry%b;|0S;3$Jt#}KZG5e6 zkUF^vBN>f@GBwNAd>TY0B2^i?BAY*t1|o1olsuJ)88WI`;3BKab{Q^$;p#tI{nt6^ z#5I3?ZHlnW zP~oW&r4S1VrqH-rMs=DV67f`M=(z=7vXcT;3pMtr8aB3tez(9r|;CQlJ=>07l6-5x; zj!*zy&p3n-M;G|Yq?XVwmPrC3+4Ol8D?$fGDMCg@*|1F#MYvOk7hIKe7vUsafpxOn zTl2u9l_DIK_LEMob_l$E7)h*@yd5A@SNpJA>dYt~-9J7-YxC&!oMHl+v$ z3BcI4VfwDAORFQJ0Apyn5203y6BCLsFrWnmOXQUocR?750P-N_^5b8hu5P+wjVcji zP|{lLkz{*aPX>=cocX~|=4g@}j!B}!VN9{b-Vd6v%N$h#8sV0fXTQ=>-_ z4ifaRZ75IT+J-b97qvSqUu|G3tPXgRl;~B?a*NJ@iPgbOpGO1{JeJva<4HyEKuK${ zI_Mn26~u0>=kwWOMM8m}!x3D%(@8uGh5`S=MQ#^c-Hm%w;7x!{+=SSfE7^Fes! zD*{U@tO7MmSlWi{lFLsQ-K2qF939Nh=m;l=11Hd)O|j43zDrB8*ijYOFn-jTv3}dT zuEZXR`Jf_`qegPcocFW@Fvv}WWoq(nuP9)chO4x$Q9FbTXM^Lc@(`_f>bznVp<=o$ zROw1eR*UTc@7*HlSieso4yzSTSHXhV8^@O9tpm-g*TLW3 z>3lrzT~&e@95+;aa@BUnUlO~d5DW6<&PSs~ zuw0&;>6Yf|zUTP{#AlHt!!6(iGURn_r&MI|k3r3IOZH#huy9{pK|h}KKtHe%Wc%h<`qex<<6yYEP5mVQ_sPOIaX*WbGgPfaIHE{Rm;JKxub!@lJt~e=y!hOmcf1@$$d_1JPZB#qdc=&lCq^UX>@k z4DQ#D3}dOQsXJH=pMuz40B@9>Xc626;{c8>2|G!=6(q5$x8v;Dz* zb!35}`X^p;@e(>YV_2cjFl(DBkVQgB*rkm=9uIkPwz;^4Cr&?fIQ@0{;q(1}v1vc2 z@ZYVw;Ng1o&lAtAGh==ER9U8a#!8rQt96>5xo^Rja&mU@$G2EaS)0}Z3?!i7gLz?@ z&Xxt-;gVe4a2db%&|H&LV65z(Jh3dY>GLX1goNIwi_dpgJe7zB5f#CWB4D6vrO`n4 zTB7PtOAdkZ&vwdZ*kWLdOdnMM!TiJdd2GmDAiM zFgN=eys8tCVY!@#!*QXDag?+ce^Y_rM1F2Z;5Z!5ldgm2^E{%|CAiH^PiXCiLW`nFtoq|U5!+VGmjUBQiI>2kdsH&lFbL`iIvVmu_M0w#lJIWAedqLxRa zc6ZJmB*WQIfV8rxU8w+g%n*Tv7BjmCS9_6L4Fz#6Ktn!Kiw+tUf{$8=9I@q)vE`ko z4&qB*rj?qAv4WeWtL#SP6tHW)%>Ek=z_Dt)n60PK&P37=gWjRs{_~{wIvw84W~-Cz zLPed@Zl1J0utULMH@!ap7x)`o&mI)X0^oktcUlj-r^EPB57*UVFgM0f2&NJd%nHlnKuS^023}XR>nZ z$w*x?3_pNlYT#j_o>y^<4f>Nah8p26n}lg;w7r#N7IcKoXHL%2CnTc;gC863MFi#A zwyPVY8=`C!@fq$3`6yp!iyv?m-3wN90K+HkfAIk_a^Rg2%X$ADE>`QonEw`r0h#yE z@)yKKih>~%5gvtej|ZJwT$9{6F_D|6bd5r+(hORpy?&fQHTbLP;C@V2>T0oO7iw}! zN{BDU0|?qq4mO_2R%$ry-!g|Dew&~6XT8+|gm!j2TTBMy(+}w%{tt0jl7D0YpKT<> zN%ut@WyQ;gS%H%E8pUO0PhcxHIlDqzuVoa8LU!>4M3P$HnMh`YYPL9kcnGH;NJcDd z0x~ZaUJGYpactYPMX7Ae-!zC`=)tg%;&Tn3OXoiof-tJDgK)(xU7kPr@eTqSXVa52;y1qw{(BuPrS$#e^`9Ze z6QCmgc(X-6B+**kzTSp-DZ2;XQJlHh%OdnW6Zk)&>}LuqSJXli@Zr`5ychQ^$C} zu`QrtT4Y}tU|#HsTk02h z3)@Q_WVr9`rN*C&%@d)HKvBFM>HgAaRp!G0tgB~oU><}E*z>YOWVAquF@_up?KXNQ zE4aHX&(zHwQA;=EfT`G5PTO;lLu~WVr4F@vV|z=z6(i_!sgvd)&Vr@47IMHUxUFo6 zRNHY^ApkZx1rd}lt^!}7b@9u9i`L=&>hdle&4wX;Q z&Olgf_@c9tF=+)(2$z0b3??m-M!#(R_S19z@$IkK>~S1?yP#PS-_GaraX6$!;=g4t zC*@3n^|@en4a)sHn(NubKIE>vl1!%Pz1gG<$Yn7cQf`@9DpYULc_O89$Usow8G6@% zQ->djKE_lDxSl@DPR__5k|Mv6E`f5Sy9y(>)&Z5|claPYrC3QP6EIK7ynp=Gt^>t7 zA!7)@SJOmdrjRW>5Pi{B^hJ4MnDb~oTrsl9CuWLpDqiEjt8k|JC4?*uUfm}@K{@&r z=#^l>{l1Yl2spS=DmbTWa3j+aM-4zS9iA^YJ9Anc5hdj!LG!E!#EjsOD1{6Kja z7ruzO1PxT5vi*4=f${O>sVnGH$>2xB~%ua)=1Jzy`@Q zjB|Dgg(NwbiW&;dKhfIOyMhTTlQ`F}J0N*&%sOGia`<(^pDeR=f@kL?M~%d%W4(+*J=IKgmm~W@-@M#=pJ{;P_?%$*}i2CgjE_5=}Nse4`=)LoK<_39Azo z0z~8QbSB%92c~5Fx5M)*}<&=DvIL2c;!_ zy}TXuZ?2VSEY{D{Fj69Me)08u2(nm-$l9AeL3FSZjoV@Gc5EtxysF6D7bJf-N{spQLiGzj&U{0E*eD)jv|m@>VL?i(*}$H^PjbxF z{xDgl*xD3EpD(YFNK%n&WFfiQ6UpmK)Fv?vvSO*VX~1Wl1uyINItoI_N}|M zRyf^x?fI;Nmk`lWn#lTT{-QdOA6~fh=IzO9MU-Tzi9O-#Dq63UmXuf{RJQHrXY}MP z)IRa-WueMgEbkRh;9ztk;CH%2!#erwcV<*bC;6scJS^MP3+Z!&jP+KZVr)N)+yr zd)^l{&WydEQGdDGM4#ZL%6kDrh|;Vusn4oPXfFu8FMVWU50+q@Q~h$GHvk*i@p!02 z<6*Ln)W6KaSHF>8;A?>j5PtGQ?`1Nds{-o7i?ZqGs(<}g|N7I7(zp3^Hw?go; zcnp;&%_h;r`#F7@EESC=GdO^1rh!Q`kDfM5H6%uwQ?IAS64)$Lkn>A_wV7il6(w>v zOYn*UU_T!MvM++=5TxDfDB9dBQT2YV;AZB959t1)MCoM(IIvQ?Z2b3Pex<78A!GI8 zF;q1pEY>gUV5+u>Kzt4cN=(HRlplMNt<&Vbxm)-{*fss7;)BU*_N2z3%&uS z`{R7$MNm(n8LHP_gzog{=8JCS=*hH^*%EYB;OL_dYK-F3S*i#TQv%UZJMIkKZDY3o4Zs{c`m>o2p#WHW2e z!spsL&W|;cqDr$k|9Y!tPCEZ`(Z3m8j+EHBSWjY8fdVtYxZXphAyrQ5!k_u@QlLa5 z^wz;9oO&yKWdnQz-Cl{{M?YHQTLhm9xQ`G41>o!V0o*v!bpP0G0(_fMZe>x*f8+>l zLyk-2Fq``_#XVzZZ&A;@U+xr5j>t*0Z)o6|+tIKiH-E4~CvdeQx=6+;mH|M^a;&b6 zt1d}~D)u9K2}Wbf0idx=$nmLnTpSZF7>?~ocN347`|e=3b=NV#g$-Aj77vy80Ui=P z#G^2d_h>Nihck7@aW%-jO*_hyTVx1pW4fd4=&0VQZLu*_Ta*{Tyu_D<*RTNG}kYX+W~RxWo`2cbTqm57Qy>x^5MM{_uD>__|WyA344JMug@C zc@j)5j`tGWd-L{m>%t8xjc$;J0mcZ4?%_lrpad|>U82haRWxk?aU|TDC-Qg|ZD87M zoryoeYmg-I)j9*iX%`}6=!M5Nfz(}J>%#rehFc|dyyGYj#HP4)5^*wq@>*A5?N~mx z#^6E-u769fg>4G0-&@zgOKUivyrSO*%hnLWQ^7M3ejyDO!rMp^xPs@Ne%{8Tu<+$k zc58%3KU@@t324FdN`4#j5`tRfCo_(0fekM{h}cd6E~H{sJk&&-i$J$*Jk}-O zXi2n-a{Y{{8zk6vvG>Da;Fj5OrF`VRX1V*s@oXQhmPpXZZ#=cb>7H4cAV&QCY$_6?P zu3%T84!cc;>Ei7{RmG%pKg7RJD`RdML|0rSBE~y#_@`K8#}`lXTEfW#kvB)eIc}_w z{(z99h%)*UZ%1@oD&~X0osv6IyoTKLhb~9_oDlg?TjzzyyAl9(%nk9g)9GA%$0;Jt zzbANn%ngyV3;tfmmmqtH=gGc9zz&}bA5pli<+^oWt54A&o;^R#m9QnmK?^5-Kheyc=fI-Hr{_LM84zfFBrHoM*8nV;`KNygwt@HP^LF*D>(}8f6Z^Y!V7~R3^5V7b^P}c&Z%1UW|OlLuBhp6fcP= z7cZDTwEZPG(k~}-1d#E0&p1OjWb^oB4cm*2Pd6q`O(H}zC=%EPV~TCGwbpMiyN?@x zK5N5cm)3#$gAnRpkS2%(aVCJw^|*C4dG*59#nlx(94o`K3;+N9Z!2L1{Ox9iokqX_ z6W>v|REWesz4h-i-&6?NBwE$w!f&j!d1;c0dc99ams!i=foFR9Ixz4Dz!J z_NtIjQTUUzgq?_e4%M`YZ7%GQiT-Sv(v8m0*%A}v*)`NKp^(f%4HigZ%%Vw5&lG}8 zP`<7s4}yWdRU*Ly2TkvGU663RafRT}H4I_J3lTPGW~U2a1THFF@LOmMDR>N^r5+0w zaWJ=`)9qNS;J1^)1mx2b96ow57ATTWiU0$7ytcp}uNB9N9RxaHA@q!o;L%DGYmL|^ z3ldwJRt&nLs?zwVHH;nN4a}1ecm@*mVAD(Hphw|{eD{|PeUhiT+9{&QeSn%k6vElP z2~0`J2^omwP#LO}65-&A;xK}B@l$Un$}B@kynJJwlBKpCdI3eVWYIg=DXZ zMxLMbL1rVHO=QxqEb*=MZA~v_xd(__G(T!FEhHV+D9h zk$Ih9r8j95u4&^+gfNsl@TMrNxCQQ{xWGjVMN&g%32g5MZ`Av668heno;@q}tJ#sc zR0upE7e==|!oi{7KvbN37bY*!)1FX9B^xo>Lf`~LJQE5#5x1L@vuzK8kZLlOeJLfR z4`0(rLnXpi1Dc$aka2vRNsT@g2ykG=g#y(O)QRdIu{J0n%-ALvc-g8tIamm_3pAc# zv8n0vu7nh?f-~&$X?e)POwK5}C5tqomc$g33w<|xbT_+JO{5|0$&iwKe=jK1+-a5^ z!Q@b2Vk0xO(4?H{7TIlL`^R_cvkSH?PbhHTPbgx-UKF0N+g;dizlhN#{g<0Y3_+HE zHSFLK6*5zfB3qH-;ECg+>S+d3dIj@Qh$j}fC)Kl7!FZ;vX?*M07S^g{H-3x#mB2fJ z#|T46au;`jkMn&!fwPtI613&4usV9j80^f zOVj97sLG>;N+dBM^WpeL)o7Nfbsb~@V6`X} z6e1Zw3q=-vCbMTq>l>%NqT8~lL$=-W4PRt>poe7f<{YNCoI*@Pdf*_U8GSnBHAeT{ z1IB3dh)0Au6vEi(=C)Hkhd>z7))k&w3BG8;P87PxcD<0oo)Lu%V{95x=n`#efI`p` zvQCaCRVeV_#B?0pgamTDVa0G#-$-UUuBGA2SF>nV;qx05P5d7Gz5S|=gVcxAf*zOHyhXs_EWp$zCn=&=fLEy%b6e@fG;IF?&2e)8yA95a;6 ztJ2+N41J+IuNqX4#H7+Ni$GyssVk9S<-QAv_#qX)zU2dn(}6^=wSr1e;{UD*NF!Zm z4ef(u04;P_F`l($Jcn69E^bSxNr?_X+}!Iw$BPF{ZdmIKMsqzkP9925u2kVDd#g$_w$DRvlUT~{vB0M$#aRtNLnf_2dRJld}g zWxulb8IvO3zrwSd$oS;=Qc)>DP1uckVV7=xA&EVs%Pu41H(*u2PqKGF3VSthA&Ci@ zC&!jbBzVw*!Vhg+AdG$W7TTh;j&4E-i{#EE#unEA6$pAu7g_^bNDk1VkX1^=ZCPXy zx0M2m*)ePS2usfvy|O)MDX8`v z)@ce@2wFn!%WD>SgG-Hm}I>zL(YxBDT)kN;XVPoZj<7VYp`vWtU;{cO(6KR*qXuKgmf687D`P z3Iwkn?Bo1pY9^-@DZ0({-Ep+1{*l{Hk8eEGDnWg+BcoqjaBC99U?E%)TD zmB2-76ik13QA=-kT892R6i44*&^+HgT zEnKab*Q0FpG%~Ol@;LL$Q`U1DN!5<}NrYkE$Nco3JRk7;NE)n3uVoFZ8{!QsJeU%& zsGOgk-tA>W?F%1v8NQAs$-`zoZv-PKYC`tOaiSUx9#(WLsJz_azkAED!m62!-tE8> zz1!uR$yC6CV!=TGqrOuXeT3-A@4-BEbj#vgTn=NP()OBVUc6(4a!7(0Kuy?0&oC>tYt$(I0y-R(&0yNR`m zjtfOgOo@92aeLq9c_UvxEofP_Vzc(ba=n7rikMo1?-`qUThC~(rgrU3ulp;558A5tZf{?Fg2)j0C)llGhoknvdh5q7k_E!n?}@+oRpApay+R( zfQu(K#CTx$j&1P7(6)w?#@(*+1(yNH9sW#oEB0L@Zq;Vq(02kNyeaKL#W;clBa{!M zVEp135$|uIDBCjz>@uYMu75qg{W2Oif&wHlA@k%oP>BQw3BZG?3lV}_nxG8Zgt8@) z>yA*dK;yZZp&S_wJ8c%ctn*a9Bm-!f&#D$#TSn@0@FD%sOj{{Ji2da0$srugz0s$_vbfKa;&iKBCj?py$jwD-L0xVqzoVS_>mVEWJ z|p{fJm*u4a0|MzY3+0 z1UxD_PqACQY_NS{#V#Yyd$<1@jvIR5AZQ6$Cr67a6nJpqLP6S&Kz@s#I9#Z#UNio88ru67wo-XDIx8p5GQCU50Pa*~*kd3?M`OXpT1!2=A4zcaLL9c>{EA_NN7 zQZP`w9~8c7ELwxdfHJ`FS5Na56aYbrA>Ecm46^N>VmA82)@N_Nf;V#5VD$WsnDKrv zLzmiy-#%ne+gvF2_KX?3j1dQe`C!n9F)E`ZWSbl<%KP)6!mv7)+1WA?q6SH9YeEH# zXN%mm>ZleeRAj5CWh<*#y!gw-q6$dF6yYkcC#7Q0>tmNGM&mi+!~4Mp@GO+vz}`MS z5Sv^m=Jt#ZyNvusevp^fUmL*(f|ihVa)hWtfrk-J7w+~NzjTJ!{)ED}>*b|_@k~RI zoL2=Si1nAD1ahABmd|uER*^`Wq3^pVJp#GeG7~!@#5+O=X(G|Lj}XZQ7mB$3qJz83 zcbRh%AxII1oS70r+4rdI3SRs;Oi)d~K7 z7YaZ)8MDna+SALnyUSSbi@VT|yhap@oRpApeB?-NFBJ%IfWzn*4x}aA*1uNMQJ!3h zk}ULtGCHQ!aj_E>i&QFlMZSI-4OrlaThgsq%;2@!30&k^*)IIhn@0cL8o#bkC9c)e zYis0%&;Haq){=d<=wWoEM&7rtYgF3*LZP^4G}&bwIM}*J!<(C{_Qma2WmSYECS;x* zQ7Vz(U<&rDwL7Rt6D#6{rYcB}tJTYOi^l7MHo}cQSAi6g0W@5&paL%%>s1gy)|ar< zU`4jwlf^2DM`?}F96>#~2>oX-q!*POr9=@zMa{CKc`PbRv+8QHeB4YPy_{E<%g4FD zero;pWeHcpS!)zcB5(Z?!OWZE7xd4;I-+NJ#FzK;K!Q>M36I>{*IAgIE)W2dtI}b#6uCj* z?ZZf_rIeijp13-M-m=Sx^4b046Zqyg0xtwDA?x_~lD?)?p}+wc%hC17Gs1>ccPD^$E&{pQ%w^2 zK`-X0lDr?4M1#wi0EzY zp<&B(wumpMXz*~iDPY*^y{hCK`fs}1QtBj`FEq6vfv?Xx)ZGfufdPNcWbj+ z1!06-fuH>uJi6mWJWQq@J>jDg@_v+%U;NpPt(w18mZ9Zaw22q*6cPM|!S(`@xBl<`}N60ch zYNU_MWxY9ofnFj^qr7Fj%c$*XYa9O<4>fnpSxb>9#vyM8fbFzQI)t{5yh%8H;q854T5`jtbY(+ zU9drg@+aAH$rd^}BS;DR5PO?QkcC`G$gM5xo(y?%mbi0eo15uz`e8uHuhS1V_y3Qy zLY>0DQwx>b*=5A~`l+!<^_8yE2yK`TIE#>5__s6${O?jEt3IsTy;DUN#8upe6 z+~JWN=kpcbcf{`=ovwj0FgEs1o@y5P@@WyrLc-{C@8JrWwiNdH0<}TnkfTC&|;P>$A$E= zT!jJ$7#zoT^sW7JAt9qBb?guV0~*gk_i5=e>p14-UxSwUEHbRuD}Oq#^e`@Lx)Xa- z1?NP1ZAajEKb9v=>aqCtEl(9TzfflE8C7-}W!@hQV*9pog2jxIkZpYXQ+m}d@6W*# zw`03zx3l#NIb^buDat}TLE~9E_U5IuMRa}4)u}D;gjqc;aalC+7mya8Zp5k?oJKoA z5c~-KJI;5VXpSxX8Sz7SZ|-}`==grYH*LL>YP62b#{2eBq~ZY(io`u5$u6VLalvcs zcLgt&%4kAS6S9wwD5;K8jRpr*KxJ@DyNmWNE9He=yS1YS(Qp-^tv0Zv3?FW4-hoC&8M27W`i{^!Z)bveBag6JfFP?3kU8>~z4)o4r(j&IXh=-DdnkC%2TJ5r%owPol>4Ur95>?dFqt%6iU|>o%;)?0SXkAwJ7DO zTgp?nl&5YfPu)_Ux}`jIOL^*+@f3wq$T^1GVar;S@f1CIm(eKWsoN>zDcDz-QBFS; zL_Pa7|FH$2(qAK3c?yH2|3BXBEc_&NfDHoWcVP+0@Tm)d4ZGle`+ue?v5Zap1oh=!pDKyJB?VIb2KJ4T^B0Bqh` zK%KV;!*p#_-byq=vCqj_)`K&OH~CSR7h;qN-o<7di_2LD+lT7GALT9xe?S1x$cxYb z5ET#4NVq%-e}KF>)tFEFs~<+2$(;Tcy52D$46~~lI<^(^$6>m{Qml>%r=<|Vd5ZTa z_$mcZBJK5K0KrR_%gOy5?bImTkQ+6E1a* zaHLldo9&LqO0lBYwzmnPD0GxJ2WAtTD>g^G)ge=?AW=s3wT9zP8>Evpf)AM;lx#5XH0%1(HVo>{rq!yJYmcUQ#o9&W0{sw^KfP~iH$LK{ROE~m_5`c;5Knc7qlIHOp&_eEdJ3LT-qdVZ`GrA#9{16T~@6uR$3Dnw# zX(-(SA*RT7T&?E0vfGd`qRuVQYFm&MPc-xW!W!T;`Js$Y8II04o-(8kl%6ud z<*E{HIUUexox0~sF!Ect2+EyJez_ARDOuCdMeuKgTgtWzg^Qrm(KWat)C8CrelH|?t z>#hy9+nwI>{!XvEhdWFV0r&n?CjIa2Dj`Q2<}k^d<2NVWbp=Q67qma9diQN>A@7bm z`X7e*hwiq)16c>B#a|ztKr(L=k)|1pC{JCB*@!e;rcic~hz(;Ygpld}J{^ zFahv|_ofl?b<*QHnE1=M;7c9?ppz~fw8uTYS*tk7r`2TQScJCs)8nQz-~_>9r@Xj3 z8P0%66pYb%!k8@oCOAt!hLc4L1<|itzx{OVe|-Bh2p;F&w;qm)_;$Wp&HX7(5&tcp z9G5b3)~9^gJCN+(?sOds!7$}Cp2ji7^UlLOAlw1Aij9&j6I&8X6ueGBq8v03q<4nO zHN}ja`I^g<LZ!PJI~5|n#vbH@(6)~w{r3;NJbxlT=7Ec_l2NA zz`;VI;6%GbL4t5xY|a%o-t<|vo8*gLUG<8m5T7Yxb3u+|a$j+qCp#wD1XX$voAKm~ z+Fr5&WKGF5nN+kzxoef)c63PlONWsp-S~kgn$s>i9476#;U=2Z?z)VpAqgaL>Z%xo z2{tm2JmlDq=CEf7uE!vJ>#bM8as~j%#s>1Yak{(N zElh1+V(Z3xl0+zS8tI0MEVUUD5{OvC!|{ry-(=dYrap!v3afEV#wL*vN4)G zc**WP%ktc|VT(a#zx;P={C8jkiXw}f6RXQ1J*5O^Oms`2qX0Q~1FX(}o~$o_g0zL0 zqv8b;k5>Mi-T_F}EvOVBP-W9wOYG3R2K7m}1H+!4A>cQkEc}3Ms4MNoT zmzMz?-z*pz_Fl&X7wRI>WV6KgDIzRXm;0QsdRHMlH2zK%${^-f7uZYGU9U2UWrXsS z!+*6Y{B?PIeR-87n5;LAmY0EgVK_|Ufz!SH`huu7VGC}7%7oBzxaAS z1X-*^WbI9#AP!xL#_h0oJ2sU_P4DZDJd+-YGKo1GvCl3Hj2j>?bp?JSdh|cHn8XKll*eEKTMV-wl;;)=gTW3l2qgxSwyb( zMDp4awMk5atWaug8t_?X!OOb6j)D*}k|^U7G#*!~%y{{+PKpE6J~1)!DXnAaMVrWK( z)4;jmRcYh}B5Hrwi#x~_q;_2IM*4TfmGo`~y|FT4&hNo!{cojj8v#_Ikz8yd< zmCNgKBNI}Q$=6rssv@L6{CqV8Z2*<2t-aT-M|~w;%$}yJDclonrCFp@l!#nhj}SLh zzRF@fU8o7eUNDC|RkO(|^1?V1zS4yJDWv^ZqHveo^S-EYX6*fp`peZO`ULM(-U}E) zlxBrVeO6UMdqL=Z=_3Psumt0r>X!?>0oceUk6?gRTHH*Zsa;WK#!OSAKvZ?DEgC@V zMz1SHjd~d^AQ{y}jh{as)pU!yF_H|52kB)FmAMs_oV)(@Xnd~3jF)?F0eaF;Wg?(N zswwt^!G-sHuE>##%da;d|4Vr>fIvz#;KO_#kB3S$9wzHZ{mU$T^&9yGz80te;U_=z zUMBOoDxf~RD4Tw+`qzK;uRq-=eVb2r!vOpzUi&wL$54sVY!XeppVOzwQqgEKg9E5$ z8kj`$=xMW5Lt>;k^?GV7fz2`nIluH*n>lt-Q6hJ<1fM7X_VXbi`yyBlLE62JqRqV$ zRqy8tZf0KifbK6!lwMYV11q)5#(yv7SE@Q5GFC4hLsc`vV*RoXrfQoA#OGk3#8gZ{ z`LQS2I!*4IyM;f5UDIDGKA5a#PihQG?(u-RK0M{NKh8H^1ho{Jp?d8_=uVGrzUWqt zo=h8=EkRcWjz0RJ#wb3WrHT+SC2*Tqg5>g_A*XO7%S}Jd<#My|LUmD?&N-!fJDK@` zn&i2@9IM}jN9V|nqNJ?@iL3rcC9c2B7L(1aJqw>}>o`BwNQx@W;{5BanmOtG%SHcY zbU9LD=VCpHO$7?f0ONWOm4#F}sSAJR!%Kk@jnG>Mn{eu_@Rbel4Rm`Yf*<{8jc*Zr zD&XWwgcE?LADIdryG?+DHA<{3O81Z4pl!{MiP-_sd_<7M&KYwtlc%DRH6eEjakb6nMxneiz225s! z-O~haiRA2yl>p9?bpF%>ZR#KB8|%nh$SPeN&)4y!JT5_<-Id&^aB<{B`e|LW3qARl2<8TmULZ8n zaGc-U8XDC!*t8m!J%8^t6eGV4Qn1FuAdOluRfOQ_-|Rx6LnGA`Mp2wSj53*$5ZB21yoQturv3 zHYYuH>d~IYkfiSVS{LqzCmN%5M2M3UJKh4TEDlhgO}ED zK6ypI4VJAT1gC;$ApAlaDuiABC4nn=!RhC1JO&FdQ+8{FQ-&+zFaa&(CXIOsK`ru= z8ArCjh8G{iJi0}8H1ZG^*=3rDa}ns4@zuG(SeN{SCDAUD)7APdwWt@3FO|dIF7DB{ z=?%XC=Z#KsT%aJ)Jz4l5ruGJdH@-+*? zqr(SJNgm<=Ig)={@Gfo&^Fv{%r9p*p>q-HI6yadk{SKU#|lA}rX&QYIuol$9wo$W&1@14QwYwvCc471x!0XHrzlLeOG+h$Q^%v{L99 z)XD6EX^73Dl3EpTf+*K=X^Tv}&xIjpDZA)^vz%)NQSGG~*RohOIpflZG%9*69~W+M zS(TY;tb<{ zh#2p{;h$m=7Ly_GB%Blwd2vdK zsA-HK^7~#!63ZIm;K&m|Jb}kP53m`{#*k zkU{sT3k_Lnf}f0gR+IY~CEl*fzFa2ulUM$4qkoOYm+%1lt-L=Y*frO+OxJn}QGr;4V;{o3@Kia1ojXLfuJQ~&;sw)(mKD|+XXu7(3ZJZDd$IB9#>A;fgoxIG zEIwdKv5mIY`VD4>MNk`FO|_2JhS%0kL7E^E#F+px*W=dJ?dC@*lkM3KXo08W z3e0Q~R2i2Fi%caaKf7SB3JDd3KS@j2iP+~*N1NE@!XBCE&z33O=nS1LF+rYMLk$xO znJm;`fh5K(I>mn^T3BRwMQ>ez43$Xmz(LcyT^A%AZ(JcbbPYpu1PNY6*r1`bJ&+?C zk`02>LSsn5V*oAnSg?pAxec9e$6^J)ofIY@m7d`6(Sxx-kqCSQ7|7kV1sm9Rs+fq4=FA9e|Pu$d+EiBtF?-~DAnpX7P2 zc8Vx+2cRYph46H50#j0QLIzerl~N)cTyb2}bS>Q|rVPWMUx+KZ4H?04;#&G0INvlJ zr6UFw7|?+yIOGmTy?Ewb3Art?CM6s3TYT5fkTvB2EfZO2`3olrxlhvC(5+d3p<8dM zk%&(!J?s%`jy5QC3gAzv4NA9-Bi0Dy$9}aJGkv#=zg)8xt<2-6tH6151!T(l+%jlgSbv4k0YL(5vvOmwgqvx&x0R8sHM+hl9u4 z!Z6kxw`go&0WANP-yz(CZp{K%-Wo+v(5(r)O>A7$S7aL#7eeSjc^A=*laokT&dM7T z1~SPsj!Mp%Xs<#QiTFX?1Q0Rw@iT;7K(i{2|3zc7eT|hhFSE!%=a^~N2}-}oaNIJk(J}m zUbqI^G2M(6;3-3y*9l^ViJT>k!ZmGNi4cZL2i_FL6t}>a6xX(Bp)hJlD}n9Z;EH-5 zPD0;X)3ayAerEEJYW-X)1RjtJquU>^<| z;vk%yRXqnnYI{Z}GRmcCbSjkOQ9~t?n2>pLG^#{`gF>!m8BizG;ks-IQOLHF{6L}& zFV<=_%hb9KvH-AJlnM%w44{P~i$0UtGvxG*b6(MHS=1rhZuy2UGCj~kvUqb2(_2m< zrXf9W5YCJ~9r7BZ`|bf_GgIH_+WGac8`@a3ynI3dnaF-Y*q+Qj;}E9HY9QPhO@&0O6k_; z$tcohx371XUB--0T^(tFuNX->E<~-ECU-y;V^_X@T8yyDN!*fd#i9tW z6#;V1`G^fR^T_}G3uNEVj9aKO>!ITzk47%$_547g^tLoB#oPA{t9Af*0_qT&$u5KJ zU;L$^Z<5*!YIu^95;9JXClv^A@x*rE+SA!mGcmNS;eWB77ZR}etBjUP9rG})Q@$Cc^}iL zc=FVV?gXnZ?ErO!c`w8OA;uQhfO>?` zTe{F1K2;;Qi?}U|EaJ9OU@<#p%^*YR*`imr2So+eL63O^mO}xHCO>iwD=Oj* zEIhdqWC3czZf_4+b{Xy7A3zBZ^nR)gD;Xsr=jE7E-k$>~E-F_ayGd;WC=O)xm8B#V z;t3iL3}dK*96O$hu9B^u7Jn?5_zTF)Pd8#wgwse0AEK};dK^T8I6d&@&G9P13px5# zO`_xThzCimqy-%s#t_ji7M@iJf>aD1tat#*X0R^{*e)Z}N1rdRt{Qq(Cuj*-Cr6Vi z6nJ<7sZpRp6#@rVz6)PVbPdX3;qoKfYbdU60;KF9#XP|QT8y)pk~F28v8a+#gxf-U z@TCwEz7u=_kCa*PvTlu@JP7sxaj}3};TOf6z+{lcPu_5*!$TCk-9yl<;$231P(OfQzoookXaX zz<7{^9%s8|VM|3VAsIl!1B)W!wk(wNKK(iP^ETEzX}UYX5vZ#A;6HBS%6F~7WCxo5*mYh!D2O8z7iIjw^nLIxaWn!aL+ih;|OwOm2R)2AOu4~BWebC z4i{+(St-YrZ76Z@#c{ikIb>VY6{O`gG^t~|5MLaq&a2xtzrKlz?TW()S|YPJlL+qi zDE_i^a~5j~&9PFlpNEnB{J|Wc6iG7SW2WBsY|`rDT6FIMb(mc*6qb9&on1z)ufpH~ z@`pEqHv}yq>*P37g#r&>z{+HZN~#O>7tQSACvxHD7Q+j&YQdW!*N~X1r1?V`I;S57)N}0VhnxHVM>z6&7qsULxA@LIJU76xn5z z`}%4A(v${5&=Rsvu7Omcz=06gv@EmR-Lh5)RI75NJ6ouMpz$2Xkc1@Fgb-r=G%~On z$msLc9dom10VHX*NBoFAd$0V*r|9<=5B*>3OXSb}==EU1?MGi<@`{SE?DR0czJ}D5 z@v3fhZiord3&;2HRiL$k`yvhjxbvg;s6c2nS`!q?s%L)&W-ms;Is(Z1 zarr_PV&QRn`v6kD^@U<_&xo?i829N@7(lhTmq|2z^1^0-g&`?qB!w@))yHtMXrUjj zTfhBu?0(@GO7pKTyzg&m5EA1eO0zG zovS6@9IbeB(2ZG~DsN2qB1oojOy6}Vs+_KqGwNFlyCfSb%OPB? z7qMSY&Zr$&Hc(mfEg#}{8R8zyy@ul3GfG14P=Jv*t9~1$Pw?gaIl>>}1R+!JwuRO; z!?nBh+=E?^{*Yd!`PY+d`Lrx#)sdU4OJ1NlE5NgcdwP4%oq%EFW8lfL90}yxGNeTt zGO?d;on8>GAdCUs5~Xq^ljVmkuAWc4u;+!7Pq1iTPF%YTYrpGX4+f2B9T_Dd+xXb= zuhIAt5=MS2@6W*w$FMq<3G$pbsL+(9;Q9;W*`m6;nU7ksu_cN_hMdgm%b?@MUoIBx zO`e60n4kM|+Zy!x_|bz2sAN@v?8HfZA8Ag|_dleqkWzzgdsGn)r6T<5-oC^p=Sdta z0rrdzy9{r~G6aW7gXusyoi9aA$i50Fk~JC#epBFuM$V@7?}uI8GCBC?gC-O~^hu!c?Py zKHm9k7JBP7sK_S7k3c>XNKFm(%(#yVLWD70tzHrpG#q#xHgI~)r zW-yNnEWk(_qi;gk{|ndqnuSR43B!Y;hpp999E;dGYAEkGmgE=Dq9We%LUFifePx&7 z?3W(Ys_Zh*9h+4e^3x({ z30cR*mCRGC3I!gpxSHv7w)WM6cy$}4%M#w0#Lp-$n1M})Upc-8vhWyC1}!PC7`qXR zEkx5jd2GdA^ysyuSi>DnDs6K9JD_b%l6k;To5fdYne;f0?&oC;9nt1rWe#d@+{;%`Q` zWMM+o5`BlpUqN6awYApmW*PYl4*|uRp575B-cLxOG+gTKqXfIvdBW!aZ|L1!2Bi;1 zz451ppdz6pWLp_hl=bHT1yox%v@R}humwd+e+07@La3uW+fhQ52^)Bn`YiI_~TH)AK3L#c)%LgF2vhaD36lem?+rbw%LIU z78+!2HQGQ;*o}%IC-=Ir$Bt10q}XMiPxBN;TdnhdLvBs@2CeIVp7a9H`A^Oaml1n7 zNj$U|y)LJ>K@go}8RNV1Ky~A!^?@7;2D=)K>7T&QApd+u(Xg35#TMPt7EWmkx2%QP zDQ%&Zw$MvkupBC^)-+3LSfwpWd1{vO)GXzxS;|wZl&4lHPpwj(TBSU-N_lFP^3*Ej zsa48TtCXi!DNmthL-C9ic931lQ@fO>b}3KoQl8qSJhe-CYM1iVF6F6R%2RL`D&c9j zl&9TNo`R95Y!sHKrymLel&$FT5ef7D8VPI2=d<+x$D5s;Jxu0n@ASjRT=t%Rppbx~ zbK18}MCCeIuAsi)EPe(Zc#9x>9RWf3*k_uCnEFkT{8O59YC`=2nN!JXsgH;L6AZ!=1 z1AmOWApGGkA4gt<$h*1*k9h(n0r|W&*_KcFs~<+2$-M9t^o{}9Rx~IMgI?8ntb$>f zuD~kfVQduLRZj8l9EN@nLWcE^0i?XWTu$!iXpctWhTNj*ts`yRn@=EmCc7wf$vg+A z<7?s)L5qOXaWINPVAyO_gTDke5=;#a>@|P7ZiCoE?2D($E@^wvJe6?B&X8`)lQY2sWO}XMgrT>L^5&Yrvn6Sd zncKlfI^T=&q+kNok5ASm*;(<4yYimB`AK#X1P1LDi!P-g=XDusk_K6|ru;e{Z}sxBWPs{xdvw0!AcXF9^r*Jb7|99D`P7 zXu36mFUij9VvJx6FDGuVLn^1=JI?RAIo8ZSH0O^_r)@%NDBb$cjsgET{cyqRC-EG{ zK{T0fH+D4g5YNNT>8idK=goErX@|I+~9PP7eH<=0t!^4HhgG!M3w@J6n zVB#;Kh{R^@<@Z2`bT*@}U9<*W<)#!9Z~YcuNZZ~|j~jW_9FnUGvedKI_|BvUIoh; z03T}@;wwq%u4cC`wQY$l8-G(0naF9Rd%4dTJCfhT+(HRmM3mfAYSYujv$*1+`WbqWY8dX30!w_OB!W~ zqwkVcE*t4JW2-C1X!77Cd-p7hMQ+0e1OJu$cWeB2U<5M%#LbD-Vd;l?mQu2?{GuT{ z`SfK5pm+~|o~$o_f{f+b-$8g*(xVLBGVHF&*Q3(A3es$KsIGtv!TCKhU(#SQeFAA7 zZ}m2J)q}}T@?HuNx?on}Us(olcrz_fYCDZ{;M~i7bJf-O0)R$0>qgTg~yq1=noskV~qCe>N_k*X)YVs^Y`#{phToU zfb`d>K5}h2F#3FXg+x-Eq_y6+ojyD+9#uEU`iUsGT5}%3LYbrRS!cn^y1kAd4gI6q z*I9+ZL!J$!-kMgyONi(weITMVckPYBmPD;h3X7(7S_!cpUlI$1%C;qPY}H;$o)Dxq zi8St8Whr@}VeM&r8C~99UVl~EXOAn@?f&v(J)QeXlZcT|iNw;2Hc<9m4K%ZgF10^N z9L1xuFEW=?6(S>Vx>1$xqtUS6yXq@J)x{mSiKt2ByOI7~5$t+5gWgyfG3WPC3h&=a zn=}HbLdT6RRbEe;-VWg7TwaeGnUKm}yS_SC6(RlM=c^%T14?`Cdem3q#q4Rin!-KN zR+>dhMTyA8^$2l8<*O{#(}kKa>;-dhQJPIwkr(#nKA4P@Cge{SipTgax#xXRUwSWK2vJ%WCWT7BD^Y zRUHo*tHB(pYDQSBU)I4?Z4=?DRZ2{y>R#10BqUp>$$fLT@Q1K#`b)*T>T33+#-QXL z518x2Q*Qg?eB(tBmf8%}YcE1~dUW$ew{rAk+Q@7Px+-w=(FZj~@#!p8gor7D)5H=a zm;VgmB#kUL{WzD)&BBYTyEaPqb~5t=HOX^*Iaa?5kIs=DMM+x+5?B3?O5AywEhd{; zdlo*|78pO)NQx@W;{5BanmOtG%SHcYbU9LDCuGZuO$7?f0ONWOJ+rBt)P+CuAv3%Z z4Ja5DY{IFx!dEuHH&rXjM?YHQTLgbvv@bijsE{#m*li;5zZS)K#;(s6st!Vg3dTKS z_ij;7D>$$uBXVLZ4Gp|;JCI3UI9Q<*WH%tXNX98fexhZeY>|a%QF2{)sA4~& zmtZtD1Qd;BS{C>VL(HXkWo$>fn|Qq3cLxn+xR5T{fRZlKq4GX-5Ai6Bt34VFyx~kp z{O@XAs}QtGv63HA>UKLeO0UD_<=HYUF7@S%L*nANQhrEW>f6r^`y}^L?zTrQgbn^A zI~AChM7m-3G=WnhCQh~^fC3rz`>FbKT|Ue$FvMwzK)N(%-sX-VY+4OIwS&Q$EzOdhjv1{Xqb z{abo1Y*T3c-ntH6TEqF|75x@Uiw_|n6+8ps7gYRNaUi^nBw;J~qotp>@yIK@8)Uae zIAu5&0u#;>Z));%qL3Ep$&BM#qz5sNZIK;~Ji>*%7Z(pT5$BTXh=nHcmAJuJm;8h! z(JqqH)%q>9s27bd@#X^?>}s-n&4R|Ru6o72b8(NpO>g)GIB#^4;{v%T?#Y{AOpS=Q zd@CVwNC`me`~LkJaty|s6pRok42NQbICKtom-F$I;9-&zgk<0r%!`}C1X1*9X)Iyf zx>6h=ML63IJ;>6vAmgFqW-?}_jLJ}!PU(>*0iq-J@>ndTI4nBMJB=aCqpXOyFmdi5 zIu%?#pDly8ijjt}(crTc(pzG=++X*X&y%??3dKqq_2$8vAFf5k5W+a5VJu}rf<#%0 zDu>KlM1KrX_@oB82+ATT6G<+MK`V_vs}Or;nr+wW8XetbW6x5v0?w%7LQYibRuykx zVa!>|E;`~Y;A-JE34qwa1C6jGb8#j%7t2Qjo(LhAPx#A=ZbQD}6 z0**TDE*YYWQHwIs(Agg1->2!&whW;wE)o&r9XR|`EU@EiCwVF1WPZq-QwhM~95<2u zA*YUx3zgDJoB;xNN={k4hALSg@}Vx5QTRFxz-f#bke>-6?@FM1fB6ucoS`2O84#eQ zLNG6#U*VVy;%5id@_FakAn@iB>m}r`+0c6QTlA*@kI4_|>=3wJs)mR&MBru>E`0GA zFf?vU931(zI458AhDQ%n>83|_Nd^+%_~Pd2tuE_K-Z9V*X~7Rxhb-zI|F%KFPX<1# z$^DEHb<>ZRn18t#BS5kxt_k13V|RQBFRp)t+Vo*9}lTfgu+<*qh zK!khYO~w)I+#!lPQXX7q1>iZgZh<%S3;s+5X@ECiUFc@VA>4_KgBNV|*EB=xm7z^4uC~%0MBNg&Hi7 z#F#~sn9d?YS`eoa2_86TdbbJ8p@Ajk0WA|*X!