diff --git a/__tests__/Compare-WorkSheet.tests.ps1 b/__tests__/Compare-WorkSheet.tests.ps1
index d3d87d2..94e1112 100644
--- a/__tests__/Compare-WorkSheet.tests.ps1
+++ b/__tests__/Compare-WorkSheet.tests.ps1
@@ -1,5 +1,6 @@
 #Requires -Modules Pester
 #Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force
+. "$PSScriptRoot\Samples\Samples.ps1"
 if ($PSVersionTable.PSVersion.Major -gt 5) { Write-Warning "Can't test grid view on V6 and later" }
 else                                       {Add-Type -AssemblyName System.Windows.Forms }
 Describe "Compare Worksheet" {
diff --git a/__tests__/Export-Excel.Tests.ps1 b/__tests__/Export-Excel.Tests.ps1
index 622dbda..70b362f 100644
--- a/__tests__/Export-Excel.Tests.ps1
+++ b/__tests__/Export-Excel.Tests.ps1
@@ -1,8 +1,7 @@
 #Requires -Modules Pester
 
-Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force
-if (-not $env:TEMP) {$env:TEMP = [IO.Path]::GetTempPath() -replace "/$","" }
-$notWindows =  ($PSVersionTable.os -and $PSVersionTable.os -notMatch 'Windows' )
+#Import-Module $PSScriptRoot\..\ImportExcel.psd1 -Force
+. "$PSScriptRoot\Samples\Samples.ps1"
 
 if (Get-process -Name Excel,xlim -ErrorAction SilentlyContinue) {    Write-Warning -Message "You need to close Excel before running the tests." ; return}
 Describe ExportExcel {
diff --git a/__tests__/Join-Worksheet.tests.ps1 b/__tests__/Join-Worksheet.tests.ps1
index 4adb952..35d029c 100644
--- a/__tests__/Join-Worksheet.tests.ps1
+++ b/__tests__/Join-Worksheet.tests.ps1
@@ -24,6 +24,7 @@ ID,Product,Quantity,Price,Total
 12010,Drill,11,8,88
 12012,Pliers,3,14.99,44.97
 "@
+. "$PSScriptRoot\Samples\Samples.ps1"
 
 Describe "Join Worksheet part 1" {
     BeforeAll {
diff --git a/__tests__/Samples/Get-CimInstanceDisk.xml b/__tests__/Samples/Get-CimInstanceDisk.xml
new file mode 100644
index 0000000..9c9d578
Binary files /dev/null and b/__tests__/Samples/Get-CimInstanceDisk.xml differ
diff --git a/__tests__/Samples/Get-CimInstanceNetAdapter.xml b/__tests__/Samples/Get-CimInstanceNetAdapter.xml
new file mode 100644
index 0000000..27db7a4
Binary files /dev/null and b/__tests__/Samples/Get-CimInstanceNetAdapter.xml differ
diff --git a/__tests__/Samples/Get-Process.xml b/__tests__/Samples/Get-Process.xml
new file mode 100644
index 0000000..2895dc0
--- /dev/null
+++ b/__tests__/Samples/Get-Process.xml
@@ -0,0 +1,29880 @@
+<Objs Version="1.1.0.1" xmlns="http://schemas.microsoft.com/powershell/2004/04">
+  <Obj RefId="0">
+    <TN RefId="0">
+      <T>System.Diagnostics.Process</T>
+      <T>System.ComponentModel.Component</T>
+      <T>System.MarshalByRefObject</T>
+      <T>System.Object</T>
+    </TN>
+    <ToString>System.Diagnostics.Process (ApCent)</ToString>
+    <Props>
+      <I32 N="BasePriority">8</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-15T19:34:28.9085966+03:00</DT>
+      <I32 N="Id">10780</I32>
+      <S N="MachineName">.</S>
+      <I64 N="NonpagedSystemMemorySize64">45560</I64>
+      <I32 N="NonpagedSystemMemorySize">45560</I32>
+      <I64 N="PagedMemorySize64">54538240</I64>
+      <I32 N="PagedMemorySize">54538240</I32>
+      <I64 N="PagedSystemMemorySize64">679376</I64>
+      <I32 N="PagedSystemMemorySize">679376</I32>
+      <I64 N="PeakPagedMemorySize64">60116992</I64>
+      <I32 N="PeakPagedMemorySize">60116992</I32>
+      <I64 N="PeakWorkingSet64">78831616</I64>
+      <I32 N="PeakWorkingSet">78831616</I32>
+      <I64 N="PeakVirtualMemorySize64">627404800</I64>
+      <I32 N="PeakVirtualMemorySize">627404800</I32>
+      <I64 N="PrivateMemorySize64">54538240</I64>
+      <I32 N="PrivateMemorySize">54538240</I32>
+      <S N="ProcessName">ApCent</S>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="1">
+        <TN RefId="1">
+          <T>System.Diagnostics.ProcessThreadCollection</T>
+          <T>System.Collections.ReadOnlyCollectionBase</T>
+          <T>System.Object</T>
+        </TN>
+        <IE>
+          <Obj RefId="2">
+            <TN RefId="2">
+              <T>System.Diagnostics.ProcessThread</T>
+              <T>System.ComponentModel.Component</T>
+              <T>System.MarshalByRefObject</T>
+              <T>System.Object</T>
+            </TN>
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">10784</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="3">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">10880</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="4">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">10</I32>
+              <I32 N="CurrentPriority">11</I32>
+              <I32 N="Id">10884</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="5">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">11160</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="6">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">12336</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="7">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">12496</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="8">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">11356</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="9">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">13204</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">ExecutionDelay</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="10">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">12584</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">ExecutionDelay</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="11">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">13440</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="12">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">19048</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="13">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">13</I32>
+              <I32 N="CurrentPriority">15</I32>
+              <I32 N="Id">10692</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="14">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">23032</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="15">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">8896</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="16">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">26264</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="17">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">1416</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">16</I32>
+          <Obj N="SyncRoot" RefId="18">
+            <TN RefId="3">
+              <T>System.Collections.ArrayList</T>
+              <T>System.Object</T>
+            </TN>
+            <LST>
+              <Ref RefId="2" />
+              <Ref RefId="3" />
+              <Ref RefId="4" />
+              <Ref RefId="5" />
+              <Ref RefId="6" />
+              <Ref RefId="7" />
+              <Ref RefId="8" />
+              <Ref RefId="9" />
+              <Ref RefId="10" />
+              <Ref RefId="11" />
+              <Ref RefId="12" />
+              <Ref RefId="13" />
+              <Ref RefId="14" />
+              <Ref RefId="15" />
+              <Ref RefId="16" />
+              <Ref RefId="17" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">732</I32>
+      <I64 N="VirtualMemorySize64">606478336</I64>
+      <I32 N="VirtualMemorySize">606478336</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">26746880</I64>
+      <I32 N="WorkingSet">26746880</I32>
+      <Nil N="SynchronizingObject" />
+      <TS N="PrivilegedProcessorTime">PT3.546875S</TS>
+      <TS N="TotalProcessorTime">PT7.328125S</TS>
+      <TS N="UserProcessorTime">PT3.78125S</TS>
+      <Obj N="MainWindowHandle" RefId="19">
+        <TN RefId="4">
+          <T>System.IntPtr</T>
+          <T>System.ValueType</T>
+          <T>System.Object</T>
+        </TN>
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">ApCent</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">732</I32>
+      <I64 N="VM">606478336</I64>
+      <I64 N="WS">26746880</I64>
+      <I64 N="PM">54538240</I64>
+      <I64 N="NPM">45560</I64>
+      <Nil N="Path" />
+      <Nil N="Parent" />
+      <Nil N="Company" />
+      <Db N="CPU">7.328125</Db>
+      <Nil N="FileVersion" />
+      <Nil N="ProductVersion" />
+      <Nil N="Description" />
+      <Nil N="Product" />
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="20">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (ApplicationFrameHost)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="21">
+        <TN RefId="5">
+          <T>Microsoft.Win32.SafeHandles.SafeProcessHandle</T>
+          <T>Microsoft.Win32.SafeHandles.SafeHandleZeroOrMinusOneIsInvalid</T>
+          <T>System.Runtime.InteropServices.SafeHandle</T>
+          <T>System.Runtime.ConstrainedExecution.CriticalFinalizerObject</T>
+          <T>System.Object</T>
+        </TN>
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="22">
+        <TNRef RefId="4" />
+        <ToString>4304</ToString>
+      </Obj>
+      <I32 N="BasePriority">8</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-15T19:35:18.4407991+03:00</DT>
+      <I32 N="Id">21284</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="23">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="24">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="25">
+        <TN RefId="6">
+          <T>System.Diagnostics.ProcessModuleCollection</T>
+          <T>System.Collections.ReadOnlyCollectionBase</T>
+          <T>System.Object</T>
+        </TN>
+        <IE>
+          <Obj RefId="26">
+            <TN RefId="7">
+              <T>System.Diagnostics.ProcessModule</T>
+              <T>System.ComponentModel.Component</T>
+              <T>System.MarshalByRefObject</T>
+              <T>System.Object</T>
+            </TN>
+            <ToString>System.Diagnostics.ProcessModule (ApplicationFrameHost.exe)</ToString>
+            <Props>
+              <S N="ModuleName">ApplicationFrameHost.exe</S>
+              <S N="FileName">C:\Windows\system32\ApplicationFrameHost.exe</S>
+              <S N="BaseAddress">140695356768256</S>
+              <I32 N="ModuleMemorySize">81920</I32>
+              <S N="EntryPointAddress">140695356775552</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\ApplicationFrameHost.exe_x000D__x000A_InternalName:     Application Frame Host_x000D__x000A_OriginalFilename: ApplicationFrameHost.exe_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Application Frame Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">80</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Application Frame Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="27">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="28">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNEL32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">KERNEL32.DLL</S>
+              <S N="FileName">C:\Windows\System32\KERNEL32.DLL</S>
+              <S N="BaseAddress">140719912779776</S>
+              <I32 N="ModuleMemorySize">733184</I32>
+              <S N="EntryPointAddress">140719912876560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName:     kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">716</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="29">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNELBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">KERNELBASE.dll</S>
+              <S N="FileName">C:\Windows\System32\KERNELBASE.dll</S>
+              <S N="BaseAddress">140719894495232</S>
+              <I32 N="ModuleMemorySize">2699264</I32>
+              <S N="EntryPointAddress">140719894841456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName:     Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="30">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcrt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcrt.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcrt.dll</S>
+              <S N="BaseAddress">140719950004224</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719950035120</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName:     msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion:      7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT CRT DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   7.0.17763.475_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.475 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.475</S>
+              <S N="Description">Windows NT CRT DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="31">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (combase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">combase.dll</S>
+              <S N="FileName">C:\Windows\System32\combase.dll</S>
+              <S N="BaseAddress">140719950856192</S>
+              <I32 N="ModuleMemorySize">3325952</I32>
+              <S N="EntryPointAddress">140719951769888</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\combase.dll_x000D__x000A_InternalName:     COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft COM for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3248</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft COM for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="32">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ucrtbase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ucrtbase.dll</S>
+              <S N="FileName">C:\Windows\System32\ucrtbase.dll</S>
+              <S N="BaseAddress">140719893446656</S>
+              <I32 N="ModuleMemorySize">1024000</I32>
+              <S N="EntryPointAddress">140719893528400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName:     ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1000</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="33">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RPCRT4.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RPCRT4.dll</S>
+              <S N="FileName">C:\Windows\System32\RPCRT4.dll</S>
+              <S N="BaseAddress">140719917629440</S>
+              <I32 N="ModuleMemorySize">1187840</I32>
+              <S N="EntryPointAddress">140719918006928</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName:     rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Procedure Call Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Procedure Call Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="34">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcryptPrimitives.dll</S>
+              <S N="FileName">C:\Windows\System32\bcryptPrimitives.dll</S>
+              <S N="BaseAddress">140719890235392</S>
+              <I32 N="ModuleMemorySize">516096</I32>
+              <S N="EntryPointAddress">140719890461152</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName:     bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">504</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="35">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dxgi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dxgi.dll</S>
+              <S N="FileName">C:\Windows\system32\dxgi.dll</S>
+              <S N="BaseAddress">140719868149760</S>
+              <I32 N="ModuleMemorySize">794624</I32>
+              <S N="EntryPointAddress">140719868291472</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\dxgi.dll_x000D__x000A_InternalName:     dxgi.dll_x000D__x000A_OriginalFilename: dxgi.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  DirectX Graphics Infrastructure_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">776</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">DirectX Graphics Infrastructure</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="36">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (win32u.dll)</ToString>
+            <Props>
+              <S N="ModuleName">win32u.dll</S>
+              <S N="FileName">C:\Windows\System32\win32u.dll</S>
+              <S N="BaseAddress">140719906816000</S>
+              <I32 N="ModuleMemorySize">131072</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\win32u.dll_x000D__x000A_InternalName:     Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32u_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">128</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32u</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="37">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32.dll</S>
+              <S N="BaseAddress">140719950659584</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719950676208</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="38">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32full.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32full.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32full.dll</S>
+              <S N="BaseAddress">140719905112064</S>
+              <I32 N="ModuleMemorySize">1675264</I32>
+              <S N="EntryPointAddress">140719905369792</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="39">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcp_win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcp_win.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcp_win.dll</S>
+              <S N="BaseAddress">140719889580032</S>
+              <I32 N="ModuleMemorySize">655360</I32>
+              <S N="EntryPointAddress">140719889658864</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName:     msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">640</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="40">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USER32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USER32.dll</S>
+              <S N="FileName">C:\Windows\System32\USER32.dll</S>
+              <S N="BaseAddress">140719909306368</S>
+              <I32 N="ModuleMemorySize">1667072</I32>
+              <S N="EntryPointAddress">140719909414448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\USER32.dll_x000D__x000A_InternalName:     user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows USER API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows USER API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="41">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IMM32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IMM32.DLL</S>
+              <S N="FileName">C:\Windows\System32\IMM32.DLL</S>
+              <S N="BaseAddress">140719906947072</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719906952688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName:     imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows IMM32 API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="42">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (kernel.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">kernel.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\kernel.appcore.dll</S>
+              <S N="BaseAddress">140719888400384</S>
+              <I32 N="ModuleMemorySize">69632</I32>
+              <S N="EntryPointAddress">140719888415648</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName:     kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AppModel API Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">68</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AppModel API Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="43">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (clbcatq.dll)</ToString>
+            <Props>
+              <S N="ModuleName">clbcatq.dll</S>
+              <S N="FileName">C:\Windows\System32\clbcatq.dll</S>
+              <S N="BaseAddress">140719916908544</S>
+              <I32 N="ModuleMemorySize">663552</I32>
+              <S N="EntryPointAddress">140719916925344</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\clbcatq.dll_x000D__x000A_InternalName:     CLBCATQ.DLL_x000D__x000A_OriginalFilename: CLBCATQ.DLL_x000D__x000A_FileVersion:      2001.12.10941.16384 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  COM+ Configuration Catalog_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">648</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">2001.12.10941.16384 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">COM+ Configuration Catalog</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="44">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ApplicationFrame.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ApplicationFrame.dll</S>
+              <S N="FileName">C:\Windows\System32\ApplicationFrame.dll</S>
+              <S N="BaseAddress">140719235465216</S>
+              <I32 N="ModuleMemorySize">692224</I32>
+              <S N="EntryPointAddress">140719235652272</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ApplicationFrame.dll_x000D__x000A_InternalName:     Application Frame_x000D__x000A_OriginalFilename: ApplicationFrame.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Application Frame_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">676</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Application Frame</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="45">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SHCORE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">SHCORE.dll</S>
+              <S N="FileName">C:\Windows\System32\SHCORE.dll</S>
+              <S N="BaseAddress">140719907143680</S>
+              <I32 N="ModuleMemorySize">688128</I32>
+              <S N="EntryPointAddress">140719907388560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\SHCORE.dll_x000D__x000A_InternalName:     SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  SHCORE_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">672</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">SHCORE</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="46">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SHLWAPI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">SHLWAPI.dll</S>
+              <S N="FileName">C:\Windows\System32\SHLWAPI.dll</S>
+              <S N="BaseAddress">140719945547776</S>
+              <I32 N="ModuleMemorySize">335872</I32>
+              <S N="EntryPointAddress">140719945588304</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\SHLWAPI.dll_x000D__x000A_InternalName:     SHLWAPI_x000D__x000A_OriginalFilename: SHLWAPI.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Shell Light-weight Utility Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">328</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Shell Light-weight Utility Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="47">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OLEAUT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OLEAUT32.dll</S>
+              <S N="FileName">C:\Windows\System32\OLEAUT32.dll</S>
+              <S N="BaseAddress">140719946465280</S>
+              <I32 N="ModuleMemorySize">802816</I32>
+              <S N="EntryPointAddress">140719946574624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName:     OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OLEAUT32.DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">784</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">OLEAUT32.DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="48">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (PROPSYS.dll)</ToString>
+            <Props>
+              <S N="ModuleName">PROPSYS.dll</S>
+              <S N="FileName">C:\Windows\System32\PROPSYS.dll</S>
+              <S N="BaseAddress">140719831187456</S>
+              <I32 N="ModuleMemorySize">1736704</I32>
+              <S N="EntryPointAddress">140719831447408</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\PROPSYS.dll_x000D__x000A_InternalName:     propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion:      7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Property System_x000D__x000A_Product:          Windows® Search_x000D__x000A_ProductVersion:   7.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1696</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.1</S>
+              <S N="Description">Microsoft Property System</S>
+              <S N="Product">Windows® Search</S>
+            </MS>
+          </Obj>
+          <Obj RefId="49">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sechost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sechost.dll</S>
+              <S N="FileName">C:\Windows\System32\sechost.dll</S>
+              <S N="BaseAddress">140719948824576</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719948951504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\sechost.dll_x000D__x000A_InternalName:     sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Host for SCM/SDDL/LSA Lookup APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="50">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (twinapi.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">twinapi.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\twinapi.appcore.dll</S>
+              <S N="BaseAddress">140719861596160</S>
+              <I32 N="ModuleMemorySize">2150400</I32>
+              <S N="EntryPointAddress">140719862039776</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\twinapi.appcore.dll_x000D__x000A_InternalName:     twinapi.appcore_x000D__x000A_OriginalFilename: twinapi.appcore.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  twinapi.appcore_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2100</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">twinapi.appcore</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="51">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (UxTheme.dll)</ToString>
+            <Props>
+              <S N="ModuleName">UxTheme.dll</S>
+              <S N="FileName">C:\Windows\System32\UxTheme.dll</S>
+              <S N="BaseAddress">140719860547584</S>
+              <I32 N="ModuleMemorySize">638976</I32>
+              <S N="EntryPointAddress">140719860712368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\UxTheme.dll_x000D__x000A_InternalName:     UxTheme.dll_x000D__x000A_OriginalFilename: UxTheme.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft UxTheme Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">624</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft UxTheme Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="52">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (DEVOBJ.dll)</ToString>
+            <Props>
+              <S N="ModuleName">DEVOBJ.dll</S>
+              <S N="FileName">C:\Windows\System32\DEVOBJ.dll</S>
+              <S N="BaseAddress">140719885844480</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719885874112</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\DEVOBJ.dll_x000D__x000A_InternalName:     devinfoset.dll_x000D__x000A_OriginalFilename: devinfoset.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Device Information Set DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Device Information Set DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="53">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cfgmgr32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cfgmgr32.dll</S>
+              <S N="FileName">C:\Windows\System32\cfgmgr32.dll</S>
+              <S N="BaseAddress">140719889252352</S>
+              <I32 N="ModuleMemorySize">303104</I32>
+              <S N="EntryPointAddress">140719889325904</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName:     cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Configuration Manager DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">296</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Configuration Manager DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="54">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (TWINAPI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">TWINAPI.dll</S>
+              <S N="FileName">C:\Windows\System32\TWINAPI.dll</S>
+              <S N="BaseAddress">140719346810880</S>
+              <I32 N="ModuleMemorySize">643072</I32>
+              <S N="EntryPointAddress">140719346851504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\TWINAPI.dll_x000D__x000A_InternalName:     twinapi_x000D__x000A_OriginalFilename: twinapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  twinapi_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">twinapi</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="55">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (d2d1.dll)</ToString>
+            <Props>
+              <S N="ModuleName">d2d1.dll</S>
+              <S N="FileName">C:\Windows\System32\d2d1.dll</S>
+              <S N="BaseAddress">140719843311616</S>
+              <I32 N="ModuleMemorySize">6021120</I32>
+              <S N="EntryPointAddress">140719844430608</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\d2d1.dll_x000D__x000A_InternalName:     d2d1_x000D__x000A_OriginalFilename: d2d1_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft D2D Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">5880</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft D2D Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="56">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcp47mrm.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcp47mrm.dll</S>
+              <S N="FileName">C:\Windows\System32\bcp47mrm.dll</S>
+              <S N="BaseAddress">140719398584320</S>
+              <I32 N="ModuleMemorySize">172032</I32>
+              <S N="EntryPointAddress">140719398614560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcp47mrm.dll_x000D__x000A_InternalName:     BCP47mrm.dll_x000D__x000A_OriginalFilename: BCP47mrm.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  BCP47 Language Classes for Resource Management_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">168</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">BCP47 Language Classes for Resource Management</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="57">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (d3d11.dll)</ToString>
+            <Props>
+              <S N="ModuleName">d3d11.dll</S>
+              <S N="FileName">C:\Windows\System32\d3d11.dll</S>
+              <S N="BaseAddress">140719840690176</S>
+              <I32 N="ModuleMemorySize">2613248</I32>
+              <S N="EntryPointAddress">140719841252320</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\d3d11.dll_x000D__x000A_InternalName:     D3D11.dll_x000D__x000A_OriginalFilename: D3D11.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Direct3D 11 Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2552</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Direct3D 11 Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="58">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dwmapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dwmapi.dll</S>
+              <S N="FileName">C:\Windows\System32\dwmapi.dll</S>
+              <S N="BaseAddress">140719861399552</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719861412880</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\dwmapi.dll_x000D__x000A_InternalName:     dwmapi.dll_x000D__x000A_OriginalFilename: dwmapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Desktop Window Manager API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft Desktop Window Manager API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="59">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RMCLIENT.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RMCLIENT.dll</S>
+              <S N="FileName">C:\Windows\System32\RMCLIENT.dll</S>
+              <S N="BaseAddress">140719864479744</S>
+              <I32 N="ModuleMemorySize">163840</I32>
+              <S N="EntryPointAddress">140719864516304</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RMCLIENT.dll_x000D__x000A_InternalName:     rmclient.dll_x000D__x000A_OriginalFilename: rmclient.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Resource Manager Client_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Resource Manager Client</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="60">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPT32.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPT32.dll</S>
+              <S N="BaseAddress">140719891480576</S>
+              <I32 N="ModuleMemorySize">1945600</I32>
+              <S N="EntryPointAddress">140719891804832</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName:     CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Crypto API32_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1900</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Crypto API32</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="61">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSASN1.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSASN1.dll</S>
+              <S N="FileName">C:\Windows\System32\MSASN1.dll</S>
+              <S N="BaseAddress">140719887876096</S>
+              <I32 N="ModuleMemorySize">73728</I32>
+              <S N="EntryPointAddress">140719887898576</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName:     msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  ASN.1 Runtime APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">72</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">ASN.1 Runtime APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="62">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPTSP.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPTSP.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPTSP.dll</S>
+              <S N="BaseAddress">140719889121280</S>
+              <I32 N="ModuleMemorySize">94208</I32>
+              <S N="EntryPointAddress">140719889138512</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPTSP.dll_x000D__x000A_InternalName:     cryptsp.dll_x000D__x000A_OriginalFilename: cryptsp.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Cryptographic Service Provider API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">92</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Cryptographic Service Provider API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="63">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OneCoreUAPCommonProxyStub.dll</S>
+              <S N="FileName">C:\Windows\System32\OneCoreUAPCommonProxyStub.dll</S>
+              <S N="BaseAddress">140719791996928</S>
+              <I32 N="ModuleMemorySize">7585792</I32>
+              <S N="EntryPointAddress">140719792085488</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OneCoreUAPCommonProxyStub.dll_x000D__x000A_InternalName:     OneCoreUAPCommonProxyStub.dll_x000D__x000A_OriginalFilename: OneCoreUAPCommonProxyStub.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OneCoreUAP Common Proxy Stub_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">7408</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">OneCoreUAP Common Proxy Stub</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="64">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSCTF.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSCTF.dll</S>
+              <S N="FileName">C:\Windows\System32\MSCTF.dll</S>
+              <S N="BaseAddress">140719947317248</S>
+              <I32 N="ModuleMemorySize">1486848</I32>
+              <S N="EntryPointAddress">140719947597184</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSCTF.dll_x000D__x000A_InternalName:     MSCTF_x000D__x000A_OriginalFilename: MSCTF.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MSCTF Server DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1452</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MSCTF Server DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="65">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (D3D10Warp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">D3D10Warp.dll</S>
+              <S N="FileName">C:\Windows\system32\D3D10Warp.dll</S>
+              <S N="BaseAddress">140718043889664</S>
+              <I32 N="ModuleMemorySize">7581696</I32>
+              <S N="EntryPointAddress">140718049668720</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\D3D10Warp.dll_x000D__x000A_InternalName:     D3D10Warp.dll_x000D__x000A_OriginalFilename: D3D10Warp.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Direct3D Rasterizer_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">7404</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Direct3D Rasterizer</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="66">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (advapi32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">advapi32.dll</S>
+              <S N="FileName">C:\Windows\System32\advapi32.dll</S>
+              <S N="BaseAddress">140719915335680</S>
+              <I32 N="ModuleMemorySize">667648</I32>
+              <S N="EntryPointAddress">140719915417840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\advapi32.dll_x000D__x000A_InternalName:     advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Advanced Windows 32 Base API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">652</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Advanced Windows 32 Base API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="67">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dcomp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dcomp.dll</S>
+              <S N="FileName">C:\Windows\System32\dcomp.dll</S>
+              <S N="BaseAddress">140719849340928</S>
+              <I32 N="ModuleMemorySize">1847296</I32>
+              <S N="EntryPointAddress">140719849715008</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\dcomp.dll_x000D__x000A_InternalName:     dcomp.dll_x000D__x000A_OriginalFilename: dcomp.dll_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft DirectComposition Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1804</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Microsoft DirectComposition Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="68">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CoreMessaging.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CoreMessaging.dll</S>
+              <S N="FileName">C:\Windows\System32\CoreMessaging.dll</S>
+              <S N="BaseAddress">140719854845952</S>
+              <I32 N="ModuleMemorySize">925696</I32>
+              <S N="EntryPointAddress">140719855185296</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CoreMessaging.dll_x000D__x000A_InternalName:     CoreMessaging.dll_x000D__x000A_OriginalFilename: CoreMessaging.dll_x000D__x000A_FileVersion:      10.0.17763.194_x000D__x000A_FileDescription:  Microsoft CoreMessaging Dll_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.194_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">904</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.194</S>
+              <S N="ProductVersion">10.0.17763.194</S>
+              <S N="Description">Microsoft CoreMessaging Dll</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="69">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (UIAutomationCore.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">UIAutomationCore.DLL</S>
+              <S N="FileName">C:\Windows\system32\UIAutomationCore.DLL</S>
+              <S N="BaseAddress">140719367651328</S>
+              <I32 N="ModuleMemorySize">2469888</I32>
+              <S N="EntryPointAddress">140719368013472</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\UIAutomationCore.DLL_x000D__x000A_InternalName:     UIAutomationCore.dll_x000D__x000A_OriginalFilename: UIAutomationCore.dll.mui_x000D__x000A_FileVersion:      7.2.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft UI Automation Core_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2412</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.2.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft UI Automation Core</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="70">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Bcp47Langs.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Bcp47Langs.dll</S>
+              <S N="FileName">C:\Windows\system32\Bcp47Langs.dll</S>
+              <S N="BaseAddress">140719366537216</S>
+              <I32 N="ModuleMemorySize">376832</I32>
+              <S N="EntryPointAddress">140719366617696</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\Bcp47Langs.dll_x000D__x000A_InternalName:     BCP47Lang.dll_x000D__x000A_OriginalFilename: BCP47Lang.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  BCP47 Language Classes_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">368</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">BCP47 Language Classes</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="71">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SHELL32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">SHELL32.dll</S>
+              <S N="FileName">C:\Windows\System32\SHELL32.dll</S>
+              <S N="BaseAddress">140719923593216</S>
+              <I32 N="ModuleMemorySize">21954560</I32>
+              <S N="EntryPointAddress">140719924695456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\SHELL32.dll_x000D__x000A_InternalName:     SHELL32_x000D__x000A_OriginalFilename: SHELL32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Shell Common Dll_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">21440</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Shell Common Dll</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="72">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (windows.storage.dll)</ToString>
+            <Props>
+              <S N="ModuleName">windows.storage.dll</S>
+              <S N="FileName">C:\Windows\System32\windows.storage.dll</S>
+              <S N="BaseAddress">140719897444352</S>
+              <I32 N="ModuleMemorySize">7643136</I32>
+              <S N="EntryPointAddress">140719899226624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\windows.storage.dll_x000D__x000A_InternalName:     Windows.Storage_x000D__x000A_OriginalFilename: Windows.Storage.dll.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft WinRT Storage API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">7464</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft WinRT Storage API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="73">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (profapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">profapi.dll</S>
+              <S N="FileName">C:\Windows\System32\profapi.dll</S>
+              <S N="BaseAddress">140719888531456</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719888564400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\profapi.dll_x000D__x000A_InternalName:     PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  User Profile Basic API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">User Profile Basic API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="74">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (powrprof.dll)</ToString>
+            <Props>
+              <S N="ModuleName">powrprof.dll</S>
+              <S N="FileName">C:\Windows\System32\powrprof.dll</S>
+              <S N="BaseAddress">140719888007168</S>
+              <I32 N="ModuleMemorySize">380928</I32>
+              <S N="EntryPointAddress">140719888020992</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\powrprof.dll_x000D__x000A_InternalName:     POWRPROF_x000D__x000A_OriginalFilename: POWRPROF.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Power Profile Helper DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">372</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Power Profile Helper DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="75">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Windows.StateRepositoryPS.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Windows.StateRepositoryPS.dll</S>
+              <S N="FileName">C:\Windows\System32\Windows.StateRepositoryPS.dll</S>
+              <S N="BaseAddress">140719444393984</S>
+              <I32 N="ModuleMemorySize">1216512</I32>
+              <S N="EntryPointAddress">140719444420016</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\Windows.StateRepositoryPS.dll_x000D__x000A_InternalName:     Windows StateRepository Proxy/Stub Server_x000D__x000A_OriginalFilename: Windows.StateRepositoryPS.dll_x000D__x000A_FileVersion:      10.0.17763.557 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows StateRepository Proxy/Stub Server_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.557_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1188</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.557 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.557</S>
+              <S N="Description">Windows StateRepository Proxy/Stub Server</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="76">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (windowscodecs.dll)</ToString>
+            <Props>
+              <S N="ModuleName">windowscodecs.dll</S>
+              <S N="FileName">C:\Windows\system32\windowscodecs.dll</S>
+              <S N="BaseAddress">140719807528960</S>
+              <I32 N="ModuleMemorySize">1802240</I32>
+              <S N="EntryPointAddress">140719808100048</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\windowscodecs.dll_x000D__x000A_InternalName:     WindowsCodecs_x000D__x000A_OriginalFilename: WindowsCodecs_x000D__x000A_FileVersion:      10.0.17763.55 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Windows Codecs Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.55_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1760</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.55 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.55</S>
+              <S N="Description">Microsoft Windows Codecs Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="77">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (mrmcorer.dll)</ToString>
+            <Props>
+              <S N="ModuleName">mrmcorer.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\mrmcorer.dll</S>
+              <S N="BaseAddress">140719527231488</S>
+              <I32 N="ModuleMemorySize">1077248</I32>
+              <S N="EntryPointAddress">140719527499040</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\mrmcorer.dll_x000D__x000A_InternalName:     MrmCore_x000D__x000A_OriginalFilename: MrmCore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Windows MRM_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1052</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft Windows MRM</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="78">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (iertutil.dll)</ToString>
+            <Props>
+              <S N="ModuleName">iertutil.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\iertutil.dll</S>
+              <S N="BaseAddress">140719686811648</S>
+              <I32 N="ModuleMemorySize">2785280</I32>
+              <S N="EntryPointAddress">140719687033936</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\iertutil.dll_x000D__x000A_InternalName:     IeRtUtil.dll_x000D__x000A_OriginalFilename: IeRtUtil.dll.mui_x000D__x000A_FileVersion:      11.00.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Run time utility for Internet Explorer_x000D__x000A_Product:          Internet Explorer_x000D__x000A_ProductVersion:   11.00.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2720</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">11.00.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">11.00.17763.1</S>
+              <S N="Description">Run time utility for Internet Explorer</S>
+              <S N="Product">Internet Explorer</S>
+            </MS>
+          </Obj>
+          <Obj RefId="79">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Bcrypt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Bcrypt.dll</S>
+              <S N="FileName">C:\Windows\System32\Bcrypt.dll</S>
+              <S N="BaseAddress">140719897247744</S>
+              <I32 N="ModuleMemorySize">155648</I32>
+              <S N="EntryPointAddress">140719897281296</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\Bcrypt.dll_x000D__x000A_InternalName:     bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">152</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="80">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Windows.UI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Windows.UI.dll</S>
+              <S N="FileName">C:\Windows\System32\Windows.UI.dll</S>
+              <S N="BaseAddress">140719393931264</S>
+              <I32 N="ModuleMemorySize">1286144</I32>
+              <S N="EntryPointAddress">140719394124800</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\Windows.UI.dll_x000D__x000A_InternalName:     Windows Runtime UI Foundation DLL_x000D__x000A_OriginalFilename: Windows.UI.dll.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Runtime UI Foundation DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1256</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Runtime UI Foundation DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="81">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (InputHost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">InputHost.dll</S>
+              <S N="FileName">C:\Windows\System32\InputHost.dll</S>
+              <S N="BaseAddress">140719452192768</S>
+              <I32 N="ModuleMemorySize">835584</I32>
+              <S N="EntryPointAddress">140719452738880</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\InputHost.dll_x000D__x000A_InternalName:     _x000D__x000A_OriginalFilename: _x000D__x000A_FileVersion:      _x000D__x000A_FileDescription:  _x000D__x000A_Product:          _x000D__x000A_ProductVersion:   _x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         _x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">816</I32>
+              <Nil N="Company" />
+              <Nil N="FileVersion" />
+              <Nil N="ProductVersion" />
+              <Nil N="Description" />
+              <Nil N="Product" />
+            </MS>
+          </Obj>
+          <Obj RefId="82">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (TextInputFramework.dll)</ToString>
+            <Props>
+              <S N="ModuleName">TextInputFramework.dll</S>
+              <S N="FileName">C:\Windows\System32\TextInputFramework.dll</S>
+              <S N="BaseAddress">140719392555008</S>
+              <I32 N="ModuleMemorySize">610304</I32>
+              <S N="EntryPointAddress">140719392710816</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\TextInputFramework.dll_x000D__x000A_InternalName:     "TextInputFramework.DYNLINK"_x000D__x000A_OriginalFilename: "TextInputFramework.DYNLINK"_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  "TextInputFramework.DYNLINK"_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">596</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">"TextInputFramework.DYNLINK"</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="83">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CoreUIComponents.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CoreUIComponents.dll</S>
+              <S N="FileName">C:\Windows\System32\CoreUIComponents.dll</S>
+              <S N="BaseAddress">140719821684736</S>
+              <I32 N="ModuleMemorySize">3284992</I32>
+              <S N="EntryPointAddress">140719822198848</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CoreUIComponents.dll_x000D__x000A_InternalName:     CoreUIComponents.dll_x000D__x000A_OriginalFilename: CoreUIComponents.dll_x000D__x000A_FileVersion:      10.0.17763.1_x000D__x000A_FileDescription:  Microsoft Core UI Components Dll_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3208</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft Core UI Components Dll</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="84">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntmarta.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntmarta.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntmarta.dll</S>
+              <S N="BaseAddress">140719871557632</S>
+              <I32 N="ModuleMemorySize">200704</I32>
+              <S N="EntryPointAddress">140719871586448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntmarta.dll_x000D__x000A_InternalName:     ntmarta.dll_x000D__x000A_OriginalFilename: ntmarta.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT MARTA provider_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">196</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows NT MARTA provider</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="85">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (wintypes.dll)</ToString>
+            <Props>
+              <S N="ModuleName">wintypes.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\wintypes.dll</S>
+              <S N="BaseAddress">140719817687040</S>
+              <I32 N="ModuleMemorySize">1388544</I32>
+              <S N="EntryPointAddress">140719817864912</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\wintypes.dll_x000D__x000A_InternalName:     Windows Base Types DLL_x000D__x000A_OriginalFilename: WinTypes.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Base Types DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1356</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Base Types DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="86">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (UIAnimation.dll)</ToString>
+            <Props>
+              <S N="ModuleName">UIAnimation.dll</S>
+              <S N="FileName">C:\Windows\System32\UIAnimation.dll</S>
+              <S N="BaseAddress">140719805956096</S>
+              <I32 N="ModuleMemorySize">294912</I32>
+              <S N="EntryPointAddress">140719806033856</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\UIAnimation.dll_x000D__x000A_InternalName:     UIAnimation_x000D__x000A_OriginalFilename: UIAnimation.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Animation Manager_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">288</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Animation Manager</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="87">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (rometadata.dll)</ToString>
+            <Props>
+              <S N="ModuleName">rometadata.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\rometadata.dll</S>
+              <S N="BaseAddress">140719140175872</S>
+              <I32 N="ModuleMemorySize">241664</I32>
+              <S N="EntryPointAddress">140719140323392</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\rometadata.dll_x000D__x000A_InternalName:     RoMetadata.dll_x000D__x000A_OriginalFilename: RoMetadata.dll_x000D__x000A_FileVersion:      4.7.3190.0 built by: NET472REL1LAST_C_x000D__x000A_FileDescription:  Microsoft MetaData Library_x000D__x000A_Product:          Microsoft® .NET Framework_x000D__x000A_ProductVersion:   4.7.3190.0_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     True_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">236</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">4.7.3190.0 built by: NET472REL1LAST_C</S>
+              <S N="ProductVersion">4.7.3190.0</S>
+              <S N="Description">Microsoft MetaData Library</S>
+              <S N="Product">Microsoft® .NET Framework</S>
+            </MS>
+          </Obj>
+          <Obj RefId="88">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OneCoreCommonProxyStub.dll</S>
+              <S N="FileName">C:\Windows\System32\OneCoreCommonProxyStub.dll</S>
+              <S N="BaseAddress">140719407628288</S>
+              <I32 N="ModuleMemorySize">487424</I32>
+              <S N="EntryPointAddress">140719407642784</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OneCoreCommonProxyStub.dll_x000D__x000A_InternalName:     OneCoreCommonProxyStub.dll_x000D__x000A_OriginalFilename: OneCoreCommonProxyStub.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OneCore Common Proxy Stub_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">476</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">OneCore Common Proxy Stub</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="89">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ActXPrxy.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ActXPrxy.dll</S>
+              <S N="FileName">C:\Windows\System32\ActXPrxy.dll</S>
+              <S N="BaseAddress">140719371845632</S>
+              <I32 N="ModuleMemorySize">630784</I32>
+              <S N="EntryPointAddress">140719371862624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ActXPrxy.dll_x000D__x000A_InternalName:     ActXPrxy.dll_x000D__x000A_OriginalFilename: ActXPrxy.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  ActiveX Interface Marshaling Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">616</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">ActiveX Interface Marshaling Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="90">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Oleacc.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Oleacc.dll</S>
+              <S N="FileName">C:\Windows\system32\Oleacc.dll</S>
+              <S N="BaseAddress">140719711649792</S>
+              <I32 N="ModuleMemorySize">442368</I32>
+              <S N="EntryPointAddress">140719711744976</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\Oleacc.dll_x000D__x000A_InternalName:     OLEACC_x000D__x000A_OriginalFilename: OLEACC.DLL_x000D__x000A_FileVersion:      7.2.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Active Accessibility Core Component_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         Language Neutral_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">432</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.2.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Active Accessibility Core Component</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">65</I32>
+          <Obj N="SyncRoot" RefId="91">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="26" />
+              <Ref RefId="27" />
+              <Ref RefId="28" />
+              <Ref RefId="29" />
+              <Ref RefId="30" />
+              <Ref RefId="31" />
+              <Ref RefId="32" />
+              <Ref RefId="33" />
+              <Ref RefId="34" />
+              <Ref RefId="35" />
+              <Ref RefId="36" />
+              <Ref RefId="37" />
+              <Ref RefId="38" />
+              <Ref RefId="39" />
+              <Ref RefId="40" />
+              <Ref RefId="41" />
+              <Ref RefId="42" />
+              <Ref RefId="43" />
+              <Ref RefId="44" />
+              <Ref RefId="45" />
+              <Ref RefId="46" />
+              <Ref RefId="47" />
+              <Ref RefId="48" />
+              <Ref RefId="49" />
+              <Ref RefId="50" />
+              <Ref RefId="51" />
+              <Ref RefId="52" />
+              <Ref RefId="53" />
+              <Ref RefId="54" />
+              <Ref RefId="55" />
+              <Ref RefId="56" />
+              <Ref RefId="57" />
+              <Ref RefId="58" />
+              <Ref RefId="59" />
+              <Ref RefId="60" />
+              <Ref RefId="61" />
+              <Ref RefId="62" />
+              <Ref RefId="63" />
+              <Ref RefId="64" />
+              <Ref RefId="65" />
+              <Ref RefId="66" />
+              <Ref RefId="67" />
+              <Ref RefId="68" />
+              <Ref RefId="69" />
+              <Ref RefId="70" />
+              <Ref RefId="71" />
+              <Ref RefId="72" />
+              <Ref RefId="73" />
+              <Ref RefId="74" />
+              <Ref RefId="75" />
+              <Ref RefId="76" />
+              <Ref RefId="77" />
+              <Ref RefId="78" />
+              <Ref RefId="79" />
+              <Ref RefId="80" />
+              <Ref RefId="81" />
+              <Ref RefId="82" />
+              <Ref RefId="83" />
+              <Ref RefId="84" />
+              <Ref RefId="85" />
+              <Ref RefId="86" />
+              <Ref RefId="87" />
+              <Ref RefId="88" />
+              <Ref RefId="89" />
+              <Ref RefId="90" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">30728</I64>
+      <I32 N="NonpagedSystemMemorySize">30728</I32>
+      <I64 N="PagedMemorySize64">33636352</I64>
+      <I32 N="PagedMemorySize">33636352</I32>
+      <I64 N="PagedSystemMemorySize64">434664</I64>
+      <I32 N="PagedSystemMemorySize">434664</I32>
+      <I64 N="PeakPagedMemorySize64">39424000</I64>
+      <I32 N="PeakPagedMemorySize">39424000</I32>
+      <I64 N="PeakWorkingSet64">39313408</I64>
+      <I32 N="PeakWorkingSet">39313408</I32>
+      <I64 N="PeakVirtualMemorySize64">2203649400832</I64>
+      <I32 N="PeakVirtualMemorySize">331177984</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="92">
+        <TN RefId="8">
+          <T>System.Diagnostics.ProcessPriorityClass</T>
+          <T>System.Enum</T>
+          <T>System.ValueType</T>
+          <T>System.Object</T>
+        </TN>
+        <ToString>Normal</ToString>
+        <I32>32</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">33636352</I64>
+      <I32 N="PrivateMemorySize">33636352</I32>
+      <S N="ProcessName">ApplicationFrameHost</S>
+      <Obj N="ProcessorAffinity" RefId="93">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="94">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="95">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">15060</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.015625S</TS>
+              <DT N="StartTime">2019-08-15T19:35:18.4408013+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.015625S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="96">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">20008</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.078125S</TS>
+              <DT N="StartTime">2019-08-15T21:12:04.2208823+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.140625S</TS>
+              <TS N="UserProcessorTime">PT0.0625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="97">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">15900</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.109375S</TS>
+              <DT N="StartTime">2019-08-20T03:19:37.6326221+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.109375S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="98">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">17672</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.546875S</TS>
+              <DT N="StartTime">2019-08-27T00:11:19.2064498+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.71875S</TS>
+              <TS N="UserProcessorTime">PT0.171875S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="99">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">22544</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T01:29:26.5083829+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="100">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">7132</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:27:39.526744+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="101">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">25096</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:27:39.534197+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="102">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">6452</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:27:39.5379888+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="103">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">22960</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:27:39.5381311+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="104">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">16428</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:27:39.5382616+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="105">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">23400</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:27:39.5384874+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="106">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">20696</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:27:39.5601223+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="107">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">24152</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:28:08.8587677+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">13</I32>
+          <Obj N="SyncRoot" RefId="108">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="95" />
+              <Ref RefId="96" />
+              <Ref RefId="97" />
+              <Ref RefId="98" />
+              <Ref RefId="99" />
+              <Ref RefId="100" />
+              <Ref RefId="101" />
+              <Ref RefId="102" />
+              <Ref RefId="103" />
+              <Ref RefId="104" />
+              <Ref RefId="105" />
+              <Ref RefId="106" />
+              <Ref RefId="107" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">522</I32>
+      <I64 N="VirtualMemorySize64">2203626831872</I64>
+      <I32 N="VirtualMemorySize">308609024</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">26087424</I64>
+      <I32 N="WorkingSet">26087424</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="109">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (ApplicationFrameHost.exe)</ToString>
+        <Props>
+          <S N="ModuleName">ApplicationFrameHost.exe</S>
+          <S N="FileName">C:\Windows\system32\ApplicationFrameHost.exe</S>
+          <S N="BaseAddress">140695356768256</S>
+          <I32 N="ModuleMemorySize">81920</I32>
+          <S N="EntryPointAddress">140695356775552</S>
+          <S N="FileVersionInfo">File:             C:\Windows\system32\ApplicationFrameHost.exe_x000D__x000A_InternalName:     Application Frame Host_x000D__x000A_OriginalFilename: ApplicationFrameHost.exe_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Application Frame Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">80</I32>
+          <S N="Company">Microsoft Corporation</S>
+          <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+          <S N="ProductVersion">10.0.17763.1</S>
+          <S N="Description">Application Frame Host</S>
+          <S N="Product">Microsoft® Windows® Operating System</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT8.484375S</TS>
+      <TS N="TotalProcessorTime">PT12.578125S</TS>
+      <TS N="UserProcessorTime">PT4.09375S</TS>
+      <Obj N="MainWindowHandle" RefId="110">
+        <TNRef RefId="4" />
+        <ToString>2098158</ToString>
+      </Obj>
+      <S N="MainWindowTitle">Inbox - Gmail ‎- Mail</S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">ApplicationFrameHost</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">522</I32>
+      <I64 N="VM">2203626831872</I64>
+      <I64 N="WS">26087424</I64>
+      <I64 N="PM">33636352</I64>
+      <I64 N="NPM">30728</I64>
+      <S N="Path">C:\Windows\system32\ApplicationFrameHost.exe</S>
+      <Nil N="Parent" />
+      <S N="Company">Microsoft Corporation</S>
+      <Db N="CPU">12.578125</Db>
+      <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+      <S N="ProductVersion">10.0.17763.1</S>
+      <S N="Description">Application Frame Host</S>
+      <S N="Product">Microsoft® Windows® Operating System</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="111">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (AppVShNotify)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="112">
+        <TNRef RefId="5" />
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="113">
+        <TNRef RefId="4" />
+        <ToString>7908</ToString>
+      </Obj>
+      <I32 N="BasePriority">8</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-16T21:32:17.0236684+03:00</DT>
+      <I32 N="Id">5928</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="114">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="115">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="116">
+        <TNRef RefId="6" />
+        <IE>
+          <Obj RefId="117">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (AppVShNotify.exe)</ToString>
+            <Props>
+              <S N="ModuleName">AppVShNotify.exe</S>
+              <S N="FileName">C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe</S>
+              <S N="BaseAddress">140700876079104</S>
+              <I32 N="ModuleMemorySize">294912</I32>
+              <S N="EntryPointAddress">140700876169016</S>
+              <S N="FileVersionInfo">File:             C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe_x000D__x000A_InternalName:     AppVShNotify_x000D__x000A_OriginalFilename: AppVShNotify.exe_x000D__x000A_FileVersion:      5.1.145.0_x000D__x000A_FileDescription:  AppVShNotify_x000D__x000A_Product:          Microsoft Application Virtualization (App-V)_x000D__x000A_ProductVersion:   5.1.145.0_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">288</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">5.1.145.0</S>
+              <S N="ProductVersion">5.1.145.0</S>
+              <S N="Description">AppVShNotify</S>
+              <S N="Product">Microsoft Application Virtualization (App-V)</S>
+            </MS>
+          </Obj>
+          <Obj RefId="118">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="119">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNEL32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">KERNEL32.DLL</S>
+              <S N="FileName">C:\Windows\System32\KERNEL32.DLL</S>
+              <S N="BaseAddress">140719912779776</S>
+              <I32 N="ModuleMemorySize">733184</I32>
+              <S N="EntryPointAddress">140719912876560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName:     kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">716</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="120">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNELBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">KERNELBASE.dll</S>
+              <S N="FileName">C:\Windows\System32\KERNELBASE.dll</S>
+              <S N="BaseAddress">140719894495232</S>
+              <I32 N="ModuleMemorySize">2699264</I32>
+              <S N="EntryPointAddress">140719894841456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName:     Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="121">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USER32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USER32.dll</S>
+              <S N="FileName">C:\Windows\System32\USER32.dll</S>
+              <S N="BaseAddress">140719909306368</S>
+              <I32 N="ModuleMemorySize">1667072</I32>
+              <S N="EntryPointAddress">140719909414448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\USER32.dll_x000D__x000A_InternalName:     user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows USER API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows USER API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="122">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (win32u.dll)</ToString>
+            <Props>
+              <S N="ModuleName">win32u.dll</S>
+              <S N="FileName">C:\Windows\System32\win32u.dll</S>
+              <S N="BaseAddress">140719906816000</S>
+              <I32 N="ModuleMemorySize">131072</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\win32u.dll_x000D__x000A_InternalName:     Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32u_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">128</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32u</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="123">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (GDI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">GDI32.dll</S>
+              <S N="FileName">C:\Windows\System32\GDI32.dll</S>
+              <S N="BaseAddress">140719950659584</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719950676208</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="124">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32full.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32full.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32full.dll</S>
+              <S N="BaseAddress">140719905112064</S>
+              <I32 N="ModuleMemorySize">1675264</I32>
+              <S N="EntryPointAddress">140719905369792</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="125">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcp_win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcp_win.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcp_win.dll</S>
+              <S N="BaseAddress">140719889580032</S>
+              <I32 N="ModuleMemorySize">655360</I32>
+              <S N="EntryPointAddress">140719889658864</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName:     msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">640</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="126">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ucrtbase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ucrtbase.dll</S>
+              <S N="FileName">C:\Windows\System32\ucrtbase.dll</S>
+              <S N="BaseAddress">140719893446656</S>
+              <I32 N="ModuleMemorySize">1024000</I32>
+              <S N="EntryPointAddress">140719893528400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName:     ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1000</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="127">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ADVAPI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ADVAPI32.dll</S>
+              <S N="FileName">C:\Windows\System32\ADVAPI32.dll</S>
+              <S N="BaseAddress">140719915335680</S>
+              <I32 N="ModuleMemorySize">667648</I32>
+              <S N="EntryPointAddress">140719915417840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName:     advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Advanced Windows 32 Base API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">652</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Advanced Windows 32 Base API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="128">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcrt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcrt.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcrt.dll</S>
+              <S N="BaseAddress">140719950004224</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719950035120</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName:     msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion:      7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT CRT DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   7.0.17763.475_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.475 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.475</S>
+              <S N="Description">Windows NT CRT DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="129">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sechost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sechost.dll</S>
+              <S N="FileName">C:\Windows\System32\sechost.dll</S>
+              <S N="BaseAddress">140719948824576</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719948951504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\sechost.dll_x000D__x000A_InternalName:     sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Host for SCM/SDDL/LSA Lookup APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="130">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RPCRT4.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RPCRT4.dll</S>
+              <S N="FileName">C:\Windows\System32\RPCRT4.dll</S>
+              <S N="BaseAddress">140719917629440</S>
+              <I32 N="ModuleMemorySize">1187840</I32>
+              <S N="EntryPointAddress">140719918006928</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName:     rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Procedure Call Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Procedure Call Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="131">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ole32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ole32.dll</S>
+              <S N="FileName">C:\Windows\System32\ole32.dll</S>
+              <S N="BaseAddress">140719907864576</S>
+              <I32 N="ModuleMemorySize">1396736</I32>
+              <S N="EntryPointAddress">140719908019504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ole32.dll_x000D__x000A_InternalName:     OLE32.DLL_x000D__x000A_OriginalFilename: OLE32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft OLE for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1364</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft OLE for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="132">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (combase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">combase.dll</S>
+              <S N="FileName">C:\Windows\System32\combase.dll</S>
+              <S N="BaseAddress">140719950856192</S>
+              <I32 N="ModuleMemorySize">3325952</I32>
+              <S N="EntryPointAddress">140719951769888</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\combase.dll_x000D__x000A_InternalName:     COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft COM for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3248</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft COM for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="133">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcryptPrimitives.dll</S>
+              <S N="FileName">C:\Windows\System32\bcryptPrimitives.dll</S>
+              <S N="BaseAddress">140719890235392</S>
+              <I32 N="ModuleMemorySize">516096</I32>
+              <S N="EntryPointAddress">140719890461152</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName:     bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">504</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="134">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SHELL32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">SHELL32.dll</S>
+              <S N="FileName">C:\Windows\System32\SHELL32.dll</S>
+              <S N="BaseAddress">140719923593216</S>
+              <I32 N="ModuleMemorySize">21954560</I32>
+              <S N="EntryPointAddress">140719924695456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\SHELL32.dll_x000D__x000A_InternalName:     SHELL32_x000D__x000A_OriginalFilename: SHELL32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Shell Common Dll_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">21440</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Shell Common Dll</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="135">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cfgmgr32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cfgmgr32.dll</S>
+              <S N="FileName">C:\Windows\System32\cfgmgr32.dll</S>
+              <S N="BaseAddress">140719889252352</S>
+              <I32 N="ModuleMemorySize">303104</I32>
+              <S N="EntryPointAddress">140719889325904</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName:     cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Configuration Manager DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">296</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Configuration Manager DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="136">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shcore.dll</S>
+              <S N="FileName">C:\Windows\System32\shcore.dll</S>
+              <S N="BaseAddress">140719907143680</S>
+              <I32 N="ModuleMemorySize">688128</I32>
+              <S N="EntryPointAddress">140719907388560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shcore.dll_x000D__x000A_InternalName:     SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  SHCORE_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">672</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">SHCORE</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="137">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (windows.storage.dll)</ToString>
+            <Props>
+              <S N="ModuleName">windows.storage.dll</S>
+              <S N="FileName">C:\Windows\System32\windows.storage.dll</S>
+              <S N="BaseAddress">140719897444352</S>
+              <I32 N="ModuleMemorySize">7643136</I32>
+              <S N="EntryPointAddress">140719899226624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\windows.storage.dll_x000D__x000A_InternalName:     Windows.Storage_x000D__x000A_OriginalFilename: Windows.Storage.dll.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft WinRT Storage API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">7464</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft WinRT Storage API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="138">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSVCP120.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSVCP120.dll</S>
+              <S N="FileName">C:\Program Files\Common Files\Microsoft Shared\ClickToRun\MSVCP120.dll</S>
+              <S N="BaseAddress">140719534964736</S>
+              <I32 N="ModuleMemorySize">679936</I32>
+              <S N="EntryPointAddress">140719535288300</S>
+              <S N="FileVersionInfo">File:             C:\Program Files\Common Files\Microsoft Shared\ClickToRun\MSVCP120.dll_x000D__x000A_InternalName:     msvcp120.dll_x000D__x000A_OriginalFilename: msvcp120.dll_x000D__x000A_FileVersion:      12.00.30501.0 built by: REL_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Visual Studio® 2013_x000D__x000A_ProductVersion:   12.00.30501.0_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">664</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">12.00.30501.0 built by: REL</S>