*+v zm)`t7$!kNmW&wt7y`@HSgqrD-HzP2Rqg@O`@79|`a{bI~$ZdqnSbW_0^Mo9y(fiO- zbQ@=B7M;E$)am2wNbPH5!j$1S&u>h9y_B+IT z(5+bj%Uh!m3c59`CsALKZA@GUL8?>kMReoj!byn!^2Wzp*r*iE`X4kWdB@-|uOD&U zu2SF;rpV@=sCV-CLAsV;J~a6FK_@s>!wG^GZ{ub1FartZJ)jB&j@XBcyt-uy#IR88 zn@P-(Xj6)H5j31@m__$X?jGIdIfPg~eU4c<{_KUQIvL%J72qjF#>B)*Z$hot1SSG{ zG(>`y>4^|-^`5*b3My`aGieJoYoR!5$SZ+u7T}9|A5KEwThsJdv7ebdq*_0h3V{dY z!sxa~o7bUiUM33m6CJ#U)ezBc7Rsn(BPLsjGI&8HK=xwEn!C0=2tumKRQ9EmkUo4( zBMp@XTMcM(QbNWdsl(z-YV@fwd{*u?a; zafV$!Ee~0k$r(krWRXVHk_DP>R$AWdS~Zb|uqQ)8^8LM_P;;kQas-n@fr(wHXNJxP z`V+rZHi0J8XBTW)p(rZC2}MlUi?~@qfzdb%40=3Fw!5(3UJ*kBfw)7@EJ2cgHSpjO z6>?J!BU_Q;0E*)xzg&Z<%7!rl^J1>>2vrt!^VnR=F7UaBZADWLEeK}$y# zTH-z{s)7UEhXtAPJ}lf2*MGa~2o5hjFd{;nKQKh42e22ut|DaFTs`^IR$hK0(P>_3 zI>}ii3|Wn9G_WLk%p(jP3Wnk=AEH}c6EIY1D+^^=5r=4M!fwPt$bqQr90;lH8=lBG z7c5pAw4D{I@~FWQNleH+IUH3Y!GR%HvkWK@ipt2c%B>KFY&%I2B--&}y+(uT>Rkuf z0NC+VV2ES@Efrb#narLc6MLNYif+ro4%v3gSA3E2fgX|toO77oa_Y@8cw#z^ZbAk*-mqdksc$DU9oN$E^{ZJtA=XbzKo(AfO<6P{ zn(hfqP;S@OLlCw`y}^gk#l_W!tI>JuDhPgTRtQjz4>9l7BW(A!v%?}v>DK4TD0~Oq zx2Ceo*mkOHry8o{q=cN4gGvPgJWSELwhm6mT%AFPDH^1hz8i#0G!|I!MIbl(dl#lE3rm(lWxODL3BpF;e4oM%=<$)+EQukSqD7jL$HO zTyaYlf#vyxog zmX+m%O`!gpym-Jps2s<4caB#avbHLL^%h_ zpo3x;-I&D=NnPlu z6rd*TMtN~bH@}d?zTst;5%L?btluYDJd`b1BrzfP#9{+Mv3KZ!m3dSy?X?yUc z;E_wrGztA6>|G+SN_ujL1aYo_Oa?107#lltCHfiNaSxDk^af_!Zx3VmGIU&`_t$j? z7VdeWFxkw|CouEW6^^!zFDtz6s zp`km!bX=%lVoIDei2M6CPaOIBX-Uf}7MryfmTMNgR>agAeAC#> zBmeg=FsUrf30ljcYhxWBIQ}LN9GWeyP};D*aRA%Ypwa>038+JasB60nQGfB5hQ4V; z0m(@TIVT5{3Iw=-VneJ4cJkN;Pz-HrJZaqdDqnCJg52THM7Lt!HsV%o<{^D2D8if4 z9+ZqDO8i|=;ui;rcz+8;*}k=kT?Uum^{>abUq<6bV1OhhAyjZn zE0kfIP{pK<_Y@k>)ePkraoB3J;ANc$y^su`g+8lXWNjI-&jE<^Lo;oq5Fz%LrzeMq z5E?q=J~a+EkPQo*0Q?7k8W$uvND8cD%m+vBK9D07Dk}=cVFu9fExTbgL%fHDLP}zz z+CJu^B{%?Oqwno0e3#MagVFiuT5AMea#BLh$-$)p0WP$3p~5;&0KbKn(KP^%Bzs(F zv;tspz=f-MWXV@gi*6QI7VF7+iN6`$l0_9!ODU#^)P8y}7Exd$wY4mA@E{O!R6!Vt zeHZ|d8iX6h57B-VN+Ah)RCJ+Yw|d!NdjpGI#-R6Z|1}&p^vFTb67o(C7gZ?m@WO=( zwH<)~7e9!*P-(R5Fd9C7Ug^vF?s ziaA=X-chPVS9-kOK4_5JTqyGPZM@oLOnHC!`DzHK8kxP7W6DWlLhkVa<6ook9$mW2$m?Ve&c z`oq>|Z@z+ua@b(>{EndUen3N)nup&$W>DK)DE9UZ8oP`Z2c!95(1<-Mqa@^;94^ZH z^RU9OI+oelGAp76DQ#6Lx z_Zq*HhS&s!0=Z=gbHo-X7|%2Wsd`mFf>?hUOduaxZ~06&V^xWy8T!6^(j<_#Ei8!9!xSP_{S`w1m9l!$VpHyb1*_JUEu2VTE9e z7i|R{!U01Sl+&m^f(EbEPVgd6 z^>E>b-Zc8}*7$XWN^`BAURxtCeD z8s6MowJ&bJDk~!-F(LQlkWz^R2UM_ot=&OYn^+kyv{pf~T&-T_TQpu5^bu|xx(cR{ z450CXMHP6}Sg(Qr62OF|HY>92o{UyWTuN(%<_HSPMd&|!A-$;NEG4QCs&bZ{&Hww~ zG`<}Eb_1{I5caWrY{jKrxKs$e>X@_eJ7&@Ociw?GjK8h*izmM2?{^;mv4Ge&jO;QF z{D&7Vy?J}GT1|tn8SR86DdZ#{Qc?rg7KAv!0zrCUbP{Bz6#|Rx+Q^j_e$V*2<8Lq2 zRnTx67`ht66)_iR5z3+q%Qw0QtG|@>*oiK4zFG}}nK#GJ=%0giM9=aFFz@G)1Z4#h z9=W%#wJDsUkF-4-thq@eNm}GfrBuX zr5kS7&_Lzb!uq9mG#4DMBzGnu#K3?iE*b$pAT&*G<{cl#Fa{^CZh^s+>4ccBQ}w_$6Sk>?|Cx`Djjjlc&%OUOGpd{m*p zfe*`qOeI}Q=ep$zZCj=**Rdsf2lPY0@MGs-q zo#-8S4Sob3T$|M@2qWYX{Or%*>E^e8JRwN zny#kn=V>G9Oh{rv?#W@L5(y5jbR9@dVhYOn32{Z!OdAy=-~P=6#&-z7^crCr9ex2=Az~PMSE^tOH4!wN1-7%s9kr6B(~_0N zisiae)+=taooF90?-q*7`h5Z3SS^1Uc_Gp`j%CWhr}^DlucS8Ow+|AMJueh|dj<<* zmyzsXa~}*oo{ugYfeeb8kbivONbNY)XmH@eft>tS*F{DOD)&P{hzQCr-n=1&U~0 z1L~jGgAvH_1$lp)GjnkmKucT}MOI<3TEDK*m!q4qAVM^)@+i`6ciLLFYa37#>NoI2 z`MB}tvo@3i);d}n@*{WtK@W(&si;CBoE3;sN3ZV~Dd~>MK_bH36TcS-Z6A4)aQeh; zPXx3RQ>B|;c=ww}f-u+GG@L}!Coj<$P?SB-BsC1ZTW{{c-6bW*v0Fi)%=0AjFsI(R zYnBF4zB|@Hh_5c#phEeRY`J6$otzP*gnfv;O(e@gekA197IsgDJUJ_FZl=fShXEzO zPCwk-|35PP=M?_ky7eCVvwxmw9b=cV>+7e+V%Bp~%!*sB)9luL4d#@Sv)&)y5Ov8;guIjM3sop^kil_m zN8j2#7qT;2QuhuaGNADsbfcCovyOjm{xxVB%tFI@z4E8?O0VO>rs!i3mv0bPO@IS( z96tKzb~+bnZmOd)asAJek^et%8`PwJi*Mif^oAUCja|l@_XkkruMzLujFME=igk_h z{v1GYJGN_fJ6k`KLsl!9t}Fx;G@hknr(Q~7L>I_hq1pmaQdJ{ceHonii$$^GE30U5 z8tnu^@JsmbIQ?~^JGSsb@N0N)?t9DV_=W*ngJZZFt-Pr}nad4VZ(acbhm;+gq$*s5 zgaWB(lOkyeJJCj|%{=nU4}g$ZW}>R5gEMrtHC*j7{u~#<#@<)(Y^j{Qm!ih3o0PUJ zq@+guYBV^o0!o8p+Fi7HSurnk-mM)*h=#Ku9cg3EyIcm8Aq!4yb`R$EDlZ$7#yde8 z^pRS4&^RxATvFr+F7Fv!e(@MW@s{UFrF|H@0Lm}(SCLZyuhlyLH^}5fH1>kc63Ux! z%46Vn6r^OnE~mFa5S#a$`_UgC+k%ekwUa~Fax%D4+ov!zYSxeE{DrBuqf3kI)JDlB(TKNRqQeZ>FR0_f?l z5%@fX!4eFevy-!j$$agde)yO}$>|3Q*(f@vecMD-u7l+YUIu5ecg?_C1mP>PoZ9dP zq`4M)ae$U7%@i0#z4AVJhW2!%AsVJQfT?%mREg{uh4zSa)>=TFw+I6QN$~5TV1#0y zle4S`XB2PpqcE?SQQ6Emqp*F-)&f25g762F@c6J?vi^=@-L-vFJK!#29 z2kqdqLiil_U?guSG?R!e$obH*3s>Gl^qJEuE))Y>$4Wms#tYy{rljXQ2~evbJb!rb z;i>+WS`I+6?{7#DoF`|!au*bl^3LOw*$VEhz%lNtG? zOfo2ro)ImUPs#f?d=$zn$&|-Eu+lqUUwoL`7yjgN2|Lc8uG=625eMVRvP(~P1tlos zpT&CxEfgs*>E=8+6Xd~2RfbIn6{VxRxl8e`NE&n3(nLo5>W3&JoNTW6++BIk-uxsx z4%zmiTZ8jQ7!~3wT(IMy6q{mGPRvp4I0Bw&6F(xhFHIl)@)rCbgXPH?va#QK|K50O zZu@aM{bzV72E0hVUJ#CbM|{2@k>_sDSE?ehx2V0Jughn2W1jdSoO#|QGTxy` zA=}ZV5S=f_GBm6H0RtUaaK2^dtKAXaB@cjMa{sJ1cF5#sGQJhUQ^QU%?3X%Y{Hs<4 zl?$CNS9fb`T>OD$$BN(M04GZBrt-_3sBWiVS<9fUp-bW4=s+nOGWeUc+IfOkB*=SF z7p?dszlj4Se_MZJ2daW;Py=iHdx0qB6V>iWY;zS4mJI=)bW%*+nye#YKSA4{%c%-_vZFTFODgMZB;xLiVbMN3V=?2R3zC(-P z-|6yqu)_pVpq<)wz_)vtEb?XfJsc+8#jZEIv#%dd6I|CEaEPdV-Fw5Q>6h}bD8J`v zrenMxHR^EK1m!E8_jl2={@&gcf{m~6_G{Rp>edaJ`TkCCzXv-_F64rGhbBJj@9jw; z2OH+8SKb`GLfN>y{5w&b4(t49K|V?ylC!zBK}zO)_;<8PfIhxWpqpke3ViB_%n5X} zHl>-Gq^%2S!N3;TxK;R!F7^J2caT_K@ZdR35!yve6sNK;^M9Chf(} zolALa3~0z@!6sHYci}EmN`>X_zCu=F$MnyW+JtAq}?^e+^Lw*o_4e(-#AA(kam)9a`6fDka$d%uXY3 z3eNX=!`vEhnm%S{AwVzz@S^vo5%B@j!#kMx%Rw;P%snD}z#`o}XhT1}XREl^$JATD z#eocM@2AI2oWKdS#ok77cQO_Nkto=z^Sm@!rUY=aehepz77Ep0w|@KS*#G$UXAnHj zy>C4nQt|D4wVL}=oQ?ilJ~=LBznaL~atuSs8!PR{TZj#<1quW*X&*Eh{u863|Je@y_!H@gCUR+geNAE zzHtjCq!+Uq64^iD)Y)}GgycyQA2^(#NH}t%kls7=MxigS`9={3^rd%=t?n74$%B{d z-?J=JRU7sg-q3Q?u;hdL8)A?~G>T1I6O%LpYy zhyP$Z)}!#(*ejJe{-!wW3hgohLIA9^NX+N zLpYC0MAqK)2_lM>Xxt8aw_{U@1eFP{_FlWk3CQ4sBGKK&*;fpsD0wu%R-g0Sl%n1z`^Kzbgd~d z^vme-_VW6x5{<`|Dl=Ywtdjx+wNFfpd`jzBdeJ8G=W3uC%su6=+8cjTTFA}S<@uMf z;xusnc~u&D5sKO$_Tmom45=O0yOI7~aV5Q*L2s;#nDcuuSpQq;+eQFY=(sf@k#7f3 zujTT3+{lDfWb*aZxvB{14?kZGK^sUa1=NG6>rr2c7qh47Y6|y6TWJ<46(u4U*CWIY zm9Mf`PZw&!uouiB!PRWCio7sRwy!iHe+rcalqlRK_q;D^oEdvRqyBQWi9W#_mG=Uc z5T#jRQlC|o&|VOFU;4SCXKGiJnK9GUC=j({Yr_zT z-RO0ts8KJY1!S@J(OEn}$np3Z*#uC^pQ;_pZf3=xo_Y@^^H%oAc0$@KM0nPgX zD^c}+uHa_og%9ZdqD1Ls1vs!$yKMaTVt%En;~``9;xSY;BP`Z0>tL$3i9mb~21-oD z6qFx(lC9I^zPVfYL)bO_rQ(ChYWAeYpyVD8nCrt^Zu{eW<3&)dp&6>zUWD%S=;n)V z<><|{k=YV-Rp98O4{D6!(^;wr5mN%ki6uxb$i)@CHnQCG<6JH`3old`h3TAAy0?>= zAE-&5>&vnFU3hek>?lgwI*_>Pe^lc7%WN^(%-XZ?xwek;V~wP!(k#xu-m00C&c9sr zZ$_6RC3Y^>lh{{p~(?B3Hl8Ud~!Pw z{2?5y&scU^uoT z-Az1R?!1GBGX6h%Z@Sz@uA~kBpQ~W#SD%=#>DreLwIXCnZflMx>l0=Bbc7=u6j_pL z%hsyf!J@8Qk zpZnNV-!eSUhXhD#We?abLP{S9-H%Rumy}a=B&m}&C`&-ciJar&Dh5$u0(my|#L1ty zZuXa86k`i%uzLyN+_U@c2Pw0$dbFBa3oT z-KLpPmqbZiJ7dw^xx#Q4%9NNY4R}$UuGVjfNqyb=5^X*(!p{1Wmo#=v67zO;M-Fr6 z`ZI9e)Z*g;WsL4P<(tmu6-LIvZlzQI{{0GS??#&xtPli*xYLS9(9!N{J{~hX)Y>FM zj^$r8fkM2Cn!@}@3~FvfVbr=%G$BVg-3?IyEW?MWnTl5lpHlM-UkJ)c(&}N+SfwJd z_-OAWk}!+2VnV|lHX|8789og|HlYpUx7OngVW+`|TdVs_1@pz?V)E18EC;wJHuRHwNvvQ2d#r`d@S6WX=Uxmv(dVAi*R%2Q$Iw%Csj2!jHFv%CLty} zb@Z=PY)6+*_G%(Y1Ccc+GCFG9`QsZL<|&oEN#pHf^bVB~Xq(gv~C78n}Tez5jgXW|^B0P_VNCE{9sUe{DGS4iCs2)59 zL*`R_AO)J&8qI^7U<9Qx(@!RCL`}-?SK%loCu!811%t3ZQa8E;2b>iIE@hKCpFE7h z#bfKY&rn=87`A9R&&5CZSu!^cvhm2jB#gc%YA5W^at(#HSl3eMANf=f^iPR00yU}O zD9O@A&}Id$eWV@v7aNyLWpIFR|b9`wNm?_kG*) zJ&Qi0aW(Q>*eAbxRk_uUlFPJ~IqO?vq!#5Q3_@oWn z<5kEvX66`65gkhMw!xy}Kz6;>Z!kM5gWB+Xs%v^1o?W#yaY9HihXTl4-L@|KFTuQZ zc6rGU7oUVoV71a~|Ns4OD`o}!*QXhE9RVv$bV-p?VG{qaljhs*dEOto8*$SU`*Y>O z9m-8}ssR~{{EGy3s?(=Cpam|EGcdO;p-j0_Sfr{s``MAbiV|9v{wyuD6SL2u3^%jQ z(H^PnPnW6O=mMQhK|!5lqZ}x#<+Lb=3oJ2V)yXE2L&M8r89+?Xw?ZUj=%5>}>w}1s zjfpCATtd~JbSUMmV2+X;5SLiiaU&|_DsfvY2l&Uwusm8zw{1K+?h2|;I|fDbXh zWQKYifT(wW-q1%`%By-IMePby1*9-e?^S?GLJs9%5m?D3A^{f9w=CZ_NY%_u)DFk@ z4XkpR8d+dK$bD-O&p2^F+LaO9MU)U8SrQ)bLQ%w)f6{y*cX5UrzO{%jeCrK$68xz0 z!yd5aV1}aF23#fc%ut4dm6JJuO~d+&o4jDg->y=lR$|^x^Wc>O8=jm}0&n@O!KJ^A z^Ia!t{Lt|vxCFT*9m{aZQ=JGCsKVnzFY+P@4YH@P=(|KJyu=z7DLn8%0yUZ}!6hfV z2Ni=Q*nAs20;#yggM)}**|+=-p&xu}5y7(7B$|S6&8#dob8+($8#7lz=)gG|@r~o7 z$QaM^8#6XC#WW6T&aTuPUy`~tJ0+=&EdJ1<|4`PJ*>`*L0OGPvCX^8sK7I4aPRjuW zLrW%r(|dY~60u^KJ%SXWAd&lEtT${6k;ACmx8nGtjm174&Nr=fPfY11EuxJiZ$QlQ zd66gz@~2?F0Q)iDOqAdWMd5{lIYzOdWevkynz>>r3?&bO0SPc}fnO;ta?v6&)sSO? z+PuLn^={suhrxoMy(srntA|qYmr`K>fn6Bi_J9Yw!UL@4avh2Y_PmG6sCXmBTL_-- znWsXu6LY;eI@$Cfpj6|jG-U&GS#Q3op@z$eT@Gn7QYhz$fD?fxvHKJtAi){m)-SIjwc*3 zv=;{`;&w;-H4Pc8Cv(-1fn@wI2Oct_C^ywGvJoi>pm;v1p=Jt&+SGtzgOk#B1}hlP za&%p8AWQYL`1Z01pvV}(OGgn}qCPXOoCDuS1eyFkBHS?7H^=pm!^;m$h%o05a4R{0 z9g^prSnFnw;h>e(qKK867oJXh78z4kDub$0X<$kGmoXgB5{9Gw(B2Pn0s;falRsT!WvO7xV2C6*Y=FiX!~H_Cy}x}OYYW3$utcsbw;>zH9X6qN=6FhoElUL5RhSt?m7ne9ZPiv6jOBFi}Va= zv7vL9ufsb(1n$DiO|_tstv?S_<})a$Nh`1NEk#JlS~i3zH;^fG8Gr!{lH3ee^Pts% z=l#~rYO)N+LbNzdG*hP$?4X|rn|nvWkYJjw`6*_%aH8DzsHA8bO6m-m=L#p6gOZFC z$~iTZ6d)jj63vGcWF~o&7bQCmC6422%1~e2-lh2vy<(B%+Tws^^pkA;JV1!*Nz{^W zCBlfT75M^;Hx($n1x_G85Fx=_$^Z$vtI;z2{WB!wPwiWzSnI9>BM&(8tKf(u$z%GK z3|++z04gt<29!F(?VrPmX{_RU4dnnOBZYEK4JZW&NCCz1;NqigsGFGj#&{wfp$vj# z3+6?(h#+6-XX0Cl2okj-^-cJewV;S>O7Y1!XdC;GSL=;~M6|zAQPwmF)EOZE*BM;A zE5U%263RC<1myRZA%G1TLVcU$O%ZSS3YEh3l_9yfMgil2Jxr@yqexfJi*FGQ9)@9l zk`+lKB@k>M^$znsWK;>%c@+00*&-Z5IC6p}L$65{dtu=lRwfAO3}UG*i!LdgQH9^_ zc|$c7J>u0F)J{do{c1F-1SB|WDF4(zQH+KREHoSHV`%cQaTQqDTc%I(HQRK2SMFw9 zMtk5`uoJ}C-lLa4L;U0$P$CX~yONvIjvg%<&5MHXSX2%vAOonO-58TAdTCu0C=VTet8HjGkNtv;Z}<+be{YI^*6ix=<2?JffDym6Q_7dNruz_m?1w zPwLo5&QhBoiU&D`Nj zxr#32;9b>U9-c@@Jt}2=hl)XD2QeQK=PKC&Kt*EHT1uTU>TwR&!6TGmtHchrP7viH z2Q0wSvMFxUC7>gUP~<{|C*LukM3$@*`qtu+vMEqmOYxA1X*aH6xe%oS(JHbLH!z)5 z$uS<8MEHuosgUGX#IUF(*+@K15y%vIcu8aC#s|okpW&BLaPk{7{>qAJ9MqUysWG1I zD{p!!1RW9r6Q}1EUklf(GXVY5<@xF7+lqX#SYk?Xh-YdnL_!q&z7OeuAzQ+RIZZsx z08id6#6B6%b}fJ!DttiRywxTR&loI^;lAoL?IIyQ1eb-i|W0s zs4@4fIs?oH)A3zZZy^jVly^kD;Gj{2f($ck&9fa{?k9yR3nr8u0rQh$Ph+|Q)b9m7 z!S|{+Trmvb#j=PQoljj_|Ed6FFiqRt&ueL@l&FCj0r<&@n865vPhFb9Bt`?iV*>zk z2n`e*YIozUWg6s(8hv%_OvkhS*xVRei0P0lyO(DA4HVfUM85Rpoqb%F(9ckto-Z6)$Psa-fbn19xO4GdpTgj%m*bQ zffLXUTrgwFU2#!3F&zskVkz!Ps7^x0^L4ZI`-KQ63v;EaKA}@ zaw?_dcD{ndieM=S@54b<+-fJ;6c4_?zl?PY@@OkgUB$qH?_pHJDD;!feScfX0mvJ@ zF@UKvWWC!v?Oo}Wz)MC7<(wK^3J{P&i|e^jEs+iUv|JPLNU_Hi$l`jS7*&rf+3I=G zE#k^}(O*pHH{)B1iVD_Ji7A-1fFDdm6xc{@J&hpQ34|OplV3zLQKp!y7(cN6ib^2` zdK9#7iCaByu%^JmuQPnTbMyE0ZAEr1h8D^@HCz;-Aj1nE%AIS707q33-M4H=jL|IV$4VyY7A*pVT_v)DMvHi$I3%E05Rf z2MuUb3Q^!M1JaMdaeT^)VRDAoVV6Fn%ou(9pEg z@B5J_%TSt!Uq5DW+Z>fyO@l_A0qI}}?{+J(N2QcdzNz6NzrPGCOk1-pZ9|V;9l|ZP z#0nVC!P3BQqg*6dk*=N>uA*x398SjLA}A421P!DiwW8a(puvKI&T{~W{Q(H5SfIFq zy?%gTHaRNhnudougUU&Ph4ZT~l>h`o3+0^}B8pIufrRJ6?Oxx|xk@MQQQKLdU_8r2 z!br-11hf7;m>^X-g2@x#OjIS}X5{-eq)Cwa9m2#85V1!Pq0BD#`XM6T;HZde8XoEl z6ratf_p#BUbk-4u7Roz0JiIKH0i@FSR)m5S9z5IBsY0;9i*^Ye!UIDUgnL(>%8FS( zFZV?);`-*(huBoeHx(fQZAv}{6EqDWr>xWJmRYRG=^+&Y?}0d}T^k5T@zoP;WPR4LGST^>&U1!wz+1Giv3@TAAGEyk#Sn7O zBzvMlPe#3=OwF=2pSn_sP*p~=$kxxpfruPYOTLu|8nRZk;6)brbQaEo!SY|N+m{(h z8#8-+Y4w8nQ#c3?mCE-PK1@w%=Y9R!Mxp(W3dN@3q|Rt^uy^;aKYhAvpWS>Zt&Fh5 zQ0}QAr4R`Ts8IJ>MZ4dOhE{`zFj;y8P5fML>hWn22)rD@OUAj3cPA8X45GY zYMJNStk|{<8Li^Dlva<-5fqfOdH58}`9;NN>EJxI2So(!Hy%zd-|sSkL9Ub3Hr%mXJw@hK_0?g zX*YSV)Fy$~k0Xhml6L}R;%X{_@8kfJyr>kRAVC=0Hca0& zbx=7ruzneu?t{bCHfjnCXhH50a^VsO+y-JK49LTnv-f{}JiojqfjfLt5oFM&wP+;C z`MMbQAA&dngrDI-DcK*TM2Fj$;)uN+IAOOtDi)g6OrVI@5r3&TzP-8$?pyGG7sEe~ z+@sdJ_1~wx?`}2Rw>lK$PUDa^m~Cv891a*We+)hPXjy{k*UhwUg&?^0-`5%;%em$iXyi zSU(|K>+lvo8b(h;d;1pezj32ha#`ZGJ1PR3hL1WU&wIgOHLoa92}29zof{ff z4fSO#*EXbXxhQ;CzFNmdpGU}WwnGbth-g(t?_ieCLxPANi|o7cO-1xTo7SRt&^3fh z@Zeg_X4CnScmzL%LwI?oi@5I(0)E2rX*xW<@4@5y8-IH*u=i2H*fglr8JRwO9Lxrb zr$Hs@Oju$l_tdabh=c@JTn|!{ScWDwFrm1j>lUp|yZM_5jAxTqekqQX0Tz}4yz~{3 zC2cDd{S%>uZQGD$a`v%v-Rg|OV6sdU6MjVpJlP|&7BM!X=j`=cwIrJz6@g6yNS(3k zSG|i$3|cWAlxK3-NM4%rdP@+4yhd22wjpAehO1PtQB8ylXM^ob3Q*es#@f<($tq&S zWKk&Vm9$wc+6R2H7KzLHeGJ}Mt#Gmo=0xK-6#v-gKt!dD`1ON?V$Y+3uW7KTGm;%_ z?%k-S9o$%}2p`F)q5P8rNAiBm%?PC-fe#OI@VBWmT-jwAcxq#(2Ed?A7ngV zt0#aY<6<6)!1Km9Ehou0{xlCC!byKb_&w>5gFjl7w|AuWWOMnk$d_t$SEFS(4u)aB zb^dc10H#eRhpbuq{xSjys}%?D^@B_9)|W{tdh=`=V(N@{AKX8TAF6sLVTqyKlLJh0 zJugH;hA*CPfR`4DHrxPTAXZ-2whDUpJn-$Z0byk0mC;XF2Jna>Dk*qd5nVbT{_6g9 z1MgviKUXd4N@qH`4KLKAY2vJ=3B|Dh3_Q#|}J?7Dy-0KGvbjzb6qG=$h zGtwP0GF|un?p0#kVrZeflfy`&rxc+eLlINgy(kUu1}LJtrUS_p6}KgYngY3mT*wuy zTxXon>SA&~Jvt!^XP%V7{L%U2TkPiX4Zgtbc^A@-F$~Bn0m;(Ng2iAS&X%Bqz$&v$5^z=^ z(>r;6r&k5OV|k0y8p8Csxaw=*jX|x}C-F1laRh+3R0E7AJ$Oc8vWxVC$Ep&9k zkV5+~dz(p?Mf^zEt&Mh%hder2-`qlv&FY}*TAi`$i^s}h)-zJVii_1jFF-(o3clv* zP-c0Hy#ueU_6tgW3244JW;N)s?=TE~}{v#n2MgtOkbUx?F^U1Q|Tf@r;e#b0IsUt#t1|k%5foksGyg znOmp}%=&p*CqlzwF$)KyLa*a!(^^bU1$-3wwH=USe~eGM2P!st6{|v*VDAfMl?j#> zdek{>qQK@y2{jEXb;g@RCcKJbK2l03-{dB!+`m?5n->R0m6>3=?soT&gn4vtj&3?KR%S3>YTj|#)4VWiF&^B$z#yR68F z#n3`|CkK+mj8%k!1WA1G#RU)94GV@CV2Xmvk;?HL*Fg-+p}mz0-QaCR!T}y0Bq~Vs z>G)%jvbN_@`Oq|o z)EQ^~98QMQ=S6$5oX)}Zz7nNGLKEes8dNr+Bmo!ChivcGrokRiPs-G{)Kh%lFdW37 zwvC>WV2gwiJa~v0^ELjmz39vG%|)zPYfhcDx}PujZndZ`nJpRSaC6&=Cwwq{?X&Iz zX6b!-K@oO6DlD4@o;qXJXVd5T3`%8Jf;cQOlzVEZDMUhsF&@MxxJU|i)D&iVn!jDj zcc@II85-b>a-CbKFDwIisV`#7^{1~l5IORJZzqCE(yqZs_3P;~Q-u8^)D$?x69SM( zBTe?>6~%nx&cN7?M+HRFFj8k+`r>i)+@Db|)6$7g7+NUr)F4uXf&@c+%eJ91mE2ty z#}E@9MYel}hw(fQ>ai=AxdnzW>*t|Cgpl6H%de-`Yx;$VAaSz>0i;LG0GHvzsDRS5g=Jc^1kR!?qFW}$-Q}*Y9g=q5VaeMuclE3v)vDmbpQfGAgKt(6rOeGP?v%_3BjLw-HUIzL?!qFxj8&@<6?&pfueca zIS)g{D#+Dnly)B8kSBSd!~ZTK4gb3cFCL^mY3o+ognTDrTPAo5Zq4xrjM8L{14sZL zt0XOWvTCpQ7g1!Z{;?iNF75bScOL70J72ApRoN5k7KHj10TA)*D>Ed}oENU9GA>T-p{E|kZ_-8|Sk#Jys972LQ zIv|$e^pSd))OfO594g&L=B2&Oho!t-y?%v4y4z7<6(bXqMoVdw73gdV5_QI`cW(Z^ zzI}h%JFf&NIBLSW6MK&wERyhvVl*Ux0oh4Bh$Hl*FAykTY+bLA3MdMmPgnXnH9W=F5!Ik6?K(fy-=Wo1NA-?5NG0`xb z7hUz!` znjzcmsOW1NEb5F|AK%YLeH!{)+Cr6)LOGWQ8p&Kx0y5x$kaf*KYL=tGVZbv7JUb{h zHI5v%=Rh0@@naW}svL48>)#kXuHhq+2yyXVFN2X}m|Z~$KHCGP?9T(ap^<7m`vfZN zzDI>e)96xXDErOr*XjJn|6hq+i=l<`PK_@`C`bXug`f_N6eAGjJqj?}C;2sOS2r=Q z;WGHbtUnK6Zh}6o3D~0FZxyU0g=R%$Nd{;xA$*Z}9x!EpFy*bM`IYZ?nP8%VqG>Ft zGopRG7|((S<7pTSDsi}4qlfZPjVVQ`NN|O`t9v?9`w7Jr!?vL^=T?df3}``yNBQGS z8DLpsLLRtud)@2vzl<+u=ba)iCd%gI>oAT?V1!~G-r*r?%cu7=)T4EF`{nnuFK4YU z;V_uC&Vm7yU!U_UYye_siPbXL!R>8k{SBh{v}uDzM`1m^y9o2LkQJ_?|GY z>hk@M5@{N6>WpLudsZ;Nho~|5f7Kw)8bOqcIgnG7j0AIB7ZScZCdq=bi7sQnyNt3J z8)__bA*vmc16N<*aQ*A>;!*P8^5Gi3W6|P>|q^ z1}H-cpl=q=u0wSb>br$LAEH1519}e0GOS!@tUYg1a-Cs79@Gf#CXsasHYW-An6BBE z#D^AiC?(WbnzgMtY~5Q;Ip6q<)#(@pOW}EZ&|7w|>`IOf`9(t=;B@g;MIh2EH)G0_r0z3{>;dLQ^M2Z8r zf@3&7(NQ+X9T?BC!R4j;SQYNG@M2NaatOnwlK?`@uls`^khG}<-xJaXNNS3RxWjN; z2z60Hk8Su{LeB>CZ2)&*9Xx{%xU)0dA?5ARV@S45fAYe}T{b<2QrO6V0^h$VDFy5R zHMAQCJIc+El4u%p>I|SiGtUSU;FWj&-Eu2YbwrXVC)L=q0U-(gc%}oHPaL@(g5r;5 zn;JEep*tT{d_2>0z>TeX3!BIXUPg)_G&F|;{;TpmMC8fqp+q0dM8OYANHC`l)R)N4 zV4k%;UiL0Y)s$!-{?s(>>^tpz`n>_rIXuw_IqPRTbPALD)_I&y$HBML z*=!UJqWoU2)7IJ~+k9Ksv~R_R6G6yxG|O{cZ^KH#x(Tji^i6+b6oL_b({gD6RM7)r zgLj_F*u{f@h*iMbzb?;vPX^ymgs8M3xux)pMRYRSI($Iibp0S0LVitiO~{L2bb1BT zXr+U+&R!<{aX5fXVUr(8x-foJ5t_E95#Nc4NiT2a2aRZV8j)MfHBBjyQuRmt&}hGP zRArBs^Nh_I=LituD3dPe##}XmPH*HI|HOOf! z>xAn;nr$onWl%K;#seFkArI$i4uE1#@e*5#KIea3@~x!M1FdSt9T=e;=xjvbfHnH8#WCPHs9B;6#iOxKp0RuLLNozjHL_knErytEfF z0c$DZLe{dWQ2%f+pDw2N@R}4Xek`Z6R`i)$QEKD)q4*&NZrgo$<8f%z<(IKKPQb)<-rQmNILX4V<^Km7SnP3f+L5X!Y2NQvixc9#MQ z1ZBc2$z~2|t`8n*s@;w1Bar9Y@O7*DL}Ur?a^WOq65mb&Cen7~12A`WJ^&LtgZxm0 z1Y-tBA71{|`fJ{wJ%)ot3xIUqUo7XV!E!ZU%LgAHoI2gj){Jup6W6XxT(p)RdTD$8 z2$Fa5BM=}$%zYISt&GDl*`VABkNJnXInU4%K z8N-GMO(|flUy(M_NRs9A;#yQlzyTooVthjpLXd_vVhFrt>U!&DHCcw^18(fC<^j=V zZ#&mm>Z+3Mc2sCJ4Hk6<=~F+VYQSOu=1M{d1-ynwCF3^$3(%uo`hbDn zgm7&GR2z71sXiV*{SZ6`h+u&<6u|;%s00h!H@5UMPPOjX>xFtsG+d2`KP$l%mKe%CIkdbimcbZmcb(0{r(oV&PUpcl(()#tqG>vRfeMe` zhv8xtw!_K&_x^b3Sl^-Kd=LcpceXpcvn=0-HraB}8OXp%GYs(8l0S8zPbC-C3rR*Brgb^( zL$b2}uN9+9TuidXj~E|Z#(Wmn>>JWu*BVhG(mo7oDQ3BI(Aw7$l72CrXWI&r+$Trn z$~rC;>&3xRJVEuQ&YM75NRr#uLa$99=j)8`562Lm_c*GiUOh`pShcz;SRzIXk&xhs zZ(EM-Zd$Qk*F9QCY;zrlj0YZG1cXGTY8!)?i~+nr6oKHPd-~V;$IELHD$BPO(Ex8N z!U3ZmZ2P(rdtS7zZd(^*iybOUM&P%%)-he_3RAIegY8=Mu&yHrdjil-9DpDj9_`$; zE>maF{(R97CXbb9G8rk9b3|TU^~b@{N#~DmiHFxBk)H(!NZ`W*g~GHfxmtj#A%^B{ znX;0M=Rhs8s?-q4@_9fI!6Rc7-%^B*tYzaKUgwj?{$vmgTb=pKY?)S71IVQWN?SQ3Mp3kO?)>Abb zc}Nq%FZuj@I}!SlcC{JNz^eh$eo`ygwl*~4@SwFKlf!~vP%HxuHnjdSSp0+MjqIfD zCgk6QeCdTAeqN0gO|`3Ke5ax#1+2st$L?#P*QQ3aI^+5WqdN$h|92(8#LyDfT+D=4 zgn|T3d>vfMJlleuC|a~oG;thL?e>Ct36Sv&8PJh`SO&|E_9yFi* zNxbYRA3m!vq!r)4=+Wgb9-OB@!89@W*3TQ1@i9<3$p~~dgcPgJ@O-dq-M-9%MJ1TR z5))Qk3{(n{kf4eOiNritv!ss0D5~hD7acJb&VDqWpA;8pJ$^!XwNE(`^7^ zU>*E~ckVK_x2^zi3KfU23Js>v{zcESLU}3f=Dc3bf<3EwBR8hO)ES>2BW;_CfvVIP za;wfLqI^`p*$6X3=}4i+vRsYUg%P0ug&x;&ZC~l#ufQJ5c6F!vHy42oynMv9nnl(ut+_{Zc9Y zv5kug90l|gw40%OK5xv%K&Q^Q{>gIOpD+8BzzstS<((X8l5Ar|C`cg2gXl>ci%~%# z2CTMVXH#6PP=q1lfz3>=O>LvyNY>AbY7tu)R`E?mO@?XOu$2s)nY*Vqx2LVy!T)UE z-I@0UMuaVoiozJW8iSEKBmP%Emyf|Xs02nBS}5I=qOfTgsWZmE+w0tZs02h(N+{o?5R$qn=l7QYh;O;3?jkXcs2-w2WXqPp z`7odjsbl1bwT&W@1O=tb=RrZl589A#BqB#d4Pq`EGGo#4TD@Qn2^vImTYO*+Q7?nA zKYG6kM?+LKx$I9KRuGJu@#=i?FbWrst=~RR!dH+BU$=^d+h=0;wPiOZ5|i2LsJN>c zCcunxo?Q`+VYJyI``_@o9gDxt6teyuosje;@E5Mdr@Q}dUHy5~dzlPwrqkt7>n6Cr z82)*rLtXhJwk1%zy@DT;2If)g-P-S$y<7e-(1+=vYmOsy5}LUAO}zXjer^+2%WtCR zH!<>?h@4tqv}@&4vGbecbJxx1uA9$YH=ny+K6kx*?t1y$_42vv<#X4|=dPE}T`!-z zUOsodeD3=B-1YOh>*sUV&*!e6&s{&CyM8`*{e15F`P}t$xeHYU^NyOX<#HDa+U8Tq z(FTkG?s9a4aGf)$Uk@=(> zj3EnR4+uK&=3r^y3JSM<$4Y1>x&YQI>yv2+$w=2^7=8c)pvi;^w!{xx9AvEnR5W9n zBlKmXOJ1>wS(+(jJmgg8q-Si4j)$wq_f4lp#(sjM$0qA|L1Lbp9ipJoJJk z8N!4o2U6r7VHOOLwdY&QsecLQ%T<50_C+Asgl~J`a~vfLldnbS3QNPGg8&Sfc^)BenrFK3z zqk~|vh|>I!^E?Kwr2cjpS7@v0{Pg}l1Ov_s%NaHw1R&#;l15)1YcS z%ns5vU%)2=#~hYn@fW*&oCp0O_pR6vWPV1x@I7X24*-LNVro3F)lp}njLy~KeWW}Y&`+}30@n%U)AjEK-Y)`O+aLib5+gZ)$!DLyqIpwZyV*!s; z;wQ9}$0(ggyt$&2cNshdBgokpABc2&@vVDH@F+SR4(IU2;bU7MaY!vdOZRCo0n#ht zDD+)Io~p0?aLH_6o<8~UCg?AwlcST*i(q~e{CgEFr0s8$=|6$9Jpf1i^``S%C_Hg= za(%0JZHI&%o37o1uPM&$?3Qj`vZSaFWCHPj*Sy~i>sGh^(7iu2t?lR#2yXiSshRM< zj^CY$wx?(!w^Im37Up1db+>Inv2g>LL)4ipRqU&`O$(iT4IYEs*(Tp*?Xaoiao*fv zb9{*M3^|S!9ke%e#t=LxbiCkhsKI;Vmgfr@`Bh*S*c(z^naX+Y+4jwy zD8m2^M-GUG6D8aR+geH3f^+5Anz`+{QjPyAPM6vdZ`Y@bx8RY}PyQvQU%{@SZcgkP z9(BxS3`Y?~pjpx3x|}{EW&~1O-WrI^60I9_U>qg@}b z4X=X*6fXm=gL`uyJbxlq)qXgKLoYKlMmrQtrKsVs?fSU(QtX83y6J8UUzW=5r#N3m z8|tw9N?I5D9zzl0HQy1{<`9BnhGFfG)>ZnHA<9p|;{~sfj=e2_$&HnYlZDK62Zjvx zA#X2^lzTA3N0;H_T-<^ryXCHhx(TW9^({}8?zPcdsp4pXjq%qp6S9xeul{ruxEI2+ z?cqJS=-e^X>&s`V8 z5$g(+&iVBjHRM;a0+&G@iuL-C=(bbQ%2=y42*+Vq0_?|TRUTAtb_0> zZ`oVhFXSVuj+MN}4$jlB?R`=Gc`{w+pi_a(qHc?Y0m0wJbX6<{`fDha2D8jjyet&P2ryl?TN;OFRlgY6Elv zs@q>%Q$$QQe+h*2lfQD9R^>;`(A=8CwBC*(P^teHJ!C$VwBFwHLgB8iK4iGXV+Ut! z-yAP2_;+}`Dx_$&!A%{F$S8Kke60+OVGhCS6(ZtLInX#w_I!6SV&Eo!R<92u|0Fi@aoP~ z_?Au>uFe!aVo+>udo>JCk*Gdks9@Lug6)}y2E;tnYn*>e$4hb7DtNx2%>A};k$_-t zK?&PC?+oW~LnIFH1zwY@(84TFvrC*XNPLcE8&pCVdNg-{V86D%hWf!+$oZ6?EyIKq z>9txB-%^Uga%n*Iw&Qw^<8JR_Xc}AP0aeE=@8FE>n-7QKTJ>HNf1yLxd`24gR@45_ z%|9%=t;2P}vbKH-lRFKnpiADP{v!nKw0C!l5@7 zwiqO2oX#!xWAha!2o1RR@KnT{a6%Jtc0v=r*oJfJee(_Ln)z2R&pSw;zck_#fLLg!8T-OawXQKo4?RVwn> zDAp*-nnJ0ltRYh=D#4nx#u!Whs`CVcC9@?HVc+eClkRl58U;*QA}HUQiF>{X5P!sq zlZWfRMWT9*=!UJ`b(&g^evm5l(JBFUNgXr4P44>Qf7^-V3TCqjpm(I zpMok2u4y=$sINtnKc6h;FW1v>!k6(O1G#X8aY+V4exP*CUxGO;^EA1i9-WZ&W~IXk ze02W!wk2ehBnnw$@>6FzS%P2*=G^aVRSltem*3H` zmpiFq2*<^tB@8pcMhBpqzB3)q`jeNVllY5XUUu>h$I%J*L8Z;(9TRVYB0ZSRm`*0z zi>d)sO^@GYJmKm-<=gv=t|dz}8+Vk~!7{sW*48X^aR+JbE8A{+qRD{;lds`qIDL+Q zn1vM98IOk){(6`}3JARQ@_#%>B7A^-7L9ouE&;_(7|usXd=o5Y)5#D}P^?@i-^%zl z=C&}ieIpspq7*xgWM5yvu3o#6u=f_YAfR`auKJ1+l?46T#?@S1_iwPT|zN3VY$#2fge z8xH2v#q@sJhD~M~?d-P&{cn&N#6v!6&MYqzRtY7?B-k$%czM+cqka6bzc~L1G8Zx$ zuiqo-Xa%0k;IP9b*Kv_BvE=STlO_WMi+12>pLhF%N09E(c5kmQDn6D!*_*0vL1|>< z3e$xHoYqT){Rx?ONK$m3Q}J$zZdD6*yQp2HM7?IMaAowNPVg-xy}xpkD@g1QuuMKE}TqNSy1++25VZmm)zIyZk`-_q|}W}Dm%<}Wi+26Y@R!>3?TYDz1p zq*;==&qM&PO3mW0v$9|KVHldm{i@_KCi`{v9Trq-H7nTjcc43zB688~mJ}zwkLQ;} zB$bhCgZqc^L)i_ocpOaU<+w4Jj!SbCJ}caS7wyGzI)}>XrT8+NPw)G)upEu)^PJEr zMP%_fdM-PWAHjSQjN1L#to(N(qG>TJwWQc2QD)n&el8z_ak)=Cd>)r&ES2{qPhhuq z+Pl(AG4ylq{O0`XODP%;v$D*1{;?R0%AJ@9`AV&05-eBCa8wR7r=y_sSMA(>D7BDJ zm*=OSZ%a<27YtTqrF*Y;ebKqRD0TBa`#J{&suVxI_Kfc(xzYL5?cA0|%+Vd#uK!(X zElYqZa@?wr$Twa1IOkWll}xCNOuo82Eh|DUu0LL0gEmlVuU+*nO7UX&IG7FKp6HaC zMM9+%k+Z8F;YOLSGF}YE<%D5pI-1T;hyB?yn0H1Y7>!CzC>)GS9^HU9|UJM{mDH`x$KHlD5 zm!fgsUo6XinQ>VDMt(-G1!Xqshj1P|_eZ0$fO`L2+E8(MarMuOs}G+_eVY$ouczQf z@pAF0`!Fv>Y1m)(gP()P{-mVQWC#baoN1uH94#MLlX6H*G^b9d97|xc3_#9L!r5v> zJylAP`!oUHC;;};Ye4q#baD;S?xnX}-Ibym{G7qfESTSu`%5WG&ojV*S-H!`zs94> zvN|3yR)aaRtQldvcwS5gz3C6bX*tPrb$(m^F5EjMc9c@uI*_=$cwdU^ z&%<$lHEa*(Pg_4S|5y+yT51-jUvA2olTJUMU3}`D_e!yIyy!=!f)dOC<9dfYvz0li z<8T|+-#hT*$Xtuz58&b4y883z zYC4(0TiGyj!^pg5i90m-MA3qBnL878xB#tF)idk2=0O;bcuj`m2Qnd8$b+hC#6?#= z*jgv>wqm*{#*r<{vmq~b&QR<9j!x2E$Y??T$J!(b3n7ydI1opv36PbE9r20Ki(FZ% z4i@cr4;;90;KpJZjN4~n|6u~M@31!x+=v8rb5gXx&5?DTk3;@+*K(n!{1zcx0g@Yp zZke8CL+BrRWf8i*$A4R74LYiHP$h=5JddSa5T&9t`Xx5%@ zy*8O7!a*4g7$GFN2Qcw~3c$?wiOvsK(ez7=%LCpoq-ZwXW&4 z*J54xg-1q##9?1|;etqFJNX+>?B2c>b#nU{v@XHiF?nd+f)641{!M}wH7c}zZ(U8F zTi2uh3;A_AX_5+c`O!Prs~=l>t8(~sD;ie{x#wy zT!+;sGmdUi9mFicMRhc?Fc(%cTfa>+p)QDW8Qq;L40p*k+I1B0qBvcx-x8Dhy7eUr zzW^g_UijPD9XZUM>(9V>Q;Uzw@w>A-_WB)BVcOpayX2F#0^7G+%2x=>^xM;MPPjGC#Kl`tx`&(MfI z$h2`W{PRfHy(EbvudZd`SfxU-_{i@hmM{ynVuO9yYgf z*p`N@sX3Pfrg1@R%)o5soMHnf0dU2}rMVke8;g%8Z{UOB)@&>Mk@wknT?$^eS4`#| zJ`F_l`?R;5!wp9PY|?Av`Z5VI*{P#{rE)tW!`@9KDIv1v1mL2^)kLlm%H&_PCCQOF z9S*^=PHs7t=HjU#Xs7t3MQg|mfaHcGPY;m|b-rneh^#9E@)w6R5t^o*eW&RfPQS;n z%%pSRF6C=U9k|O6>BD6e;2ZCGnh3i2aP@@!S)ML}wsq&D4})f&(cCWG5Z`|j+t$a_DE%ax=iIp7wBvX3hFEy<s_;w;#$lED#0+Q*B1EY zwW64@onQwngrD&NJ$8j2E>^>@4)DM?FnVGY@FC`!%wz2BYR8Om@> z{t<&7z4Y{@&yVR9zLchd?_l&0?-AG}FPP~ksL-e-B*H5PHat1><8fdEUvh(N*PPKh z&VBtoi1PTM<4JG{l1Vz2;o6(wk`KLn)xkhv2_8sv04BjFho12b6rSq1#e;*0VA;3) z4zVA6YZ1Y+)+C&QZ%sZoW0`^_b6-(x%v=dUBg%i&i0yQQm-&sEnJA`lP;+*r=J=A_ zt=TC_kthDpV*c!`Ewk_Tr{#cxp@m9q4kcp6Fna_kLO~+;!B}tD zP*rK&HFG=VR%b3S1g60{6R1v5ymZWETsi6S|q3%l1xyWH~6LA&HM8(Sn#utZ-0#3PcNcM z#a~K=0R(noeA@#a>TL z8fv(t*yWHWBZYEK4m8P&LIDC2obhe&)UgahD)>>HaiAtN4H(`SXvla_(n-iupJ5au z#y5FT$(GLxL=k7OmLk+(Etx6CqTNkj-YwVO5^5NmGNdPO?iGcbJI}lWn(PWq9Ab%v z^T#?xXJ;hUF4F77=5{Uavm;v;6-DcK!VyDzaeyLjceG#AkimK~R}C3R%KviUAtQ=% zQw<{ z|M0Cuq>;5!Vhd(w;0F?srMns}!{0wcaZ@+Q!biOkU0aK@?u<(VxhRt``yQYh!tfKq^f6i^%w)Dxj#qFSSY zVvHN(N#$O~*@Ah|CnCsK`kDAvB7#J%NUle|Wi2Qon^FVX#{ne-o6~N5yP_(IViv)|&-`us>2ax`fIPD@eVb zN1&kewy#)oz&EUnA@pD>bO)e@c4M|X#F}%v9qrRJK-3wuzFzaU97u4~Q2wcbq8JSs zSZFq+Pt!K^+|nKJ@m20^94$1cH}AWO-Ni`dO`g;_7VyHRA;j4Jaf3fY{Nx)@A`VX& zlAF@55JPzhs~9ry9gE5#1!MpOcJ^u_ltDx?&60@ToM9G)mQKT4u$ zjik=-_SIm%yo; zg~smWo2Vl!2Y6X1Vhi3@gciK55?L(G+S2h#dARtMHK3}%I`}aU$g(SB(bY$;VpRp- z!05?UKnqYqyS+kasWX`UqDu|tTvAENXra85 z!pR~DnP6svQjh?O=V&&B&29L+?wFoW>q%iABDnd>fz*x$;vu|+`AfEbUW$v5^7$u} zGm1VO-&6z^rs;+mx3I&>k0^nda4?@PruWNMJoe7aUI%BaU&I;9ArZo;G2jh=3by4@ zLDsaftIjy~0n}5g%GSluLU|{Jktkm{BnK`+K>{NXTJG77E`J9{y|hfoum$RcVsoQ7 z;@i6G_+Isj3Bv$hREs#$`P8MU9tD?N5l5J&?e6Cbo-+9&Oo9>cG-Do7%Hs%(-MXKq z;UN6j4H&r&IP#0&h-uJ*?AV>HlhoZyZKRtAwinpAs9>rKyBm zMp78f*3XMu5k%%Qcj zoqpdF8y5s*DGuA~hY{tzMDYiIAXb`?$XW$nr70bRY@=2$m_Hq= zT9Npn*8YZ$SV}ej^+RO?o%yRFze@mKtv0)sfZa&(}vWJkFcev!K&BkzU!TxUB0{QowhEg z(;urDd1yc6`Q2L>sXsI0ZVgzuTOSpTO~Xo^5$m5W&rd(!R+I^gC5CcO4J?I7NRh>{ z9Pr28%$((E2BbVuDA)=u#IaqAz7|%CEGz@^pe1cv;8g@~OFjttB!b6z@slG&c>gVY zzy=Ihhqy$Ek##q5iC`~Q9I%SD5q!I%@+jVo@d-FOVNj`XSR%XE^9E|lXryKv;_vj(b*kl}3Gs?I-4$^c&Uil{Om>DBLI?>fG*2rG)lN_7M~nEZI6 zGD7i#4w@!_CxzSvz3G4``}4N0yunqhmtgxAl}zOU1>f>{gEj^yb;h+1pT}^?t>n2R zBZYEK3M6T~L;(Ua6mfLZ_icH_4-`f8t>X_psE7->NaecF77y!^wqzWIX`?ppop4Mxy)56K_9 z87Y)=YOp9kK!z0%@Zm;93&j@;R10xUS6TW7M+z9u_Yi0*gB027^MGQ!=r1PpoAE70 zoWNR=?|{CjW4AYcFhYWVPlt`v){}^kgKySeyZ9;#xV?Uu5Vtxi@|p&VI-}F+wX=6! z30g3;P~NHGq6h^kUii8JW~9v=v3!eG0oms5!`Dp@3au+w84Kf0l4dc>=OweKSmvwNI0M|hEL(}V6h?yvcFLxBz**W++II~*3qV3U!odR zMlTV$z+;FAH+elo)XD2n3;3MQX5Hy97!g&aMV#&Vbsg+l`(xK4HLBk*)(ATt6^J!M z3vl^7^Bp>d(PoS6f45r4vAw1Zl=@aQR^nSzZm{` z1b2FM5WIQRddH3hqh0oH`M<#5fLuya_jRF@(8S1ZA`UH3vGS?d`AwYsCSv_aVJ==i z6+f>Dsb##*@3nzQrOVtVx!g6hT<#iLE_V$rm%C6&EPuMW+yyN%pGrP=A(A(bb$UK` z!2>^+NeD3P`+|~2BtLJl97rA>35u@BOKYj-?ggy7i?}j2y%)r}X7(D=XA!*M1r3VBZa3zWgmqNpYWFqdc zPHC6S<1!iNnhe5|2bWG0jvdHYafG$z5JZwTMrg|xphKiGapJ@VSnmVFBt0af1pOat z(;`d)nQPE@SlJ+A7q)|ZjIY!Ak8twP3zmeu3+2FdT8B)+Bp{!)X4}dse+lQyRe!{P z1p@?5H$X^KpM9E4o6q?g@D=XXnZutaPK!!zaiG z&NC_7eG>MpcL3JNHY?R>;6M(7#p0?z4vtR9;T;1PW-ii+0W$+Y?j!u%ZknS$N zHI(a}FHeWVIec*V))r*8CccrD?$d`xq*ugHTI%=cfRuZ*@E1Lhi=KXG1 zx4QL*?){-@ZOhRt-}e7gGvR+7zdPfwmCX4#8vb^=?2n3$9Ci7;2 zK{Z_j*xueXu=Eitce*^&-uiUOM^>FHd5;~OD7AylD?3pIZh@|C?9GWf{}~Kc%kYUc zA|yBdSgip?vKFn%b$#E_w?!-Y>39|AN$p+m_RbT;KOPQLq(0Ybrf@y5r@sC31p34# zPpYE+kr+uOFRDi6FRBKZCG(z~4BqY<$zSeW)-dwllZ^cLBqRSl$>1&HblW!co)lR^ zKlUfXQINcc>prJGCN_5AHG#ZzL=O?Rt(zA0#uhE@LN~BmYOVogUe{`jMJCkf-QlJm zF5o$Znjpc@x&BI)OeuRuA#FXQ}4~Ds5uw=GUvWvU@ zZ~|UEt5Lw%_)YxfgWm#0Y~T^~)^E{kLp%5xNOQr6#_(e*?xODOg9Rb6X2p$~a^7iR z7X?4raf|$M(faMD=ltW_U(@NsDEQW)?;hX4%VQJ{`b&6j_?AshN?CAM(+o&5rnw&d zNSt9fG2ch?&Yp2#uehe+XrkF8nmppDMh0><3$`R&D*1sZdl*kIg){WF%-}t|M9;N| zZQtR8@GV7;wT!`hOJ@FYrD4};Yi-lh{5Dh-7aQ|2G|?ArMPHO}3~L^)2FsW#kwp28 znHV3%H1@pC{Ba^+!X*d|&POQusWY7{L9hgK?)No+0C@T6@;f@V{gL;7I4)3Hh?CwF zOz5Uhy_w@LdU@H&I~?#j&F(8{^LWRki6irSFq`q{gxg-K0aQ(o-(@`E-d75!Q=$b> z{j?-8*~J~?4@(kL9Sb90!^v>^904#3CYwJPgQ!cN)Z-T2&H{>wKpzJa;T%WT|8db9Y%P9xdT7qFkX&78nQ#4flPfIHq=gUCVV zOILk0iCTT_v6lh%(h&WA4OB9(0P*)L(m?dLp?tpXFCULiI)8lI7DZTw#IN|*eezz- z?h^bFpLg9Va^*-a8yj6Tdj0z#-n=Jic8oS`Fh~xO{kEY04V)lu6j5_#d6|exC_$v{ zdeXS$)8{?#M|=2Ve{ud3B(2oL3Pfn3H)tpoYC5hZ*Y1+}kS9z7fEVTq+m?O0jc;Q8 z!6V4@XsfrStM2xHve#2cKLo~o`NgFRhd1>!f`K8M1bH6k0U_Qk(Oru5`7ll8+p?(3 ztoeRKAL<16+>qW{xycnKF6_WWI( zm2>O8a?yo+sHMb7@8kI;5lN+F$^FClq3i}(JTj4R+wHLdS4Dg~8t_@+_Pb~=meV=- z8kgeBY(Bluavg3rpV{s?=TE-y+!)!A2w1t@o1zxIspB|i#ORqx!E zM$FM2SgikDYLhMjs>pHUW5~DLCpTUAIOkWll}xD2Uc0(HEh|DUu0LL0Lu_-Yy>`{R zD8-B6<6t&`d!kcn773M7M9!{ygd1hP%6KstmlKAa=?KD5hW*(xn0H1Y7>!CzC>)GS z9^kse)&)gp^trB}HQLOHt`SN{P=G#JWD60H@1-xj95J zEf)O;u)mg?*3cLx8TYo6QbTj7m!oif^Xa zOPhW!FRuQ1arNO-sqg#Y>-7|zCtfZ-bsy%XC=L6|e(-bf*q@X%nhfCp(v)pmYqI_2 zX!*FBltW^oIdwYaSOS}60CIj3&Q>GppHhn4rwRB&0kEH51G0~&lWUN6FTLgJt`yba z=L~LU!Tg@wUrJGWo&gTb%3U`8H6C4-)$xe28qASp%?RVg^I|$Ew~0V}cDtpRN-30n z?1{HdmHX!FIJ|~kb1^A-SDg(X%P}av#{=d<4#h?L{b&^|AwfHH*_PH|5Mpr=QO* zKK0IfrPv9Xz#~&Z31)zCy+fYa%AC}3I1HigRVf;fVqvb z2c|6_Y^~GL3EM?6&U$(u;@M3y;nO;GilNr~F};w{#5_M_EX%gRZP<6ftp;0}*pcss zkC!>`kfBT;auAs=$=a+KD(l1dz()~W?#W=_sc%79GhcUY>a2vY64oYk2PZdIb9~E@ z1eR}@_#|?QO7f&c$%EucPZA%05(+1z_F?xDvXJ#|$_*H~>?zayM4n6J0Ky?Aer!yl zpOZLQ52vyx9%5*69!fEG))Eu+nDEUMi9q-yJ<%!Wfp%>3|ki)$L z56P~G{vEiHaDx2*12+!bpqbS+buX<{_7=D~O2Yhf*K(n!{1zcx0g@YpZb7bb+gwXJ zNY4V0BIqb|g^QSBI}lANOSDV#WfY3}i^hl@_fsEeGA~^>EIo?#LatHl6^d=Ww)iBv zK^X%`=aGg|L>|va3W&(}iOvsF(ez;mLBvsDf5>t!sL1Nn)JD zr#*=wNgVcd7cPj7;Ip5yDKa6%5hu5gLF*FC9g~OFE%*?E@82Y7QKLfZ_tw?)xph72 zzmQ+2lh!pvrh;oA{GbdJqT5IjxI#Z#@_8$dz@p1Uf?3$3(Gvn%*k2=FLQsqPWJZxK zu;KB8m_@g+n|=MBoW;1PZqu>ONg`bmC2@^Vba$>W+$B3bhUm)Fud9+Dm z1%?AHJcN#RSM%|h;h`1<$gvFEfO%0`Kl&5bFHS{I5ZxR^ZkMn=7Xn+tQFV zHRqDRG%kpZ8JJB3Qf%NP0It}$G-CrB5NF{j8~9+jwLm!j$XjfzE(I?x?KPkLA^LsV zTh8HzqX0JPwQ+r!gqZBq(Z5o;9g$)0CXz%DS#tt#QR8YNR|#eEFWQpi$Z*Mv@q`ex zQ+(2*H55q-kqvb|S1FV-)WAB)9*1XACg04EV%>^ zoE1baWjr~bJdDD{W9zrikOMv#wrJYz#XtBo8_bP^Y&`NW38L?b>IwU^JV^v?!55Ao ze*&smVua`q@Td4#DH2A|o(1lGDM{LvIXLRuaYnxAMUNk-(1nlh5)Xu5{G#T`0Bk8?l=XU*2fypF)ucCz3r9Vpx?ZoVJD3`%(bF@b)`_pAAH@ZM) zQ&3Q6*(j$DtR=N5hYKt*Vby?j>DLya;bpN5ASmctArdll&<)5%ON$q6fDW!{LOveF zj+TH!TqFftRb232s0=D(4B*9{h!#;$w`uV0M6i&zQ{n`q)Y}p%Vu?=>gLuBuI;By} z*iNtm7Q(aVfF8S24P0H!<60Yd;2Ri~ObYlAGfZX^=Kw^#`}2lA%5q-S3n^+}pei7R z@p`WUR1$J12Z=PxgOyw&5@7Ls3kpXWq-fj*z+yOHYbEcOpqQ}FKH088kp%{Xn%EX` zjS~k<5p)A3gh!Ty2fR=evE`q%#Q9yE;)ZW6A`IVpL!AUas{F8`R-!&_eD4PIlmpgC zw(M>+6~m$BGO^QFv8ICWVDu305!fUzm_+!IfBaKSIj|8D;gtg$o*eq|IIw{)xj~L= zE}dn6Z&5rg2bncBSU{ zlH9G?DM^th{?MWWQP!5(cl+`H!aA8yMpXC!!e=`z2NVn~nE*}&qNtK2ZvsUqNaQ{k z>kZpNO6TUbxmOf!?mSBlXtFCbafl_lRyg54JF;bE zLV@0SV<8@c0%$Gl{zrQ;`ts2UW7LheJKC>l$Y4F0tA-3D<$pQwkP$_>sfLk_NJ#+2 z^NDw^NyL!39V+1c9MQDlo%(!|Ed>;{H^81Kz z!`%NJ*Fz33KQJM}oIk*=Je>wq8dwrP<^hIw1w&EJ zkA}1wd@IXji4=$UgMoHq4nhV*dFKG7)-*h^@h(-v(^`$5aFa zhx~1wi%(&ClL5pwB*+7i|K!sV-!Xo=4SCx~*9gB4(DSr6lM3FwF-4!ICA?mGs=+{-$lIOLHyObFFioDB?!T*Gn! z_5l85BW_?VtCC~9ycM;f_?rq|!yS7wIXYqYI@%*1s3~t@ zyUvJt;!ZmI{v0NiOUvN~M-Am45ivM$6r&+Q4k!p?gDq*paCuVhM5#<;3WE>hIkxAO z4oi$*p1(!8sUQ&z#{phCizp68Gz~9x#>lV0vVIpQ@_?-N<{TC#p_81=hijc|ew3A&ag)auq8o_y$H#t^!(s8rqH7{=DiT+^bL$ zO+!naA@u{Ow^J3eFtkwKsez>k1qrS|=%Hsj`i7AyCS+iN#9-Ut3OI1N4yZ2p4Tcfd zn}nt?4B!Q!2rHdWU78B4fU%2d+U|Z{^T=gp8jE(u-i3Kp@{?1*N(;uO&Rns6#&>K0 zQV!n0Li)Ph7`{w{7VO3R?>k9dru0Vg+T!S$iSv6N6^2a%Nu2@nUwg*)v`BY34J9Lm za!w5+1qet{#L|6_7A4$3J0Y1|w#yR<`S1i%a+mBTBh+kluU0fe4fQYo<9e*WLIj5)nryk?Dm5mScOhf&;wYx z?eoUv6`Gioq;i8mXTyZ{cAa7Lf1QCPs1jeTl#;OCVyW!&`%6(ob3m<-OLg4F<+#3b zXQL)A(0w4Z(aI_u>+&jOiNU6w3p&v;N76k}Mk-~>k^d?EoxPfs>cN|w!R(!+t z3eATiCYHiUV@ssS*3Zjj5hhlPV4km8$XYQ|tME-@HCl$he}+k=X->#mc3mIq@WAnl zJaFiavP@~k`o<1yQ{6%bKqjEr@c5>TR8E~C>d)cCG**=;AQ>r?b80{-KtKv84#av; zCyz}4#nd;(lggd1vIXZM$XEKA_*UZEM%1b;JfzoxBC;vPx4Jq#s}3mftDwXi2Z?BZ zqoS-~LzGizaQWAZtJ|B;z1vD)fF*`U#*eNnkc+X`Y|0uafE7TPKy0{55aCr5}dMqPk`%$4MJzJhF6 z-~~ zi*6BD#*6-9LcbZ`QbZN3r4myxwVxkML=@OaZ9R<~+zEsnR1iU8?*>4W2H}eF1KY2t z6jGo^K^H1GAH;pAw!UqI zpzdjwCl7buAYYZBi!cn}WwQtwNmD_)5HW*k+E64%R6Bt@a;!ha9IRHFcKUr!T&aBJ z@p}EB!ESR@~S=Mf*?dS&Fako1IGn` zuOA?oO^%AWrs1K^7;xead4Bb!5`bW6p}bQ=L=g%yknmi%-RtsF8n_9H1afbeqYB2e zOe9rr8IWMsp9d4fhc=iz@y$e4B5p>$Z$p{{@wOEvc7TXIf(T_+(bo?V@diglT+{GS zXJq$mKE02P7Nspt3@wy*a(GBms~4dlg$K_zb*d0-@S0})Rjtvsxq2IwtgNCMC6EC@~uSBkhQ7>FEYQ{vv3{^mj7zqzRXBzuG!;D zs~60l!a;B-FT1z!VQNY{@9Wn#3hjSXC^ifyZk-X~VDIi-fBJOUKD+r+S{Y%9q1;nL zN+A*wP@(R%jz+3Bi83CwRzb2{eY?!JWIPx25osKH8BAdrz~hC8D)6eYm`$gU0A`+R zvtrveWVDKX!CE~sM^I4C=HXK?=NA>9r9;Ty9#k#2-+1C%`F@uPBq|`9hLJksz<&hu zNib^nXS2a{UX6All0-Qvhm^#?wE-asut1O=7@d&pv?#DRzC&DT;djB;oql^%S0Tgc zVCbq0S8y)yf>=Zsk#BqtQGdznQHw5fI-7N;!(c?8(LYWXOMaFIfZ3l%5|R}NJ#w#K zYY}!jDiE87mO7)$?*{Xi*|HLYS4IluoEl0B5RgF#*q$sG>VeBfMIl7DBN#w8G>##} z)&=G=sV=mQZjxX~wtQa3ir9g*6fq-f*|1g;dAd`Z7d)3-&%<%J1pQ>OvvPumxIp2q zw41mx^+?h~_fdMVZT_R7zxDCWe7?6iCXYc>|cz$^;=BpAx25nl4Mv|Pb zi*f%Uh$BGw#T=B9{ZUGExQ!`}*xP{K>+2oa9iese=TFeLGrLTxADYFWs zGhy2{q?w$3>|7@$1!E^+enkg7*&jTCdTokx_WG?_lFg2az@`DD&e-*<-bE!ENlXXj znH)Bfm*%|Q62u^{5tgaR3&5g?VH&Pd!A3O^GMo*zv&tQ{;-&MFRm6(PqEOZ=X|r0i z514n0#AW?H25+oZI9UdBqH!F`l(+Uc5K(C(e*GY!*z>61YZ@%-jARF!d$;@kw0B+! zWN_3_{>gzOvEvk@A%PDMa`M}*Mc(Q*cn8q|a)|9~bA^M9=WF!@kYwK^4@Ka4V?4g= zFR05l-}uu!d};U#dk5u8o6X*l(TxTn2z?)5#%g*1o@t zK*DOp!F&DSlDqX~l4>XZS#`#{5AGkv4^=&ru*6XA$pI$OObU@8pYC)xoCk}=(TQ$p zuI_uDZ-AE;i8kB-Um#Xq*R~3Jhw)6q285A~w~awd#sD5ML?wk~7T;Dxm(GX3x_{lk zdzg?4u@-fuGo9Rr536}pORC$SfUg#WC|+Lj^E{Ze_Q#|}J?7Dy-0KGvbjzb6qG4Ud zt25FaGBREF{_a(xsW7xq-pOGk(Nl_0kfDgF>t2+GcLNmBT@&h`ZwDig;|ucsR%hmt zFo2i1B8trB)7j!>LB1T{R0I*GX^}?}x2?5x*L6&&3H2LzqP$;)qhTA$0qdIHhWyCd zKllO3H^nLx!dZb#@8tEJA|>B3K1fWMd+hh}fBy?UUj6ytQQDqK6vj-IZ+aHotsWS{ zQft$7e>r#zVvPX|Qu0Rg;3gOaaCb?_NxZHgQ0A$>3@E4e+%-#wDBqej5az2R8x)m4 z@s^9X(9sD)3hl$}Z6;Y3@grfkHrhQN^5|rJa|=C=-*q|pb^Pwr-G8&;KgaODTQ|Y| z#qiG~$U$3Y?E2!dvY7RZl(6Df>o~o2Ux7L0=%n+MQ=R#+lS_wBpqXAkL8JOku9H>aUv%4K6XCcob#gzvWYZF5 zf0}*>q^+o5hnz~R7En&@SU`VdZMJPy+!Sfu?*w{T6vNPIB_YM>p$ao&PQ7f0ZjelUohX!bvzDuUC8(6%9$FS|EhJg#S*{U&o3=i+)D>8r~U&!DM-O!;o9I_9XMWr!w=t zei$iu08o+GG?dgCe@=^FQ|~Kywk!=N95s}Ga!5(Elwvd_umVbhXE`p}yrP&#op-km zBP7GwkdCx6=UpiS@{ollHoF6Jdy$t7MdMnKhJ2(J9W=@dAC(k2fXhCE%Nvg&#J9Xm zDmCG01+Poz*{jGgfY)r1{cpGd$D*+_T}`08iKILReMhF4cM%0LUO>Xy_`ck86_ksS-8jpqygFZdhYXi}1GHP1pQ{1E@ZqgMt(G_tMF?V$_cXcs$buo8!F?V$_cXcs$buo8!F?S6ycMUOj z4Ka5OF?S6ycMUOj4Ka5OF?S6ycMUOjQK2HcS7a5|6m!=UbJrAe*A#Qt6m!=UbJrAe z*A#Qt6mu6*Q6lc*eO%Z?%-xQdyPZ6DPd{eNLjEoPtN{x&3WyE5^F7!3uf00y-B|0u zKK*!>T9ng|oPp!$oQ{k(p)&Q{Eh05nG{|ORZ#@5T4uVjsp4RC`RWglsLNl?CWxdiq zX`=RIq!}58AE4Dil10=Ygjvpyk!gR@V_KI`FZzg3IwK3tFDQLa4y2cE9yc1Q*=2z9JRF{3a*+MH`#O#7?jhdXP{uZ5;5 zEwj_bibRFIiWUUp(h^iKm3E-Z<2qA1otv1x zEEcV5KfSDOd^~oy^?eo$;n~o zqp);%Z1ae_(4Z3R|M5z6m~$*#RPV<2y}dp;sKY_L_}25#^1}?gqKoSsl4-O2Mu&0~ zeM7`vU0F`Zh%Zl{{CJ5lNY6d#k*oGg`>&lH6t-U^)4xY#DC|YNdY->Lp)_?Q ztkU#3mNNf2=Zi>k$@kC>Bqi@}O6NDNy-?e~tDWB!rP=Ljrl#xvQd;q|>Vvx!t7D{JTBq!J z;FL|zuqt?`~l97K2%Y_TP!~Iiq z665Z$UY$xAr71&SpGHYvXA~cJj#MZW_paSHs8H1p?XOOuOy%vEs25czr98_+FH>lh`$^Y6Mv-gMJ9t%|FIBUP)dDtc{KuvsyFmFX&WUSGg!vG2}rK(kPl zp)6C%yJm5kRV<;$>Xfc^YrkaGHdmD$UqH8BRWye9-W>_--yOonsrbfSO0{&=?9}!I zi%0$i3>B&={M1*0B^TlKABj~&Ht}(R#5$9Io)8~MJD^Jv8x(~U#-U9=(<8CW@v2y+ zk2F-s9HqRyi}jZBbBA0!@kzM4dGsV~8fBpWSLpUh2MX4^urL>jhPc4rb*hz5@K*%M-25ql%oj8(d8qPsj=Zvc-{Pq z0;~}ehOVLlw|F2vD7$bVF_5M!2GVrJK$2_jVU@Y}qRtM*KU`W)0Ej{q z@q%RbS=3H4r4-OXkvMHsXDETOq)iF@=FpJAek7;H16~LdK*+tl44KtQly_n|?!;T| z)^>_DK-zppefh|KUfPa{#i!I8A1LafX+PM7$rcLWxseA*yR*OvLLzgko#wJRBnL$_ z!>w;^8U)@SG(J3ZjDLRn!}D&}_P0TVzxdYQZr9E-%3%L3om?Shf(hV4<`vW;Fc74t zllKHJq$&YT(Rs7*5af~843Y{O9yS{yKqp_4!-oun zBngPArXy2oU1kV#FhrdEjs@Xc=2QHn4CY%h^N(k38ptEs>L}eN>ciz5Gf8&Qfv#wS zt|;Fa-@Mu_LxvaP#!PV*AXF10%{K6!C{l8sqrrNf3#E zAsGd4byQaliFo1_9ghbh{)Ms&-a)CuGQn>Z{t3nQUd=g&fOTMKgBi$_KpJCoFlkW$1Ex1IR(Ka>-L7j( zSe_6BAfR?Li=gLNL1ANkctPR4&s0##L4b+N@g#R+Zr#|i{PqrMc$<(hq#aCu3!?uG zP7tsmZO(iiF}qYI5=t5hYiAq8t1p5ZQZfE)1;Yo(X(93(qaAT|1f#0yc$04zKglP4 zOLX-B^P7LmrJpphmUr0MskAq<9~Eom1M8)#Z56T7#qP@l`g_1WL-^qJ5|keA=)}@O zJt_u)+ES|HSMrCa3=)+tRIglw3Vl~@az~SJLy|`w|3Vz=QTTIsIUSA<=`Ur7FhwWp zk)iI~cYA#!^+{icm-ErZREowXxL^9A6p8-%*ZvIpC`BZ&mv=xROVPNT4K5dLDH2=~ zx!SUJ9px?q1Y_fb&b=K~kEu;;hs!-l=I+S`ypv+gALp_we7ka5+RaW+D4h!YtLuv?R`Q=Y9hhidM`VXAGYt>>!!8cGUZ}w+8+OL8wOjcPl~T2 zWW;v&5Z>7vxg}ohH?oY4_IpVUoXq?4sVc?LFZ1E$aQan>#_d*?8T%hWT)UvQ#!$;A z^&PGq?m}lRXEeRFExoFP#V4r`xfl=oUlx+nh*Hj#kRcocnQDDl>*4`Sh?S_wA$rH63ZjkiKlH=#Yt=!q-YC(1eNk!VP zQ9E4nkaIPf&KG?tX6&!+4bDjq(nN5Glsni@Cg=8jUy>u|!><=-|Cat3SRg4HSeVa? z#Y~FEjTMCQE3%3Tdu;X1tAxpJ16oSX&&IhH_Jme}WAXS-WRQ7Tg8 zE?mS#!LavduDXR9v7M_{y-w^*riqd`yJFt~=HvY3&k7dtz&spvY=V8@E#-s=+vj8=#ngy`^kYvfI?pLLR~u&rsTsMF4<_5yog9N=KOQ#M!CP+g zY`wEX6nc0bs#7~8K0Wb#iC0eEOrK@83|$#>bmrg~Bl&ce9E6xDA^69|&V}q<;p4M> zZn8K-ceja(JbQ93Rx;;=?xnSIJh`1`I$X&6!t*}4N0B}twiL{MJEJ*6#QW2V~s3Ze+$zYjIh^1n>RE(1?IY1)3J33;`1w&=~F}+Gg%aRHnJ7lO6^Iy0FB;82MKq&9*00Sp$f!pw?eqK|;8s1vhUTv(+Nv7)Jyw$apb7?kK6DpG=| z%B0n4W{@uYhto@eBw$}P;UE%RC$}ji5%3w%$>Pp#jB(xJ-ZmD9Aw=w-Yd4}xg~o4< zskd*;*488W)pHv&AXE_=h#xB9LXj9%U{|8KC(Fy@SJ>LDdD7kFHtYhf-tEm&d@}aM~x3$`=L5CD5Ah z-=`?sONA8kBBqPe)^Z?Sw7%7RJY{&8pyXH%K7o6*>9L%nt&f5ga)b}^K#{NvCup-O PZY7+GFKD9w1ik+O%Gy-H diff --git a/__tests__/Samples/Samples.ps1 b/__tests__/Samples/Samples.ps1 index 6de82ac..0d14446 100644 --- a/__tests__/Samples/Samples.ps1 +++ b/__tests__/Samples/Samples.ps1 @@ -1,16 +1,3 @@ -<# -Get-Service | Select-Object -First 30 | Export-Clixml -Path Get-Service.xml - -$Disk = Get-CimInstance -ClassName win32_logicaldisk | Select-Object -Property DeviceId,VolumeName, Size,Freespace -$Disk | Export-Clixml -Path Get-CimInstanceDisk.xml - -$NetAdapter = Get-CimInstance -Namespace root/StandardCimv2 -class MSFT_NetAdapter | Select-Object -Property Name, InterfaceDescription, MacAddress, LinkSpeed -$NetAdapter | Export-Clixml -Path Get-CimInstanceNetAdapter.xml - -$Process = Get-Process | Where-Object { $_.StartTime } | Select-Object -first 20 -$Process | Export-Clixml -Path Get-Process.xml -#> - if ($IsLinux -or $IsMacOS) { if (-not (Get-Command 'Get-Service' -ErrorAction SilentlyContinue)) { function Get-Service { @@ -33,6 +20,34 @@ if ($IsLinux -or $IsMacOS) { } } function Get-Process { - Import-Clixml -Path (Join-Path $PSScriptRoot Get-Process.xml) + param ( + $Name, + $Id + ) + if (-not $Name) { + if ($Id) { + (Import-Clixml -Path (Join-Path $PSScriptRoot Get-Process.xml))[0] + } + else { + Import-Clixml -Path (Join-Path $PSScriptRoot Get-Process.xml) + } + } } -} \ No newline at end of file +} + +<# Creating the samples +Get-Service | Select-Object -First 30 | Export-Clixml -Path Get-Service.xml + +$Disk = Get-CimInstance -ClassName win32_logicaldisk | Select-Object -Property DeviceId,VolumeName, Size,Freespace +$Disk | Export-Clixml -Path Get-CimInstanceDisk.xml + +$NetAdapter = Get-CimInstance -Namespace root/StandardCimv2 -class MSFT_NetAdapter | Select-Object -Property Name, InterfaceDescription, MacAddress, LinkSpeed +$NetAdapter | Export-Clixml -Path Get-CimInstanceNetAdapter.xml + +$Process = Get-Process | Where-Object { $_.StartTime -and $_.StartInfo -and $_.Modules -and $_.Company -notlike '*Microsoft*' } | Select-Object -first 20 +$Process | Export-Clixml -Path $Path +$Process = Import-Clixml -Path $Path +$Process | foreach {$_.Threads = 'System.Diagnostics.ProcessThreadCollection'} +$Process | foreach {$_.Modules = 'System.Diagnostics.ProcessThreadCollection'} +$Process | Export-Clixml -Path $Path +#> \ No newline at end of file From ea8927394fc411341e06042b109f94757accb691 Mon Sep 17 00:00:00 2001 From: ili101 Date: Wed, 28 Aug 2019 19:49:17 +0300 Subject: [PATCH 10/14] Remove duplicate files with different case --- Merge-worksheet.ps1 | 538 ---------------------------------------- Send-SqlDataToExcel.ps1 | 175 ------------- compare-worksheet.ps1 | 286 --------------------- plot.ps1 | 218 ---------------- 4 files changed, 1217 deletions(-) delete mode 100644 Merge-worksheet.ps1 delete mode 100644 Send-SqlDataToExcel.ps1 delete mode 100644 compare-worksheet.ps1 delete mode 100644 plot.ps1 diff --git a/Merge-worksheet.ps1 b/Merge-worksheet.ps1 deleted file mode 100644 index 01ae37e..0000000 --- a/Merge-worksheet.ps1 +++ /dev/null @@ -1,538 +0,0 @@ -Function Merge-Worksheet { - <# - .Synopsis - Merges two Worksheets (or other objects) into a single Worksheet with differences marked up. - .Description - The Compare-Worksheet command takes two Worksheets and marks differences in the source document, and optionally outputs a grid showing the changes. - By contrast the Merge-Worksheet command takes the Worksheets and combines them into a single sheet showing the old and new data side by side. - Although it is designed to work with Excel data it can work with arrays of any kind of object; so it can be a merge *of* Worksheets, or a merge *to* a Worksheet. - .Example - Merge-Worksheet "Server54.xlsx" "Server55.xlsx" -WorksheetName services -OutputFile Services.xlsx -OutputSheetName 54-55 -show - The workbooks contain audit information for two servers, one sheet contains - a list of services. This command creates a worksheet named "54-55" in a - workbook named "services.xlsx" which shows all the services and their - differences, and opens the new workbook in Excel. - .Example - Merge-Worksheet "Server54.xlsx" "Server55.xlsx" -WorksheetName services -OutputFile Services.xlsx -OutputSheetName 54-55 -HideEqual -AddBackgroundColor LightBlue -show - This modifies the previous command to hide the equal rows in the output - sheet and changes the color used to mark rows added to the second file. - .Example - Merge-Worksheet -OutputFile .