+              <S N="ProductVersion">12.00.30501.0</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Visual Studio® 2013</S>
+            </MS>
+          </Obj>
+          <Obj RefId="139">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSVCR120.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSVCR120.dll</S>
+              <S N="FileName">C:\Program Files\Common Files\Microsoft Shared\ClickToRun\MSVCR120.dll</S>
+              <S N="BaseAddress">140719535685632</S>
+              <I32 N="ModuleMemorySize">978944</I32>
+              <S N="EntryPointAddress">140719535827404</S>
+              <S N="FileVersionInfo">File:             C:\Program Files\Common Files\Microsoft Shared\ClickToRun\MSVCR120.dll_x000D__x000A_InternalName:     msvcr120.dll_x000D__x000A_OriginalFilename: msvcr120.dll_x000D__x000A_FileVersion:      12.00.30501.0 built by: REL_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Visual Studio® 2013_x000D__x000A_ProductVersion:   12.00.30501.0_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">956</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">12.00.30501.0 built by: REL</S>
+              <S N="ProductVersion">12.00.30501.0</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Visual Studio® 2013</S>
+            </MS>
+          </Obj>
+          <Obj RefId="140">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (profapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">profapi.dll</S>
+              <S N="FileName">C:\Windows\System32\profapi.dll</S>
+              <S N="BaseAddress">140719888531456</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719888564400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\profapi.dll_x000D__x000A_InternalName:     PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  User Profile Basic API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">User Profile Basic API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="141">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (powrprof.dll)</ToString>
+            <Props>
+              <S N="ModuleName">powrprof.dll</S>
+              <S N="FileName">C:\Windows\System32\powrprof.dll</S>
+              <S N="BaseAddress">140719888007168</S>
+              <I32 N="ModuleMemorySize">380928</I32>
+              <S N="EntryPointAddress">140719888020992</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\powrprof.dll_x000D__x000A_InternalName:     POWRPROF_x000D__x000A_OriginalFilename: POWRPROF.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Power Profile Helper DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">372</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Power Profile Helper DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="142">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shlwapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shlwapi.dll</S>
+              <S N="FileName">C:\Windows\System32\shlwapi.dll</S>
+              <S N="BaseAddress">140719945547776</S>
+              <I32 N="ModuleMemorySize">335872</I32>
+              <S N="EntryPointAddress">140719945588304</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shlwapi.dll_x000D__x000A_InternalName:     SHLWAPI_x000D__x000A_OriginalFilename: SHLWAPI.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Shell Light-weight Utility Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">328</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Shell Light-weight Utility Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="143">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (kernel.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">kernel.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\kernel.appcore.dll</S>
+              <S N="BaseAddress">140719888400384</S>
+              <I32 N="ModuleMemorySize">69632</I32>
+              <S N="EntryPointAddress">140719888415648</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName:     kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AppModel API Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">68</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AppModel API Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="144">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cryptsp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cryptsp.dll</S>
+              <S N="FileName">C:\Windows\System32\cryptsp.dll</S>
+              <S N="BaseAddress">140719889121280</S>
+              <I32 N="ModuleMemorySize">94208</I32>
+              <S N="EntryPointAddress">140719889138512</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cryptsp.dll_x000D__x000A_InternalName:     cryptsp.dll_x000D__x000A_OriginalFilename: cryptsp.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Cryptographic Service Provider API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">92</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Cryptographic Service Provider API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="145">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USERENV.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USERENV.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\USERENV.dll</S>
+              <S N="BaseAddress">140719887024128</S>
+              <I32 N="ModuleMemorySize">163840</I32>
+              <S N="EntryPointAddress">140719887043280</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName:     userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Userenv_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Userenv</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="146">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IMM32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IMM32.DLL</S>
+              <S N="FileName">C:\Windows\System32\IMM32.DLL</S>
+              <S N="BaseAddress">140719906947072</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719906952688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName:     imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows IMM32 API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="147">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sspicli.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sspicli.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\sspicli.dll</S>
+              <S N="BaseAddress">140719886827520</S>
+              <I32 N="ModuleMemorySize">192512</I32>
+              <S N="EntryPointAddress">140719886881776</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\sspicli.dll_x000D__x000A_InternalName:     sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">188</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="148">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msv1_0.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">msv1_0.DLL</S>
+              <S N="FileName">C:\Windows\system32\msv1_0.DLL</S>
+              <S N="BaseAddress">140719879421952</S>
+              <I32 N="ModuleMemorySize">487424</I32>
+              <S N="EntryPointAddress">140719879520000</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\msv1_0.DLL_x000D__x000A_InternalName:     MSV1_0.DLL_x000D__x000A_OriginalFilename: MSV1_0.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Authentication Package v1.0_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">476</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft Authentication Package v1.0</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="149">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcrypt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcrypt.dll</S>
+              <S N="FileName">C:\Windows\System32\bcrypt.dll</S>
+              <S N="BaseAddress">140719897247744</S>
+              <I32 N="ModuleMemorySize">155648</I32>
+              <S N="EntryPointAddress">140719897281296</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName:     bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">152</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="150">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (NtlmShared.dll)</ToString>
+            <Props>
+              <S N="ModuleName">NtlmShared.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\NtlmShared.dll</S>
+              <S N="BaseAddress">140719879356416</S>
+              <I32 N="ModuleMemorySize">53248</I32>
+              <S N="EntryPointAddress">140719879374528</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\NtlmShared.dll_x000D__x000A_InternalName:     NtlmShared.dll_x000D__x000A_OriginalFilename: NtlmShared.dll_x000D__x000A_FileVersion:      10.0.17763.316 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NTLM Shared Functionality_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.316_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">52</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.316 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.316</S>
+              <S N="Description">NTLM Shared Functionality</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="151">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cryptdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cryptdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\cryptdll.dll</S>
+              <S N="BaseAddress">140719880404992</S>
+              <I32 N="ModuleMemorySize">86016</I32>
+              <S N="EntryPointAddress">140719880438240</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\cryptdll.dll_x000D__x000A_InternalName:     cryptdll.dll_x000D__x000A_OriginalFilename: cryptdll.dll_x000D__x000A_FileVersion:      10.0.17763.503 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Cryptography Manager_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.503_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">84</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.503 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.503</S>
+              <S N="Description">Cryptography Manager</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="152">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (uxtheme.dll)</ToString>
+            <Props>
+              <S N="ModuleName">uxtheme.dll</S>
+              <S N="FileName">C:\Windows\system32\uxtheme.dll</S>
+              <S N="BaseAddress">140719860547584</S>
+              <I32 N="ModuleMemorySize">638976</I32>
+              <S N="EntryPointAddress">140719860712368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\uxtheme.dll_x000D__x000A_InternalName:     UxTheme.dll_x000D__x000A_OriginalFilename: UxTheme.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft UxTheme Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">624</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft UxTheme Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">36</I32>
+          <Obj N="SyncRoot" RefId="153">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="117" />
+              <Ref RefId="118" />
+              <Ref RefId="119" />
+              <Ref RefId="120" />
+              <Ref RefId="121" />
+              <Ref RefId="122" />
+              <Ref RefId="123" />
+              <Ref RefId="124" />
+              <Ref RefId="125" />
+              <Ref RefId="126" />
+              <Ref RefId="127" />
+              <Ref RefId="128" />
+              <Ref RefId="129" />
+              <Ref RefId="130" />
+              <Ref RefId="131" />
+              <Ref RefId="132" />
+              <Ref RefId="133" />
+              <Ref RefId="134" />
+              <Ref RefId="135" />
+              <Ref RefId="136" />
+              <Ref RefId="137" />
+              <Ref RefId="138" />
+              <Ref RefId="139" />
+              <Ref RefId="140" />
+              <Ref RefId="141" />
+              <Ref RefId="142" />
+              <Ref RefId="143" />
+              <Ref RefId="144" />
+              <Ref RefId="145" />
+              <Ref RefId="146" />
+              <Ref RefId="147" />
+              <Ref RefId="148" />
+              <Ref RefId="149" />
+              <Ref RefId="150" />
+              <Ref RefId="151" />
+              <Ref RefId="152" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">9072</I64>
+      <I32 N="NonpagedSystemMemorySize">9072</I32>
+      <I64 N="PagedMemorySize64">2039808</I64>
+      <I32 N="PagedMemorySize">2039808</I32>
+      <I64 N="PagedSystemMemorySize64">172488</I64>
+      <I32 N="PagedSystemMemorySize">172488</I32>
+      <I64 N="PeakPagedMemorySize64">2269184</I64>
+      <I32 N="PeakPagedMemorySize">2269184</I32>
+      <I64 N="PeakWorkingSet64">8658944</I64>
+      <I32 N="PeakWorkingSet">8658944</I32>
+      <I64 N="PeakVirtualMemorySize64">4423241728</I64>
+      <I32 N="PeakVirtualMemorySize">128274432</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="154">
+        <TNRef RefId="8" />
+        <ToString>Normal</ToString>
+        <I32>32</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">2039808</I64>
+      <I32 N="PrivateMemorySize">2039808</I32>
+      <S N="ProcessName">AppVShNotify</S>
+      <Obj N="ProcessorAffinity" RefId="155">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="156">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="157">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">15324</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-16T21:32:17.0236695+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">1</I32>
+          <Obj N="SyncRoot" RefId="158">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="157" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">167</I32>
+      <I64 N="VirtualMemorySize64">4415381504</I64>
+      <I32 N="VirtualMemorySize">120414208</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">991232</I64>
+      <I32 N="WorkingSet">991232</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="159">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (AppVShNotify.exe)</ToString>
+        <Props>
+          <S N="ModuleName">AppVShNotify.exe</S>
+          <S N="FileName">C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe</S>
+          <S N="BaseAddress">140700876079104</S>
+          <I32 N="ModuleMemorySize">294912</I32>
+          <S N="EntryPointAddress">140700876169016</S>
+          <S N="FileVersionInfo">File:             C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe_x000D__x000A_InternalName:     AppVShNotify_x000D__x000A_OriginalFilename: AppVShNotify.exe_x000D__x000A_FileVersion:      5.1.145.0_x000D__x000A_FileDescription:  AppVShNotify_x000D__x000A_Product:          Microsoft Application Virtualization (App-V)_x000D__x000A_ProductVersion:   5.1.145.0_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">288</I32>
+          <S N="Company">Microsoft Corporation</S>
+          <S N="FileVersion">5.1.145.0</S>
+          <S N="ProductVersion">5.1.145.0</S>
+          <S N="Description">AppVShNotify</S>
+          <S N="Product">Microsoft Application Virtualization (App-V)</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT0.0625S</TS>
+      <TS N="TotalProcessorTime">PT0.09375S</TS>
+      <TS N="UserProcessorTime">PT0.03125S</TS>
+      <Obj N="MainWindowHandle" RefId="160">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">AppVShNotify</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">167</I32>
+      <I64 N="VM">4415381504</I64>
+      <I64 N="WS">991232</I64>
+      <I64 N="PM">2039808</I64>
+      <I64 N="NPM">9072</I64>
+      <S N="Path">C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe</S>
+      <Nil N="Parent" />
+      <S N="Company">Microsoft Corporation</S>
+      <Db N="CPU">0.09375</Db>
+      <S N="FileVersion">5.1.145.0</S>
+      <S N="ProductVersion">5.1.145.0</S>
+      <S N="Description">AppVShNotify</S>
+      <S N="Product">Microsoft Application Virtualization (App-V)</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="161">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (audiodg)</ToString>
+    <Props>
+      <I32 N="BasePriority">8</I32>
+      <DT N="StartTime">2019-08-26T20:52:20.9249882+03:00</DT>
+      <I32 N="Id">22436</I32>
+      <S N="MachineName">.</S>
+      <I64 N="NonpagedSystemMemorySize64">15072</I64>
+      <I32 N="NonpagedSystemMemorySize">15072</I32>
+      <I64 N="PagedMemorySize64">22097920</I64>
+      <I32 N="PagedMemorySize">22097920</I32>
+      <I64 N="PagedSystemMemorySize64">127312</I64>
+      <I32 N="PagedSystemMemorySize">127312</I32>
+      <I64 N="PeakPagedMemorySize64">25055232</I64>
+      <I32 N="PeakPagedMemorySize">25055232</I32>
+      <I64 N="PeakWorkingSet64">29364224</I64>
+      <I32 N="PeakWorkingSet">29364224</I32>
+      <I64 N="PeakVirtualMemorySize64">2203439460352</I64>
+      <I32 N="PeakVirtualMemorySize">121237504</I32>
+      <I64 N="PrivateMemorySize64">22097920</I64>
+      <I32 N="PrivateMemorySize">22097920</I32>
+      <S N="ProcessName">audiodg</S>
+      <I32 N="SessionId">0</I32>
+      <Obj N="Threads" RefId="162">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="163">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">9720</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="164">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">16756</I32>
+              <S N="StartAddress">0</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="165">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">25904</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="166">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">5200</I32>
+              <S N="StartAddress">0</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="167">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">27380</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="168">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">16</I32>
+              <I32 N="CurrentPriority">16</I32>
+              <I32 N="Id">25336</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="169">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">26312</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="170">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">19660</I32>
+              <S N="StartAddress">0</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="171">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">18684</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="172">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">26620</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="173">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">22224</I32>
+              <S N="StartAddress">0</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="174">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">12360</I32>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">12</I32>
+          <Obj N="SyncRoot" RefId="175">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="163" />
+              <Ref RefId="164" />
+              <Ref RefId="165" />
+              <Ref RefId="166" />
+              <Ref RefId="167" />
+              <Ref RefId="168" />
+              <Ref RefId="169" />
+              <Ref RefId="170" />
+              <Ref RefId="171" />
+              <Ref RefId="172" />
+              <Ref RefId="173" />
+              <Ref RefId="174" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">671</I32>
+      <I64 N="VirtualMemorySize64">2203435687936</I64>
+      <I32 N="VirtualMemorySize">117465088</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">19423232</I64>
+      <I32 N="WorkingSet">19423232</I32>
+      <Nil N="SynchronizingObject" />
+      <TS N="PrivilegedProcessorTime">PT33.921875S</TS>
+      <TS N="TotalProcessorTime">PT3M30.578125S</TS>
+      <TS N="UserProcessorTime">PT2M56.65625S</TS>
+      <Obj N="MainWindowHandle" RefId="176">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">audiodg</S>
+      <I32 N="SI">0</I32>
+      <I32 N="Handles">671</I32>
+      <I64 N="VM">2203435687936</I64>
+      <I64 N="WS">19423232</I64>
+      <I64 N="PM">22097920</I64>
+      <I64 N="NPM">15072</I64>
+      <Nil N="Path" />
+      <Nil N="Parent" />
+      <Nil N="Company" />
+      <Db N="CPU">210.578125</Db>
+      <Nil N="FileVersion" />
+      <Nil N="ProductVersion" />
+      <Nil N="Description" />
+      <Nil N="Product" />
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="177">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (AutoHotkey)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="178">
+        <TNRef RefId="5" />
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="179">
+        <TNRef RefId="4" />
+        <ToString>5384</ToString>
+      </Obj>
+      <I32 N="BasePriority">8</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-15T19:34:55.1958182+03:00</DT>
+      <I32 N="Id">18988</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="180">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="181">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="182">
+        <TNRef RefId="6" />
+        <IE>
+          <Obj RefId="183">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (AutoHotkey.exe)</ToString>
+            <Props>
+              <S N="ModuleName">AutoHotkey.exe</S>
+              <S N="FileName">C:\Program Files\AutoHotkey\AutoHotkey.exe</S>
+              <S N="BaseAddress">5368709120</S>
+              <I32 N="ModuleMemorySize">1236992</I32>
+              <S N="EntryPointAddress">5369433848</S>
+              <S N="FileVersionInfo">File:             C:\Program Files\AutoHotkey\AutoHotkey.exe_x000D__x000A_InternalName:     AutoHotkey_x000D__x000A_OriginalFilename: AutoHotkey.exe_x000D__x000A_FileVersion:      1.1.30.00_x000D__x000A_FileDescription:  AutoHotkey Unicode 64-bit_x000D__x000A_Product:          AutoHotkey_x000D__x000A_ProductVersion:   1.1.30.00_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1208</I32>
+              <S N="Company"></S>
+              <S N="FileVersion">1.1.30.00</S>
+              <S N="ProductVersion">1.1.30.00</S>
+              <S N="Description">AutoHotkey Unicode 64-bit</S>
+              <S N="Product">AutoHotkey</S>
+            </MS>
+          </Obj>
+          <Obj RefId="184">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="185">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNEL32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">KERNEL32.DLL</S>
+              <S N="FileName">C:\Windows\System32\KERNEL32.DLL</S>
+              <S N="BaseAddress">140719912779776</S>
+              <I32 N="ModuleMemorySize">733184</I32>
+              <S N="EntryPointAddress">140719912876560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName:     kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">716</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="186">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNELBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">KERNELBASE.dll</S>
+              <S N="FileName">C:\Windows\System32\KERNELBASE.dll</S>
+              <S N="BaseAddress">140719894495232</S>
+              <I32 N="ModuleMemorySize">2699264</I32>
+              <S N="EntryPointAddress">140719894841456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName:     Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="187">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (PSAPI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">PSAPI.DLL</S>
+              <S N="FileName">C:\Windows\System32\PSAPI.DLL</S>
+              <S N="BaseAddress">140719945940992</S>
+              <I32 N="ModuleMemorySize">32768</I32>
+              <S N="EntryPointAddress">140719945945216</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\PSAPI.DLL_x000D__x000A_InternalName:     PSAPI_x000D__x000A_OriginalFilename: PSAPI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Process Status Helper_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">32</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Process Status Helper</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="188">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USER32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USER32.dll</S>
+              <S N="FileName">C:\Windows\System32\USER32.dll</S>
+              <S N="BaseAddress">140719909306368</S>
+              <I32 N="ModuleMemorySize">1667072</I32>
+              <S N="EntryPointAddress">140719909414448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\USER32.dll_x000D__x000A_InternalName:     user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows USER API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows USER API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="189">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (win32u.dll)</ToString>
+            <Props>
+              <S N="ModuleName">win32u.dll</S>
+              <S N="FileName">C:\Windows\System32\win32u.dll</S>
+              <S N="BaseAddress">140719906816000</S>
+              <I32 N="ModuleMemorySize">131072</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\win32u.dll_x000D__x000A_InternalName:     Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32u_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">128</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32u</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="190">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (GDI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">GDI32.dll</S>
+              <S N="FileName">C:\Windows\System32\GDI32.dll</S>
+              <S N="BaseAddress">140719950659584</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719950676208</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="191">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32full.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32full.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32full.dll</S>
+              <S N="BaseAddress">140719905112064</S>
+              <I32 N="ModuleMemorySize">1675264</I32>
+              <S N="EntryPointAddress">140719905369792</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="192">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcp_win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcp_win.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcp_win.dll</S>
+              <S N="BaseAddress">140719889580032</S>
+              <I32 N="ModuleMemorySize">655360</I32>
+              <S N="EntryPointAddress">140719889658864</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName:     msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">640</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="193">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ucrtbase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ucrtbase.dll</S>
+              <S N="FileName">C:\Windows\System32\ucrtbase.dll</S>
+              <S N="BaseAddress">140719893446656</S>
+              <I32 N="ModuleMemorySize">1024000</I32>
+              <S N="EntryPointAddress">140719893528400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName:     ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1000</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="194">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (COMDLG32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">COMDLG32.dll</S>
+              <S N="FileName">C:\Windows\System32\COMDLG32.dll</S>
+              <S N="BaseAddress">140719914090496</S>
+              <I32 N="ModuleMemorySize">1208320</I32>
+              <S N="EntryPointAddress">140719914272592</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\COMDLG32.dll_x000D__x000A_InternalName:     comdlg32_x000D__x000A_OriginalFilename: comdlg32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Common Dialogs DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1180</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Common Dialogs DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="195">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcrt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcrt.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcrt.dll</S>
+              <S N="BaseAddress">140719950004224</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719950035120</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName:     msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion:      7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT CRT DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   7.0.17763.475_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.475 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.475</S>
+              <S N="Description">Windows NT CRT DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="196">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (combase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">combase.dll</S>
+              <S N="FileName">C:\Windows\System32\combase.dll</S>
+              <S N="BaseAddress">140719950856192</S>
+              <I32 N="ModuleMemorySize">3325952</I32>
+              <S N="EntryPointAddress">140719951769888</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\combase.dll_x000D__x000A_InternalName:     COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft COM for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3248</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft COM for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="197">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RPCRT4.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RPCRT4.dll</S>
+              <S N="FileName">C:\Windows\System32\RPCRT4.dll</S>
+              <S N="BaseAddress">140719917629440</S>
+              <I32 N="ModuleMemorySize">1187840</I32>
+              <S N="EntryPointAddress">140719918006928</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName:     rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Procedure Call Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Procedure Call Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="198">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcryptPrimitives.dll</S>
+              <S N="FileName">C:\Windows\System32\bcryptPrimitives.dll</S>
+              <S N="BaseAddress">140719890235392</S>
+              <I32 N="ModuleMemorySize">516096</I32>
+              <S N="EntryPointAddress">140719890461152</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName:     bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">504</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="199">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shcore.dll</S>
+              <S N="FileName">C:\Windows\System32\shcore.dll</S>
+              <S N="BaseAddress">140719907143680</S>
+              <I32 N="ModuleMemorySize">688128</I32>
+              <S N="EntryPointAddress">140719907388560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shcore.dll_x000D__x000A_InternalName:     SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  SHCORE_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">672</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">SHCORE</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="200">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SHLWAPI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">SHLWAPI.dll</S>
+              <S N="FileName">C:\Windows\System32\SHLWAPI.dll</S>
+              <S N="BaseAddress">140719945547776</S>
+              <I32 N="ModuleMemorySize">335872</I32>
+              <S N="EntryPointAddress">140719945588304</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\SHLWAPI.dll_x000D__x000A_InternalName:     SHLWAPI_x000D__x000A_OriginalFilename: SHLWAPI.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Shell Light-weight Utility Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">328</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Shell Light-weight Utility Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="201">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SHELL32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">SHELL32.dll</S>
+              <S N="FileName">C:\Windows\System32\SHELL32.dll</S>
+              <S N="BaseAddress">140719923593216</S>
+              <I32 N="ModuleMemorySize">21954560</I32>
+              <S N="EntryPointAddress">140719924695456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\SHELL32.dll_x000D__x000A_InternalName:     SHELL32_x000D__x000A_OriginalFilename: SHELL32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Shell Common Dll_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">21440</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Shell Common Dll</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="202">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cfgmgr32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cfgmgr32.dll</S>
+              <S N="FileName">C:\Windows\System32\cfgmgr32.dll</S>
+              <S N="BaseAddress">140719889252352</S>
+              <I32 N="ModuleMemorySize">303104</I32>
+              <S N="EntryPointAddress">140719889325904</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName:     cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Configuration Manager DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">296</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Configuration Manager DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="203">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (VERSION.dll)</ToString>
+            <Props>
+              <S N="ModuleName">VERSION.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\VERSION.dll</S>
+              <S N="BaseAddress">140719800254464</S>
+              <I32 N="ModuleMemorySize">40960</I32>
+              <S N="EntryPointAddress">140719800259344</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName:     version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Version Checking and File Installation Libraries_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">40</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Version Checking and File Installation Libraries</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="204">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WSOCK32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WSOCK32.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WSOCK32.dll</S>
+              <S N="BaseAddress">140719277277184</S>
+              <I32 N="ModuleMemorySize">36864</I32>
+              <S N="EntryPointAddress">140719277282048</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WSOCK32.dll_x000D__x000A_InternalName:     wsock32.dll_x000D__x000A_OriginalFilename: wsock32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Socket 32-Bit DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">36</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Socket 32-Bit DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="205">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMM.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMM.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMM.dll</S>
+              <S N="BaseAddress">140719835054080</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719835066368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName:     winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MCI API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MCI API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="206">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (windows.storage.dll)</ToString>
+            <Props>
+              <S N="ModuleName">windows.storage.dll</S>
+              <S N="FileName">C:\Windows\System32\windows.storage.dll</S>
+              <S N="BaseAddress">140719897444352</S>
+              <I32 N="ModuleMemorySize">7643136</I32>
+              <S N="EntryPointAddress">140719899226624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\windows.storage.dll_x000D__x000A_InternalName:     Windows.Storage_x000D__x000A_OriginalFilename: Windows.Storage.dll.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft WinRT Storage API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">7464</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft WinRT Storage API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="207">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WS2_32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WS2_32.dll</S>
+              <S N="FileName">C:\Windows\System32\WS2_32.dll</S>
+              <S N="BaseAddress">140719954198528</S>
+              <I32 N="ModuleMemorySize">446464</I32>
+              <S N="EntryPointAddress">140719954286384</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName:     ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">436</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Socket 2.0 32-Bit DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="208">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sechost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sechost.dll</S>
+              <S N="FileName">C:\Windows\System32\sechost.dll</S>
+              <S N="BaseAddress">140719948824576</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719948951504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\sechost.dll_x000D__x000A_InternalName:     sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Host for SCM/SDDL/LSA Lookup APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="209">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (advapi32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">advapi32.dll</S>
+              <S N="FileName">C:\Windows\System32\advapi32.dll</S>
+              <S N="BaseAddress">140719915335680</S>
+              <I32 N="ModuleMemorySize">667648</I32>
+              <S N="EntryPointAddress">140719915417840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\advapi32.dll_x000D__x000A_InternalName:     advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Advanced Windows 32 Base API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">652</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Advanced Windows 32 Base API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="210">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (profapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">profapi.dll</S>
+              <S N="FileName">C:\Windows\System32\profapi.dll</S>
+              <S N="BaseAddress">140719888531456</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719888564400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\profapi.dll_x000D__x000A_InternalName:     PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  User Profile Basic API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">User Profile Basic API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="211">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (powrprof.dll)</ToString>
+            <Props>
+              <S N="ModuleName">powrprof.dll</S>
+              <S N="FileName">C:\Windows\System32\powrprof.dll</S>
+              <S N="BaseAddress">140719888007168</S>
+              <I32 N="ModuleMemorySize">380928</I32>
+              <S N="EntryPointAddress">140719888020992</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\powrprof.dll_x000D__x000A_InternalName:     POWRPROF_x000D__x000A_OriginalFilename: POWRPROF.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Power Profile Helper DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">372</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Power Profile Helper DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="212">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (kernel.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">kernel.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\kernel.appcore.dll</S>
+              <S N="BaseAddress">140719888400384</S>
+              <I32 N="ModuleMemorySize">69632</I32>
+              <S N="EntryPointAddress">140719888415648</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName:     kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AppModel API Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">68</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AppModel API Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="213">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cryptsp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cryptsp.dll</S>
+              <S N="FileName">C:\Windows\System32\cryptsp.dll</S>
+              <S N="BaseAddress">140719889121280</S>
+              <I32 N="ModuleMemorySize">94208</I32>