\j1.xlsx -OutputSheetName test11 -ReferenceObject (dir .\ImportExcel\4.0.7) -DifferenceObject (dir .\ImportExcel\4.0.8) -Property Length -Show - This version compares two directories, and marks what has changed. - Because no "Key" property is given, "Name" is assumed to be the key - and the only other property examined is length. Files which are added - or deleted or have changed size will be highlighed in the output sheet. - Changes to dates or other attributes will be ignored. - .Example - Merge-Worksheet -RefO (dir .\ImportExcel\4.0.7) -DiffO (dir .\ImportExcel\4.0.8) -Pr Length | Out-GridView - This time no file is written and the results - which include all properties, - not just length, are output and sent to Out-Gridview. This version uses - aliases to shorten the parameters, (OutputFileName can be "outFile" and - the Sheet can be"OutSheet"; DifferenceObject & ReferenceObject can be - DiffObject & RefObject respectively). - #> - [cmdletbinding(SupportsShouldProcess=$true)] - Param( - #First Excel file to compare. You can compare two Excel files or two other objects or a reference obhct against a difference file, but not a reference file against an object. - [parameter(ParameterSetName='A',Mandatory=$true,Position=0)] #A = Compare two files default headers - [parameter(ParameterSetName='B',Mandatory=$true,Position=0)] #B = Compare two files user supplied headers - [parameter(ParameterSetName='C',Mandatory=$true,Position=0)] #C = Compare two files headers P1, P2, P3 etc - $Referencefile , - - #Second Excel file to compare. - [parameter(ParameterSetName='A',Mandatory=$true,Position=1)] - [parameter(ParameterSetName='B',Mandatory=$true,Position=1)] - [parameter(ParameterSetName='C',Mandatory=$true,Position=1)] - [parameter(ParameterSetName='E',Mandatory=$true,Position=1)] #D Compare two objects; E = Compare one object one file that uses default headers - [parameter(ParameterSetName='F',Mandatory=$true,Position=1)] #F = Compare one object one file that uses user supplied headers - [parameter(ParameterSetName='G',Mandatory=$true,Position=1)] #G Compare one object one file that uses headers P1, P2, P3 etc - $Differencefile , - - #Name(s) of Worksheets to compare. - [parameter(ParameterSetName='A',Position=2)] #Applies to all sets EXCEPT D which is two objects (no sheets) - [parameter(ParameterSetName='B',Position=2)] - [parameter(ParameterSetName='C',Position=2)] - [parameter(ParameterSetName='E',Position=2)] - [parameter(ParameterSetName='F',Position=2)] - [parameter(ParameterSetName='G',Position=2)] - $WorksheetName = "Sheet1", - - #The row from where we start to import data, all rows above the StartRow are disregarded. By default this is the first row. - [parameter(ParameterSetName='A')] #Applies to all sets EXCEPT D which is two objects (no sheets, so no start row ) - [parameter(ParameterSetName='B')] - [parameter(ParameterSetName='C')] - [parameter(ParameterSetName='E')] - [parameter(ParameterSetName='F')] - [parameter(ParameterSetName='G')] - [int]$Startrow = 1, - - #Specifies custom property names to use, instead of the values defined in the column headers of the Start ROw. - [Parameter(ParameterSetName='B',Mandatory=$true)] #Compare object + sheet or 2 sheets with user supplied headers - [Parameter(ParameterSetName='F',Mandatory=$true)] - [String[]]$Headername, - - #Automatically generate property names (P1, P2, P3, ..) instead of using the values the top row of the sheet. - [Parameter(ParameterSetName='C',Mandatory=$true)] #Compare object + sheet or 2 sheets with headers of P1, P2, P3 ... - [Parameter(ParameterSetName='G',Mandatory=$true)] - [switch]$NoHeader, - - #Reference object to compare if a Worksheet is NOT being used. Reference object can combine with a difference sheet or difference object - [parameter(ParameterSetName='D',Mandatory=$true)] - [parameter(ParameterSetName='E',Mandatory=$true)] - [parameter(ParameterSetName='F',Mandatory=$true)] - [parameter(ParameterSetName='G',Mandatory=$true)] - [Alias('RefObject')] - $ReferenceObject , - #Difference object to compare if a Worksheet is NOT being used for either half. Can't have a reference sheet and difference object. - [parameter(ParameterSetName='D',Mandatory=$true,Position=1)] - [Alias('DiffObject')] - $DifferenceObject , - [parameter(ParameterSetName='D',Position=2)] - [parameter(ParameterSetName='E',Position=2)] - [parameter(ParameterSetName='F',Position=2)] - [parameter(ParameterSetName='G',Position=2)] - #If there isn't a filename to use to label data from the "Difference" side, DiffPrefix is used, it defaults to "=>" - $DiffPrefix = "=>" , - #File to hold merged data. - [parameter(Position=3)] - [Alias('OutFile')] - $OutputFile , - #Name of Worksheet to output - if none specified will use the reference Worksheet name. - [parameter(Position=4)] - [Alias('OutSheet')] - $OutputSheetName = "Sheet1", - #Properties to include in the DIFF - supports wildcards, default is "*". - $Property = "*" , - #Properties to exclude from the the search - supports wildcards. - $ExcludeProperty , - #Name of a column which is unique used to pair up rows from the refence and difference side, default is "Name". - $Key = "Name" , - #Sets the font color for the "key" field; this means you can filter by color to get only changed rows. - $KeyFontColor = [System.Drawing.Color]::DarkRed , - #Sets the background color for changed rows. - $ChangeBackgroundColor = [System.Drawing.Color]::Orange, - #Sets the background color for rows in the reference but deleted from the difference sheet. - $DeleteBackgroundColor = [System.Drawing.Color]::LightPink, - #Sets the background color for rows not in the reference but added to the difference sheet. - $AddBackgroundColor = [System.Drawing.Color]::PaleGreen, - #if specified, hides the rows in the spreadsheet that are equal and only shows changes, added or deleted rows. - [switch]$HideEqual , - #If specified, outputs the data to the pipeline (you can add -WhatIf so the command only outputs to the pipeline). - [switch]$Passthru , - #If specified, opens the output workbook. - [Switch]$Show - ) - - #region Read Excel data - if ($Differencefile -is [System.IO.FileInfo]) {$Differencefile = $Differencefile.FullName} - if ($Referencefile -is [System.IO.FileInfo]) {$Referencefile = $Referencefile.FullName} - if ($Referencefile -and $Differencefile) { - #if the filenames don't resolve, give up now. - try { $oneFile = ((Resolve-Path -Path $Referencefile -ErrorAction Stop).path -eq (Resolve-Path -Path $Differencefile -ErrorAction Stop).path)} - Catch { Write-Warning -Message "Could not Resolve the filenames." ; return } - - #If we have one file , we must have two different Worksheet names. If we have two files $WorksheetName can be a single string or two strings. - if ($onefile -and ( ($WorksheetName.count -ne 2) -or $WorksheetName[0] -eq $WorksheetName[1] ) ) { - Write-Warning -Message "If both the Reference and difference file are the same then Worksheet name must provide 2 different names" - return - } - if ($WorksheetName.count -eq 2) {$Worksheet2 = $DiffPrefix = $WorksheetName[1] ; $Worksheet1 = $WorksheetName[0] ; } - elseif ($WorksheetName -is [string]) {$Worksheet2 = $Worksheet1 = $WorksheetName ; - $DiffPrefix = (Split-Path -Path $Differencefile -Leaf) -replace "\.xlsx$","" } - else {Write-Warning -Message "You must provide either a single Worksheet name or two names." ; return } - - $params= @{ ErrorAction = [System.Management.Automation.ActionPreference]::Stop } - foreach ($p in @("HeaderName","NoHeader","StartRow")) {if ($PSBoundParameters[$p]) {$params[$p] = $PSBoundParameters[$p]}} - try { - $ReferenceObject = Import-Excel -Path $Referencefile -WorksheetName $Worksheet1 @params - $DifferenceObject = Import-Excel -Path $Differencefile -WorksheetName $Worksheet2 @Params - } - Catch {Write-Warning -Message "Could not read the Worksheet from $Referencefile::$Worksheet1 and/or $Differencefile::$Worksheet2." ; return } - if ($NoHeader) {$firstDataRow = $Startrow } else {$firstDataRow = $Startrow + 1} - } - elseif ( $Differencefile) { - if ($WorksheetName -isnot [string]) {Write-Warning -Message "You must provide a single Worksheet name." ; return } - $params = @{WorksheetName=$WorksheetName; Path=$Differencefile; ErrorAction=[System.Management.Automation.ActionPreference]::Stop } - foreach ($p in @("HeaderName","NoHeader","StartRow")) {if ($PSBoundParameters[$p]) {$params[$p] = $PSBoundParameters[$p]}} - try {$DifferenceObject = Import-Excel @Params } - Catch {Write-Warning -Message "Could not read the Worksheet '$WorksheetName' from $Differencefile::$WorksheetName." ; return } - if ($DiffPrefix -eq "=>" ) { - $DiffPrefix = (Split-Path -Path $Differencefile -Leaf) -replace "\.xlsx$","" - } - if ($NoHeader) {$firstDataRow = $Startrow } else {$firstDataRow = $Startrow + 1} - } - else { $firstDataRow = 1 } - #endregion - - #region Set lists of properties and row numbers - #Make a list of properties/headings using the Property (default "*") and ExcludeProperty parameters - $propList = @() - $DifferenceObject = $DifferenceObject | Update-FirstObjectProperties - $headings = $DifferenceObject[0].psobject.Properties.Name # This preserves the sequence - using get-member would sort them alphabetically! There may be extra properties in - if ($NoHeader -and "Name" -eq $Key) {$Key = "p1"} - if ($headings -notcontains $Key -and - ('*' -ne $Key)) {Write-Warning -Message "You need to specify one of the headings in the sheet '$Worksheet1' as a key." ; return } - foreach ($p in $Property) { $propList += ($headings.where({$_ -like $p}) )} - foreach ($p in $ExcludeProperty) { $propList = $propList.where({$_ -notlike $p}) } - if (($propList -notcontains $Key) -and - ('*' -ne $Key)) { $propList += $Key} #If $key isn't one of the headings we will have bailed by now - $propList = $propList | Select-Object -Unique #so, prolist must contain at least $key if nothing else - - #If key is "*" we treat it differently , and we will create a script property which concatenates all the Properties in $Proplist - $ConCatblock = [scriptblock]::Create( ($proplist | ForEach-Object {'$this."' + $_ + '"'}) -join " + ") - - #Build the list of the properties to output, in order. - $diffpart = @() - $refpart = @() - foreach ($p in $proplist.Where({$key -ne $_}) ) {$refPart += $p ; $diffPart += "$DiffPrefix $p" } - $lastRefColNo = $proplist.count - $FirstDiffColNo = $lastRefColNo + 1 - - if ($key -ne '*') { - $outputProps = @($key) + $refpart + $diffpart - #If we are using a single column as the key, don't duplicate it, so the last difference column will be A if there is one property, C if there are two, E if there are 3 - $lastDiffColNo = (2 * $proplist.count) - 1 - } - else { - $outputProps = @( ) + $refpart + $diffpart - #If we not using a single column as a key all columns are duplicated so, the Last difference column will be B if there is one property, D if there are two, F if there are 3 - $lastDiffColNo = (2 * $proplist.count ) - } - - #Add RowNumber to every row - #If one sheet has extra rows we can get a single "==" result from compare, with the row from the reference sheet, but - #the row in the other sheet might be different so we will look up the row number from the key field - build a hash table for that here - #If we have "*" as the key ad the script property to concatenate the [selected] properties. - - $Rowhash = @{} - $rowNo = $firstDataRow - foreach ($row in $ReferenceObject) { - if ($null -eq $row._row) {Add-Member -InputObject $row -MemberType NoteProperty -Value ($rowNo ++) -Name "_Row" } - else {$rowNo++ } - if ($Key -eq '*' ) {Add-Member -InputObject $row -MemberType ScriptProperty -Value $ConCatblock -Name "_All" } - } - $rowNo = $firstDataRow - foreach ($row in $DifferenceObject) { - Add-Member -InputObject $row -MemberType NoteProperty -Value $rowNo -Name "$DiffPrefix Row" -Force - if ($Key -eq '*' ) { - Add-Member -InputObject $row -MemberType ScriptProperty -Value $ConCatblock -Name "_All" - $Rowhash[$row._All] = $rowNo - } - else {$Rowhash[$row.$key] = $rowNo } - $rowNo ++ - } - if ($DifferenceObject.count -gt $Rowhash.Keys.Count) { - Write-Warning -Message "Difference object has $($DifferenceObject.Count) rows; but only $($Rowhash.keys.count) unique keys" - } - if ($Key -eq '*') {$key = "_ALL"} - #endregion - #We need to know all the properties we've met on the objects we've diffed - $eDiffProps = [ordered]@{} - #When we do a compare object changes will result in two rows so we group them and join them together. - $expandedDiff = Compare-Object -ReferenceObject $ReferenceObject -DifferenceObject $DifferenceObject -Property $propList -PassThru -IncludeEqual | - Group-Object -Property $key | ForEach-Object { - #The value of the key column is the name of the Group. - $keyval = $_.name - #we're going to create a custom object from a hash table. - $hash = [ordered]@{} - foreach ($result in $_.Group) { - if ($result.SideIndicator -ne "=>") {$hash["_Row"] = $result._Row } - elseif (-not $hash["$DiffPrefix Row"]) {$hash["_Row"] = "" } - #if we have already set the side, this must be the second record, so set side to indicate "changed"; if we got two "Same" indicators we may have a classh of keys - if ($hash.Side) { - if ($hash.Side -eq $result.SideIndicator) {Write-Warning -Message "'$keyval' may be a duplicate."} - $hash.Side = "<>" - } - else {$hash["Side"] = $result.SideIndicator} - switch ($hash.side) { - '==' { $hash["$DiffPrefix is"] = 'Same' } - '=>' { $hash["$DiffPrefix is"] = 'Added' } - '<>' { if (-not $hash["_Row"]) { - $hash["$DiffPrefix is"] = 'Added' - } - else { - $hash["$DiffPrefix is"] = 'Changed' - } - } - '<=' { $hash["$DiffPrefix is"] = 'Removed'} - } - #find the number of the row in the the "difference" object which has this key. If it is the object is only in the reference this will be blank. - $hash["$DiffPrefix Row"] = $Rowhash[$keyval] - $hash[$key] = $keyval - #Create FieldName and/or =>FieldName columns - foreach ($p in $result.psobject.Properties.name.where({$_ -ne $key -and $_ -ne "SideIndicator" -and $_ -ne "$DiffPrefix Row" })) { - if ($result.SideIndicator -eq "==" -and $p -in $propList) - {$hash[("$p")] = $hash[("$DiffPrefix $p")] = $result.$P} - elseif ($result.SideIndicator -eq "==" -or $result.SideIndicator -eq "<=") - {$hash[("$p")] = $result.$P} - elseif ($result.SideIndicator -eq "=>") { $hash[("$DiffPrefix $p")] = $result.$P} - } - } - - foreach ($k in $hash.keys) {$eDiffProps[$k] = $true} - [Pscustomobject]$hash - } | Sort-Object -Property "_row" - - #Already sorted by reference row number, fill in any blanks in the difference-row column. - for ($i = 1; $i -lt $expandedDiff.Count; $i++) {if (-not $expandedDiff[$i]."$DiffPrefix Row") {$expandedDiff[$i]."$DiffPrefix Row" = $expandedDiff[$i-1]."$DiffPrefix Row" } } - - #Now re-Sort by difference row number, and fill in any blanks in the reference-row column. - $expandedDiff = $expandedDiff | Sort-Object -Property "$DiffPrefix Row" - for ($i = 1; $i -lt $expandedDiff.Count; $i++) {if (-not $expandedDiff[$i]."_Row") {$expandedDiff[$i]."_Row" = $expandedDiff[$i-1]."_Row" } } - - $AllProps = @("_Row") + $OutputProps + $eDiffProps.keys.where({$_ -notin ($outputProps + @("_row","side","SideIndicator","_ALL" ))}) - - if ($PassThru -or -not $OutputFile) {return ($expandedDiff | Select-Object -Property $allprops | Sort-Object -Property "_row", "$DiffPrefix Row" ) } - elseif ($PSCmdlet.ShouldProcess($OutputFile,"Write Output to Excel file")) { - $expandedDiff = $expandedDiff | Sort-Object -Property "_row", "$DiffPrefix Row" - $xl = $expandedDiff | Select-Object -Property $OutputProps | Update-FirstObjectProperties | - Export-Excel -Path $OutputFile -Worksheetname $OutputSheetName -FreezeTopRow -BoldTopRow -AutoSize -AutoFilter -PassThru - $ws = $xl.Workbook.Worksheets[$OutputSheetName] - for ($i = 0; $i -lt $expandedDiff.Count; $i++ ) { - if ( $expandedDiff[$i].side -ne "==" ) { - Set-ExcelRange -Worksheet $ws -Range ("A" + ($i + 2 )) -FontColor $KeyFontColor - } - elseif ( $HideEqual ) {$ws.row($i+2).hidden = $true } - if ( $expandedDiff[$i].side -eq "<>" ) { - $range = $ws.Dimension -replace "\d+", ($i + 2 ) - Set-ExcelRange -Worksheet $ws -Range $range -BackgroundColor $ChangeBackgroundColor - } - elseif ( $expandedDiff[$i].side -eq "<=" ) { - $rangeR1C1 = "R[{0}]C[1]:R[{0}]C[{1}]" -f ($i + 2 ) , $lastRefColNo - $range = [OfficeOpenXml.ExcelAddress]::TranslateFromR1C1($rangeR1C1,0,0) - Set-ExcelRange -Worksheet $ws -Range $range -BackgroundColor $DeleteBackgroundColor - } - elseif ( $expandedDiff[$i].side -eq "=>" ) { - if ($propList.count -gt 1) { - $rangeR1C1 = "R[{0}]C[{1}]:R[{0}]C[{2}]" -f ($i + 2 ) , $FirstDiffColNo , $lastDiffColNo - $range = [OfficeOpenXml.ExcelAddress]::TranslateFromR1C1($rangeR1C1,0,0) - Set-ExcelRange -Worksheet $ws -Range $range -BackgroundColor $AddBackgroundColor - } - Set-ExcelRange -Worksheet $ws -Range ("A" + ($i + 2 )) -BackgroundColor $AddBackgroundColor - } - } - Close-ExcelPackage -ExcelPackage $xl -Show:$Show - } -} - -Function Merge-MultipleSheets { - <# - .Synopsis - Merges Worksheets into a single Worksheet with differences marked up. - .Description - The Merge Worksheet command combines two sheets. Merge-MultipleSheets is - designed to merge more than two. So if asked to merge sheets A,B,C which - contain Services, with a Name, Displayname and Start mode, where "Name" is - treated as the key, Merge-MultipleSheets calls Merge-Worksheet to merge - "Name", "Displayname" and "Startmode" from sheets A and C; the result has - column headings "_Row", "Name", "DisplayName", "Startmode", "C-DisplayName", - "C-StartMode", "C-Is" and "C-Row". - Merge-MultipleSheets then calls Merge-Worksheet again passing it the - intermediate result and sheet B, comparing "Name", "Displayname" and - "Start mode" columns on each side, and gets a result with columns "_Row", - "Name", "DisplayName", "Startmode", "B-DisplayName", "B-StartMode", "B-Is", - "B-Row", "C-DisplayName", "C-StartMode", "C-Is" and "C-Row". Any columns on - the "reference" side which are not used in the comparison are added on the - right, which is why we compare the sheets in reverse order. - - The "Is" columns hold "Same", "Added", "Removed" or "Changed" and is used for - conditional formatting in the output sheet (these columns are hidden by default), - and when the data is written to Excel the "reference" columns, in this case - "DisplayName" and "Start" are renamed to reflect their source, so become - "A-DisplayName" and "A-Start". - - Conditional formatting is also applied to the Key column ("Name" in this - case) so the view can be filtered to rows with changes by filtering this - column on color. - - Note: the processing order can affect what is seen as a change. For example - if there is an extra item in sheet B in the example above, Sheet C will be - processed and that row and will not be seen to be missing. When sheet B is - processed it is marked as an addition, and the conditional formatting marks - the entries from sheet A to show that a values were added in at least one - sheet. However if Sheet B is the reference sheet, A and C will be seen to - have an item removed; and if B is processed before C, the extra item is - known when C is processed and so C is considered to be missing that item. - .Example - dir Server*.xlsx | Merge-MulipleSheets -WorksheetName Services -OutputFile Test2.xlsx -OutputSheetName Services -Show - Here we are auditing servers and each one has a workbook in the current - directory which contains a "Services" Worksheet (the result of - Get-WmiObject -Class win32_service | Select-Object -Property Name, Displayname, Startmode) - No key is specified so the key is assumed to be the "Name" column. - The files are merged and the result is opened on completion. - .Example - dir Serv*.xlsx | Merge-MulipleSheets -WorksheetName Software -Key "*" -ExcludeProperty Install* -OutputFile Test2.xlsx -OutputSheetName Software -Show - The server audit files in the previous example also have "Software" worksheet, - but no single field on that sheet works as a key. Specifying "*" for the key - produces a compound key using all non-excluded fields (and the installation - date and file location are excluded). - .Example - Merge-MulipleSheets -Path hotfixes.xlsx -WorksheetName Serv* -Key hotfixid -OutputFile test2.xlsx -OutputSheetName hotfixes -HideRowNumbers -Show - This time all the servers have written their hotfix information to their own - worksheets in a shared Excel workbook named "Hotfixes.xlsx" (the information was - obtained by running Get-Hotfix | Sort-Object -Property description,hotfixid | Select-Object -Property Description,HotfixID) - This ignores any sheets which are not named "Serv*", and uses the HotfixID as - the key; in this version the row numbers are hidden. - #> - [cmdletbinding()] - [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseDeclaredVarsMoreThanAssignments', '', Justification="False positives when initializing variable in begin block")] - [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseSingularNouns', '', Justification="MultipleSheet would be incorrect")] - #[Alias("Merge-MulipleSheets")] #There was a spelling error in the first release. This was there to ensure things didn't break but intelisense gave the alias first. - param ( - #Paths to the files to be merged. Files are also accepted - [Parameter(Mandatory=$true,ValueFromPipeline=$true)] - $Path , - #The row from where we start to import data, all rows above the Start row are disregarded. By default this is the first row. - [int]$Startrow = 1, - - #Specifies custom property names to use, instead of the values defined in the column headers of the Start row. - [String[]]$Headername, - - #If specified, property names will be automatically generated (P1, P2, P3, ..) instead of using the values from the start row. - [switch]$NoHeader, - - #Name(s) of Worksheets to compare. - $WorksheetName = "Sheet1", - #File to write output to. - [Alias('OutFile')] - $OutputFile = ".\temp.xlsx", - #Name of Worksheet to output - if none specified will use the reference Worksheet name. - [Alias('OutSheet')] - $OutputSheetName = "Sheet1", - #Properties to include in the comparison - supports wildcards, default is "*". - $Property = "*" , - #Properties to exclude from the the comparison - supports wildcards. - $ExcludeProperty , - #Name of a column which is unique used to pair up rows from the reference and difference sides, default is "Name". - $Key = "Name" , - #Sets the font color for the Key field; this means you can filter by color to get only changed rows. - $KeyFontColor = [System.Drawing.Color]::Red, - #Sets the background color for changed rows. - $ChangeBackgroundColor = [System.Drawing.Color]::Orange, - #Sets the background color for rows in the reference but deleted from the difference sheet. - $DeleteBackgroundColor = [System.Drawing.Color]::LightPink, - #Sets the background color for rows not in the reference but added to the difference sheet. - $AddBackgroundColor = [System.Drawing.Color]::Orange, - #If specified, hides the columns in the spreadsheet that contain the row numbers. - [switch]$HideRowNumbers , - #If specified, outputs the data to the pipeline (you can add -whatif so it the command only outputs to the pipeline). - [switch]$Passthru , - #If specified, opens the output workbook. - [Switch]$Show - ) - begin { $filestoProcess = @() } - process { $filestoProcess += $Path} - end { - if ($filestoProcess.Count -eq 1 -and $WorksheetName -match '\*') { - Write-Progress -Activity "Merging sheets" -CurrentOperation "Expanding * to names of sheets in $($filestoProcess[0]). " - $excel = Open-ExcelPackage -Path $filestoProcess - $WorksheetName = $excel.Workbook.Worksheets.Name.where({$_ -like $WorksheetName}) - Close-ExcelPackage -NoSave -ExcelPackage $excel - } - - #Merge identically named sheets in different work books; - if ($filestoProcess.Count -ge 2 -and $WorksheetName -is "string" ) { - Get-Variable -Name 'HeaderName','NoHeader','StartRow','Key','Property','ExcludeProperty','WorksheetName' -ErrorAction SilentlyContinue | - Where-Object {$_.Value} | ForEach-Object -Begin {$params= @{} } -Process {$params[$_.Name] = $_.Value} - - Write-Progress -Activity "Merging sheets" -CurrentOperation "comparing '$WorksheetName' in $($filestoProcess[-1]) against $($filestoProcess[0]). " - $merged = Merge-Worksheet @params -Referencefile $filestoProcess[0] -Differencefile $filestoProcess[-1] - $nextFileNo = 2 - while ($nextFileNo -lt $filestoProcess.count -and $merged) { - Write-Progress -Activity "Merging sheets" -CurrentOperation "comparing '$WorksheetName' in $($filestoProcess[-$nextFileNo]) against $($filestoProcess[0]). " - $merged = Merge-Worksheet @params -ReferenceObject $merged -Differencefile $filestoProcess[-$nextFileNo] - $nextFileNo ++ - - } - } - #Merge different sheets from one workbook - elseif ($filestoProcess.Count -eq 1 -and $WorksheetName.Count -ge 2 ) { - Get-Variable -Name 'HeaderName','NoHeader','StartRow','Key','Property','ExcludeProperty' -ErrorAction SilentlyContinue | - Where-Object {$_.Value} | ForEach-Object -Begin {$params= @{} } -Process {$params[$_.Name] = $_.Value} - - Write-Progress -Activity "Merging sheets" -CurrentOperation "Comparing $($WorksheetName[-1]) against $($WorksheetName[0]). " - $merged = Merge-Worksheet @params -Referencefile $filestoProcess[0] -Differencefile $filestoProcess[0] -WorksheetName $WorksheetName[0,-1] - $nextSheetNo = 2 - while ($nextSheetNo -lt $WorksheetName.count -and $merged) { - Write-Progress -Activity "Merging sheets" -CurrentOperation "Comparing $($WorksheetName[-$nextSheetNo]) against $($WorksheetName[0]). " - $merged = Merge-Worksheet @params -ReferenceObject $merged -Differencefile $filestoProcess[0] -WorksheetName $WorksheetName[-$nextSheetNo] -DiffPrefix $WorksheetName[-$nextSheetNo] - $nextSheetNo ++ - } - } - #We either need one Worksheet name and many files or one file and many sheets. - else { Write-Warning -Message "Need at least two files to process" ; return } - #if the process didn't return data then abandon now. - if (-not $merged) {Write-Warning -Message "The merge operation did not return any data."; return } - - $orderByProperties = $merged[0].psobject.properties.where({$_.name -match "row$"}).name - Write-Progress -Activity "Merging sheets" -CurrentOperation "creating output sheet '$OutputSheetName' in $OutputFile" - $excel = $merged | Sort-Object -Property $orderByProperties | - Export-Excel -Path $OutputFile -Worksheetname $OutputSheetName -ClearSheet -BoldTopRow -AutoFilter -PassThru - $sheet = $excel.Workbook.Worksheets[$OutputSheetName] - - #We will put in a conditional format for "if all the others are not flagged as 'same'" to mark rows where something is added, removed or changed - $sameChecks = @() - - #All the 'difference' columns in the sheet are labeled with the file they came from, 'reference' columns need their - #headers prefixed with the ref file name, $colnames is the basis of a regular expression to identify what should have $refPrefix appended - $colNames = @("^_Row$") - if ($key -ne "*") - {$colnames += "^$Key$"} - if ($filesToProcess.Count -ge 2) { - $refPrefix = (Split-Path -Path $filestoProcess[0] -Leaf) -replace "\.xlsx$"," " - } - else {$refPrefix = $WorksheetName[0] } - Write-Progress -Activity "Merging sheets" -CurrentOperation "applying formatting to sheet '$OutputSheetName' in $OutputFile" - #Find the column headings which are in the form "diffFile is"; which will hold 'Same', 'Added' or 'Changed' - foreach ($cell in $sheet.Cells[($sheet.Dimension.Address -replace "\d+$","1")].Where({$_.value -match "\sIS$"}) ) { - #Work leftwards across the headings applying conditional formatting which says - # 'Format this cell if the "IS" column has a value of ...' until you find a heading which doesn't have the prefix. - $prefix = $cell.value -replace "\sIS$","" - $columnNo = $cell.start.Column -1 - $cellAddr = [OfficeOpenXml.ExcelAddress]::TranslateFromR1C1("R1C$columnNo",1,$columnNo) - while ($sheet.cells[$cellAddr].value -match $prefix) { - $condFormattingParams = @{RuleType='Expression'; BackgroundPattern='Solid'; Worksheet=$sheet; StopIfTrue=$true; Range=$([OfficeOpenXml.ExcelAddress]::TranslateFromR1C1("R[1]C[$columnNo]:R[1048576]C[$columnNo]",0,0)) } - Add-ConditionalFormatting @condFormattingParams -ConditionValue ($cell.Address + '="Added"' ) -BackgroundColor $AddBackgroundColor - Add-ConditionalFormatting @condFormattingParams -ConditionValue ($cell.Address + '="Changed"') -BackgroundColor $ChangeBackgroundColor - Add-ConditionalFormatting @condFormattingParams -ConditionValue ($cell.Address + '="Removed"') -BackgroundColor $DeleteBackgroundColor - $columnNo -- - $cellAddr = [OfficeOpenXml.ExcelAddress]::TranslateFromR1C1("R1C$columnNo",1,$columnNo) - } - #build up a list of prefixes in $colnames - we'll use that to set headers on rows from the reference file; and build up the "if the 'is' cell isn't same" list - $colNames += $prefix - $sameChecks += (($cell.Address -replace "1","2") +'<>"Same"') - } - - #For all the columns which don't match one of the Diff-file prefixes or "_Row" or the 'Key' columnn name; add the reference file prefix to their header. - $nameRegex = $colNames -Join '|' - foreach ($cell in $sheet.Cells[($sheet.Dimension.Address -replace "\d+$","1")].Where({$_.value -Notmatch $nameRegex}) ) { - $cell.Value = $refPrefix + $cell.Value - $condFormattingParams = @{RuleType='Expression'; BackgroundPattern='Solid'; Worksheet=$sheet; StopIfTrue=$true; Range=[OfficeOpenXml.ExcelAddress]::TranslateFromR1C1("R[2]C[$($cell.start.column)]:R[1048576]C[$($cell.start.column)]",0,0)} - Add-ConditionalFormatting @condFormattingParams -ConditionValue ("OR(" +(($sameChecks -join ",") -replace '<>"Same"','="Added"' ) +")" ) -BackgroundColor $DeleteBackgroundColor - Add-ConditionalFormatting @condFormattingParams -ConditionValue ("AND(" +(($sameChecks -join ",") -replace '<>"Same"','="Changed"') +")" ) -BackgroundColor $ChangeBackgroundColor - } - #We've made a bunch of things wider so now is the time to autofit columns. Any hiding has to come AFTER this, because it unhides things - $sheet.Cells.AutoFitColumns() - - #if we have a key field (we didn't concatenate all fields) use what we built up in $sameChecks to apply conditional formatting to it (Row no will be in column A, Key in Column B) - if ($Key -ne '*') { - Add-ConditionalFormatting -Worksheet $sheet -Range "B2:B1048576" -ForeGroundColor $KeyFontColor -BackgroundPattern 'None' -RuleType Expression -ConditionValue ("OR(" +($sameChecks -join ",") +")" ) - $sheet.view.FreezePanes(2, 3) - } - else {$sheet.view.FreezePanes(2, 2) } - #Go back over the headings to find and hide the "is" columns; - foreach ($cell in $sheet.Cells[($sheet.Dimension.Address -replace "\d+$","1")].Where({$_.value -match "\sIS$"}) ) { - $sheet.Column($cell.start.Column).HIDDEN = $true - } - - #If specified, look over the headings for "row" and hide the columns which say "this was in row such-and-such" - if ($HideRowNumbers) { - foreach ($cell in $sheet.Cells[($sheet.Dimension.Address -replace "\d+$","1")].Where({$_.value -match "Row$"}) ) { - $sheet.Column($cell.start.Column).HIDDEN = $true - } - } - if ($Passthru) {$excel} - else {Close-ExcelPackage -ExcelPackage $excel -Show:$Show} - Write-Progress -Activity "Merging sheets" -Completed - } -} diff --git a/Send-SqlDataToExcel.ps1 b/Send-SqlDataToExcel.ps1 deleted file mode 100644 index 874ee87..0000000 --- a/Send-SqlDataToExcel.ps1 +++ /dev/null @@ -1,175 +0,0 @@ -Function Send-SQLDataToExcel { - <# - .SYNOPSIS - Inserts a DataTable - returned by a SQL query - into an ExcelSheet - .DESCRIPTION - This command takes a SQL statement and run it against a database connection; for the connection it accepts either - * an object representing a session with a SQL server or ODBC database, or - * a connection string to make a session (if -MSSQLServer is specified it uses the SQL Native client, - and -Connection can be a server name instead of a detailed connection string. Without this switch it uses ODBC) - The command takes all the parameters of Export-Excel, except for -InputObject (alias TargetData); after - fetching the data it calls Export-Excel with the data as the value of InputParameter and whichever of - Export-Excel's parameters it was passed; for details of these parameters see the help for Export-Excel. - .PARAMETER Session - An active ODBC Connection or SQL connection object representing a session with a database which will be queried to get the data . - .PARAMETER Connection - A database connection string to be used to create a database session; either - * A Data source name written in the form DSN=ODBC_Data_Source_Name, or - * A full ODBC or SQL Native Client Connection string, or - * The name of a SQL server. - .PARAMETER MSSQLServer - Specifies the connection string is for SQL server, not ODBC. - .PARAMETER SQL - The SQL query to run against the session which was passed in -Session or set up from -Connection. - .PARAMETER Database - Switches to a specific database on a SQL server. - .PARAMETER QueryTimeout - Override the default query time of 30 seconds. - .PARAMETER DataTable - A System.Data.DataTable object containing the data to be inserted into the spreadsheet without running a query. - This remains supported to avoid breaking older scripts, but if you have a DataTable object you can pass the it - into Export-Excel using -InputObject. - .EXAMPLE - C:\> Send-SQLDataToExcel -MsSQLserver -Connection localhost -SQL "select name,type,type_desc from [master].[sys].[all_objects]" -Path .\temp.xlsx -WorkSheetname master -AutoSize -FreezeTopRow -AutoFilter -BoldTopRow - - Connects to the local SQL server and selects 3 columns from [Sys].[all_objects] and exports then to a sheet named master with some basic header management - .EXAMPLE - C:\> $dbPath = 'C:\Users\James\Documents\Database1.accdb' - C:\> $Connection = "Driver={Microsoft Access Driver (*.mdb, *.accdb)};Dbq=$dbPath;" - C:\> $SQL="SELECT top 25 Name,Length From TestData ORDER BY Length DESC" - - C:\> Send-SQLDataToExcel -Connection $connection -SQL $sql -path .\demo1.xlsx -WorkSheetname "Sizes" -AutoSize - - This creates an ODBC connection string to read from an Access file and a SQL Statement to extracts data from it, - and sends the resulting data to a new worksheet - - .EXAMPLE - C:\> $dbPath = 'C:\users\James\Documents\f1Results.xlsx' - C:\> $Connection = "Driver={Microsoft Excel Driver (*.xls, *.xlsx, *.xlsm, *.xlsb)};Dbq=$dbPath;" - C:\> $SQL="SELECT top 25 DriverName, Count(RaceDate) as Races, Count(Win) as Wins, Count(Pole) as Poles, Count(FastestLap) as Fastlaps " + - " FROM Results GROUP BY DriverName ORDER BY (count(win)) DESC" - - C:\> Send-SQLDataToExcel -Connection $connection -SQL $sql -path .\demo2.xlsx -WorkSheetname "Winners" -AutoSize -AutoNameRange -ConditionalFormat @{DataBarColor="Blue"; Range="Wins"} - - Similar to the previous example this creates a connection string, this time for an Excel file, and runs - a SQL statement to get a list of motor-racing results, outputting the resulting data to a new spreadsheet. - The spreadsheet is formatted and a data bar added to show make the drivers' wins clearer. - (the F1 results database is available from https://1drv.ms/x/s!AhfYu7-CJv4ehNdZWxJE9LMAX_N5sg ) - .EXAMPLE - C:\> $dbPath = 'C:\users\James\Documents\f1Results.xlsx' - C:\> $SQL = "SELECT top 25 DriverName, Count(RaceDate) as Races, Count(Win) as Wins, Count(Pole) as Poles, Count(FastestLap) as Fastlaps " + - " FROM Results GROUP BY DriverName ORDER BY (count(win)) DESC" - C:\> $null = Get-SQL -Session F1 -excel -Connection $dbPath -sql $sql -OutputVariable Table - - C:\> Send-SQLDataToExcel -DataTable $Table -Path ".