+              <S N="EntryPointAddress">140719889138512</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cryptsp.dll_x000D__x000A_InternalName:     cryptsp.dll_x000D__x000A_OriginalFilename: cryptsp.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Cryptographic Service Provider API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">92</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Cryptographic Service Provider API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="214">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ole32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ole32.dll</S>
+              <S N="FileName">C:\Windows\System32\ole32.dll</S>
+              <S N="BaseAddress">140719907864576</S>
+              <I32 N="ModuleMemorySize">1396736</I32>
+              <S N="EntryPointAddress">140719908019504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ole32.dll_x000D__x000A_InternalName:     OLE32.DLL_x000D__x000A_OriginalFilename: OLE32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft OLE for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1364</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft OLE for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="215">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OLEAUT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OLEAUT32.dll</S>
+              <S N="FileName">C:\Windows\System32\OLEAUT32.dll</S>
+              <S N="BaseAddress">140719946465280</S>
+              <I32 N="ModuleMemorySize">802816</I32>
+              <S N="EntryPointAddress">140719946574624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName:     OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OLEAUT32.DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">784</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">OLEAUT32.DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="216">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMMBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMMBASE.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMMBASE.dll</S>
+              <S N="BaseAddress">140719834857472</S>
+              <I32 N="ModuleMemorySize">184320</I32>
+              <S N="EntryPointAddress">140719834890448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName:     winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base Multimedia Extension API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">180</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base Multimedia Extension API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="217">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (COMCTL32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">COMCTL32.dll</S>
+              <S N="FileName">C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.678_none_05b74150071d72bf\COMCTL32.dll</S>
+              <S N="BaseAddress">140719697690624</S>
+              <I32 N="ModuleMemorySize">2592768</I32>
+              <S N="EntryPointAddress">140719698120976</S>
+              <S N="FileVersionInfo">File:             C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.678_none_05b74150071d72bf\COMCTL32.dll_x000D__x000A_InternalName:     COMCTL32_x000D__x000A_OriginalFilename: COMCTL32.DLL.MUI_x000D__x000A_FileVersion:      5.82 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Common Controls Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2532</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">5.82 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Common Controls Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="218">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IMM32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IMM32.DLL</S>
+              <S N="FileName">C:\Windows\System32\IMM32.DLL</S>
+              <S N="BaseAddress">140719906947072</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719906952688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName:     imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows IMM32 API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="219">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (uxtheme.dll)</ToString>
+            <Props>
+              <S N="ModuleName">uxtheme.dll</S>
+              <S N="FileName">C:\Windows\system32\uxtheme.dll</S>
+              <S N="BaseAddress">140719860547584</S>
+              <I32 N="ModuleMemorySize">638976</I32>
+              <S N="EntryPointAddress">140719860712368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\uxtheme.dll_x000D__x000A_InternalName:     UxTheme.dll_x000D__x000A_OriginalFilename: UxTheme.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft UxTheme Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">624</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft UxTheme Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="220">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSCTF.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSCTF.dll</S>
+              <S N="FileName">C:\Windows\System32\MSCTF.dll</S>
+              <S N="BaseAddress">140719947317248</S>
+              <I32 N="ModuleMemorySize">1486848</I32>
+              <S N="EntryPointAddress">140719947597184</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSCTF.dll_x000D__x000A_InternalName:     MSCTF_x000D__x000A_OriginalFilename: MSCTF.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MSCTF Server DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1452</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MSCTF Server DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="221">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dwmapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dwmapi.dll</S>
+              <S N="FileName">C:\Windows\system32\dwmapi.dll</S>
+              <S N="BaseAddress">140719861399552</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719861412880</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\dwmapi.dll_x000D__x000A_InternalName:     dwmapi.dll_x000D__x000A_OriginalFilename: dwmapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Desktop Window Manager API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft Desktop Window Manager API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="222">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPT32.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPT32.dll</S>
+              <S N="BaseAddress">140719891480576</S>
+              <I32 N="ModuleMemorySize">1945600</I32>
+              <S N="EntryPointAddress">140719891804832</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName:     CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Crypto API32_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1900</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Crypto API32</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="223">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSASN1.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSASN1.dll</S>
+              <S N="FileName">C:\Windows\System32\MSASN1.dll</S>
+              <S N="BaseAddress">140719887876096</S>
+              <I32 N="ModuleMemorySize">73728</I32>
+              <S N="EntryPointAddress">140719887898576</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName:     msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  ASN.1 Runtime APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">72</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">ASN.1 Runtime APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">41</I32>
+          <Obj N="SyncRoot" RefId="224">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="183" />
+              <Ref RefId="184" />
+              <Ref RefId="185" />
+              <Ref RefId="186" />
+              <Ref RefId="187" />
+              <Ref RefId="188" />
+              <Ref RefId="189" />
+              <Ref RefId="190" />
+              <Ref RefId="191" />
+              <Ref RefId="192" />
+              <Ref RefId="193" />
+              <Ref RefId="194" />
+              <Ref RefId="195" />
+              <Ref RefId="196" />
+              <Ref RefId="197" />
+              <Ref RefId="198" />
+              <Ref RefId="199" />
+              <Ref RefId="200" />
+              <Ref RefId="201" />
+              <Ref RefId="202" />
+              <Ref RefId="203" />
+              <Ref RefId="204" />
+              <Ref RefId="205" />
+              <Ref RefId="206" />
+              <Ref RefId="207" />
+              <Ref RefId="208" />
+              <Ref RefId="209" />
+              <Ref RefId="210" />
+              <Ref RefId="211" />
+              <Ref RefId="212" />
+              <Ref RefId="213" />
+              <Ref RefId="214" />
+              <Ref RefId="215" />
+              <Ref RefId="216" />
+              <Ref RefId="217" />
+              <Ref RefId="218" />
+              <Ref RefId="219" />
+              <Ref RefId="220" />
+              <Ref RefId="221" />
+              <Ref RefId="222" />
+              <Ref RefId="223" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">10600</I64>
+      <I32 N="NonpagedSystemMemorySize">10600</I32>
+      <I64 N="PagedMemorySize64">2682880</I64>
+      <I32 N="PagedMemorySize">2682880</I32>
+      <I64 N="PagedSystemMemorySize64">228648</I64>
+      <I32 N="PagedSystemMemorySize">228648</I32>
+      <I64 N="PeakPagedMemorySize64">2781184</I64>
+      <I32 N="PeakPagedMemorySize">2781184</I32>
+      <I64 N="PeakWorkingSet64">9916416</I64>
+      <I32 N="PeakWorkingSet">9916416</I32>
+      <I64 N="PeakVirtualMemorySize64">4475940864</I64>
+      <I32 N="PeakVirtualMemorySize">180973568</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="225">
+        <TNRef RefId="8" />
+        <ToString>Normal</ToString>
+        <I32>32</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">2682880</I64>
+      <I32 N="PrivateMemorySize">2682880</I32>
+      <S N="ProcessName">AutoHotkey</S>
+      <Obj N="ProcessorAffinity" RefId="226">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="227">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="228">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">18992</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.078125S</TS>
+              <DT N="StartTime">2019-08-15T19:34:55.1958197+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.109375S</TS>
+              <TS N="UserProcessorTime">PT0.03125S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="229">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">15</I32>
+              <I32 N="CurrentPriority">15</I32>
+              <I32 N="Id">19020</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">TimeCritical</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT2.015625S</TS>
+              <DT N="StartTime">2019-08-15T19:34:55.304947+03:00</DT>
+              <TS N="TotalProcessorTime">PT2.203125S</TS>
+              <TS N="UserProcessorTime">PT0.1875S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">2</I32>
+          <Obj N="SyncRoot" RefId="230">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="228" />
+              <Ref RefId="229" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">144</I32>
+      <I64 N="VirtualMemorySize64">4454965248</I64>
+      <I32 N="VirtualMemorySize">159997952</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">2682880</I64>
+      <I32 N="WorkingSet">2682880</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="231">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (AutoHotkey.exe)</ToString>
+        <Props>
+          <S N="ModuleName">AutoHotkey.exe</S>
+          <S N="FileName">C:\Program Files\AutoHotkey\AutoHotkey.exe</S>
+          <S N="BaseAddress">5368709120</S>
+          <I32 N="ModuleMemorySize">1236992</I32>
+          <S N="EntryPointAddress">5369433848</S>
+          <S N="FileVersionInfo">File:             C:\Program Files\AutoHotkey\AutoHotkey.exe_x000D__x000A_InternalName:     AutoHotkey_x000D__x000A_OriginalFilename: AutoHotkey.exe_x000D__x000A_FileVersion:      1.1.30.00_x000D__x000A_FileDescription:  AutoHotkey Unicode 64-bit_x000D__x000A_Product:          AutoHotkey_x000D__x000A_ProductVersion:   1.1.30.00_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">1208</I32>
+          <S N="Company"></S>
+          <S N="FileVersion">1.1.30.00</S>
+          <S N="ProductVersion">1.1.30.00</S>
+          <S N="Description">AutoHotkey Unicode 64-bit</S>
+          <S N="Product">AutoHotkey</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT2.1875S</TS>
+      <TS N="TotalProcessorTime">PT2.40625S</TS>
+      <TS N="UserProcessorTime">PT0.21875S</TS>
+      <Obj N="MainWindowHandle" RefId="232">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">AutoHotkey</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">144</I32>
+      <I64 N="VM">4454965248</I64>
+      <I64 N="WS">2682880</I64>
+      <I64 N="PM">2682880</I64>
+      <I64 N="NPM">10600</I64>
+      <S N="Path">C:\Program Files\AutoHotkey\AutoHotkey.exe</S>
+      <Obj N="Parent" RefId="233">
+        <TNRef RefId="0" />
+        <ToString>System.Diagnostics.Process (explorer)</ToString>
+        <Props>
+          <S N="SafeHandle">Microsoft.Win32.SafeHandles.SafeProcessHandle</S>
+          <S N="Handle">6820</S>
+          <I32 N="BasePriority">8</I32>
+          <B N="HasExited">false</B>
+          <DT N="StartTime">2019-08-15T19:34:27.5692786+03:00</DT>
+          <I32 N="Id">9120</I32>
+          <S N="MachineName">.</S>
+          <S N="MaxWorkingSet">1413120</S>
+          <S N="MinWorkingSet">204800</S>
+          <Obj N="Modules" RefId="234">
+            <TNRef RefId="6" />
+            <IE>
+              <S>System.Diagnostics.ProcessModule (Explorer.EXE)</S>
+              <S>System.Diagnostics.ProcessModule (ntdll.dll)</S>
+              <S>System.Diagnostics.ProcessModule (KERNEL32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (KERNELBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (combase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ucrtbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RPCRT4.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEAUT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (advapi32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sechost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (powrprof.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shlwapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (GDI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdi32full.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USER32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (win32u.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (kernel.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SHELL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cfgmgr32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptsp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxgi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (winmm.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WININET.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PROPSYS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TWINAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (UxTheme.dll)</S>
+              <S>System.Diagnostics.ProcessModule (settingsynccore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SspiCli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USERENV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WTSAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dwmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMMBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RMCLIENT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IMM32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NInput.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSCTF.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ole32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (comctl32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (clbcatq.dll)</S>
+              <S>System.Diagnostics.ProcessModule (appresolver.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Bcp47Langs.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SLC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sppc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (StartTileData.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreMessaging.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IDStore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SAMLIB.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.StateRepositoryPS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.ApplicationModel.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AppXDeploymentClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (StateRepository.Core.dll)</S>
+              <S>System.Diagnostics.ProcessModule (policymanager.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp110_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.StateRepositoryClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WinTypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (winsta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SndVolSSO.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (MMDevAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DEVOBJ.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEACC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windowscodecs.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dataexchange.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dcomp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d3d11.dll)</S>
+              <S>System.Diagnostics.ProcessModule (apphelp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (explorerframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TileDataRepository.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.StateRepository.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MrmCoreR.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TextInputFramework.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreUIComponents.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d2d1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntmarta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (languageoverlayutil.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcp47mrm.dll)</S>
+              <S>System.Diagnostics.ProcessModule (coml2.dll)</S>
+              <S>System.Diagnostics.ProcessModule (iertutil.dll)</S>
+              <S>System.Diagnostics.ProcessModule (thumbcache.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinui.pcshell.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DWrite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wincorlib.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (cdp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dsreg.dll)</S>
+              <S>System.Diagnostics.ProcessModule (edputil.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.immersiveshell.serviceprovider.dll)</S>
+              <S>System.Diagnostics.ProcessModule (peopleband.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WLDP.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (WINTRUST.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CLDAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FLTLIB.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinui.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinui.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pdh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PhotoMetadataHandler.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ApplicationFrame.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntshrui.dll)</S>
+              <S>System.Diagnostics.ProcessModule (srvcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cscapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (HolographicExtensions.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ResourcePolicyClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.Immersive.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AboveLockAppHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Secur32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (npsm.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Shell.BlueLightReduction.dll)</S>
+              <S>System.Diagnostics.ProcessModule (tishell64.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WS2_32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dbghelp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MPR.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dbgcore.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (IconCodecService.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Internal.Signals.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mscms.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ColorAdapterClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.CloudStore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (urlmon.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.CloudStore.Schema.Shell.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shfolder.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (FileSyncShell64.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PSAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (VERSION.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TaskFlowDataEngine.dll)</S>
+              <S>System.Diagnostics.ProcessModule (StructuredQuery.dll)</S>
+              <S>System.Diagnostics.ProcessModule (EhStorShell.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SETUPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cscui.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Data.Activities.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Security.Authentication.Web.Core.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NotificationControllerPS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (vaultcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NaturalLanguage6.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NLSData000d.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MLS7.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSWB7.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DevDispItemProvider.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ActXPrxy.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlidprov.dll)</S>
+              <S>System.Diagnostics.ProcessModule (samcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll)</S>
+              <S>System.Diagnostics.ProcessModule (lockcontroller.dll)</S>
+              <S>System.Diagnostics.ProcessModule (nvldumdx.dll)</S>
+              <S>System.Diagnostics.ProcessModule (imagehlp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.Core.TextInput.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sxs.dll)</S>
+              <S>System.Diagnostics.ProcessModule (familysafetyext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (rsaenh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (nvwgf2umx_cfg.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ShellCommonCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (UIAnimation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptngc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ncrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NTASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cflapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (npmproxy.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NSI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dusmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdiplus.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MFPlat.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (RTWorkQ.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (settingsyncpolicy.dll)</S>
+              <S>System.Diagnostics.ProcessModule (stobject.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WMICLNT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BatMeter.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneDriveSettingSyncProvider.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputSwitch.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.Shell.dll)</S>
+              <S>System.Diagnostics.ProcessModule (es.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Actioncenter.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wevtapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DeviceSetupManagerAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atlthunk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SHDOCVW.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Syncreg.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AUDIOSES.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (AVRT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CompPkgSup.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (pnidui.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MobileNetworking.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpdshserviceobj.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netprofm.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PortableDeviceTypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NetworkUXBroker.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PortableDeviceApi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (EthernetMediaManager.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINHTTP.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlanapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SettingMonitor.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bthprops.cpl)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc6.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (PackageStateRoaming.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ieframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NETAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WKSCLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (msIso.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Internal.Shell.Broker.dll)</S>
+              <S>System.Diagnostics.ProcessModule (LINKINFO.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cscobj.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (srchadmin.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msxml6.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.search.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SyncCenter.dll)</S>
+              <S>System.Diagnostics.ProcessModule (imapi2.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mssprxy.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dlnashext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wdmaud.drv)</S>
+              <S>System.Diagnostics.ProcessModule (ksuser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msacm32.drv)</S>
+              <S>System.Diagnostics.ProcessModule (MSACM32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (midimap.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pcacli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sfc_os.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MLANG.dll)</S>
+              <S>System.Diagnostics.ProcessModule (daxexec.dll)</S>
+              <S>System.Diagnostics.ProcessModule (container.dll)</S>
+              <S>System.Diagnostics.ProcessModule (licensemanagerapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (capauthz.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.Xaml.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WindowsInternal.ComposableShell.Experiences.Switcher.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TileControl.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TaskFlowUI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (UiaManager.dll)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrproxy.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NPSMDesktopProvider.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BthAvctpSvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BthTelemetry.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netshell.dll)</S>
+              <S>System.Diagnostics.ProcessModule (nlaapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DUI70.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DUser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RASDLG.dll)</S>
+              <S>System.Diagnostics.ProcessModule (rtutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RASAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MPRAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (rasman.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (uiautomationcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (hnetcfg.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ATL.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (GPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (rasadhlp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DNSAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shutdownux.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINBRAND.dll)</S>
+              <S>System.Diagnostics.ProcessModule (D3D10Warp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wscinterop.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WSCAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wscui.cpl)</S>
+              <S>System.Diagnostics.ProcessModule (werconcpl.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wer.dll)</S>
+              <S>System.Diagnostics.ProcessModule (framedynos.dll)</S>
+              <S>System.Diagnostics.ProcessModule (hcproviders.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ieproxy.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnapps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (XmlLite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WorkfoldersShell.dll)</S>
+              <S>System.Diagnostics.ProcessModule (rarext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSIMG32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SnagitShellExt64.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINSPOOL.DRV)</S>
+              <S>System.Diagnostics.ProcessModule (SnagItShellExtRes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shellext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mpclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BCShellEx64.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BabylonDocTranslation64PI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NppShell_06.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSVCR90.dll)</S>
+              <S>System.Diagnostics.ProcessModule (7-zip.dll)</S>
+              <S>System.Diagnostics.ProcessModule (nv3dappshext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (acppage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AEPIC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sfc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (smartscreenps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (drprov.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntlanman.dll)</S>
+              <S>System.Diagnostics.ProcessModule (davclnt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DAVHLPR.dll)</S>
+              <S>System.Diagnostics.ProcessModule (storageusage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (directmanipulation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (HID.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Web.dll)</S>
+              <S>System.Diagnostics.ProcessModule (UserDataTimeUtil.dll)</S>
+              <S>System.Diagnostics.ProcessModule (tabbtn.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TabBtnEx.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CHARTV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NetworkExplorer.dll)</S>
+              <S>System.Diagnostics.ProcessModule (tiptsf.dll)</S>
+              <S>System.Diagnostics.ProcessModule (UIRibbon.dll)</S>
+              <S>System.Diagnostics.ProcessModule (rstrtmgr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (nlmproxy.dll)</S>
+              <S>System.Diagnostics.ProcessModule (provsvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (castingshellext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windowscodecsext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TOKENBINDING.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ondemandconnroutehelper.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mswsock.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINNSI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (fwpuclnt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (schannel.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (mskeyprotect.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ncryptsslp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptnet.dll)</S>
+              <S>System.Diagnostics.ProcessModule (VirtDisk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (comsvcs.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AppContracts.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OnDemandBrokerClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (themeui.dll)</S>
+              <S>System.Diagnostics.ProcessModule (webio.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MsftEdit.dll)</S>
+              <S>System.Diagnostics.ProcessModule (nvshext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atiacm64.dll)</S>
+              <S>System.Diagnostics.ProcessModule (zipfldr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PlayToDevice.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cdprt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (EhStorAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Globalization.dll)</S>
+            </IE>
+          </Obj>
+          <I64 N="NonpagedSystemMemorySize64">232504</I64>
+          <I32 N="NonpagedSystemMemorySize">232504</I32>
+          <I64 N="PagedMemorySize64">280805376</I64>
+          <I32 N="PagedMemorySize">280805376</I32>
+          <I64 N="PagedSystemMemorySize64">1898208</I64>
+          <I32 N="PagedSystemMemorySize">1898208</I32>
+          <I64 N="PeakPagedMemorySize64">291442688</I64>
+          <I32 N="PeakPagedMemorySize">291442688</I32>
+          <I64 N="PeakWorkingSet64">569737216</I64>
+          <I32 N="PeakWorkingSet">569737216</I32>
+          <I64 N="PeakVirtualMemorySize64">2208799674368</I64>
+          <I32 N="PeakVirtualMemorySize">1186484224</I32>
+          <B N="PriorityBoostEnabled">true</B>
+          <S N="PriorityClass">Normal</S>
+          <I64 N="PrivateMemorySize64">280805376</I64>
+          <I32 N="PrivateMemorySize">280805376</I32>
+          <S N="ProcessName">explorer</S>
+          <S N="ProcessorAffinity">65535</S>
+          <I32 N="SessionId">1</I32>
+          <Obj N="Threads" RefId="235">
+            <TNRef RefId="1" />
+            <IE>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+            </IE>
+          </Obj>
+          <I32 N="HandleCount">4934</I32>
+          <I64 N="VirtualMemorySize64">2204607348736</I64>
+          <I32 N="VirtualMemorySize">1289125888</I32>
+          <B N="EnableRaisingEvents">false</B>
+          <I64 N="WorkingSet64">281395200</I64>
+          <I32 N="WorkingSet">281395200</I32>
+          <Nil N="SynchronizingObject" />
+          <S N="MainModule">System.Diagnostics.ProcessModule (Explorer.EXE)</S>
+          <TS N="PrivilegedProcessorTime">PT12M36.90625S</TS>
+          <TS N="TotalProcessorTime">PT17M57.3125S</TS>
+          <TS N="UserProcessorTime">PT5M20.40625S</TS>
+          <S N="MainWindowHandle">65808</S>
+          <S N="MainWindowTitle"></S>
+          <B N="Responding">true</B>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <S N="Name">explorer</S>
+          <I32 N="SI">1</I32>
+          <I32 N="Handles">4934</I32>
+          <I64 N="VM">2204607348736</I64>
+          <I64 N="WS">281395200</I64>
+          <I64 N="PM">280805376</I64>
+          <I64 N="NPM">232504</I64>
+          <S N="Path">C:\Windows\Explorer.EXE</S>
+          <Nil N="Parent" />
+          <S N="Company">Microsoft Corporation</S>
+          <Db N="CPU">1077.3125</Db>
+          <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+          <S N="ProductVersion">10.0.17763.1</S>
+          <S N="Description">Windows Explorer</S>
+          <S N="Product">Microsoft® Windows® Operating System</S>
+          <S N="__NounName">Process</S>
+        </MS>
+      </Obj>
+      <S N="Company"></S>
+      <Db N="CPU">2.40625</Db>
+      <S N="FileVersion">1.1.30.00</S>
+      <S N="ProductVersion">1.1.30.00</S>
+      <S N="Description">AutoHotkey Unicode 64-bit</S>
+      <S N="Product">AutoHotkey</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="236">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (BCClipboard)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="237">
+        <TNRef RefId="5" />
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="238">
+        <TNRef RefId="4" />
+        <ToString>1932</ToString>
+      </Obj>
+      <I32 N="BasePriority">8</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-15T19:34:51.6508555+03:00</DT>
+      <I32 N="Id">16564</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="239">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="240">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="241">
+        <TNRef RefId="6" />
+        <IE>
+          <Obj RefId="242">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (BCClipboard.exe)</ToString>
+            <Props>
+              <S N="ModuleName">BCClipboard.exe</S>
+              <S N="FileName">C:\Program Files\Beyond Compare 4\BCClipboard.exe</S>
+              <S N="BaseAddress">4194304</S>
+              <I32 N="ModuleMemorySize">1392640</I32>
+              <S N="EntryPointAddress">5104868</S>
+              <S N="FileVersionInfo">File:             C:\Program Files\Beyond Compare 4\BCClipboard.exe_x000D__x000A_InternalName:     _x000D__x000A_OriginalFilename: BCClipboard.exe_x000D__x000A_FileVersion:      4.2.6.23150_x000D__x000A_FileDescription:  Beyond Compare Clipboard Compare_x000D__x000A_Product:          Beyond Compare_x000D__x000A_ProductVersion:   4.2_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1360</I32>
+              <S N="Company">Scooter Software</S>
+              <S N="FileVersion">4.2.6.23150</S>
+              <S N="ProductVersion">4.2</S>
+              <S N="Description">Beyond Compare Clipboard Compare</S>
+              <S N="Product">Beyond Compare</S>
+            </MS>
+          </Obj>
+          <Obj RefId="243">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="244">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (wow64.dll)</ToString>
+            <Props>
+              <S N="ModuleName">wow64.dll</S>
+              <S N="FileName">C:\Windows\System32\wow64.dll</S>
+              <S N="BaseAddress">140719916449792</S>
+              <I32 N="ModuleMemorySize">339968</I32>
+              <S N="EntryPointAddress">140719916544144</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\wow64.dll_x000D__x000A_InternalName:     wow64_x000D__x000A_OriginalFilename: wow64.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32 Emulation on NT64_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">332</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32 Emulation on NT64</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="245">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (wow64win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">wow64win.dll</S>
+              <S N="FileName">C:\Windows\System32\wow64win.dll</S>
+              <S N="BaseAddress">140719949479936</S>
+              <I32 N="ModuleMemorySize">507904</I32>
+              <S N="EntryPointAddress">140719949541312</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\wow64win.dll_x000D__x000A_InternalName:     wow64lg2_x000D__x000A_OriginalFilename: wow64lg2.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Wow64 Console and Win32 API Logging_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">496</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Wow64 Console and Win32 API Logging</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="246">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (wow64cpu.dll)</ToString>
+            <Props>
+              <S N="ModuleName">wow64cpu.dll</S>
+              <S N="FileName">C:\Windows\System32\wow64cpu.dll</S>
+              <S N="BaseAddress">1999175680</S>
+              <I32 N="ModuleMemorySize">36864</I32>
+              <S N="EntryPointAddress">1999180448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\wow64cpu.dll_x000D__x000A_InternalName:     wow64cpu_x000D__x000A_OriginalFilename: wow64cpu.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AMD64 Wow64 CPU _x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">36</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AMD64 Wow64 CPU </S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">5</I32>
+          <Obj N="SyncRoot" RefId="247">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="242" />
+              <Ref RefId="243" />
+              <Ref RefId="244" />
+              <Ref RefId="245" />
+              <Ref RefId="246" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">12840</I64>
+      <I32 N="NonpagedSystemMemorySize">12840</I32>
+      <I64 N="PagedMemorySize64">4497408</I64>
+      <I32 N="PagedMemorySize">4497408</I32>
+      <I64 N="PagedSystemMemorySize64">192688</I64>
+      <I32 N="PagedSystemMemorySize">192688</I32>
+      <I64 N="PeakPagedMemorySize64">4579328</I64>
+      <I32 N="PeakPagedMemorySize">4579328</I32>
+      <I64 N="PeakWorkingSet64">9891840</I64>
+      <I32 N="PeakWorkingSet">9891840</I32>
+      <I64 N="PeakVirtualMemorySize64">121106432</I64>
+      <I32 N="PeakVirtualMemorySize">121106432</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="248">
+        <TNRef RefId="8" />
+        <ToString>Normal</ToString>
+        <I32>32</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">4497408</I64>
+      <I32 N="PrivateMemorySize">4497408</I32>
+      <S N="ProcessName">BCClipboard</S>
+      <Obj N="ProcessorAffinity" RefId="249">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="250">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="251">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">14732</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.59375S</TS>
+              <DT N="StartTime">2019-08-15T19:34:51.6508569+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.6875S</TS>
+              <TS N="UserProcessorTime">PT0.09375S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">1</I32>
+          <Obj N="SyncRoot" RefId="252">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="251" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">181</I32>
+      <I64 N="VirtualMemorySize64">100130816</I64>
+      <I32 N="VirtualMemorySize">100130816</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">4435968</I64>
+      <I32 N="WorkingSet">4435968</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="253">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (BCClipboard.exe)</ToString>
+        <Props>
+          <S N="ModuleName">BCClipboard.exe</S>
+          <S N="FileName">C:\Program Files\Beyond Compare 4\BCClipboard.exe</S>
+          <S N="BaseAddress">4194304</S>
+          <I32 N="ModuleMemorySize">1392640</I32>
+          <S N="EntryPointAddress">5104868</S>
+          <S N="FileVersionInfo">File:             C:\Program Files\Beyond Compare 4\BCClipboard.exe_x000D__x000A_InternalName:     _x000D__x000A_OriginalFilename: BCClipboard.exe_x000D__x000A_FileVersion:      4.2.6.23150_x000D__x000A_FileDescription:  Beyond Compare Clipboard Compare_x000D__x000A_Product:          Beyond Compare_x000D__x000A_ProductVersion:   4.2_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">1360</I32>
+          <S N="Company">Scooter Software</S>
+          <S N="FileVersion">4.2.6.23150</S>
+          <S N="ProductVersion">4.2</S>
+          <S N="Description">Beyond Compare Clipboard Compare</S>
+          <S N="Product">Beyond Compare</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT0.625S</TS>
+      <TS N="TotalProcessorTime">PT0.71875S</TS>
+      <TS N="UserProcessorTime">PT0.09375S</TS>
+      <Obj N="MainWindowHandle" RefId="254">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">BCClipboard</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">181</I32>
+      <I64 N="VM">100130816</I64>
+      <I64 N="WS">4435968</I64>
+      <I64 N="PM">4497408</I64>
+      <I64 N="NPM">12840</I64>
+      <S N="Path">C:\Program Files\Beyond Compare 4\BCClipboard.exe</S>
+      <Obj N="Parent" RefId="255">
+        <TNRef RefId="0" />
+        <ToString>System.Diagnostics.Process (explorer)</ToString>
+        <Props>
+          <S N="SafeHandle">Microsoft.Win32.SafeHandles.SafeProcessHandle</S>
+          <S N="Handle">3692</S>
+          <I32 N="BasePriority">8</I32>
+          <B N="HasExited">false</B>
+          <DT N="StartTime">2019-08-15T19:34:27.5692786+03:00</DT>
+          <I32 N="Id">9120</I32>
+          <S N="MachineName">.</S>
+          <S N="MaxWorkingSet">1413120</S>
+          <S N="MinWorkingSet">204800</S>
+          <Obj N="Modules" RefId="256">
+            <TNRef RefId="6" />
+            <IE>
+              <S>System.Diagnostics.ProcessModule (Explorer.EXE)</S>
+              <S>System.Diagnostics.ProcessModule (ntdll.dll)</S>
+              <S>System.Diagnostics.ProcessModule (KERNEL32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (KERNELBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (combase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ucrtbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RPCRT4.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEAUT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (advapi32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sechost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (powrprof.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shlwapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (GDI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdi32full.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USER32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (win32u.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (kernel.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SHELL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cfgmgr32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptsp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxgi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (winmm.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WININET.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PROPSYS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TWINAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (UxTheme.dll)</S>
+              <S>System.Diagnostics.ProcessModule (settingsynccore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SspiCli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USERENV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WTSAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dwmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMMBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RMCLIENT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IMM32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NInput.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSCTF.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ole32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (comctl32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (clbcatq.dll)</S>
+              <S>System.Diagnostics.ProcessModule (appresolver.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Bcp47Langs.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SLC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sppc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (StartTileData.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreMessaging.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IDStore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SAMLIB.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.StateRepositoryPS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.ApplicationModel.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AppXDeploymentClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (StateRepository.Core.dll)</S>
+              <S>System.Diagnostics.ProcessModule (policymanager.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp110_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.StateRepositoryClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WinTypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (winsta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SndVolSSO.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (MMDevAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DEVOBJ.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEACC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windowscodecs.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dataexchange.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dcomp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d3d11.dll)</S>
+              <S>System.Diagnostics.ProcessModule (apphelp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (explorerframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TileDataRepository.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.StateRepository.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MrmCoreR.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TextInputFramework.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreUIComponents.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d2d1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntmarta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (languageoverlayutil.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcp47mrm.dll)</S>
+              <S>System.Diagnostics.ProcessModule (coml2.dll)</S>
+              <S>System.Diagnostics.ProcessModule (iertutil.dll)</S>
+              <S>System.Diagnostics.ProcessModule (thumbcache.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinui.pcshell.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DWrite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wincorlib.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (cdp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dsreg.dll)</S>
+              <S>System.Diagnostics.ProcessModule (edputil.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.immersiveshell.serviceprovider.dll)</S>
+              <S>System.Diagnostics.ProcessModule (peopleband.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WLDP.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (WINTRUST.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CLDAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FLTLIB.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinui.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinui.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pdh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PhotoMetadataHandler.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ApplicationFrame.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntshrui.dll)</S>
+              <S>System.Diagnostics.ProcessModule (srvcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cscapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (HolographicExtensions.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ResourcePolicyClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.Immersive.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AboveLockAppHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Secur32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (npsm.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Shell.BlueLightReduction.dll)</S>
+              <S>System.Diagnostics.ProcessModule (tishell64.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WS2_32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dbghelp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MPR.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dbgcore.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (IconCodecService.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Internal.Signals.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mscms.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ColorAdapterClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.CloudStore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (urlmon.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.CloudStore.Schema.Shell.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shfolder.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (FileSyncShell64.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PSAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (VERSION.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TaskFlowDataEngine.dll)</S>
+              <S>System.Diagnostics.ProcessModule (StructuredQuery.dll)</S>
+              <S>System.Diagnostics.ProcessModule (EhStorShell.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SETUPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cscui.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Data.Activities.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Security.Authentication.Web.Core.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NotificationControllerPS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (vaultcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NaturalLanguage6.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NLSData000d.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MLS7.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSWB7.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DevDispItemProvider.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ActXPrxy.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlidprov.dll)</S>
+              <S>System.Diagnostics.ProcessModule (samcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll)</S>
+              <S>System.Diagnostics.ProcessModule (lockcontroller.dll)</S>
+              <S>System.Diagnostics.ProcessModule (nvldumdx.dll)</S>
+              <S>System.Diagnostics.ProcessModule (imagehlp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.Core.TextInput.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sxs.dll)</S>
+              <S>System.Diagnostics.ProcessModule (familysafetyext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (rsaenh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (nvwgf2umx_cfg.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ShellCommonCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (UIAnimation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptngc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ncrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NTASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cflapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (npmproxy.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NSI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dusmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdiplus.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MFPlat.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (RTWorkQ.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (settingsyncpolicy.dll)</S>
+              <S>System.Diagnostics.ProcessModule (stobject.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WMICLNT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BatMeter.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneDriveSettingSyncProvider.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputSwitch.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.Shell.dll)</S>
+              <S>System.Diagnostics.ProcessModule (es.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Actioncenter.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wevtapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DeviceSetupManagerAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atlthunk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SHDOCVW.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Syncreg.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AUDIOSES.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (AVRT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CompPkgSup.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (pnidui.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MobileNetworking.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpdshserviceobj.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netprofm.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PortableDeviceTypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NetworkUXBroker.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PortableDeviceApi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (EthernetMediaManager.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINHTTP.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlanapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SettingMonitor.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bthprops.cpl)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc6.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (PackageStateRoaming.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ieframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NETAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WKSCLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (msIso.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Internal.Shell.Broker.dll)</S>
+              <S>System.Diagnostics.ProcessModule (LINKINFO.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cscobj.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (srchadmin.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msxml6.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.search.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SyncCenter.dll)</S>
+              <S>System.Diagnostics.ProcessModule (imapi2.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mssprxy.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dlnashext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wdmaud.drv)</S>
+              <S>System.Diagnostics.ProcessModule (ksuser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msacm32.drv)</S>
+              <S>System.Diagnostics.ProcessModule (MSACM32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (midimap.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pcacli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sfc_os.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MLANG.dll)</S>
+              <S>System.Diagnostics.ProcessModule (daxexec.dll)</S>
+              <S>System.Diagnostics.ProcessModule (container.dll)</S>
+              <S>System.Diagnostics.ProcessModule (licensemanagerapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (capauthz.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.Xaml.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WindowsInternal.ComposableShell.Experiences.Switcher.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TileControl.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TaskFlowUI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (UiaManager.dll)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrproxy.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NPSMDesktopProvider.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BthAvctpSvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BthTelemetry.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netshell.dll)</S>
+              <S>System.Diagnostics.ProcessModule (nlaapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DUI70.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DUser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RASDLG.dll)</S>
+              <S>System.Diagnostics.ProcessModule (rtutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RASAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MPRAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (rasman.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (uiautomationcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (hnetcfg.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ATL.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (GPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (rasadhlp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DNSAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shutdownux.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINBRAND.dll)</S>
+              <S>System.Diagnostics.ProcessModule (D3D10Warp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wscinterop.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WSCAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wscui.cpl)</S>
+              <S>System.Diagnostics.ProcessModule (werconcpl.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wer.dll)</S>
+              <S>System.Diagnostics.ProcessModule (framedynos.dll)</S>
+              <S>System.Diagnostics.ProcessModule (hcproviders.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ieproxy.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnapps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (XmlLite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WorkfoldersShell.dll)</S>
+              <S>System.Diagnostics.ProcessModule (rarext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSIMG32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SnagitShellExt64.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINSPOOL.DRV)</S>
+              <S>System.Diagnostics.ProcessModule (SnagItShellExtRes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shellext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mpclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BCShellEx64.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BabylonDocTranslation64PI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NppShell_06.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSVCR90.dll)</S>
+              <S>System.Diagnostics.ProcessModule (7-zip.dll)</S>
+              <S>System.Diagnostics.ProcessModule (nv3dappshext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (acppage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AEPIC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sfc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (smartscreenps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (drprov.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntlanman.dll)</S>
+              <S>System.Diagnostics.ProcessModule (davclnt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DAVHLPR.dll)</S>
+              <S>System.Diagnostics.ProcessModule (storageusage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (directmanipulation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (HID.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Web.dll)</S>
+              <S>System.Diagnostics.ProcessModule (UserDataTimeUtil.dll)</S>
+              <S>System.Diagnostics.ProcessModule (tabbtn.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TabBtnEx.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CHARTV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NetworkExplorer.dll)</S>
+              <S>System.Diagnostics.ProcessModule (tiptsf.dll)</S>
+              <S>System.Diagnostics.ProcessModule (UIRibbon.dll)</S>
+              <S>System.Diagnostics.ProcessModule (rstrtmgr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (nlmproxy.dll)</S>
+              <S>System.Diagnostics.ProcessModule (provsvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (castingshellext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windowscodecsext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TOKENBINDING.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ondemandconnroutehelper.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mswsock.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINNSI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (fwpuclnt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (schannel.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (mskeyprotect.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ncryptsslp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptnet.dll)</S>
+              <S>System.Diagnostics.ProcessModule (VirtDisk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (comsvcs.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AppContracts.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OnDemandBrokerClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (themeui.dll)</S>
+              <S>System.Diagnostics.ProcessModule (webio.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MsftEdit.dll)</S>
+              <S>System.Diagnostics.ProcessModule (nvshext.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atiacm64.dll)</S>
+              <S>System.Diagnostics.ProcessModule (zipfldr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PlayToDevice.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cdprt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (EhStorAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Globalization.dll)</S>
+            </IE>
+          </Obj>
+          <I64 N="NonpagedSystemMemorySize64">232504</I64>
+          <I32 N="NonpagedSystemMemorySize">232504</I32>
+          <I64 N="PagedMemorySize64">280805376</I64>
+          <I32 N="PagedMemorySize">280805376</I32>
+          <I64 N="PagedSystemMemorySize64">1898208</I64>
+          <I32 N="PagedSystemMemorySize">1898208</I32>
+          <I64 N="PeakPagedMemorySize64">291442688</I64>
+          <I32 N="PeakPagedMemorySize">291442688</I32>
+          <I64 N="PeakWorkingSet64">569737216</I64>
+          <I32 N="PeakWorkingSet">569737216</I32>
+          <I64 N="PeakVirtualMemorySize64">2208799674368</I64>
+          <I32 N="PeakVirtualMemorySize">1186484224</I32>
+          <B N="PriorityBoostEnabled">true</B>
+          <S N="PriorityClass">Normal</S>
+          <I64 N="PrivateMemorySize64">280805376</I64>
+          <I32 N="PrivateMemorySize">280805376</I32>
+          <S N="ProcessName">explorer</S>
+          <S N="ProcessorAffinity">65535</S>
+          <I32 N="SessionId">1</I32>
+          <Obj N="Threads" RefId="257">
+            <TNRef RefId="1" />
+            <IE>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+            </IE>
+          </Obj>
+          <I32 N="HandleCount">4934</I32>
+          <I64 N="VirtualMemorySize64">2204607348736</I64>
+          <I32 N="VirtualMemorySize">1289125888</I32>
+          <B N="EnableRaisingEvents">false</B>
+          <I64 N="WorkingSet64">281395200</I64>
+          <I32 N="WorkingSet">281395200</I32>
+          <Nil N="SynchronizingObject" />
+          <S N="MainModule">System.Diagnostics.ProcessModule (Explorer.EXE)</S>
+          <TS N="PrivilegedProcessorTime">PT12M36.90625S</TS>
+          <TS N="TotalProcessorTime">PT17M57.3125S</TS>
+          <TS N="UserProcessorTime">PT5M20.40625S</TS>
+          <S N="MainWindowHandle">65808</S>
+          <S N="MainWindowTitle"></S>
+          <B N="Responding">true</B>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <S N="Name">explorer</S>
+          <I32 N="SI">1</I32>
+          <I32 N="Handles">4934</I32>
+          <I64 N="VM">2204607348736</I64>
+          <I64 N="WS">281395200</I64>
+          <I64 N="PM">280805376</I64>
+          <I64 N="NPM">232504</I64>
+          <S N="Path">C:\Windows\Explorer.EXE</S>
+          <Nil N="Parent" />
+          <S N="Company">Microsoft Corporation</S>
+          <Db N="CPU">1077.3125</Db>
+          <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+          <S N="ProductVersion">10.0.17763.1</S>
+          <S N="Description">Windows Explorer</S>
+          <S N="Product">Microsoft® Windows® Operating System</S>
+          <S N="__NounName">Process</S>
+        </MS>
+      </Obj>
+      <S N="Company">Scooter Software</S>
+      <Db N="CPU">0.71875</Db>
+      <S N="FileVersion">4.2.6.23150</S>
+      <S N="ProductVersion">4.2</S>
+      <S N="Description">Beyond Compare Clipboard Compare</S>
+      <S N="Product">Beyond Compare</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="258">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (chrome)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="259">
+        <TNRef RefId="5" />
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="260">
+        <TNRef RefId="4" />
+        <ToString>4164</ToString>
+      </Obj>
+      <I32 N="BasePriority">8</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-27T02:00:52.3073978+03:00</DT>
+      <I32 N="Id">2596</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="261">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="262">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="263">
+        <TNRef RefId="6" />
+        <IE>
+          <Obj RefId="264">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+            <Props>
+              <S N="ModuleName">chrome.exe</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+              <S N="BaseAddress">140702356078592</S>
+              <I32 N="ModuleMemorySize">1732608</I32>
+              <S N="EntryPointAddress">140702357044720</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1692</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="265">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="266">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNEL32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">KERNEL32.DLL</S>
+              <S N="FileName">C:\Windows\System32\KERNEL32.DLL</S>
+              <S N="BaseAddress">140719912779776</S>
+              <I32 N="ModuleMemorySize">733184</I32>
+              <S N="EntryPointAddress">140719912876560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName:     kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">716</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="267">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNELBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">KERNELBASE.dll</S>
+              <S N="FileName">C:\Windows\System32\KERNELBASE.dll</S>
+              <S N="BaseAddress">140719894495232</S>
+              <I32 N="ModuleMemorySize">2699264</I32>
+              <S N="EntryPointAddress">140719894841456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName:     Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="268">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_elf.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_elf.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll</S>
+              <S N="BaseAddress">140719325642752</S>
+              <I32 N="ModuleMemorySize">925696</I32>
+              <S N="EntryPointAddress">140719326148464</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName:     chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">904</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="269">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (VERSION.dll)</ToString>
+            <Props>
+              <S N="ModuleName">VERSION.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\VERSION.dll</S>
+              <S N="BaseAddress">140719800254464</S>
+              <I32 N="ModuleMemorySize">40960</I32>
+              <S N="EntryPointAddress">140719800259344</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName:     version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Version Checking and File Installation Libraries_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">40</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Version Checking and File Installation Libraries</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="270">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcrt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcrt.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcrt.dll</S>
+              <S N="BaseAddress">140719950004224</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719950035120</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName:     msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion:      7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT CRT DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   7.0.17763.475_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.475 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.475</S>
+              <S N="Description">Windows NT CRT DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="271">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcryptPrimitives.dll</S>
+              <S N="FileName">C:\Windows\System32\bcryptPrimitives.dll</S>
+              <S N="BaseAddress">140719890235392</S>
+              <I32 N="ModuleMemorySize">516096</I32>
+              <S N="EntryPointAddress">140719890461152</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName:     bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">504</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="272">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ADVAPI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ADVAPI32.dll</S>
+              <S N="FileName">C:\Windows\System32\ADVAPI32.dll</S>
+              <S N="BaseAddress">140719915335680</S>
+              <I32 N="ModuleMemorySize">667648</I32>
+              <S N="EntryPointAddress">140719915417840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName:     advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Advanced Windows 32 Base API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">652</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Advanced Windows 32 Base API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="273">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sechost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sechost.dll</S>
+              <S N="FileName">C:\Windows\System32\sechost.dll</S>
+              <S N="BaseAddress">140719948824576</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719948951504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\sechost.dll_x000D__x000A_InternalName:     sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Host for SCM/SDDL/LSA Lookup APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="274">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RPCRT4.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RPCRT4.dll</S>
+              <S N="FileName">C:\Windows\System32\RPCRT4.dll</S>
+              <S N="BaseAddress">140719917629440</S>
+              <I32 N="ModuleMemorySize">1187840</I32>
+              <S N="EntryPointAddress">140719918006928</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName:     rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Procedure Call Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Procedure Call Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="275">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_child.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_child.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll</S>
+              <S N="BaseAddress">140717177962496</S>
+              <I32 N="ModuleMemorySize">87977984</I32>
+              <S N="EntryPointAddress">140717247440176</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName:     chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">85916</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="276">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OLEAUT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OLEAUT32.dll</S>
+              <S N="FileName">C:\Windows\System32\OLEAUT32.dll</S>
+              <S N="BaseAddress">140719946465280</S>
+              <I32 N="ModuleMemorySize">802816</I32>
+              <S N="EntryPointAddress">140719946574624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName:     OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OLEAUT32.DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">784</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">OLEAUT32.DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="277">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcp_win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcp_win.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcp_win.dll</S>
+              <S N="BaseAddress">140719889580032</S>
+              <I32 N="ModuleMemorySize">655360</I32>
+              <S N="EntryPointAddress">140719889658864</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName:     msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">640</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="278">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ucrtbase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ucrtbase.dll</S>
+              <S N="FileName">C:\Windows\System32\ucrtbase.dll</S>
+              <S N="BaseAddress">140719893446656</S>
+              <I32 N="ModuleMemorySize">1024000</I32>
+              <S N="EntryPointAddress">140719893528400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName:     ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1000</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="279">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (combase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">combase.dll</S>
+              <S N="FileName">C:\Windows\System32\combase.dll</S>
+              <S N="BaseAddress">140719950856192</S>
+              <I32 N="ModuleMemorySize">3325952</I32>
+              <S N="EntryPointAddress">140719951769888</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\combase.dll_x000D__x000A_InternalName:     COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft COM for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3248</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft COM for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="280">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WS2_32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WS2_32.dll</S>
+              <S N="FileName">C:\Windows\System32\WS2_32.dll</S>
+              <S N="BaseAddress">140719954198528</S>
+              <I32 N="ModuleMemorySize">446464</I32>
+              <S N="EntryPointAddress">140719954286384</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName:     ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">436</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Socket 2.0 32-Bit DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="281">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (GDI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">GDI32.dll</S>
+              <S N="FileName">C:\Windows\System32\GDI32.dll</S>
+              <S N="BaseAddress">140719950659584</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719950676208</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="282">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32full.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32full.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32full.dll</S>
+              <S N="BaseAddress">140719905112064</S>
+              <I32 N="ModuleMemorySize">1675264</I32>
+              <S N="EntryPointAddress">140719905369792</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="283">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USER32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USER32.dll</S>
+              <S N="FileName">C:\Windows\System32\USER32.dll</S>
+              <S N="BaseAddress">140719909306368</S>
+              <I32 N="ModuleMemorySize">1667072</I32>
+              <S N="EntryPointAddress">140719909414448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\USER32.dll_x000D__x000A_InternalName:     user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows USER API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows USER API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="284">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (win32u.dll)</ToString>
+            <Props>
+              <S N="ModuleName">win32u.dll</S>
+              <S N="FileName">C:\Windows\System32\win32u.dll</S>
+              <S N="BaseAddress">140719906816000</S>
+              <I32 N="ModuleMemorySize">131072</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\win32u.dll_x000D__x000A_InternalName:     Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32u_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">128</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32u</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="285">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINTRUST.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINTRUST.dll</S>
+              <S N="FileName">C:\Windows\System32\WINTRUST.dll</S>
+              <S N="BaseAddress">140719888728064</S>
+              <I32 N="ModuleMemorySize">364544</I32>
+              <S N="EntryPointAddress">140719888791376</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName:     WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Trust Verification APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">356</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft Trust Verification APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="286">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSASN1.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSASN1.dll</S>
+              <S N="FileName">C:\Windows\System32\MSASN1.dll</S>
+              <S N="BaseAddress">140719887876096</S>
+              <I32 N="ModuleMemorySize">73728</I32>
+              <S N="EntryPointAddress">140719887898576</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName:     msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  ASN.1 Runtime APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">72</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">ASN.1 Runtime APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="287">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPT32.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPT32.dll</S>