\demo3.xlsx" -WorkSheetname Gpwinners -autosize -TableName winners -TableStyle Light6 -show - - This uses Get-SQL (at least V1.1 - download from the PowerShell gallery with Install-Module -Name GetSQL - - note the function is Get-SQL the module is GetSQL without the "-" ) - Get-SQL simplify making database connections and building /submitting SQL statements. - Here Get-SQL uses the same SQL statement as before; -OutputVariable leaves a System.Data.DataTable object in $table - and Send-SQLDataToExcel puts $table into the worksheet and sets it as an Excel table. - The command is equivalent to running - C:\> Export-Excel -inputObject $Table -Path ".\demo3.xlsx" -WorkSheetname Gpwinners -autosize -TableName winners -TableStyle Light6 -show - This is quicker than using - C:\> Get-SQL | export-excel -ExcludeProperty rowerror,rowstate,table,itemarray,haserrors - (the F1 results database is available from https://1drv.ms/x/s!AhfYu7-CJv4ehNdZWxJE9LMAX_N5sg ) - .EXAMPLE - C:\> $SQL = "SELECT top 25 DriverName, Count(Win) as Wins FROM Results GROUP BY DriverName ORDER BY (count(win)) DESC" - C:\> Send-SQLDataToExcel -Session $DbSessions["f1"] -SQL $sql -Path ".\demo3.xlsx" -WorkSheetname Gpwinners -ClearSheet -autosize -ColumnChart - - Like the previous example, this uses Get-SQL (download from the gallery with Install-Module -Name GetSQL). - It uses the database session which Get-SQL created, rather than an ODBC connection string. - The Session parameter can either be a object (as shown here), or the name used by Get-SQL ("F1" in this case). - Here the data is presented as a quick chart. - .EXAMPLE - C:\> Send-SQLDataToExcel -path .\demo4.xlsx -WorkSheetname "LR" -Connection "DSN=LR" -sql "SELECT name AS CollectionName FROM AgLibraryCollection Collection ORDER BY CollectionName" - - This example uses an Existing ODBC datasource name "LR" which maps to an adobe lightroom database and gets a list of collection names into a worksheet - - .Link - Export-Excel - #> - [CmdletBinding(DefaultParameterSetName="none")] - [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSAvoidGlobalVars', '', Justification="Allowed to use DBSessions Global variable from GETSQL Module")] - - param ( - [Parameter(ParameterSetName="SQLConnection", Mandatory=$true)] - [Parameter(ParameterSetName="ODBCConnection", Mandatory=$true)] - $Connection, - [Parameter(ParameterSetName="ExistingSession", Mandatory=$true)] - $Session, - [Parameter(ParameterSetName="SQLConnection", Mandatory=$true)] - [switch]$MsSQLserver, - [Parameter(ParameterSetName="SQLConnection")] - [String]$DataBase, - [Parameter(ParameterSetName="SQLConnection", Mandatory=$true)] - [Parameter(ParameterSetName="ODBCConnection", Mandatory=$true)] - [Parameter(ParameterSetName="ExistingSession", Mandatory=$true)] - [string]$SQL, - [int]$QueryTimeout, - [Parameter(ParameterSetName="Pre-FetchedData", Mandatory=$true)] - [System.Data.DataTable]$DataTable - ) -#Import the parameters from Export-Excel, we will pass InputObject, and we have the common parameters so exclude those, -#and re-write the [Parmameter] attribute on each one to avoid parameterSetName here competing with the settings in Export excel. -#The down side of this that impossible parameter combinations won't be filtered out and need to be caught later. - DynamicParam { - $ParameterAttribute = "System.Management.Automation.ParameterAttribute" - $RuntimeDefinedParam = "System.Management.Automation.RuntimeDefinedParameter" - $paramDictionary = New-Object -TypeName System.Management.Automation.RuntimeDefinedParameterDictionary - $attributeCollection = New-Object -TypeName System.Collections.ObjectModel.Collection[System.Attribute] - $attributeCollection.Add((New-Object -TypeName $ParameterAttribute -Property @{ ParameterSetName = "__AllParameterSets" ;Mandatory = $false})) - foreach ($P in (Get-Command -Name Export-Excel).Parameters.values.where({$_.name -notmatch 'Verbose|Debug|Action$|Variable$|Buffer$|TargetData$|InputObject$'})) { - $paramDictionary.Add($p.Name, (New-Object -TypeName $RuntimeDefinedParam -ArgumentList $p.name, $p.ParameterType, $attributeCollection ) ) - } - return $paramDictionary - } - process { - #Dynamic params mean we can get passed parameter combination Export-Excel will reject, so throw here, rather than get data and then have Export-Excel error. - if ($PSBoundParameters.Path -and $PSBoundParameters.ExcelPackage) { - throw 'Parameter error: you cannot specify both a path and an Excel Package.' - return - } - if ($PSBoundParameters.AutoFilter -and ($PSBoundParameters.TableName -or $PSBoundParameters.TableStyle)) { - Write-Warning "Tables are automatically auto-filtered, -AutoFilter will be ignored" - $null = $PSBoundParameters.Remove('AutoFilter') - } - #We were either given a session object or a connection string (with, optionally a MSSQLServer parameter) - #If we got -MSSQLServer, create a SQL connection, if we didn't but we got -Connection create an ODBC connection - if ($MsSQLserver -and $Connection) { - if ($Connection -notmatch '=') {$Connection = "server=$Connection;trusted_connection=true;timeout=60"} - $Session = New-Object -TypeName System.Data.SqlClient.SqlConnection -ArgumentList $Connection - if ($Session.State -ne 'Open') {$Session.Open()} - if ($DataBase) {$Session.ChangeDatabase($DataBase) } - } - elseif ($Connection) { - $Session = New-Object -TypeName System.Data.Odbc.OdbcConnection -ArgumentList $Connection ; $Session.ConnectionTimeout = 30 - } - if ($Session) { - #A session was either passed in or just created. If it's a SQL one make a SQL DataAdapter, otherwise make an ODBC one - if ($Session -is [String] -and $Global:DbSessions[$Session]) {$Session = $Global:DbSessions[$Session]} - if ($Session.GetType().name -match "SqlConnection") { - $dataAdapter = New-Object -TypeName System.Data.SqlClient.SqlDataAdapter -ArgumentList ( - New-Object -TypeName System.Data.SqlClient.SqlCommand -ArgumentList $SQL, $Session) - } - else { - $dataAdapter = New-Object -TypeName System.Data.Odbc.OdbcDataAdapter -ArgumentList ( - New-Object -TypeName System.Data.Odbc.OdbcCommand -ArgumentList $SQL, $Session ) - } - if ($QueryTimeout) {$dataAdapter.SelectCommand.CommandTimeout = $QueryTimeout} - - #Both adapter types output the same kind of table, create one and fill it from the adapter - $DataTable = New-Object -TypeName System.Data.DataTable - $rowCount = $dataAdapter.fill($dataTable) - Write-Verbose -Message "Query returned $rowCount row(s)" - } - if ($DataTable.Rows.Count) { - #Call export-excel removing parameters which relate to the SQL query, and keeping the rest. - 'Connection' , 'Database' , 'Session' , 'MsSQLserver' , 'SQL' , 'DataTable' , 'QueryTimeout' | ForEach-Object {$null = $PSBoundParameters.Remove($_) } - Export-Excel @PSBoundParameters -InputObject $DataTable - } - else {Write-Warning -Message ' No Data to insert.' } - #If we were passed a connection and opened a session, close that session. - if ($Connection) {$Session.close() } - } -} \ No newline at end of file diff --git a/compare-worksheet.ps1 b/compare-worksheet.ps1 deleted file mode 100644 index fb8edf6..0000000 --- a/compare-worksheet.ps1 +++ /dev/null @@ -1,286 +0,0 @@ -Function Compare-WorkSheet { -<# - .Synopsis - Compares two worksheets and shows the differences. - .Description - This command takes two file names, one or two worksheet names and a name - for a "key" column. It reads the worksheet from each file and decides the - column names and builds a hashtable of the key-column values and the - rows in which they appear. - It then uses PowerShell's Compare-Object command to compare the sheets - (explicitly checkingall the column names which have not been excluded). - For the difference rows it adds the row number for the key of that row - - we have to add the key after doing the comparison, otherwise identical - rows at different positions in the file will not be considered a match. - We also add the name of the file and sheet in which the difference occurs. - If -BackgroundColor is specified the difference rows will be changed to - that background in the orginal file. - .Example - Compare-WorkSheet -Referencefile 'Server56.xlsx' -Differencefile 'Server57.xlsx' -WorkSheetName Products -key IdentifyingNumber -ExcludeProperty Install* | Format-Table - - The two workbooks in this example contain the result of redirecting a subset - of properties from Get-WmiObject -Class win32_product to Export-Excel. - The command compares the "Products" pages in the two workbooks, but we - don't want to register a difference if the software was installed on a - different date or from a different place, and excluding Install* removes - InstallDate and InstallSource. This data doesn't have a "Name" column, so - we specify the "IdentifyingNumber" column as the key. - The results will be presented as a table. - .Example - Compare-WorkSheet "Server54.xlsx" "Server55.xlsx" -WorkSheetName Services -GridView - - This time two workbooks contain the result of redirecting the command - Get-WmiObject -Class win32_service to Export-Excel. Here the -Differencefile - and -Referencefile parameter switches are assumed and the default setting for - -Key ("Name") works for services. This will display the differences between - the "Services" sheets using a grid view - .Example - Compare-WorkSheet 'Server54.xlsx' 'Server55.xlsx' -WorkSheetName Services -BackgroundColor lightGreen - - This version of the command outputs the differences between the "services" pages and highlights any different rows in the spreadsheet files. - .Example - Compare-WorkSheet 'Server54.xlsx' 'Server55.xlsx' -WorkSheetName Services -BackgroundColor lightGreen -FontColor Red -Show - - This example builds on the previous one: this time where two changed rows have - the value in the "Name" column (the default value for -Key), this version adds - highlighting of the changed cells in red; and then opens the Excel file. - .Example - Compare-WorkSheet 'Pester-tests.xlsx' 'Pester-tests.xlsx' -WorkSheetName 'Server1','Server2' -Property "full Description","Executed","Result" -Key "full Description" - - This time the reference file and the difference file are the same file and - two different sheets are used. Because the tests include the machine name - and time the test was run, the command specifies that a limited set of - columns should be used. - .Example - Compare-WorkSheet 'Server54.xlsx' 'Server55.xlsx' -WorkSheetName general -Startrow 2 -Headername Label,value -Key Label -GridView -ExcludeDifferent - - The "General" page in the two workbooks has a title and two unlabelled columns - with a row each for CPU, Memory, Domain, Disk and so on. So the command is - told to start at row 2 in order to skip the title and given names for the - columns: the first is "label" and the second "Value"; the label acts as the key. - This time we are interested in those rows which are the same in both sheets, - and the result is displayed using grid view. - Note that grid view works best when the number of columns is small. - .Example - Compare-WorkSheet 'Server1.xlsx' 'Server2.xlsx' -WorkSheetName general -Startrow 2 -Headername Label,value -Key Label -BackgroundColor White -Show -AllDataBackgroundColor LightGray - - This version of the previous command highlights all the cells in LightGray - and then sets the changed rows back to white. - Only the unchanged rows are highlighted. -#> - [cmdletbinding(DefaultParameterSetName)] - [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSAvoidUsingWriteHost', '', Justification="Write host used for sub-warning level message to operator which does not form output")] - [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseDeclaredVarsMoreThanAssignments', '', Justification="False positives when initializing variable in begin block")] - Param( - #First file to compare. - [parameter(Mandatory=$true,Position=0)] - $Referencefile , - #Second file to compare. - [parameter(Mandatory=$true,Position=1)] - $Differencefile , - #Name(s) of worksheets to compare. - $WorkSheetName = "Sheet1", - #Properties to include in the comparison - supports wildcards, default is "*". - $Property = "*" , - #Properties to exclude from the comparison - supports wildcards. - $ExcludeProperty , - #Specifies custom property names to use, instead of the values defined in the starting row of the sheet. - [Parameter(ParameterSetName='B', Mandatory)] - [String[]]$Headername, - #Automatically generate property names (P1, P2, P3 ...) instead of the using the values the starting row of the sheet. - [Parameter(ParameterSetName='C', Mandatory)] - [switch]$NoHeader, - #The row from where we start to import data: all rows above the start row are disregarded. By default, this is the first row. - [int]$Startrow = 1, - #If specified, highlights all the cells - so you can make Equal cells one color, and Different cells another. - $AllDataBackgroundColor, - #If specified, highlights the rows with differences. - $BackgroundColor, - #If specified identifies the tabs which contain difference rows (ignored if -BackgroundColor is omitted). - $TabColor, - #Name of a column which is unique and will be used to add a row to the DIFF object, defaults to "Name". - $Key = "Name" , - #If specified, highlights the DIFF columns in rows which have the same key. - $FontColor, - #If specified, opens the Excel workbooks instead of outputting the diff to the console (unless -PassThru is also specified). - [Switch]$Show, - #If specified, the command tries to the show the DIFF in a Grid-View and not on the console. (unless-PassThru is also specified). This works best with few columns selected, and requires a key. - [switch]$GridView, - #If specifieda full set of DIFF data is returned without filtering to the specified properties. - [Switch]$PassThru, - #If specified the result will include equal rows as well. By default only different rows are returned. - [Switch]$IncludeEqual, - #If specified, the result includes only the rows where both are equal. - [Switch]$ExcludeDifferent - ) - - #if the filenames don't resolve, give up now. - try { $oneFile = ((Resolve-Path -Path $Referencefile -ErrorAction Stop).path -eq (Resolve-Path -Path $Differencefile -ErrorAction Stop).path)} - Catch { Write-Warning -Message "Could not Resolve the filenames." ; return } - - #If we have one file , we must have two different worksheet names. If we have two files we can have a single string or two strings. - if ($onefile -and ( ($WorkSheetName.count -ne 2) -or $WorkSheetName[0] -eq $WorkSheetName[1] ) ) { - Write-Warning -Message "If both the Reference and difference file are the same then worksheet name must provide 2 different names" - return - } - if ($WorkSheetName.count -eq 2) {$worksheet1 = $WorkSheetName[0] ; $workSheet2 = $WorkSheetName[1]} - elseif ($WorkSheetName -is [string]) {$worksheet1 = $workSheet2 = $WorkSheetName} - else {Write-Warning -Message "You must provide either a single worksheet name or two names." ; return } - - $params= @{ ErrorAction = [System.Management.Automation.ActionPreference]::Stop } - foreach ($p in @("HeaderName","NoHeader","StartRow")) {if ($PSBoundParameters[$p]) {$params[$p] = $PSBoundParameters[$p]}} - try { - $sheet1 = Import-Excel -Path $Referencefile -WorksheetName $WorkSheet1 @params - $sheet2 = Import-Excel -Path $Differencefile -WorksheetName $WorkSheet2 @Params - } - Catch {Write-Warning -Message "Could not read the worksheet from $Referencefile and/or $Differencefile." ; return } - - #Get Column headings and create a hash table of Name to column letter. - $headings = $Sheet1[-1].psobject.Properties.name # This preserves the sequence - using get-member would sort them alphabetically! - $headings | ForEach-Object -Begin {$columns = @{} ; $i= 1 } -Process {$Columns[$_] = [OfficeOpenXml.ExcelAddress]::GetAddress(1,($i ++)) -replace "\d","" } - - #Make a list of property headings using the Property (default "*") and ExcludeProperty parameters - if ($Key -eq "Name" -and $NoHeader) {$Key = "p1"} - $propList = @() - foreach ($p in $Property) {$propList += ($headings.where({$_ -like $p}) )} - foreach ($p in $ExcludeProperty) {$propList = $propList.where({$_ -notlike $p}) } - if (($headings -contains $key) -and ($propList -notcontains $Key)) {$propList += $Key} - $propList = $propList | Select-Object -Unique - if ($propList.Count -eq 0) {Write-Warning -Message "No Columns are selected with -Property = '$Property' and -excludeProperty = '$ExcludeProperty'." ; return} - - #Add RowNumber, Sheetname and file name to every row - $firstDataRow = $startRow + 1 - if ($Headername -or $NoHeader) {$firstDataRow -- } - $i = $firstDataRow ; foreach ($row in $Sheet1) {Add-Member -InputObject $row -MemberType NoteProperty -Name "_Row" -Value ($i ++) - Add-Member -InputObject $row -MemberType NoteProperty -Name "_Sheet" -Value $worksheet1 - Add-Member -InputObject $row -MemberType NoteProperty -Name "_File" -Value $Referencefile} - $i = $firstDataRow ; foreach ($row in $Sheet2) {Add-Member -InputObject $row -MemberType NoteProperty -Name "_Row" -Value ($i ++) - Add-Member -InputObject $row -MemberType NoteProperty -Name "_Sheet" -Value $worksheet2 - Add-Member -InputObject $row -MemberType NoteProperty -Name "_File" -Value $Differencefile} - - if ($ExcludeDifferent -and -not $IncludeEqual) {$IncludeEqual = $true} - #Do the comparison and add file,sheet and row to the result - these are prefixed with "_" to show they are added the addition will fail if the sheet has these properties so split the operations - [PSCustomObject[]]$diff = Compare-Object -ReferenceObject $Sheet1 -DifferenceObject $Sheet2 -Property $propList -PassThru -IncludeEqual:$IncludeEqual -ExcludeDifferent:$ExcludeDifferent | - Sort-Object -Property "_Row","File" - - #if BackgroundColor was specified, set it on extra or extra or changed rows - if ($diff -and $BackgroundColor) { - #Differences may only exist in one file. So gather the changes for each file; open the file, update each impacted row in the shee, save the file - $updates = $diff.where({$_.SideIndicator -ne "=="}) | Group-object -Property "_File" - foreach ($file in $updates) { - try {$xl = Open-ExcelPackage -Path $file.name } - catch {Write-warning -Message "Can't open $($file.Name) for writing." ; return} - if ($PSBoundParameters.ContainsKey("AllDataBackgroundColor")) { - $file.Group._sheet | Sort-Object -Unique | ForEach-Object { - $ws = $xl.Workbook.Worksheets[$_] - if ($headerName) {$range = "A" + $startrow + ":" + $ws.dimension.end.address} - else {$range = "A" + ($startrow + 1) + ":" + $ws.dimension.end.address} - Set-Format -WorkSheet $ws -BackgroundColor $AllDataBackgroundColor -Range $Range - } - } - foreach ($row in $file.group) { - $ws = $xl.Workbook.Worksheets[$row._Sheet] - $range = $ws.Dimension -replace "\d+",$row._row - Set-Format -WorkSheet $ws -Range $range -BackgroundColor $BackgroundColor - } - if ($PSBoundParameters.ContainsKey("TabColor")) { - if ($TabColor -is [string]) {$TabColor = [System.Drawing.Color]::$TabColor } - foreach ($tab in ($file.group._sheet | Select-Object -Unique)) { - $xl.Workbook.Worksheets[$tab].TabColor = $TabColor - } - } - $xl.save() ; $xl.Stream.Close() ; $xl.Dispose() - } - } - #if font color was specified, set it on changed properties where the same key appears in both sheets. - if ($diff -and $FontColor -and (($propList -contains $Key) -or ($key -is [hashtable])) ) { - $updates = $diff.where({$_.SideIndicator -ne "=="}) | Group-object -Property $Key | Where-Object {$_.count -eq 2} - if ($updates) { - $XL1 = Open-ExcelPackage -path $Referencefile - if ($oneFile ) {$xl2 = $xl1} - else {$xl2 = Open-ExcelPackage -path $Differencefile } - foreach ($u in $updates) { - foreach ($p in $propList) { - if ($u.group[0]._file -eq $Referencefile) { - $ws1 = $xl1.Workbook.Worksheets[$u.Group[0]._sheet] - $ws2 = $xl2.Workbook.Worksheets[$u.Group[1]._sheet] - } - else { - $ws1 = $xl2.Workbook.Worksheets[$u.Group[0]._sheet] - $ws2 = $xl1.Workbook.Worksheets[$u.Group[1]._sheet] - } - if($u.Group[0].