+              <S N="BaseAddress">140719891480576</S>
+              <I32 N="ModuleMemorySize">1945600</I32>
+              <S N="EntryPointAddress">140719891804832</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName:     CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Crypto API32_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1900</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Crypto API32</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="288">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IPHLPAPI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\IPHLPAPI.DLL</S>
+              <S N="BaseAddress">140719876931584</S>
+              <I32 N="ModuleMemorySize">249856</I32>
+              <S N="EntryPointAddress">140719876989024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName:     iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  IP Helper API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">244</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">IP Helper API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="289">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMM.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMM.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMM.dll</S>
+              <S N="BaseAddress">140719835054080</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719835066368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName:     winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MCI API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MCI API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="290">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USERENV.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USERENV.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\USERENV.dll</S>
+              <S N="BaseAddress">140719887024128</S>
+              <I32 N="ModuleMemorySize">163840</I32>
+              <S N="EntryPointAddress">140719887043280</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName:     userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Userenv_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Userenv</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="291">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (profapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">profapi.dll</S>
+              <S N="FileName">C:\Windows\System32\profapi.dll</S>
+              <S N="BaseAddress">140719888531456</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719888564400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\profapi.dll_x000D__x000A_InternalName:     PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  User Profile Basic API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">User Profile Basic API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="292">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (DWrite.dll)</ToString>
+            <Props>
+              <S N="ModuleName">DWrite.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\DWrite.dll</S>
+              <S N="BaseAddress">140719303819264</S>
+              <I32 N="ModuleMemorySize">3129344</I32>
+              <S N="EntryPointAddress">140719304509728</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName:     DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft DirectX Typography Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3056</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft DirectX Typography Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="293">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINSPOOL.DRV)</ToString>
+            <Props>
+              <S N="ModuleName">WINSPOOL.DRV</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINSPOOL.DRV</S>
+              <S N="BaseAddress">140719787606016</S>
+              <I32 N="ModuleMemorySize">561152</I32>
+              <S N="EntryPointAddress">140719787676448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName:     winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Spooler Driver_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">548</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Spooler Driver</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="294">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (kernel.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">kernel.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\kernel.appcore.dll</S>
+              <S N="BaseAddress">140719888400384</S>
+              <I32 N="ModuleMemorySize">69632</I32>
+              <S N="EntryPointAddress">140719888415648</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName:     kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AppModel API Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">68</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AppModel API Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="295">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcrypt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcrypt.dll</S>
+              <S N="FileName">C:\Windows\System32\bcrypt.dll</S>
+              <S N="BaseAddress">140719897247744</S>
+              <I32 N="ModuleMemorySize">155648</I32>
+              <S N="EntryPointAddress">140719897281296</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName:     bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">152</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="296">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dbghelp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dbghelp.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dbghelp.dll</S>
+              <S N="BaseAddress">140719552397312</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">140719552479168</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName:     DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Image Helper_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Image Helper</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="297">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINHTTP.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINHTTP.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINHTTP.dll</S>
+              <S N="BaseAddress">140719810019328</S>
+              <I32 N="ModuleMemorySize">991232</I32>
+              <S N="EntryPointAddress">140719810293024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName:     winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows HTTP Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">968</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows HTTP Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="298">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Secur32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Secur32.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\Secur32.dll</S>
+              <S N="BaseAddress">140719559147520</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719559156816</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName:     secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="299">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">dhcpcsvc.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dhcpcsvc.DLL</S>
+              <S N="BaseAddress">140719782494208</S>
+              <I32 N="ModuleMemorySize">114688</I32>
+              <S N="EntryPointAddress">140719782503840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName:     dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  DHCP Client Service_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">112</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">DHCP Client Service</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="300">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (NSI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">NSI.dll</S>
+              <S N="FileName">C:\Windows\System32\NSI.dll</S>
+              <S N="BaseAddress">140719916843008</S>
+              <I32 N="ModuleMemorySize">32768</I32>
+              <S N="EntryPointAddress">140719916851008</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\NSI.dll_x000D__x000A_InternalName:     nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NSI User-mode interface DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">32</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NSI User-mode interface DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="301">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMMBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMMBASE.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMMBASE.dll</S>
+              <S N="BaseAddress">140719834857472</S>
+              <I32 N="ModuleMemorySize">184320</I32>
+              <S N="EntryPointAddress">140719834890448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName:     winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base Multimedia Extension API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">180</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base Multimedia Extension API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="302">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cfgmgr32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cfgmgr32.dll</S>
+              <S N="FileName">C:\Windows\System32\cfgmgr32.dll</S>
+              <S N="BaseAddress">140719889252352</S>
+              <I32 N="ModuleMemorySize">303104</I32>
+              <S N="EntryPointAddress">140719889325904</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName:     cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Configuration Manager DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">296</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Configuration Manager DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="303">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (PROPSYS.dll)</ToString>
+            <Props>
+              <S N="ModuleName">PROPSYS.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\PROPSYS.dll</S>
+              <S N="BaseAddress">140719831187456</S>
+              <I32 N="ModuleMemorySize">1736704</I32>
+              <S N="EntryPointAddress">140719831447408</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName:     propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion:      7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Property System_x000D__x000A_Product:          Windows® Search_x000D__x000A_ProductVersion:   7.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1696</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.1</S>
+              <S N="Description">Microsoft Property System</S>
+              <S N="Product">Windows® Search</S>
+            </MS>
+          </Obj>
+          <Obj RefId="304">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shcore.dll</S>
+              <S N="FileName">C:\Windows\System32\shcore.dll</S>
+              <S N="BaseAddress">140719907143680</S>
+              <I32 N="ModuleMemorySize">688128</I32>
+              <S N="EntryPointAddress">140719907388560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shcore.dll_x000D__x000A_InternalName:     SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  SHCORE_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">672</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">SHCORE</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="305">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SSPICLI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">SSPICLI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\SSPICLI.DLL</S>
+              <S N="BaseAddress">140719886827520</S>
+              <I32 N="ModuleMemorySize">192512</I32>
+              <S N="EntryPointAddress">140719886881776</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName:     sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">188</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="306">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IMM32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IMM32.DLL</S>
+              <S N="FileName">C:\Windows\System32\IMM32.DLL</S>
+              <S N="BaseAddress">140719906947072</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719906952688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName:     imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows IMM32 API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="307">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPTBASE.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\CRYPTBASE.DLL</S>
+              <S N="BaseAddress">140719881846784</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719881855488</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName:     cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base cryptographic API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base cryptographic API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">44</I32>
+          <Obj N="SyncRoot" RefId="308">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="264" />
+              <Ref RefId="265" />
+              <Ref RefId="266" />
+              <Ref RefId="267" />
+              <Ref RefId="268" />
+              <Ref RefId="269" />
+              <Ref RefId="270" />
+              <Ref RefId="271" />
+              <Ref RefId="272" />
+              <Ref RefId="273" />
+              <Ref RefId="274" />
+              <Ref RefId="275" />
+              <Ref RefId="276" />
+              <Ref RefId="277" />
+              <Ref RefId="278" />
+              <Ref RefId="279" />
+              <Ref RefId="280" />
+              <Ref RefId="281" />
+              <Ref RefId="282" />
+              <Ref RefId="283" />
+              <Ref RefId="284" />
+              <Ref RefId="285" />
+              <Ref RefId="286" />
+              <Ref RefId="287" />
+              <Ref RefId="288" />
+              <Ref RefId="289" />
+              <Ref RefId="290" />
+              <Ref RefId="291" />
+              <Ref RefId="292" />
+              <Ref RefId="293" />
+              <Ref RefId="294" />
+              <Ref RefId="295" />
+              <Ref RefId="296" />
+              <Ref RefId="297" />
+              <Ref RefId="298" />
+              <Ref RefId="299" />
+              <Ref RefId="300" />
+              <Ref RefId="301" />
+              <Ref RefId="302" />
+              <Ref RefId="303" />
+              <Ref RefId="304" />
+              <Ref RefId="305" />
+              <Ref RefId="306" />
+              <Ref RefId="307" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">81184</I64>
+      <I32 N="NonpagedSystemMemorySize">81184</I32>
+      <I64 N="PagedMemorySize64">138997760</I64>
+      <I32 N="PagedMemorySize">138997760</I32>
+      <I64 N="PagedSystemMemorySize64">340400</I64>
+      <I32 N="PagedSystemMemorySize">340400</I32>
+      <I64 N="PeakPagedMemorySize64">239808512</I64>
+      <I32 N="PeakPagedMemorySize">239808512</I32>
+      <I64 N="PeakWorkingSet64">230625280</I64>
+      <I32 N="PeakWorkingSet">230625280</I32>
+      <I64 N="PeakVirtualMemorySize64">2205045006336</I64>
+      <I32 N="PeakVirtualMemorySize">1726783488</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="309">
+        <TNRef RefId="8" />
+        <ToString>Normal</ToString>
+        <I32>32</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">138997760</I64>
+      <I32 N="PrivateMemorySize">138997760</I32>
+      <S N="ProcessName">chrome</S>
+      <Obj N="ProcessorAffinity" RefId="310">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="311">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="312">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">22204</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.3125S</TS>
+              <DT N="StartTime">2019-08-27T02:00:52.3073998+03:00</DT>
+              <TS N="TotalProcessorTime">PT1.921875S</TS>
+              <TS N="UserProcessorTime">PT1.609375S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="313">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">23584</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:00:52.3662233+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="314">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">27580</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:00:52.3673446+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="315">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">14644</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0.09375S</TS>
+              <DT N="StartTime">2019-08-27T02:00:52.368027+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.140625S</TS>
+              <TS N="UserProcessorTime">PT0.046875S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="316">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">22264</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:00:52.3685937+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="317">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">19392</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:00:52.3694148+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="318">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">17056</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:00:52.3755099+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="319">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">26912</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:00:52.3766204+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="320">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">12192</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:00:52.3770034+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="321">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">19156</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:00:52.3775859+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="322">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">22748</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:00:52.3780011+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="323">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">25144</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:00:52.3783612+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="324">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">15984</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:45:53.3398653+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">13</I32>
+          <Obj N="SyncRoot" RefId="325">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="312" />
+              <Ref RefId="313" />
+              <Ref RefId="314" />
+              <Ref RefId="315" />
+              <Ref RefId="316" />
+              <Ref RefId="317" />
+              <Ref RefId="318" />
+              <Ref RefId="319" />
+              <Ref RefId="320" />
+              <Ref RefId="321" />
+              <Ref RefId="322" />
+              <Ref RefId="323" />
+              <Ref RefId="324" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">242</I32>
+      <I64 N="VirtualMemorySize64">2204968783872</I64>
+      <I32 N="VirtualMemorySize">1650561024</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">38588416</I64>
+      <I32 N="WorkingSet">38588416</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="326">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+        <Props>
+          <S N="ModuleName">chrome.exe</S>
+          <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="BaseAddress">140702356078592</S>
+          <I32 N="ModuleMemorySize">1732608</I32>
+          <S N="EntryPointAddress">140702357044720</S>
+          <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">1692</I32>
+          <S N="Company">Google LLC</S>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT0.5625S</TS>
+      <TS N="TotalProcessorTime">PT4.25S</TS>
+      <TS N="UserProcessorTime">PT3.6875S</TS>
+      <Obj N="MainWindowHandle" RefId="327">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">chrome</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">242</I32>
+      <I64 N="VM">2204968783872</I64>
+      <I64 N="WS">38588416</I64>
+      <I64 N="PM">138997760</I64>
+      <I64 N="NPM">81184</I64>
+      <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+      <Obj N="Parent" RefId="328">
+        <TNRef RefId="0" />
+        <ToString>System.Diagnostics.Process (chrome)</ToString>
+        <Props>
+          <S N="SafeHandle">Microsoft.Win32.SafeHandles.SafeProcessHandle</S>
+          <S N="Handle">7936</S>
+          <I32 N="BasePriority">8</I32>
+          <B N="HasExited">false</B>
+          <DT N="StartTime">2019-08-24T14:18:00.3253674+03:00</DT>
+          <I32 N="Id">23804</I32>
+          <S N="MachineName">.</S>
+          <S N="MaxWorkingSet">1413120</S>
+          <S N="MinWorkingSet">204800</S>
+          <Obj N="Modules" RefId="329">
+            <TNRef RefId="6" />
+            <IE>
+              <S>System.Diagnostics.ProcessModule (chrome.exe)</S>
+              <S>System.Diagnostics.ProcessModule (ntdll.dll)</S>
+              <S>System.Diagnostics.ProcessModule (KERNEL32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (KERNELBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome_elf.dll)</S>
+              <S>System.Diagnostics.ProcessModule (VERSION.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ADVAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sechost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RPCRT4.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</S>
+              <S>System.Diagnostics.ProcessModule (user32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (win32u.dll)</S>
+              <S>System.Diagnostics.ProcessModule (GDI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdi32full.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ucrtbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IMM32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SHELL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cfgmgr32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (combase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (powrprof.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shlwapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (kernel.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptsp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome.dll)</S>
+              <S>System.Diagnostics.ProcessModule (uxtheme.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dwmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USERENV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gpapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wkscli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ole32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSCTF.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEAUT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Secur32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SSPICLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DWrite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WS2_32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (COMCTL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (clbcatq.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RMCLIENT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NLAapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NSI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc6.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DNSAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mscms.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ColorAdapterClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (icm32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TextInputFramework.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreUIComponents.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreMessaging.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d2d1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d3d11.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PROPSYS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wintypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntmarta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxgi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WTSAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlanapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINSTA.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemcomn.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MMDevApi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DEVOBJ.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemsvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINHTTP.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fastprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wmiutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FirewallAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fwbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (LINKINFO.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dataexchange.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dcomp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atlthunk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEACC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (directmanipulation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (explorerframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnapps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (XmlLite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mswsock.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMM.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMMBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WmiPerfInst.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pdh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BiWinrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NETAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SAMCLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SAMLIB.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wdmaud.drv)</S>
+              <S>System.Diagnostics.ProcessModule (ksuser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AVRT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AUDIOSES.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (msacm32.drv)</S>
+              <S>System.Diagnostics.ProcessModule (MSACM32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (midimap.dll)</S>
+              <S>System.Diagnostics.ProcessModule (resourcepolicyclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BitsProxy.dll)</S>
+            </IE>
+          </Obj>
+          <I64 N="NonpagedSystemMemorySize64">61568</I64>
+          <I32 N="NonpagedSystemMemorySize">61568</I32>
+          <I64 N="PagedMemorySize64">316080128</I64>
+          <I32 N="PagedMemorySize">316080128</I32>
+          <I64 N="PagedSystemMemorySize64">857648</I64>
+          <I32 N="PagedSystemMemorySize">857648</I32>
+          <I64 N="PeakPagedMemorySize64">455720960</I64>
+          <I32 N="PeakPagedMemorySize">455720960</I32>
+          <I64 N="PeakWorkingSet64">398323712</I64>
+          <I32 N="PeakWorkingSet">398323712</I32>
+          <I64 N="PeakVirtualMemorySize64">2204288917504</I64>
+          <I32 N="PeakVirtualMemorySize">970694656</I32>
+          <B N="PriorityBoostEnabled">true</B>
+          <S N="PriorityClass">Normal</S>
+          <I64 N="PrivateMemorySize64">316080128</I64>
+          <I32 N="PrivateMemorySize">316080128</I32>
+          <S N="ProcessName">chrome</S>
+          <S N="ProcessorAffinity">65535</S>
+          <I32 N="SessionId">1</I32>
+          <Obj N="Threads" RefId="330">
+            <TNRef RefId="1" />
+            <IE>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+            </IE>
+          </Obj>
+          <I32 N="HandleCount">1747</I32>
+          <I64 N="VirtualMemorySize64">2204143845376</I64>
+          <I32 N="VirtualMemorySize">825622528</I32>
+          <B N="EnableRaisingEvents">false</B>
+          <I64 N="WorkingSet64">112414720</I64>
+          <I32 N="WorkingSet">112414720</I32>
+          <Nil N="SynchronizingObject" />
+          <S N="MainModule">System.Diagnostics.ProcessModule (chrome.exe)</S>
+          <TS N="PrivilegedProcessorTime">PT11M7.53125S</TS>
+          <TS N="TotalProcessorTime">PT21M46.28125S</TS>
+          <TS N="UserProcessorTime">PT10M38.75S</TS>
+          <S N="MainWindowHandle">1770664</S>
+          <S N="MainWindowTitle">The Living Tombstone Radio - Now Playing on Pandora - Google Chrome</S>
+          <B N="Responding">true</B>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <S N="Name">chrome</S>
+          <I32 N="SI">1</I32>
+          <I32 N="Handles">1747</I32>
+          <I64 N="VM">2204143845376</I64>
+          <I64 N="WS">112414720</I64>
+          <I64 N="PM">316080128</I64>
+          <I64 N="NPM">61568</I64>
+          <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="Parent">System.Diagnostics.Process (explorer)</S>
+          <S N="Company">Google LLC</S>
+          <Db N="CPU">1306.28125</Db>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+          <S N="__NounName">Process</S>
+        </MS>
+      </Obj>
+      <S N="Company">Google LLC</S>
+      <Db N="CPU">4.25</Db>
+      <S N="FileVersion">76.0.3809.100</S>
+      <S N="ProductVersion">76.0.3809.100</S>
+      <S N="Description">Google Chrome</S>
+      <S N="Product">Google Chrome</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="331">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (chrome)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="332">
+        <TNRef RefId="5" />
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="333">
+        <TNRef RefId="4" />
+        <ToString>4556</ToString>
+      </Obj>
+      <I32 N="BasePriority">4</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-24T14:18:43.414544+03:00</DT>
+      <I32 N="Id">2848</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="334">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="335">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="336">
+        <TNRef RefId="6" />
+        <IE>
+          <Obj RefId="337">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+            <Props>
+              <S N="ModuleName">chrome.exe</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+              <S N="BaseAddress">140702356078592</S>
+              <I32 N="ModuleMemorySize">1732608</I32>
+              <S N="EntryPointAddress">140702357044720</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1692</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="338">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="339">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNEL32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">KERNEL32.DLL</S>
+              <S N="FileName">C:\Windows\System32\KERNEL32.DLL</S>
+              <S N="BaseAddress">140719912779776</S>
+              <I32 N="ModuleMemorySize">733184</I32>
+              <S N="EntryPointAddress">140719912876560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName:     kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">716</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="340">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNELBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">KERNELBASE.dll</S>
+              <S N="FileName">C:\Windows\System32\KERNELBASE.dll</S>
+              <S N="BaseAddress">140719894495232</S>
+              <I32 N="ModuleMemorySize">2699264</I32>
+              <S N="EntryPointAddress">140719894841456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName:     Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="341">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_elf.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_elf.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll</S>
+              <S N="BaseAddress">140719325642752</S>
+              <I32 N="ModuleMemorySize">925696</I32>
+              <S N="EntryPointAddress">140719326148464</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName:     chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">904</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="342">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (VERSION.dll)</ToString>
+            <Props>
+              <S N="ModuleName">VERSION.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\VERSION.dll</S>
+              <S N="BaseAddress">140719800254464</S>
+              <I32 N="ModuleMemorySize">40960</I32>
+              <S N="EntryPointAddress">140719800259344</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName:     version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Version Checking and File Installation Libraries_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">40</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Version Checking and File Installation Libraries</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="343">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcrt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcrt.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcrt.dll</S>
+              <S N="BaseAddress">140719950004224</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719950035120</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName:     msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion:      7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT CRT DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   7.0.17763.475_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.475 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.475</S>
+              <S N="Description">Windows NT CRT DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="344">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcryptPrimitives.dll</S>
+              <S N="FileName">C:\Windows\System32\bcryptPrimitives.dll</S>
+              <S N="BaseAddress">140719890235392</S>
+              <I32 N="ModuleMemorySize">516096</I32>
+              <S N="EntryPointAddress">140719890461152</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName:     bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">504</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="345">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ADVAPI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ADVAPI32.dll</S>
+              <S N="FileName">C:\Windows\System32\ADVAPI32.dll</S>
+              <S N="BaseAddress">140719915335680</S>
+              <I32 N="ModuleMemorySize">667648</I32>
+              <S N="EntryPointAddress">140719915417840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName:     advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Advanced Windows 32 Base API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">652</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Advanced Windows 32 Base API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="346">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sechost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sechost.dll</S>
+              <S N="FileName">C:\Windows\System32\sechost.dll</S>
+              <S N="BaseAddress">140719948824576</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719948951504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\sechost.dll_x000D__x000A_InternalName:     sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Host for SCM/SDDL/LSA Lookup APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="347">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RPCRT4.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RPCRT4.dll</S>
+              <S N="FileName">C:\Windows\System32\RPCRT4.dll</S>
+              <S N="BaseAddress">140719917629440</S>
+              <I32 N="ModuleMemorySize">1187840</I32>
+              <S N="EntryPointAddress">140719918006928</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName:     rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Procedure Call Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Procedure Call Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="348">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_child.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_child.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll</S>
+              <S N="BaseAddress">140717177962496</S>
+              <I32 N="ModuleMemorySize">87977984</I32>
+              <S N="EntryPointAddress">140717247440176</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName:     chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">85916</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="349">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OLEAUT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OLEAUT32.dll</S>
+              <S N="FileName">C:\Windows\System32\OLEAUT32.dll</S>
+              <S N="BaseAddress">140719946465280</S>
+              <I32 N="ModuleMemorySize">802816</I32>
+              <S N="EntryPointAddress">140719946574624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName:     OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OLEAUT32.DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">784</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">OLEAUT32.DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="350">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcp_win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcp_win.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcp_win.dll</S>
+              <S N="BaseAddress">140719889580032</S>
+              <I32 N="ModuleMemorySize">655360</I32>
+              <S N="EntryPointAddress">140719889658864</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName:     msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">640</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="351">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ucrtbase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ucrtbase.dll</S>
+              <S N="FileName">C:\Windows\System32\ucrtbase.dll</S>
+              <S N="BaseAddress">140719893446656</S>
+              <I32 N="ModuleMemorySize">1024000</I32>
+              <S N="EntryPointAddress">140719893528400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName:     ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1000</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="352">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (combase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">combase.dll</S>
+              <S N="FileName">C:\Windows\System32\combase.dll</S>
+              <S N="BaseAddress">140719950856192</S>
+              <I32 N="ModuleMemorySize">3325952</I32>
+              <S N="EntryPointAddress">140719951769888</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\combase.dll_x000D__x000A_InternalName:     COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft COM for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3248</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft COM for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="353">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WS2_32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WS2_32.dll</S>
+              <S N="FileName">C:\Windows\System32\WS2_32.dll</S>
+              <S N="BaseAddress">140719954198528</S>
+              <I32 N="ModuleMemorySize">446464</I32>
+              <S N="EntryPointAddress">140719954286384</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName:     ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">436</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Socket 2.0 32-Bit DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="354">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (GDI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">GDI32.dll</S>
+              <S N="FileName">C:\Windows\System32\GDI32.dll</S>
+              <S N="BaseAddress">140719950659584</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719950676208</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="355">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32full.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32full.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32full.dll</S>
+              <S N="BaseAddress">140719905112064</S>
+              <I32 N="ModuleMemorySize">1675264</I32>
+              <S N="EntryPointAddress">140719905369792</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="356">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USER32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USER32.dll</S>
+              <S N="FileName">C:\Windows\System32\USER32.dll</S>
+              <S N="BaseAddress">140719909306368</S>
+              <I32 N="ModuleMemorySize">1667072</I32>
+              <S N="EntryPointAddress">140719909414448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\USER32.dll_x000D__x000A_InternalName:     user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows USER API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows USER API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="357">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (win32u.dll)</ToString>
+            <Props>
+              <S N="ModuleName">win32u.dll</S>
+              <S N="FileName">C:\Windows\System32\win32u.dll</S>
+              <S N="BaseAddress">140719906816000</S>
+              <I32 N="ModuleMemorySize">131072</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\win32u.dll_x000D__x000A_InternalName:     Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32u_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">128</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32u</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="358">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINTRUST.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINTRUST.dll</S>
+              <S N="FileName">C:\Windows\System32\WINTRUST.dll</S>
+              <S N="BaseAddress">140719888728064</S>
+              <I32 N="ModuleMemorySize">364544</I32>
+              <S N="EntryPointAddress">140719888791376</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName:     WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Trust Verification APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">356</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft Trust Verification APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="359">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSASN1.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSASN1.dll</S>
+              <S N="FileName">C:\Windows\System32\MSASN1.dll</S>
+              <S N="BaseAddress">140719887876096</S>
+              <I32 N="ModuleMemorySize">73728</I32>
+              <S N="EntryPointAddress">140719887898576</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName:     msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  ASN.1 Runtime APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">72</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">ASN.1 Runtime APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="360">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPT32.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPT32.dll</S>
+              <S N="BaseAddress">140719891480576</S>
+              <I32 N="ModuleMemorySize">1945600</I32>
+              <S N="EntryPointAddress">140719891804832</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName:     CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Crypto API32_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1900</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Crypto API32</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="361">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IPHLPAPI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\IPHLPAPI.DLL</S>
+              <S N="BaseAddress">140719876931584</S>
+              <I32 N="ModuleMemorySize">249856</I32>
+              <S N="EntryPointAddress">140719876989024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName:     iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  IP Helper API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">244</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">IP Helper API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="362">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMM.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMM.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMM.dll</S>
+              <S N="BaseAddress">140719835054080</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719835066368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName:     winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MCI API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MCI API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="363">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USERENV.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USERENV.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\USERENV.dll</S>
+              <S N="BaseAddress">140719887024128</S>
+              <I32 N="ModuleMemorySize">163840</I32>
+              <S N="EntryPointAddress">140719887043280</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName:     userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Userenv_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Userenv</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="364">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (profapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">profapi.dll</S>
+              <S N="FileName">C:\Windows\System32\profapi.dll</S>
+              <S N="BaseAddress">140719888531456</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719888564400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\profapi.dll_x000D__x000A_InternalName:     PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  User Profile Basic API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">User Profile Basic API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="365">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (DWrite.dll)</ToString>
+            <Props>
+              <S N="ModuleName">DWrite.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\DWrite.dll</S>
+              <S N="BaseAddress">140719303819264</S>
+              <I32 N="ModuleMemorySize">3129344</I32>
+              <S N="EntryPointAddress">140719304509728</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName:     DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft DirectX Typography Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3056</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft DirectX Typography Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="366">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINSPOOL.DRV)</ToString>
+            <Props>
+              <S N="ModuleName">WINSPOOL.DRV</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINSPOOL.DRV</S>
+              <S N="BaseAddress">140719787606016</S>
+              <I32 N="ModuleMemorySize">561152</I32>
+              <S N="EntryPointAddress">140719787676448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName:     winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Spooler Driver_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">548</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Spooler Driver</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="367">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (kernel.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">kernel.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\kernel.appcore.dll</S>
+              <S N="BaseAddress">140719888400384</S>
+              <I32 N="ModuleMemorySize">69632</I32>
+              <S N="EntryPointAddress">140719888415648</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName:     kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AppModel API Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">68</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AppModel API Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="368">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcrypt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcrypt.dll</S>
+              <S N="FileName">C:\Windows\System32\bcrypt.dll</S>
+              <S N="BaseAddress">140719897247744</S>
+              <I32 N="ModuleMemorySize">155648</I32>
+              <S N="EntryPointAddress">140719897281296</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName:     bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">152</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="369">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dbghelp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dbghelp.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dbghelp.dll</S>
+              <S N="BaseAddress">140719552397312</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">140719552479168</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName:     DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Image Helper_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Image Helper</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="370">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINHTTP.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINHTTP.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINHTTP.dll</S>
+              <S N="BaseAddress">140719810019328</S>
+              <I32 N="ModuleMemorySize">991232</I32>
+              <S N="EntryPointAddress">140719810293024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName:     winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows HTTP Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">968</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows HTTP Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="371">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Secur32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Secur32.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\Secur32.dll</S>
+              <S N="BaseAddress">140719559147520</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719559156816</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName:     secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="372">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">dhcpcsvc.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dhcpcsvc.DLL</S>
+              <S N="BaseAddress">140719782494208</S>
+              <I32 N="ModuleMemorySize">114688</I32>
+              <S N="EntryPointAddress">140719782503840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName:     dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  DHCP Client Service_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">112</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">DHCP Client Service</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="373">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (NSI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">NSI.dll</S>
+              <S N="FileName">C:\Windows\System32\NSI.dll</S>
+              <S N="BaseAddress">140719916843008</S>
+              <I32 N="ModuleMemorySize">32768</I32>
+              <S N="EntryPointAddress">140719916851008</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\NSI.dll_x000D__x000A_InternalName:     nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NSI User-mode interface DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">32</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NSI User-mode interface DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="374">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMMBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMMBASE.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMMBASE.dll</S>
+              <S N="BaseAddress">140719834857472</S>
+              <I32 N="ModuleMemorySize">184320</I32>
+              <S N="EntryPointAddress">140719834890448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName:     winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base Multimedia Extension API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">180</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base Multimedia Extension API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="375">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cfgmgr32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cfgmgr32.dll</S>
+              <S N="FileName">C:\Windows\System32\cfgmgr32.dll</S>
+              <S N="BaseAddress">140719889252352</S>
+              <I32 N="ModuleMemorySize">303104</I32>
+              <S N="EntryPointAddress">140719889325904</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName:     cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Configuration Manager DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">296</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Configuration Manager DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="376">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (PROPSYS.dll)</ToString>
+            <Props>
+              <S N="ModuleName">PROPSYS.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\PROPSYS.dll</S>
+              <S N="BaseAddress">140719831187456</S>
+              <I32 N="ModuleMemorySize">1736704</I32>
+              <S N="EntryPointAddress">140719831447408</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName:     propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion:      7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Property System_x000D__x000A_Product:          Windows® Search_x000D__x000A_ProductVersion:   7.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1696</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.1</S>
+              <S N="Description">Microsoft Property System</S>
+              <S N="Product">Windows® Search</S>
+            </MS>
+          </Obj>
+          <Obj RefId="377">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shcore.dll</S>
+              <S N="FileName">C:\Windows\System32\shcore.dll</S>
+              <S N="BaseAddress">140719907143680</S>
+              <I32 N="ModuleMemorySize">688128</I32>
+              <S N="EntryPointAddress">140719907388560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shcore.dll_x000D__x000A_InternalName:     SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  SHCORE_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">672</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">SHCORE</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="378">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SSPICLI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">SSPICLI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\SSPICLI.DLL</S>
+              <S N="BaseAddress">140719886827520</S>
+              <I32 N="ModuleMemorySize">192512</I32>
+              <S N="EntryPointAddress">140719886881776</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName:     sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">188</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="379">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IMM32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IMM32.DLL</S>
+              <S N="FileName">C:\Windows\System32\IMM32.DLL</S>
+              <S N="BaseAddress">140719906947072</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719906952688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName:     imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows IMM32 API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="380">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPTBASE.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\CRYPTBASE.DLL</S>
+              <S N="BaseAddress">140719881846784</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719881855488</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName:     cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base cryptographic API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base cryptographic API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">44</I32>
+          <Obj N="SyncRoot" RefId="381">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="337" />
+              <Ref RefId="338" />
+              <Ref RefId="339" />
+              <Ref RefId="340" />
+              <Ref RefId="341" />
+              <Ref RefId="342" />
+              <Ref RefId="343" />
+              <Ref RefId="344" />
+              <Ref RefId="345" />
+              <Ref RefId="346" />
+              <Ref RefId="347" />
+              <Ref RefId="348" />
+              <Ref RefId="349" />
+              <Ref RefId="350" />
+              <Ref RefId="351" />
+              <Ref RefId="352" />
+              <Ref RefId="353" />
+              <Ref RefId="354" />
+              <Ref RefId="355" />
+              <Ref RefId="356" />
+              <Ref RefId="357" />
+              <Ref RefId="358" />
+              <Ref RefId="359" />
+              <Ref RefId="360" />
+              <Ref RefId="361" />
+              <Ref RefId="362" />
+              <Ref RefId="363" />
+              <Ref RefId="364" />
+              <Ref RefId="365" />
+              <Ref RefId="366" />
+              <Ref RefId="367" />
+              <Ref RefId="368" />
+              <Ref RefId="369" />
+              <Ref RefId="370" />
+              <Ref RefId="371" />
+              <Ref RefId="372" />
+              <Ref RefId="373" />
+              <Ref RefId="374" />
+              <Ref RefId="375" />
+              <Ref RefId="376" />
+              <Ref RefId="377" />
+              <Ref RefId="378" />
+              <Ref RefId="379" />
+              <Ref RefId="380" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">28144</I64>
+      <I32 N="NonpagedSystemMemorySize">28144</I32>
+      <I64 N="PagedMemorySize64">41238528</I64>
+      <I32 N="PagedMemorySize">41238528</I32>
+      <I64 N="PagedSystemMemorySize64">345584</I64>
+      <I32 N="PagedSystemMemorySize">345584</I32>
+      <I64 N="PeakPagedMemorySize64">47251456</I64>
+      <I32 N="PeakPagedMemorySize">47251456</I32>
+      <I64 N="PeakWorkingSet64">51593216</I64>
+      <I32 N="PeakWorkingSet">51593216</I32>
+      <I64 N="PeakVirtualMemorySize64">2203769114624</I64>
+      <I32 N="PeakVirtualMemorySize">450891776</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="382">
+        <TNRef RefId="8" />
+        <ToString>Idle</ToString>
+        <I32>64</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">41238528</I64>
+      <I32 N="PrivateMemorySize">41238528</I32>
+      <S N="ProcessName">chrome</S>
+      <Obj N="ProcessorAffinity" RefId="383">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="384">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="385">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">5</I32>
+              <I32 N="Id">19712</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.515625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:43.4145459+03:00</DT>
+              <TS N="TotalProcessorTime">PT5.03125S</TS>
+              <TS N="UserProcessorTime">PT4.515625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="386">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">9476</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:43.4709619+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="387">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">2</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">3680</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:43.4720883+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="388">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">1744</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0.90625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:43.4727947+03:00</DT>
+              <TS N="TotalProcessorTime">PT4.671875S</TS>
+              <TS N="UserProcessorTime">PT3.765625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="389">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">12432</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:43.4734126+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="390">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">14860</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:43.4742712+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="391">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">5</I32>
+              <I32 N="Id">4540</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:43.4810346+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="392">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">18264</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:43.4822668+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="393">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">5</I32>
+              <I32 N="Id">18120</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:43.4828147+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="394">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">11936</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:43.4831871+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="395">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">6440</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:43.4837534+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="396">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">2</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">15148</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:43.4841852+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="397">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">2940</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:48:22.4698995+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">13</I32>
+          <Obj N="SyncRoot" RefId="398">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="385" />
+              <Ref RefId="386" />
+              <Ref RefId="387" />
+              <Ref RefId="388" />
+              <Ref RefId="389" />
+              <Ref RefId="390" />
+              <Ref RefId="391" />
+              <Ref RefId="392" />
+              <Ref RefId="393" />
+              <Ref RefId="394" />
+              <Ref RefId="395" />
+              <Ref RefId="396" />
+              <Ref RefId="397" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">243</I32>
+      <I64 N="VirtualMemorySize64">2203746963456</I64>
+      <I32 N="VirtualMemorySize">428740608</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">30584832</I64>
+      <I32 N="WorkingSet">30584832</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="399">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+        <Props>
+          <S N="ModuleName">chrome.exe</S>
+          <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="BaseAddress">140702356078592</S>
+          <I32 N="ModuleMemorySize">1732608</I32>
+          <S N="EntryPointAddress">140702357044720</S>
+          <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">1692</I32>
+          <S N="Company">Google LLC</S>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT2.03125S</TS>
+      <TS N="TotalProcessorTime">PT11.359375S</TS>
+      <TS N="UserProcessorTime">PT9.328125S</TS>
+      <Obj N="MainWindowHandle" RefId="400">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">chrome</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">243</I32>
+      <I64 N="VM">2203746963456</I64>
+      <I64 N="WS">30584832</I64>
+      <I64 N="PM">41238528</I64>
+      <I64 N="NPM">28144</I64>
+      <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+      <Obj N="Parent" RefId="401">
+        <TNRef RefId="0" />
+        <ToString>System.Diagnostics.Process (chrome)</ToString>
+        <Props>
+          <S N="SafeHandle">Microsoft.Win32.SafeHandles.SafeProcessHandle</S>
+          <S N="Handle">7720</S>
+          <I32 N="BasePriority">8</I32>
+          <B N="HasExited">false</B>
+          <DT N="StartTime">2019-08-24T14:18:00.3253674+03:00</DT>
+          <I32 N="Id">23804</I32>
+          <S N="MachineName">.</S>
+          <S N="MaxWorkingSet">1413120</S>
+          <S N="MinWorkingSet">204800</S>
+          <Obj N="Modules" RefId="402">
+            <TNRef RefId="6" />
+            <IE>
+              <S>System.Diagnostics.ProcessModule (chrome.exe)</S>
+              <S>System.Diagnostics.ProcessModule (ntdll.dll)</S>
+              <S>System.Diagnostics.ProcessModule (KERNEL32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (KERNELBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome_elf.dll)</S>
+              <S>System.Diagnostics.ProcessModule (VERSION.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ADVAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sechost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RPCRT4.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</S>
+              <S>System.Diagnostics.ProcessModule (user32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (win32u.dll)</S>
+              <S>System.Diagnostics.ProcessModule (GDI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdi32full.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ucrtbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IMM32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SHELL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cfgmgr32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (combase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (powrprof.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shlwapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (kernel.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptsp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome.dll)</S>
+              <S>System.Diagnostics.ProcessModule (uxtheme.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dwmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USERENV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gpapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wkscli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ole32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSCTF.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEAUT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Secur32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SSPICLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DWrite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WS2_32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (COMCTL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (clbcatq.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RMCLIENT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NLAapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NSI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc6.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DNSAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mscms.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ColorAdapterClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (icm32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TextInputFramework.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreUIComponents.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreMessaging.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d2d1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d3d11.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PROPSYS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wintypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntmarta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxgi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WTSAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlanapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINSTA.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemcomn.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MMDevApi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DEVOBJ.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemsvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINHTTP.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fastprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wmiutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FirewallAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fwbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (LINKINFO.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dataexchange.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dcomp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atlthunk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEACC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (directmanipulation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (explorerframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnapps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (XmlLite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mswsock.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMM.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMMBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WmiPerfInst.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pdh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BiWinrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NETAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SAMCLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SAMLIB.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wdmaud.drv)</S>
+              <S>System.Diagnostics.ProcessModule (ksuser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AVRT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AUDIOSES.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (msacm32.drv)</S>
+              <S>System.Diagnostics.ProcessModule (MSACM32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (midimap.dll)</S>
+              <S>System.Diagnostics.ProcessModule (resourcepolicyclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BitsProxy.dll)</S>
+            </IE>
+          </Obj>
+          <I64 N="NonpagedSystemMemorySize64">61568</I64>
+          <I32 N="NonpagedSystemMemorySize">61568</I32>
+          <I64 N="PagedMemorySize64">316080128</I64>
+          <I32 N="PagedMemorySize">316080128</I32>
+          <I64 N="PagedSystemMemorySize64">857648</I64>
+          <I32 N="PagedSystemMemorySize">857648</I32>
+          <I64 N="PeakPagedMemorySize64">455720960</I64>
+          <I32 N="PeakPagedMemorySize">455720960</I32>
+          <I64 N="PeakWorkingSet64">398323712</I64>
+          <I32 N="PeakWorkingSet">398323712</I32>
+          <I64 N="PeakVirtualMemorySize64">2204288917504</I64>
+          <I32 N="PeakVirtualMemorySize">970694656</I32>
+          <B N="PriorityBoostEnabled">true</B>
+          <S N="PriorityClass">Normal</S>
+          <I64 N="PrivateMemorySize64">316080128</I64>
+          <I32 N="PrivateMemorySize">316080128</I32>
+          <S N="ProcessName">chrome</S>
+          <S N="ProcessorAffinity">65535</S>
+          <I32 N="SessionId">1</I32>
+          <Obj N="Threads" RefId="403">
+            <TNRef RefId="1" />
+            <IE>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+            </IE>
+          </Obj>
+          <I32 N="HandleCount">1747</I32>
+          <I64 N="VirtualMemorySize64">2204143845376</I64>
+          <I32 N="VirtualMemorySize">825622528</I32>
+          <B N="EnableRaisingEvents">false</B>
+          <I64 N="WorkingSet64">112414720</I64>
+          <I32 N="WorkingSet">112414720</I32>
+          <Nil N="SynchronizingObject" />
+          <S N="MainModule">System.Diagnostics.ProcessModule (chrome.exe)</S>
+          <TS N="PrivilegedProcessorTime">PT11M7.53125S</TS>
+          <TS N="TotalProcessorTime">PT21M46.28125S</TS>
+          <TS N="UserProcessorTime">PT10M38.75S</TS>
+          <S N="MainWindowHandle">1770664</S>
+          <S N="MainWindowTitle">The Living Tombstone Radio - Now Playing on Pandora - Google Chrome</S>
+          <B N="Responding">true</B>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <S N="Name">chrome</S>
+          <I32 N="SI">1</I32>
+          <I32 N="Handles">1747</I32>
+          <I64 N="VM">2204143845376</I64>
+          <I64 N="WS">112414720</I64>
+          <I64 N="PM">316080128</I64>
+          <I64 N="NPM">61568</I64>
+          <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="Parent">System.Diagnostics.Process (explorer)</S>
+          <S N="Company">Google LLC</S>
+          <Db N="CPU">1306.28125</Db>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+          <S N="__NounName">Process</S>
+        </MS>
+      </Obj>
+      <S N="Company">Google LLC</S>
+      <Db N="CPU">11.359375</Db>
+      <S N="FileVersion">76.0.3809.100</S>
+      <S N="ProductVersion">76.0.3809.100</S>
+      <S N="Description">Google Chrome</S>
+      <S N="Product">Google Chrome</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="404">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (chrome)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="405">
+        <TNRef RefId="5" />
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="406">
+        <TNRef RefId="4" />
+        <ToString>4408</ToString>
+      </Obj>
+      <I32 N="BasePriority">8</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-24T14:18:00.9594983+03:00</DT>
+      <I32 N="Id">5196</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="407">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="408">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="409">
+        <TNRef RefId="6" />
+        <IE>
+          <Obj RefId="410">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+            <Props>
+              <S N="ModuleName">chrome.exe</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+              <S N="BaseAddress">140702356078592</S>
+              <I32 N="ModuleMemorySize">1732608</I32>
+              <S N="EntryPointAddress">140702357044720</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1692</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="411">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="412">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNEL32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">KERNEL32.DLL</S>
+              <S N="FileName">C:\Windows\System32\KERNEL32.DLL</S>
+              <S N="BaseAddress">140719912779776</S>
+              <I32 N="ModuleMemorySize">733184</I32>
+              <S N="EntryPointAddress">140719912876560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName:     kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">716</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="413">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNELBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">KERNELBASE.dll</S>
+              <S N="FileName">C:\Windows\System32\KERNELBASE.dll</S>
+              <S N="BaseAddress">140719894495232</S>
+              <I32 N="ModuleMemorySize">2699264</I32>
+              <S N="EntryPointAddress">140719894841456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName:     Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="414">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_elf.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_elf.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll</S>
+              <S N="BaseAddress">140719325642752</S>
+              <I32 N="ModuleMemorySize">925696</I32>
+              <S N="EntryPointAddress">140719326148464</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName:     chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">904</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="415">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (VERSION.dll)</ToString>
+            <Props>
+              <S N="ModuleName">VERSION.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\VERSION.dll</S>
+              <S N="BaseAddress">140719800254464</S>
+              <I32 N="ModuleMemorySize">40960</I32>
+              <S N="EntryPointAddress">140719800259344</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName:     version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Version Checking and File Installation Libraries_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">40</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Version Checking and File Installation Libraries</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="416">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcrt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcrt.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcrt.dll</S>
+              <S N="BaseAddress">140719950004224</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719950035120</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName:     msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion:      7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT CRT DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   7.0.17763.475_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.475 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.475</S>
+              <S N="Description">Windows NT CRT DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="417">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcryptPrimitives.dll</S>
+              <S N="FileName">C:\Windows\System32\bcryptPrimitives.dll</S>
+              <S N="BaseAddress">140719890235392</S>
+              <I32 N="ModuleMemorySize">516096</I32>
+              <S N="EntryPointAddress">140719890461152</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName:     bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">504</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="418">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ADVAPI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ADVAPI32.dll</S>
+              <S N="FileName">C:\Windows\System32\ADVAPI32.dll</S>
+              <S N="BaseAddress">140719915335680</S>
+              <I32 N="ModuleMemorySize">667648</I32>
+              <S N="EntryPointAddress">140719915417840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName:     advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Advanced Windows 32 Base API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">652</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Advanced Windows 32 Base API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="419">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sechost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sechost.dll</S>
+              <S N="FileName">C:\Windows\System32\sechost.dll</S>
+              <S N="BaseAddress">140719948824576</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719948951504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\sechost.dll_x000D__x000A_InternalName:     sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Host for SCM/SDDL/LSA Lookup APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="420">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RPCRT4.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RPCRT4.dll</S>
+              <S N="FileName">C:\Windows\System32\RPCRT4.dll</S>
+              <S N="BaseAddress">140719917629440</S>
+              <I32 N="ModuleMemorySize">1187840</I32>
+              <S N="EntryPointAddress">140719918006928</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName:     rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Procedure Call Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Procedure Call Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="421">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_child.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_child.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll</S>
+              <S N="BaseAddress">140717177962496</S>
+              <I32 N="ModuleMemorySize">87977984</I32>
+              <S N="EntryPointAddress">140717247440176</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName:     chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">85916</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="422">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OLEAUT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OLEAUT32.dll</S>
+              <S N="FileName">C:\Windows\System32\OLEAUT32.dll</S>
+              <S N="BaseAddress">140719946465280</S>
+              <I32 N="ModuleMemorySize">802816</I32>
+              <S N="EntryPointAddress">140719946574624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName:     OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OLEAUT32.DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">784</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">OLEAUT32.DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="423">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcp_win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcp_win.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcp_win.dll</S>
+              <S N="BaseAddress">140719889580032</S>
+              <I32 N="ModuleMemorySize">655360</I32>
+              <S N="EntryPointAddress">140719889658864</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName:     msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">640</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="424">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ucrtbase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ucrtbase.dll</S>
+              <S N="FileName">C:\Windows\System32\ucrtbase.dll</S>
+              <S N="BaseAddress">140719893446656</S>
+              <I32 N="ModuleMemorySize">1024000</I32>