$p -ne $u.Group[1].$p ) { - Set-Format -WorkSheet $ws1 -Range ($Columns[$p] + $u.Group[0]._Row) -FontColor $FontColor - Set-Format -WorkSheet $ws2 -Range ($Columns[$p] + $u.Group[1]._Row) -FontColor $FontColor - } - } - } - $xl1.Save() ; $xl1.Stream.Close() ; $xl1.Dispose() - if (-not $oneFile) {$xl2.Save() ; $xl2.Stream.Close() ; $xl2.Dispose()} - } - } - elseif ($diff -and $FontColor) {Write-Warning -Message "To match rows to set changed cells, you must specify -Key and it must match one of the included properties." } - - #if nothing was found write a message which will not be redirected - if (-not $diff) {Write-Host "Comparison of $Referencefile::$worksheet1 and $Differencefile::$WorkSheet2 returned no results." } - - if ($Show) { - Start-Process -FilePath $Referencefile - if (-not $oneFile) { Start-Process -FilePath $Differencefile } - if ($GridView) { Write-Warning -Message "-GridView is ignored when -Show is specified" } - } - elseif ($GridView -and $propList -contains $key) { - - - if ($IncludeEqual -and -not $ExcludeDifferent) { - $GroupedRows = $diff | Group-Object -Property $key - } - else { #to get the right now numbers on the grid we need to have all the rows. - $GroupedRows = Compare-Object -ReferenceObject $Sheet1 -DifferenceObject $Sheet2 -Property $propList -PassThru -IncludeEqual | - Group-Object -Property $key - } - #Additions, deletions and unchanged rows will give a group of 1; changes will give a group of 2 . - - #If one sheet has extra rows we can get a single "==" result from compare, but with the row from the reference sheet - #but the row in the other sheet might so we will look up the row number from the key field build a hash table for that - $Sheet2 | ForEach-Object -Begin {$Rowhash = @{} } -Process {$Rowhash[$_.$key] = $_._row } - - $ExpandedDiff = ForEach ($g in $GroupedRows) { - #we're going to create a custom object from a hash table. We want the fields to be ordered - $hash = [ordered]@{} - foreach ($result IN $g.Group) { - # if result indicates equal or "in Reference" set the reference side row. If we did that on a previous result keep it. Otherwise set to "blank" - if ($result.sideindicator -ne "=>") {$hash["Row"] = $Rowhash[$g.Name] - #position the key as the next field (only appears once) - $Hash[$key] = $g.Name - #For all the other fields we care about create <=FieldName and/or =>FieldName - foreach ($p in $propList.Where({$_ -ne $key})) { - if ($result.SideIndicator -eq "==") {$hash[("=>$P")] = $hash[("<=$P")] =$result.$P} - else {$hash[($result.SideIndicator+$P)] =$result.$P} - } - } - [Pscustomobject]$hash - } - - #Sort by reference row number, and fill in any blanks in the difference-row column - $ExpandedDiff = $ExpandedDiff | Sort-Object -Property "row") {$ExpandedDiff[$i].">row" = $ExpandedDiff[$i-1].">row" } } - #Sort by difference row number, and fill in any blanks in the reference-row column - $ExpandedDiff = $ExpandedDiff | Sort-Object -Property ">row" - for ($i = 1; $i -lt $ExpandedDiff.Count; $i++) {if (-not $ExpandedDiff[$i]."row" } - elseif ( $IncludeEqual) {$ExpandedDiff = $ExpandedDiff | Sort-Object -Property "row" } - else {$ExpandedDiff = $ExpandedDiff.where({$_.side -ne "=="}) | Sort-Object -Property "row" } - $ExpandedDiff | Update-FirstObjectProperties | Out-GridView -Title "Comparing $Referencefile::$worksheet1 (<=) with $Differencefile::$WorkSheet2 (=>)" - } - elseif ($GridView ) {Write-Warning -Message "To use -GridView you must specify -Key and it must match one of the included properties." } - elseif (-not $PassThru) {return ($diff | Select-Object -Property (@(@{n="_Side";e={$_.SideIndicator}},"_File" ,"_Sheet","_Row") + $propList))} - if ( $PassThru) {return $diff } -} diff --git a/plot.ps1 b/plot.ps1 deleted file mode 100644 index 4a54ea1..0000000 --- a/plot.ps1 +++ /dev/null @@ -1,218 +0,0 @@ -[Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseDeclaredVarsMoreThanAssignments', '', Justification="False positives")] -param() -class PSPlot { - hidden $path - hidden $pkg - hidden $ws - hidden $chart - - PSPlot() { - $this.path=[System.IO.Path]::GetTempFileName() -replace "\.tmp", ".xlsx" - $this.pkg = New-Object OfficeOpenXml.ExcelPackage $this.path - $this.ws=$this.pkg.Workbook.Worksheets.Add("plot") - } - - [PSPlot] Plot($yValues) { - - $this.NewChart() - - $xValues = 0..$yValues.Count - - $xCol = 'A' - $yCol = 'B' - - $this.AddDataToSheet($xCol,$yCol,'x','y',$xValues,$yValues) - $this.AddSeries($xCol,$yCol,$yValues) - $this.SetChartPosition($yCol) - - return $this - } - - [PSPlot] Plot($yValues,[string]$options) { - $this.NewChart() - - $xValues = 0..$yValues.Count - - $xCol = 'A' - $yCol = 'B' - - $this.AddDataToSheet($xCol,$yCol,'x','y',$xValues,$yValues) - $this.AddSeries($xCol,$yCol,$yValues) - - $this.SetMarkerInfo($options) - $this.SetChartPosition($yCol) - - return $this - } - - [PSPlot] Plot($xValues,$yValues) { - - $this.NewChart() - - $xCol = 'A' - $yCol = 'B' - - $this.AddDataToSheet($xCol,$yCol,'x','y',$xValues,$yValues) - $this.AddSeries($xCol,$yCol,$yValues) - - $this.SetChartPosition($yCol) - - return $this - } - - [PSPlot] Plot($xValues,$yValues,[string]$options) { - $this.NewChart() - - $xCol = 'A' - $yCol = 'B' - - $this.AddDataToSheet($xCol,$yCol,'x','y',$xValues,$yValues) - $this.AddSeries($xCol,$yCol,$yValues) - - $this.SetMarkerInfo($options) - - $this.SetChartPosition($yCol) - - return $this - } - - [PSPlot] Plot($xValues,$yValues,$x1Values,$y1Values) { - - $this.NewChart() - - $xCol = 'A' - $yCol = 'B' - - $this.AddDataToSheet($xCol,$yCol,'x','y',$xValues,$yValues) - $this.AddSeries($xCol,$yCol,$yValues) - - $xCol=$this.GetNextColumnName($yCol) - $yCol=$this.GetNextColumnName($xCol) - - $this.AddDataToSheet($xCol,$yCol,'x1','y1',$x1Values,$y1Values) - $this.AddSeries($xCol,$yCol,$y1Values) - - $this.SetChartPosition($yCol) - - return $this - } - - [PSPlot] Plot($xValues,$yValues,$x1Values,$y1Values,$x2Values,$y2Values) { - - $this.NewChart() - - $xCol = 'A' - $yCol = 'B' - - $this.AddDataToSheet($xCol,$yCol,'x','y',$xValues,$yValues) - $this.AddSeries($xCol,$yCol,$yValues) - - $xCol=$this.GetNextColumnName($yCol) - $yCol=$this.GetNextColumnName($xCol) - - $this.AddDataToSheet($xCol,$yCol,'x1','y1',$x1Values,$y1Values) - $this.AddSeries($xCol,$yCol,$y1Values) - - $xCol=$this.GetNextColumnName($yCol) - $yCol=$this.GetNextColumnName($xCol) - - $this.AddDataToSheet($xCol,$yCol,'x2','y2',$x2Values,$y2Values) - $this.AddSeries($xCol,$yCol,$y2Values) - - $this.SetChartPosition($yCol) - - return $this - } - - [PSPLot] SetChartPosition($yCol) { - $columnNumber = $this.GetColumnNumber($yCol)+1 - $this.chart.SetPosition(1,0,$columnNumber,0) - - return $this - } - - AddSeries($xCol,$yCol,$yValues) { - $yRange = "{0}2:{0}{1}" -f $yCol,($yValues.Count+1) - $xRange = "{0}2:{0}{1}" -f $xCol,($yValues.Count+1) - $Series=$this.chart.Series.Add($yRange,$xRange) - } - - hidden SetMarkerInfo([string]$options) { - $c=$options.Substring(0,1) - $m=$options.Substring(1) - - $cmap=@{r='red';g='green';b='blue';i='indigo';v='violet';c='cyan'} - $mmap=@{Ci='Circle';Da='Dash';di='diamond';do='dot';pl='plus';sq='square';tr='triangle'} - - $this.chart.Series[0].Marker = $mmap.$m - $this.chart.Series[0].MarkerColor = $cmap.$c - $this.chart.Series[0].MarkerLineColor = $cmap.$c - } - - hidden [string]GetNextColumnName($columnName) { - return $this.GetColumnName($this.GetColumnNumber($columnName)+1) - } - - hidden [int]GetColumnNumber($columnName) { - $sum=0 - - $columnName.ToCharArray() | - ForEach-Object { - $sum*=26 - $sum+=[char]$_.tostring().toupper()-[char]'A'+1 - } - - return $sum - } - - hidden [string]GetColumnName($columnNumber) { - $dividend = $columnNumber - $columnName = @() - while($dividend -gt 0) { - $modulo = ($dividend - 1) % 26 - $columnName += [char](65 + $modulo) - $dividend = [int](($dividend -$modulo)/26) - } - - return ($columnName -join '') - } - - hidden AddDataToSheet($xColumn,$yColumn,$xHeader,$yHeader,$xValues,$yValues) { - $count=$yValues.Count - $this.ws.Cells["$($xColumn)1"].Value=$xHeader - $this.ws.Cells["$($yColumn)1"].Value=$yHeader - - for ($idx= 0; $idx-lt $count; $idx++) { - $row=$idx+2 - $this.ws.Cells["$($xColumn)$($row)"].Value=$xValues[$idx] - $this.ws.Cells["$($yColumn)$($row)"].Value=$yValues[$idx] - } - } - - hidden NewChart() { - $chartType="XYScatter" - #$chartType="line" - $this.chart=$this.ws.Drawings.AddChart("plot", $chartType) - $this.chart.Title.Text = 'Plot' - $this.chart.Legend.Remove() - $this.SetChartSize(300,300) - } - - [PSPlot] SetChartSize([int]$width,[int]$height){ - $this.chart.SetSize($width, $height) - - return $this - } - - [PSPlot] Title($title) { - $this.chart.Title.Text = $title - - return $this - } - - Show() { - $this.pkg.Save() - $this.pkg.Dispose() - Invoke-Item $this.path - } -} \ No newline at end of file From 15eb2130b54b9eab6009b8b23eb7ac9c0c8d1b64 Mon Sep 17 00:00:00 2001 From: ili101 Date: Thu, 29 Aug 2019 01:22:55 +0300 Subject: [PATCH 11/14] Mereg --- __tests__/AddTrendlinesToAChart.tests.ps1 | 5 +- __tests__/Export-Excel.Tests.ps1 | 95 ++++++++++------------- __tests__/ExtraLongCmd.tests.ps1 | 1 - __tests__/First10Races.tests.ps1 | 4 +- __tests__/InputItemParameter.tests.ps1 | 2 - __tests__/Join-Worksheet.tests.ps1 | 6 +- __tests__/RangePassing.ps1 | 1 - __tests__/Validation.tests.ps1 | 4 - 8 files changed, 43 insertions(+), 75 deletions(-) diff --git a/__tests__/AddTrendlinesToAChart.tests.ps1 b/__tests__/AddTrendlinesToAChart.tests.ps1 index 5269a76..5891fc2 100644 --- a/__tests__/AddTrendlinesToAChart.tests.ps1 +++ b/__tests__/AddTrendlinesToAChart.tests.ps1 @@ -1,7 +1,4 @@ -Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force -if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() -replace "/$","" } -$notWindows = ($PSVersionTable.os -and $PSVersionTable.os -notMatch 'Windows' ) -Describe "Test adding trendlines to charts" { +Describe "Test adding trendlines to charts" { BeforeAll { $script:data = ConvertFrom-Csv @" Region,Item,TotalSold diff --git a/__tests__/Export-Excel.Tests.ps1 b/__tests__/Export-Excel.Tests.ps1 index 74b0aad..53a3e9d 100644 --- a/__tests__/Export-Excel.Tests.ps1 +++ b/__tests__/Export-Excel.Tests.ps1 @@ -14,7 +14,7 @@ Describe ExportExcel { } Context "#Example 1 # Creates and opens a file with the right number of rows and columns" { - $path = "TestDrive:\Test.xlsx" + $path = "TestDrive:\test.xlsx" Remove-item -Path $path -ErrorAction SilentlyContinue #Test with a maximum of 100 processes for speed; export all properties, then export smaller subsets. $processes = Get-Process | where {$_.StartTime} | Select-Object -first 100 -Property * -excludeProperty Parent @@ -76,7 +76,7 @@ Describe ExportExcel { } Context " # NoAliasOrScriptPropeties -ExcludeProperty and -DisplayPropertySet work" { - $path = "TestDrive:\Test.xlsx" + $path = "TestDrive:\test.xlsx" Remove-item -Path $path -ErrorAction SilentlyContinue $processes = Get-Process | Select-Object -First 100 $propertyNames = $Processes[0].psobject.properties.where( {$_.MemberType -eq 'Property'}).name @@ -125,7 +125,7 @@ Describe ExportExcel { Context "#Example 2 # Exports a list of numbers and applies number format " { - $path = "TestDrive:\Test.xlsx" + $path = "TestDrive:\test.xlsx" Remove-item -Path $path -ErrorAction SilentlyContinue #testing -ReturnRange switch and applying number format to Formulas as well as values. $returnedRange = @($null, -1, 0, 34, 777, "", -0.5, 119, -0.1, 234, 788,"=A9+A10") | Export-Excel -NumberFormat '[Blue]$#,##0.00;[Red]-$#,##0.00' -Path $path -ReturnRange @@ -187,7 +187,7 @@ Describe ExportExcel { if ((Get-Culture).NumberFormat.CurrencySymbol -eq "£") {$OtherCurrencySymbol = "$"} else {$OtherCurrencySymbol = "£"} - $path = "TestDrive:\Test.xlsx" + $path = "TestDrive:\test.xlsx" $warnVar = $null #Test correct export of different data types and number formats; test hyperlinks, test -NoNumberConversion test object is converted to a string with no warnings, test calcuation of formula Remove-item -Path $path -ErrorAction SilentlyContinue @@ -304,7 +304,7 @@ Describe ExportExcel { Context "# # Setting cells for different data types with -noHeader" { - $path = "TestDrive:\Test.xlsx" + $path = "TestDrive:\test.xlsx" Remove-item -Path $path -ErrorAction SilentlyContinue #Test -NoHeader & -NoNumberConversion [PSCustOmobject][Ordered]@{ @@ -365,7 +365,7 @@ Describe ExportExcel { #Test New-ConditionalText builds correctly $ct = New-ConditionalText -ConditionalType GreaterThan 525 -ConditionalTextColor ([System.Drawing.Color]::DarkRed) -BackgroundColor ([System.Drawing.Color]::LightPink) - $path = "TestDrive:\Test.xlsx" + $path = "TestDrive:\test.xlsx" Remove-item -Path $path -ErrorAction SilentlyContinue #Test -ConditionalText with a single conditional spec. Write-Output 489 668 299 777 860 151 119 497 234 788 | Export-Excel -Path $path -ConditionalText $ct @@ -393,7 +393,7 @@ Describe ExportExcel { } #Test adding mutliple conditional blocks and using the minimal syntax for new-ConditionalText - $path = "TestDrive:\Test.xlsx" + $path = "TestDrive:\test.xlsx" Remove-item -Path $path -ErrorAction SilentlyContinue #Testing -Passthrough @@ -457,11 +457,9 @@ Describe ExportExcel { } Context "#Examples 8 & 9 # Adding Pivot tables and charts from parameters" { - $path = "TestDrive:\Test.xlsx" + $path = "TestDrive:\test.xlsx" #Test -passthru and -worksheetName creating a new, named, sheet in an existing file. - $Script:Procs= Get-Process | Select-Object -first 20 -Property Name, cpu, pm, handles, company - if ($Procs.count -lt 20) {Write-warning "Not enough proceses were returned by get-Process to run the test." ; return} - $Excel = $Script:Procs| Export-Excel $path -WorkSheetname Processes -PassThru + $Excel = Get-Process | Select-Object -first 20 -Property Name, cpu, pm, handles, company | Export-Excel $path -WorkSheetname Processes -PassThru #Testing -Excel Pacakage and adding a Pivot-table as a second step. Want to save and re-open it ... Export-Excel -ExcelPackage $Excel -WorkSheetname Processes -IncludePivotTable -PivotRows Company -PivotData PM -NoTotalsInPivot -PivotDataToColumn -Activate @@ -518,7 +516,7 @@ Describe ExportExcel { } Context " # Add-Worksheet inserted sheets, moved them correctly, and copied a sheet" { - $path = "TestDrive:\Test.xlsx" + $path = "TestDrive:\test.xlsx" #Test the -CopySource and -Movexxxx parameters for Add-WorkSheet $Excel = Open-ExcelPackage $path #At this point Sheets Should be in the order Sheet1, Processes, ProcessesPivotTable @@ -540,7 +538,7 @@ Describe ExportExcel { $excel.Workbook.Worksheets[5].Name | Should be "Processes" $excel.Workbook.Worksheets[6].Name | Should be "NearDone" $excel.Workbook.Worksheets[7].Name | Should be "Sheet1" - } -skip:($Procs.count -lt 20) + } it "Cloned 'Sheet1' to 'NewSheet' " { $newWs = $excel.Workbook.Worksheets["NewSheet"] @@ -553,15 +551,13 @@ Describe ExportExcel { } Context " # Create and append with Start row and Start Column, inc ranges and Pivot table. " { - $path = "TestDrive:\Test.xlsx" + $path = "TestDrive:\test.xlsx" remove-item -Path $path -ErrorAction SilentlyContinue #Catch warning $warnVar = $null #Test -Append with no existing sheet. Test adding a named pivot table from command line parameters and extending ranges when they're not specified explictly - $Script:Procs= Get-Process - if ($Procs.count -lt 20) {Write-warning "Not enough proceses were returned by get-Process to run the test." ; return} - $Script:Procs| Select-Object -First 10 -Property Name, cpu, pm, handles, company | Export-Excel -StartRow 3 -StartColumn 3 -BoldTopRow -IncludePivotTable -PivotRows Company -PivotData PM -PivotTableName 'PTOffset' -Path $path -WorkSheetname withOffset -Append -PivotFilter Name -NoTotalsInPivot -RangeName procs -AutoFilter -AutoNameRange - $Script:Procs| Select-Object -Last 10 -Property Name, cpu, pm, handles, company | Export-Excel -StartRow 3 -StartColumn 3 -BoldTopRow -IncludePivotTable -PivotRows Company -PivotData PM -PivotTableName 'PTOffset' -Path $path -WorkSheetname withOffset -Append -WarningAction SilentlyContinue -WarningVariable warnvar + Get-Process | Select-Object -first 10 -Property Name, cpu, pm, handles, company | Export-Excel -StartRow 3 -StartColumn 3 -BoldTopRow -IncludePivotTable -PivotRows Company -PivotData PM -PivotTableName 'PTOffset' -Path $path -WorkSheetname withOffset -Append -PivotFilter Name -NoTotalsInPivot -RangeName procs -AutoFilter -AutoNameRange + Get-Process | Select-Object -last 10 -Property Name, cpu, pm, handles, company | Export-Excel -StartRow 3 -StartColumn 3 -BoldTopRow -IncludePivotTable -PivotRows Company -PivotData PM -PivotTableName 'PTOffset' -Path $path -WorkSheetname withOffset -Append -WarningAction SilentlyContinue -WarningVariable warnvar $Excel = Open-ExcelPackage $path $dataWs = $Excel.Workbook.Worksheets["withOffset"] $pt = $Excel.Workbook.Worksheets["PTOffset"].PivotTables[0] @@ -605,14 +601,11 @@ Describe ExportExcel { } Context " # Create and append explicit and auto table and range extension" { - $path = "TestDrive:\Test.xlsx" + $path = "TestDrive:\test.xlsx" #Test -Append automatically extends a table, even when it is not specified in the append command; - $Script:Procs= Get-process - if ($Procs.count -lt 20) {Write-warning "Not enough proceses were returned by get-Process to run the test." ; return} - - $Script:Procs| Select-Object -first 10 -Property Name, cpu, pm, handles, company | Export-Excel -Path $path -TableName ProcTab -AutoNameRange -WorkSheetname NoOffset -ClearSheet + Get-Process | Select-Object -first 10 -Property Name, cpu, pm, handles, company | Export-Excel -Path $path -TableName ProcTab -AutoNameRange -WorkSheetname NoOffset -ClearSheet #Test number format applying to new data - $Script:Procs| Select-Object -last 10 -Property Name, cpu, pm, handles, company | Export-Excel -Path $path -AutoNameRange -WorkSheetname NoOffset -Append -Numberformat 'Number' + Get-Process | Select-Object -last 10 -Property Name, cpu, pm, handles, company | Export-Excel -Path $path -AutoNameRange -WorkSheetname NoOffset -Append -Numberformat 'Number' $Excel = Open-ExcelPackage $path $dataWs = $Excel.Workbook.Worksheets["NoOffset"] @@ -641,7 +634,7 @@ Describe ExportExcel { } Context "#Example 11 # Create and append with title, inc ranges and Pivot table" { - $path = "TestDrive:\Test.xlsx" + $path = "TestDrive:\test.xlsx" #Test New-PivotTableDefinition builds definition using -Pivotfilter and -PivotTotals options. $ptDef = [ordered]@{} $ptDef += New-PivotTableDefinition -PivotTableName "PT1" -SourceWorkSheet 'Sheet1' -PivotRows "Status" -PivotData @{'Status' = 'Count'} -PivotTotals Columns -PivotFilter "StartType" -IncludePivotChart -ChartType BarClustered3D -ChartTitle "Services by status" -ChartHeight 512 -ChartWidth 768 -ChartRow 10 -ChartColumn 0 -NoLegend -PivotColumns CanPauseAndContinue @@ -723,7 +716,7 @@ Describe ExportExcel { } Context "#Example 13 # Formatting and another way to do a pivot. " { - $path = "TestDrive:\Test.xlsx" + $path = "TestDrive:\test.xlsx" Remove-Item $path #Test freezing top row/first column, adding formats and a pivot table - from Add-Pivot table not a specification variable - after the export $excel = Get-Process | Select-Object -Property Name, Company, Handles, CPU, PM, NPM, WS | Export-Excel -Path $path -ClearSheet -WorkSheetname "Processes" -FreezeTopRowFirstColumn -PassThru @@ -752,6 +745,8 @@ Describe ExportExcel { } it "Applied the formating " { $sheet | Should not beNullOrEmpty + $sheet.Column(1).wdith | Should not be $sheet.DefaultColWidth + $sheet.Column(7).wdith | Should not be $sheet.DefaultColWidth $sheet.Column(1).style.font.bold | Should be $true $sheet.Column(2).style.wraptext | Should be $true $sheet.Column(2).width | Should be 29 @@ -774,10 +769,6 @@ Describe ExportExcel { $sheet.ConditionalFormatting[2].Formula | Should be '104857600' $sheet.ConditionalFormatting[2].Style.Font.Color.Color.Name | Should be 'ffff0000' } - it "Applied autowidth " { - $sheet.Column(1).wdith | Should not be $sheet.DefaultColWidth - $sheet.Column(7).wdith | Should not be $sheet.DefaultColWidth - } -skip:$notwindows it "Created the named ranges " { $sheet.Names.Count | Should be 7 $sheet.Names[0].Start.Column | Should be 1 @@ -805,7 +796,7 @@ Describe ExportExcel { } Context " # Chart from MultiSeries.ps1 in the Examples\charts Directory" { - $path = "TestDrive:\Test.xlsx" + $path = "TestDrive:\test.xlsx" Remove-Item -Path $path -ErrorAction SilentlyContinue #Test we haven't missed any parameters on New-ChartDefinition which are on add chart or vice versa. @@ -828,7 +819,7 @@ Describe ExportExcel { $data[1].Handles | Should not beNullOrEmpty $data[1].PM | Should not beNullOrEmpty $data[1].VirtualMemorySize | Should not beNullOrEmpty - } -skip:($procs.count -lt 20) + } $c = New-ExcelChartDefinition -Title Stats -ChartType LineMarkersStacked -XRange "Processes[Name]" -YRange "Processes[PM]", "Processes[VirtualMemorySize]" -SeriesHeader 'PM', 'VMSize' it "Created the Excel chart definition " { @@ -863,7 +854,7 @@ Describe ExportExcel { } Context " # variation of plot.ps1 from Examples Directory using Add chart outside ExportExcel" { - $path = "TestDrive:\Test.xlsx" + $path = "TestDrive:\test.xlsx" #Test inserting a fomual $excel = 0..360 | ForEach-Object {[pscustomobject][ordered]@{x = $_; Sinx = "=Sin(Radians(x)) "}} | Export-Excel -AutoNameRange -Path $path -WorkSheetname SinX -ClearSheet -FreezeFirstColumn -PassThru #Test-Add Excel Chart to existing data. Test add Conditional formatting with a formula @@ -905,7 +896,7 @@ Describe ExportExcel { } Context " # Quick line chart" { - $path = "TestDrive:\Test.xlsx" + $path = "TestDrive:\test.xlsx" Remove-Item -Path $path -ErrorAction SilentlyContinue #test drawing a chart when data doesn't have a string 0..360 | ForEach-Object {[pscustomobject][ordered]@{x = $_; Sinx = "=Sin(Radians(x)) "}} | Export-Excel -AutoNameRange -Path $path -LineChart @@ -925,8 +916,6 @@ Describe ExportExcel { Context " # Quick Pie chart and three icon conditional formating" { $path = "TestDrive:\Pie.xlsx" Remove-Item -Path $path -ErrorAction SilentlyContinue - $Script:Procs= Get-Process - if ($Procs.count -lt 20) {Write-warning "Not enough proceses were returned by get-Process to run the test." ; return} $range = Get-Process| Group-Object -Property company | Where-Object -Property name | Select-Object -Property Name, @{n="TotalPm";e={($_.group | Measure-Object -sum -Property pm).sum }} | Export-Excel -NoHeader -AutoNameRange -path $path -ReturnRange -PieChart -ShowPercent @@ -1038,26 +1027,24 @@ Describe ExportExcel { $ExcelPackage.File | Should Be $Path $Worksheet.Tables[0].Name | Should Be 'Table1' } - it "Now will use temp Path, set TableName with generated name".PadRight(87) { + it "Now will use temp Path, set TableName with generated name and AutoSize".PadRight(87) { $ExcelPackage = $Processes | Export-Excel -Now -PassThru - $Script:Worksheet = $ExcelPackage.Workbook.Worksheets[1] + $Worksheet = $ExcelPackage.Workbook.Worksheets[1] + $ExcelPackage.File | Should BeLike ([IO.Path]::GetTempPath() + '*') - $Script:Worksheet.Tables[0].Name | Should Be 'Table1' - $Script:Worksheet.AutoFilterAddress | Should BeNullOrEmpty} - it "Applies AutoSize with these".PadRight(87) { - $Script:Worksheet.Column(5).Width | Should BeGreaterThan 9.5 - } -skip:$notwindows + $Worksheet.Tables[0].Name | Should Be 'Table1' + $Worksheet.AutoFilterAddress | Should BeNullOrEmpty + $Worksheet.Column(5).Width | Should BeGreaterThan 9.5 + } it "Now allows override of Path and TableName".PadRight(87) { $ExcelPackage = $Processes | Export-Excel -Now -PassThru -Path $Path -TableName:$false - $Script:Worksheet = $ExcelPackage.Workbook.Worksheets[1] + $Worksheet = $ExcelPackage.Workbook.Worksheets[1] $ExcelPackage.File | Should Be $Path - $Script:Worksheet.Tables | Should BeNullOrEmpty - $Script:Worksheet.AutoFilterAddress | Should BeNullOrEmpty + $Worksheet.Tables | Should BeNullOrEmpty + $Worksheet.AutoFilterAddress | Should BeNullOrEmpty + $Worksheet.Column(5).Width | Should BeGreaterThan 9.5 } - it "Allows AutoSize with the override".PadRight(87) { - $Script:Worksheet.Column(5).Width | Should BeGreaterThan 9.5 - } -skip:$notwindows <# Mock looks unreliable need to check Mock -CommandName 'Invoke-Item' it "Now will Show".PadRight(87) { @@ -1079,14 +1066,12 @@ Describe ExportExcel { } it "Now allows to set TableName".PadRight(87) { $ExcelPackage = $Processes | Export-Excel -Now -PassThru -TableName 'Data' - $Script:Worksheet = $ExcelPackage.Workbook.Worksheets[1] + $Worksheet = $ExcelPackage.Workbook.Worksheets[1] - $Script:Worksheet.Tables[0].Name | Should Be 'Data' - $Script:Worksheet.AutoFilterAddress | Should BeNullOrEmpty + $Worksheet.Tables[0].Name | Should Be 'Data' + $Worksheet.AutoFilterAddress | Should BeNullOrEmpty + $Worksheet.Column(5).Width | Should BeGreaterThan 9.5 } - it "Allows to set TableName with AutoSize".PadRight(87) { - $Script:Worksheet.Column(5).Width | Should BeGreaterThan 9.5 - } -skip:$notwindows } } diff --git a/__tests__/ExtraLongCmd.tests.ps1 b/__tests__/ExtraLongCmd.tests.ps1 index 8559a0d..18f2632 100644 --- a/__tests__/ExtraLongCmd.tests.ps1 +++ b/__tests__/ExtraLongCmd.tests.ps1 @@ -1,4 +1,3 @@ -if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() -replace "/$","" } Describe "Creating workbook with a single line" { diff --git a/__tests__/First10Races.tests.ps1 b/__tests__/First10Races.tests.ps1 index 02a66ad..d9ec924 100644 --- a/__tests__/First10Races.tests.ps1 +++ b/__tests__/First10Races.tests.ps1 @@ -1,6 +1,4 @@ -if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() -replace "/$","" } - -$scriptPath = Split-Path -Path $MyInvocation.MyCommand.path -Parent +$scriptPath = Split-Path -Path $MyInvocation.MyCommand.path -Parent $dataPath = Join-Path -Path $scriptPath -ChildPath "First10Races.csv" Describe "Creating small named ranges with hyperlinks" { diff --git a/__tests__/InputItemParameter.tests.ps1 b/__tests__/InputItemParameter.tests.ps1 index 6f2243e..f85739b 100644 --- a/__tests__/InputItemParameter.tests.ps1 +++ b/__tests__/InputItemParameter.tests.ps1 @@ -1,5 +1,3 @@ -if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() -replace "/$","" } - Describe "Exporting with -Inputobject" { BeforeAll { $path = "TestDrive:\Results.xlsx" diff --git a/__tests__/Join-Worksheet.tests.ps1 b/__tests__/Join-Worksheet.tests.ps1 index 446e1dd..d1e97a6 100644 --- a/__tests__/Join-Worksheet.tests.ps1 +++ b/__tests__/Join-Worksheet.tests.ps1 @@ -1,7 +1,4 @@ -if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() -replace "/$","" } -$notWindows = ($PSVersionTable.os -and $PSVersionTable.os -notMatch 'Windows' ) - -$data1 = ConvertFrom-Csv -InputObject @" +$data1 = ConvertFrom-Csv -InputObject @" ID,Product,Quantity,Price,Total 12001,Nails,37,3.99,147.63 12002,Hammer,5,12.10,60.5 @@ -97,7 +94,6 @@ Describe "Join Worksheet part 1" { Remove-item -Path $path -ErrorAction SilentlyContinue #switched to CIM objects so test runs on V6 Describe "Join Worksheet part 2" { - if ($notWindows) {Write-warning -message "Test only runs on Windows" ; return} Get-CimInstance -ClassName win32_logicaldisk | Select-Object -Property DeviceId,VolumeName, Size,Freespace | Export-Excel -Path $path -WorkSheetname Volumes -NumberFormat "0,000" diff --git a/__tests__/RangePassing.ps1 b/__tests__/RangePassing.ps1 index e8f04f4..e0dc770 100644 --- a/__tests__/RangePassing.ps1 +++ b/__tests__/RangePassing.ps1 @@ -1,6 +1,5 @@ $path = "TestDrive:\test.xlsx" describe "Consistent passing of ranges." { - if ($notWindows) {Write-warning -message "Test uses get-service so only works on Windows" ; return} Context "Conditional Formatting" { Remove-Item -path $path -ErrorAction SilentlyContinue $excel = Get-Service | Export-Excel -Path $path -WorksheetName Services -PassThru -AutoSize -DisplayPropertySet -AutoNameRange -Title "Services on $Env:COMPUTERNAME" diff --git a/__tests__/Validation.tests.ps1 b/__tests__/Validation.tests.ps1 index 62d055d..8fe59eb 100644 --- a/__tests__/Validation.tests.ps1 +++ b/__tests__/Validation.tests.ps1 @@ -1,7 +1,3 @@ -Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force -if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() -replace "/$","" } -$notWindows = ($PSVersionTable.os -and $PSVersionTable.os -notMatch 'Windows' ) - $data = ConvertFrom-Csv -InputObject @" ID,Product,Quantity,Price 12001,Nails,37,3.99 From 591b854e2b294dd78b95e238e6684eef3cb203c2 Mon Sep 17 00:00:00 2001 From: ili101 Date: Thu, 29 Aug 2019 01:53:07 +0300 Subject: [PATCH 12/14] Tests statuses improve --- __tests__/Compare-WorkSheet.tests.ps1 | 8 ++++++-- __tests__/Export-Excel.Tests.ps1 | 3 ++- __tests__/ExtraLongCmd.tests.ps1 | 3 ++- __tests__/First10Races.tests.ps1 | 3 ++- __tests__/Join-Worksheet.tests.ps1 | 3 ++- __tests__/PasswordProtection.tests.ps1 | 4 +++- 6 files changed, 17 insertions(+), 7 deletions(-) diff --git a/__tests__/Compare-WorkSheet.tests.ps1 b/__tests__/Compare-WorkSheet.tests.ps1 index b4f2626..d94d29d 100644 --- a/__tests__/Compare-WorkSheet.tests.ps1 +++ b/__tests__/Compare-WorkSheet.tests.ps1 @@ -1,10 +1,14 @@ #Requires -Modules Pester #Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force -if ($PSVersionTable.PSVersion.Major -gt 5) { Write-Warning "Can't test grid view on V6 and later" } -else {Add-Type -AssemblyName System.Windows.Forms } Describe "Compare Worksheet" { BeforeAll { + if ($PSVersionTable.PSVersion.Major -gt 5) { + It "GridView Support" { + Set-ItResult -Pending -Because "Can't test grid view on V6 and later" + } + } + else { Add-Type -AssemblyName System.Windows.Forms } . "$PSScriptRoot\Samples\Samples.ps1" Remove-Item -Path "TestDrive:\server*.xlsx" [System.Collections.ArrayList]$s = get-service | Select-Object -first 25 -Property Name, RequiredServices, CanPauseAndContinue, CanShutdown, CanStop, DisplayName, DependentServices, MachineName diff --git a/__tests__/Export-Excel.Tests.ps1 b/__tests__/Export-Excel.Tests.ps1 index 53a3e9d..17dbb64 100644 --- a/__tests__/Export-Excel.Tests.ps1 +++ b/__tests__/Export-Excel.Tests.ps1 @@ -475,8 +475,9 @@ Describe ExportExcel { $excel.Workbook.Worksheets["Processes"].Dimension.rows | Should be 21 #20 data + 1 header } it "Selected the Pivottable page " { + Set-ItResult -Pending -Because "Bug in EPPLus 4.5" $PTws.View.TabSelected | Should be $true - } -Skip # << Bug in EPPLus 4.5 + } $pt = $PTws.PivotTables[0] it "Built the expected Pivot table " { $pt.RowFields.Count | Should be 1 diff --git a/__tests__/ExtraLongCmd.tests.ps1 b/__tests__/ExtraLongCmd.tests.ps1 index 18f2632..8f5eeaa 100644 --- a/__tests__/ExtraLongCmd.tests.ps1 +++ b/__tests__/ExtraLongCmd.tests.ps1 @@ -51,8 +51,9 @@ Apple, New York, 1200,700 $ws2.PivotTables[0].ColumGrandTotals | Should be $true #Epplus's mis-spelling of column not mine } it "Made the PivotTable page active " { + Set-ItResult -Pending -Because "Bug in EPPLus 4.5" $ws2.View.TabSelected | Should be $true - } -Skip # << Bug in EPPLus 4.5 + } it "Created the Pivot Chart " { $ws2.Drawings[0] | Should not beNullOrEmpty $ws2.Drawings[0].ChartType.ToString() | Should be ColumnClustered diff --git a/__tests__/First10Races.tests.ps1 b/__tests__/First10Races.tests.ps1 index d9ec924..cb4902d 100644 --- a/__tests__/First10Races.tests.ps1 +++ b/__tests__/First10Races.tests.ps1 @@ -92,11 +92,12 @@ Describe "Creating small named ranges with hyperlinks" { $sheet.ConditionalFormatting[1].StopIfTrue | Should be $true } It "Applied ConditionalFormatting, including Reverse " { + Set-ItResult -Pending -Because "Bug in EPPLus 4.5" $sheet.ConditionalFormatting[3].LowValue.Color.R | Should begreaterThan 180 $sheet.ConditionalFormatting[3].LowValue.Color.G | Should beLessThan 128 $sheet.ConditionalFormatting[3].HighValue.Color.R | Should beLessThan 128 $sheet.ConditionalFormatting[3].HighValue.Color.G | Should begreaterThan 180 - } -Skip # << Bug in EPPLus 4.5 + } } Context "Adding a table" { it "Created a table " { diff --git a/__tests__/Join-Worksheet.tests.ps1 b/__tests__/Join-Worksheet.tests.ps1 index d1e97a6..31f4049 100644 --- a/__tests__/Join-Worksheet.tests.ps1 +++ b/__tests__/Join-Worksheet.tests.ps1 @@ -51,9 +51,10 @@ Describe "Join Worksheet part 1" { $excel.Workbook.Worksheets["SummaryPivot"].Hidden | Should be 'Visible' } it "Activated the correct worksheet " { + Set-ItResult -Pending -Because "Bug in EPPLus 4.5" $excel.Workbook.worksheets["SummaryPivot"].View.TabSelected | Should be $true $excel.Workbook.worksheets["Total"].View.TabSelected | Should be $false - } -Skip # << Bug in EPPLus 4.5 + } } Context "Merging 3 blocks" { diff --git a/__tests__/PasswordProtection.tests.ps1 b/__tests__/PasswordProtection.tests.ps1 index fddfca2..eea9fc7 100644 --- a/__tests__/PasswordProtection.tests.ps1 +++ b/__tests__/PasswordProtection.tests.ps1 @@ -2,7 +2,9 @@ Describe "Password Support" { if ($PSVersionTable.PSVersion.Major -GT 5) { - Write-Warning "Can't test passwords on V6 and later" + It "Password Supported" { + Set-ItResult -Pending -Because "Can't test passwords on V6 and later" + } return } Context "Password protected sheet" { From bb9aa9233bd153fe0ec7541af41d52b336991718 Mon Sep 17 00:00:00 2001 From: ili101 Date: Thu, 29 Aug 2019 23:50:10 +0300 Subject: [PATCH 13/14] Linux dependencies missing warning --- ImportExcel.psm1 | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/ImportExcel.psm1 b/ImportExcel.psm1 index b8c428e..fcb5081 100644 --- a/ImportExcel.psm1 +++ b/ImportExcel.psm1 @@ -60,6 +60,25 @@ else { Write-Warning 'PowerShell 5 is required for plot.ps1' Write-Warning 'PowerShell Excel is ready, except for that functionality' } +if ($IsLinux -or $IsMacOS) { + $ExcelPackage = [OfficeOpenXml.ExcelPackage]::new() + $Cells = ($ExcelPackage | Add-WorkSheet).Cells['A1'] + $Cells.Value = 'Test' + try { + $Cells.AutoFitColumns() + } + catch { + if ($IsLinux) { + Write-Warning -Message 'ImportExcel Module Cannot Autosize. Please run the following command to install dependencies: "sudo apt-get install -y --no-install-recommends libgdiplus libc6-dev"' + } + if ($IsMacOS) { + Write-Warning -Message 'ImportExcel Module Cannot Autosize. Please run the following command to install dependencies: "brew install mono-libgdiplus"' + } + } + finally { + $ExcelPackage | Close-ExcelPackage -NoSave + } +} #endregion function Import-Excel { <# From 1ad80825cac9601154f37dc2bec558d0cc61ba18 Mon Sep 17 00:00:00 2001 From: ili101 Date: Fri, 30 Aug 2019 01:24:51 +0300 Subject: [PATCH 14/14] Poke --- __tests__/Export-Excel.Tests.ps1 | 1 - 1 file changed, 1 deletion(-) diff --git a/__tests__/Export-Excel.Tests.ps1 b/__tests__/Export-Excel.Tests.ps1 index 17dbb64..2bf181c 100644 --- a/__tests__/Export-Excel.Tests.ps1 +++ b/__tests__/Export-Excel.Tests.ps1 @@ -1073,6 +1073,5 @@ Describe ExportExcel { $Worksheet.AutoFilterAddress | Should BeNullOrEmpty $Worksheet.Column(5).Width | Should BeGreaterThan 9.5 } - } }