+              <S N="EntryPointAddress">140719893528400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName:     ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1000</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="425">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (combase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">combase.dll</S>
+              <S N="FileName">C:\Windows\System32\combase.dll</S>
+              <S N="BaseAddress">140719950856192</S>
+              <I32 N="ModuleMemorySize">3325952</I32>
+              <S N="EntryPointAddress">140719951769888</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\combase.dll_x000D__x000A_InternalName:     COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft COM for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3248</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft COM for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="426">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WS2_32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WS2_32.dll</S>
+              <S N="FileName">C:\Windows\System32\WS2_32.dll</S>
+              <S N="BaseAddress">140719954198528</S>
+              <I32 N="ModuleMemorySize">446464</I32>
+              <S N="EntryPointAddress">140719954286384</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName:     ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">436</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Socket 2.0 32-Bit DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="427">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (GDI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">GDI32.dll</S>
+              <S N="FileName">C:\Windows\System32\GDI32.dll</S>
+              <S N="BaseAddress">140719950659584</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719950676208</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="428">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32full.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32full.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32full.dll</S>
+              <S N="BaseAddress">140719905112064</S>
+              <I32 N="ModuleMemorySize">1675264</I32>
+              <S N="EntryPointAddress">140719905369792</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="429">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USER32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USER32.dll</S>
+              <S N="FileName">C:\Windows\System32\USER32.dll</S>
+              <S N="BaseAddress">140719909306368</S>
+              <I32 N="ModuleMemorySize">1667072</I32>
+              <S N="EntryPointAddress">140719909414448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\USER32.dll_x000D__x000A_InternalName:     user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows USER API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows USER API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="430">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (win32u.dll)</ToString>
+            <Props>
+              <S N="ModuleName">win32u.dll</S>
+              <S N="FileName">C:\Windows\System32\win32u.dll</S>
+              <S N="BaseAddress">140719906816000</S>
+              <I32 N="ModuleMemorySize">131072</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\win32u.dll_x000D__x000A_InternalName:     Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32u_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">128</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32u</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="431">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINTRUST.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINTRUST.dll</S>
+              <S N="FileName">C:\Windows\System32\WINTRUST.dll</S>
+              <S N="BaseAddress">140719888728064</S>
+              <I32 N="ModuleMemorySize">364544</I32>
+              <S N="EntryPointAddress">140719888791376</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName:     WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Trust Verification APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">356</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft Trust Verification APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="432">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSASN1.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSASN1.dll</S>
+              <S N="FileName">C:\Windows\System32\MSASN1.dll</S>
+              <S N="BaseAddress">140719887876096</S>
+              <I32 N="ModuleMemorySize">73728</I32>
+              <S N="EntryPointAddress">140719887898576</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName:     msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  ASN.1 Runtime APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">72</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">ASN.1 Runtime APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="433">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPT32.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPT32.dll</S>
+              <S N="BaseAddress">140719891480576</S>
+              <I32 N="ModuleMemorySize">1945600</I32>
+              <S N="EntryPointAddress">140719891804832</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName:     CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Crypto API32_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1900</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Crypto API32</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="434">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IPHLPAPI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\IPHLPAPI.DLL</S>
+              <S N="BaseAddress">140719876931584</S>
+              <I32 N="ModuleMemorySize">249856</I32>
+              <S N="EntryPointAddress">140719876989024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName:     iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  IP Helper API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">244</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">IP Helper API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="435">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMM.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMM.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMM.dll</S>
+              <S N="BaseAddress">140719835054080</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719835066368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName:     winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MCI API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MCI API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="436">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USERENV.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USERENV.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\USERENV.dll</S>
+              <S N="BaseAddress">140719887024128</S>
+              <I32 N="ModuleMemorySize">163840</I32>
+              <S N="EntryPointAddress">140719887043280</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName:     userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Userenv_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Userenv</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="437">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (profapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">profapi.dll</S>
+              <S N="FileName">C:\Windows\System32\profapi.dll</S>
+              <S N="BaseAddress">140719888531456</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719888564400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\profapi.dll_x000D__x000A_InternalName:     PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  User Profile Basic API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">User Profile Basic API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="438">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (DWrite.dll)</ToString>
+            <Props>
+              <S N="ModuleName">DWrite.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\DWrite.dll</S>
+              <S N="BaseAddress">140719303819264</S>
+              <I32 N="ModuleMemorySize">3129344</I32>
+              <S N="EntryPointAddress">140719304509728</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName:     DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft DirectX Typography Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3056</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft DirectX Typography Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="439">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINSPOOL.DRV)</ToString>
+            <Props>
+              <S N="ModuleName">WINSPOOL.DRV</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINSPOOL.DRV</S>
+              <S N="BaseAddress">140719787606016</S>
+              <I32 N="ModuleMemorySize">561152</I32>
+              <S N="EntryPointAddress">140719787676448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName:     winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Spooler Driver_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">548</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Spooler Driver</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="440">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (kernel.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">kernel.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\kernel.appcore.dll</S>
+              <S N="BaseAddress">140719888400384</S>
+              <I32 N="ModuleMemorySize">69632</I32>
+              <S N="EntryPointAddress">140719888415648</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName:     kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AppModel API Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">68</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AppModel API Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="441">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcrypt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcrypt.dll</S>
+              <S N="FileName">C:\Windows\System32\bcrypt.dll</S>
+              <S N="BaseAddress">140719897247744</S>
+              <I32 N="ModuleMemorySize">155648</I32>
+              <S N="EntryPointAddress">140719897281296</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName:     bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">152</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="442">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dbghelp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dbghelp.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dbghelp.dll</S>
+              <S N="BaseAddress">140719552397312</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">140719552479168</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName:     DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Image Helper_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Image Helper</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="443">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINHTTP.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINHTTP.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINHTTP.dll</S>
+              <S N="BaseAddress">140719810019328</S>
+              <I32 N="ModuleMemorySize">991232</I32>
+              <S N="EntryPointAddress">140719810293024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName:     winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows HTTP Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">968</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows HTTP Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="444">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Secur32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Secur32.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\Secur32.dll</S>
+              <S N="BaseAddress">140719559147520</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719559156816</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName:     secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="445">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">dhcpcsvc.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dhcpcsvc.DLL</S>
+              <S N="BaseAddress">140719782494208</S>
+              <I32 N="ModuleMemorySize">114688</I32>
+              <S N="EntryPointAddress">140719782503840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName:     dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  DHCP Client Service_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">112</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">DHCP Client Service</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="446">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (NSI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">NSI.dll</S>
+              <S N="FileName">C:\Windows\System32\NSI.dll</S>
+              <S N="BaseAddress">140719916843008</S>
+              <I32 N="ModuleMemorySize">32768</I32>
+              <S N="EntryPointAddress">140719916851008</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\NSI.dll_x000D__x000A_InternalName:     nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NSI User-mode interface DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">32</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NSI User-mode interface DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="447">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMMBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMMBASE.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMMBASE.dll</S>
+              <S N="BaseAddress">140719834857472</S>
+              <I32 N="ModuleMemorySize">184320</I32>
+              <S N="EntryPointAddress">140719834890448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName:     winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base Multimedia Extension API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">180</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base Multimedia Extension API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="448">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cfgmgr32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cfgmgr32.dll</S>
+              <S N="FileName">C:\Windows\System32\cfgmgr32.dll</S>
+              <S N="BaseAddress">140719889252352</S>
+              <I32 N="ModuleMemorySize">303104</I32>
+              <S N="EntryPointAddress">140719889325904</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName:     cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Configuration Manager DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">296</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Configuration Manager DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="449">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (PROPSYS.dll)</ToString>
+            <Props>
+              <S N="ModuleName">PROPSYS.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\PROPSYS.dll</S>
+              <S N="BaseAddress">140719831187456</S>
+              <I32 N="ModuleMemorySize">1736704</I32>
+              <S N="EntryPointAddress">140719831447408</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName:     propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion:      7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Property System_x000D__x000A_Product:          Windows® Search_x000D__x000A_ProductVersion:   7.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1696</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.1</S>
+              <S N="Description">Microsoft Property System</S>
+              <S N="Product">Windows® Search</S>
+            </MS>
+          </Obj>
+          <Obj RefId="450">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shcore.dll</S>
+              <S N="FileName">C:\Windows\System32\shcore.dll</S>
+              <S N="BaseAddress">140719907143680</S>
+              <I32 N="ModuleMemorySize">688128</I32>
+              <S N="EntryPointAddress">140719907388560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shcore.dll_x000D__x000A_InternalName:     SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  SHCORE_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">672</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">SHCORE</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="451">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SSPICLI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">SSPICLI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\SSPICLI.DLL</S>
+              <S N="BaseAddress">140719886827520</S>
+              <I32 N="ModuleMemorySize">192512</I32>
+              <S N="EntryPointAddress">140719886881776</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName:     sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">188</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="452">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IMM32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IMM32.DLL</S>
+              <S N="FileName">C:\Windows\System32\IMM32.DLL</S>
+              <S N="BaseAddress">140719906947072</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719906952688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName:     imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows IMM32 API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="453">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPTBASE.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\CRYPTBASE.DLL</S>
+              <S N="BaseAddress">140719881846784</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719881855488</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName:     cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base cryptographic API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base cryptographic API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">44</I32>
+          <Obj N="SyncRoot" RefId="454">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="410" />
+              <Ref RefId="411" />
+              <Ref RefId="412" />
+              <Ref RefId="413" />
+              <Ref RefId="414" />
+              <Ref RefId="415" />
+              <Ref RefId="416" />
+              <Ref RefId="417" />
+              <Ref RefId="418" />
+              <Ref RefId="419" />
+              <Ref RefId="420" />
+              <Ref RefId="421" />
+              <Ref RefId="422" />
+              <Ref RefId="423" />
+              <Ref RefId="424" />
+              <Ref RefId="425" />
+              <Ref RefId="426" />
+              <Ref RefId="427" />
+              <Ref RefId="428" />
+              <Ref RefId="429" />
+              <Ref RefId="430" />
+              <Ref RefId="431" />
+              <Ref RefId="432" />
+              <Ref RefId="433" />
+              <Ref RefId="434" />
+              <Ref RefId="435" />
+              <Ref RefId="436" />
+              <Ref RefId="437" />
+              <Ref RefId="438" />
+              <Ref RefId="439" />
+              <Ref RefId="440" />
+              <Ref RefId="441" />
+              <Ref RefId="442" />
+              <Ref RefId="443" />
+              <Ref RefId="444" />
+              <Ref RefId="445" />
+              <Ref RefId="446" />
+              <Ref RefId="447" />
+              <Ref RefId="448" />
+              <Ref RefId="449" />
+              <Ref RefId="450" />
+              <Ref RefId="451" />
+              <Ref RefId="452" />
+              <Ref RefId="453" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">25152</I64>
+      <I32 N="NonpagedSystemMemorySize">25152</I32>
+      <I64 N="PagedMemorySize64">32710656</I64>
+      <I32 N="PagedMemorySize">32710656</I32>
+      <I64 N="PagedSystemMemorySize64">350648</I64>
+      <I32 N="PagedSystemMemorySize">350648</I32>
+      <I64 N="PeakPagedMemorySize64">43442176</I64>
+      <I32 N="PeakPagedMemorySize">43442176</I32>
+      <I64 N="PeakWorkingSet64">43405312</I64>
+      <I32 N="PeakWorkingSet">43405312</I32>
+      <I64 N="PeakVirtualMemorySize64">2203784564736</I64>
+      <I32 N="PeakVirtualMemorySize">466341888</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="455">
+        <TNRef RefId="8" />
+        <ToString>Normal</ToString>
+        <I32>32</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">32710656</I64>
+      <I32 N="PrivateMemorySize">32710656</I32>
+      <S N="ProcessName">chrome</S>
+      <Obj N="ProcessorAffinity" RefId="456">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="457">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="458">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">17952</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.421875S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.9595002+03:00</DT>
+              <TS N="TotalProcessorTime">PT7.84375S</TS>
+              <TS N="UserProcessorTime">PT7.421875S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="459">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">12744</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0621287+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="460">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">9280</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0643991+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="461">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">6708</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0.59375S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0654768+03:00</DT>
+              <TS N="TotalProcessorTime">PT2.140625S</TS>
+              <TS N="UserProcessorTime">PT1.546875S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="462">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">1660</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0663254+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="463">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">18704</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0674549+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="464">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">21836</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0785829+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="465">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">3644</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0820887+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="466">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">8800</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0827336+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="467">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">17776</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0833734+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="468">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">20228</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0839275+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="469">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">7</I32>
+              <I32 N="Id">17364</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0845327+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="470">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">22480</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:50:47.5351816+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">13</I32>
+          <Obj N="SyncRoot" RefId="471">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="458" />
+              <Ref RefId="459" />
+              <Ref RefId="460" />
+              <Ref RefId="461" />
+              <Ref RefId="462" />
+              <Ref RefId="463" />
+              <Ref RefId="464" />
+              <Ref RefId="465" />
+              <Ref RefId="466" />
+              <Ref RefId="467" />
+              <Ref RefId="468" />
+              <Ref RefId="469" />
+              <Ref RefId="470" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">242</I32>
+      <I64 N="VirtualMemorySize64">2203745755136</I64>
+      <I32 N="VirtualMemorySize">427532288</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">34971648</I64>
+      <I32 N="WorkingSet">34971648</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="472">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+        <Props>
+          <S N="ModuleName">chrome.exe</S>
+          <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="BaseAddress">140702356078592</S>
+          <I32 N="ModuleMemorySize">1732608</I32>
+          <S N="EntryPointAddress">140702357044720</S>
+          <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">1692</I32>
+          <S N="Company">Google LLC</S>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT1.59375S</TS>
+      <TS N="TotalProcessorTime">PT11.203125S</TS>
+      <TS N="UserProcessorTime">PT9.609375S</TS>
+      <Obj N="MainWindowHandle" RefId="473">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">chrome</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">242</I32>
+      <I64 N="VM">2203745755136</I64>
+      <I64 N="WS">34971648</I64>
+      <I64 N="PM">32710656</I64>
+      <I64 N="NPM">25152</I64>
+      <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+      <Obj N="Parent" RefId="474">
+        <TNRef RefId="0" />
+        <ToString>System.Diagnostics.Process (chrome)</ToString>
+        <Props>
+          <S N="SafeHandle">Microsoft.Win32.SafeHandles.SafeProcessHandle</S>
+          <S N="Handle">4520</S>
+          <I32 N="BasePriority">8</I32>
+          <B N="HasExited">false</B>
+          <DT N="StartTime">2019-08-24T14:18:00.3253674+03:00</DT>
+          <I32 N="Id">23804</I32>
+          <S N="MachineName">.</S>
+          <S N="MaxWorkingSet">1413120</S>
+          <S N="MinWorkingSet">204800</S>
+          <Obj N="Modules" RefId="475">
+            <TNRef RefId="6" />
+            <IE>
+              <S>System.Diagnostics.ProcessModule (chrome.exe)</S>
+              <S>System.Diagnostics.ProcessModule (ntdll.dll)</S>
+              <S>System.Diagnostics.ProcessModule (KERNEL32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (KERNELBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome_elf.dll)</S>
+              <S>System.Diagnostics.ProcessModule (VERSION.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ADVAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sechost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RPCRT4.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</S>
+              <S>System.Diagnostics.ProcessModule (user32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (win32u.dll)</S>
+              <S>System.Diagnostics.ProcessModule (GDI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdi32full.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ucrtbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IMM32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SHELL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cfgmgr32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (combase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (powrprof.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shlwapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (kernel.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptsp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome.dll)</S>
+              <S>System.Diagnostics.ProcessModule (uxtheme.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dwmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USERENV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gpapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wkscli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ole32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSCTF.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEAUT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Secur32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SSPICLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DWrite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WS2_32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (COMCTL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (clbcatq.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RMCLIENT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NLAapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NSI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc6.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DNSAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mscms.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ColorAdapterClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (icm32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TextInputFramework.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreUIComponents.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreMessaging.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d2d1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d3d11.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PROPSYS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wintypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntmarta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxgi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WTSAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlanapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINSTA.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemcomn.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MMDevApi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DEVOBJ.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemsvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINHTTP.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fastprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wmiutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FirewallAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fwbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (LINKINFO.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dataexchange.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dcomp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atlthunk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEACC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (directmanipulation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (explorerframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnapps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (XmlLite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mswsock.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMM.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMMBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WmiPerfInst.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pdh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BiWinrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NETAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SAMCLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SAMLIB.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wdmaud.drv)</S>
+              <S>System.Diagnostics.ProcessModule (ksuser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AVRT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AUDIOSES.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (msacm32.drv)</S>
+              <S>System.Diagnostics.ProcessModule (MSACM32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (midimap.dll)</S>
+              <S>System.Diagnostics.ProcessModule (resourcepolicyclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BitsProxy.dll)</S>
+            </IE>
+          </Obj>
+          <I64 N="NonpagedSystemMemorySize64">61568</I64>
+          <I32 N="NonpagedSystemMemorySize">61568</I32>
+          <I64 N="PagedMemorySize64">316080128</I64>
+          <I32 N="PagedMemorySize">316080128</I32>
+          <I64 N="PagedSystemMemorySize64">857648</I64>
+          <I32 N="PagedSystemMemorySize">857648</I32>
+          <I64 N="PeakPagedMemorySize64">455720960</I64>
+          <I32 N="PeakPagedMemorySize">455720960</I32>
+          <I64 N="PeakWorkingSet64">398323712</I64>
+          <I32 N="PeakWorkingSet">398323712</I32>
+          <I64 N="PeakVirtualMemorySize64">2204288917504</I64>
+          <I32 N="PeakVirtualMemorySize">970694656</I32>
+          <B N="PriorityBoostEnabled">true</B>
+          <S N="PriorityClass">Normal</S>
+          <I64 N="PrivateMemorySize64">316080128</I64>
+          <I32 N="PrivateMemorySize">316080128</I32>
+          <S N="ProcessName">chrome</S>
+          <S N="ProcessorAffinity">65535</S>
+          <I32 N="SessionId">1</I32>
+          <Obj N="Threads" RefId="476">
+            <TNRef RefId="1" />
+            <IE>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+            </IE>
+          </Obj>
+          <I32 N="HandleCount">1747</I32>
+          <I64 N="VirtualMemorySize64">2204143845376</I64>
+          <I32 N="VirtualMemorySize">825622528</I32>
+          <B N="EnableRaisingEvents">false</B>
+          <I64 N="WorkingSet64">112414720</I64>
+          <I32 N="WorkingSet">112414720</I32>
+          <Nil N="SynchronizingObject" />
+          <S N="MainModule">System.Diagnostics.ProcessModule (chrome.exe)</S>
+          <TS N="PrivilegedProcessorTime">PT11M7.53125S</TS>
+          <TS N="TotalProcessorTime">PT21M46.28125S</TS>
+          <TS N="UserProcessorTime">PT10M38.75S</TS>
+          <S N="MainWindowHandle">1770664</S>
+          <S N="MainWindowTitle">The Living Tombstone Radio - Now Playing on Pandora - Google Chrome</S>
+          <B N="Responding">true</B>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <S N="Name">chrome</S>
+          <I32 N="SI">1</I32>
+          <I32 N="Handles">1747</I32>
+          <I64 N="VM">2204143845376</I64>
+          <I64 N="WS">112414720</I64>
+          <I64 N="PM">316080128</I64>
+          <I64 N="NPM">61568</I64>
+          <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="Parent">System.Diagnostics.Process (explorer)</S>
+          <S N="Company">Google LLC</S>
+          <Db N="CPU">1306.28125</Db>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+          <S N="__NounName">Process</S>
+        </MS>
+      </Obj>
+      <S N="Company">Google LLC</S>
+      <Db N="CPU">11.203125</Db>
+      <S N="FileVersion">76.0.3809.100</S>
+      <S N="ProductVersion">76.0.3809.100</S>
+      <S N="Description">Google Chrome</S>
+      <S N="Product">Google Chrome</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="477">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (chrome)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="478">
+        <TNRef RefId="5" />
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="479">
+        <TNRef RefId="4" />
+        <ToString>7512</ToString>
+      </Obj>
+      <I32 N="BasePriority">4</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-24T14:18:25.2320391+03:00</DT>
+      <I32 N="Id">15872</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="480">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="481">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="482">
+        <TNRef RefId="6" />
+        <IE>
+          <Obj RefId="483">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+            <Props>
+              <S N="ModuleName">chrome.exe</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+              <S N="BaseAddress">140702356078592</S>
+              <I32 N="ModuleMemorySize">1732608</I32>
+              <S N="EntryPointAddress">140702357044720</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1692</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="484">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="485">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNEL32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">KERNEL32.DLL</S>
+              <S N="FileName">C:\Windows\System32\KERNEL32.DLL</S>
+              <S N="BaseAddress">140719912779776</S>
+              <I32 N="ModuleMemorySize">733184</I32>
+              <S N="EntryPointAddress">140719912876560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName:     kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">716</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="486">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNELBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">KERNELBASE.dll</S>
+              <S N="FileName">C:\Windows\System32\KERNELBASE.dll</S>
+              <S N="BaseAddress">140719894495232</S>
+              <I32 N="ModuleMemorySize">2699264</I32>
+              <S N="EntryPointAddress">140719894841456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName:     Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="487">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_elf.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_elf.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll</S>
+              <S N="BaseAddress">140719325642752</S>
+              <I32 N="ModuleMemorySize">925696</I32>
+              <S N="EntryPointAddress">140719326148464</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName:     chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">904</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="488">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (VERSION.dll)</ToString>
+            <Props>
+              <S N="ModuleName">VERSION.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\VERSION.dll</S>
+              <S N="BaseAddress">140719800254464</S>
+              <I32 N="ModuleMemorySize">40960</I32>
+              <S N="EntryPointAddress">140719800259344</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName:     version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Version Checking and File Installation Libraries_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">40</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Version Checking and File Installation Libraries</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="489">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcrt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcrt.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcrt.dll</S>
+              <S N="BaseAddress">140719950004224</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719950035120</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName:     msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion:      7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT CRT DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   7.0.17763.475_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.475 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.475</S>
+              <S N="Description">Windows NT CRT DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="490">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcryptPrimitives.dll</S>
+              <S N="FileName">C:\Windows\System32\bcryptPrimitives.dll</S>
+              <S N="BaseAddress">140719890235392</S>
+              <I32 N="ModuleMemorySize">516096</I32>
+              <S N="EntryPointAddress">140719890461152</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName:     bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">504</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="491">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ADVAPI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ADVAPI32.dll</S>
+              <S N="FileName">C:\Windows\System32\ADVAPI32.dll</S>
+              <S N="BaseAddress">140719915335680</S>
+              <I32 N="ModuleMemorySize">667648</I32>
+              <S N="EntryPointAddress">140719915417840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName:     advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Advanced Windows 32 Base API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">652</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Advanced Windows 32 Base API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="492">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sechost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sechost.dll</S>
+              <S N="FileName">C:\Windows\System32\sechost.dll</S>
+              <S N="BaseAddress">140719948824576</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719948951504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\sechost.dll_x000D__x000A_InternalName:     sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Host for SCM/SDDL/LSA Lookup APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="493">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RPCRT4.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RPCRT4.dll</S>
+              <S N="FileName">C:\Windows\System32\RPCRT4.dll</S>
+              <S N="BaseAddress">140719917629440</S>
+              <I32 N="ModuleMemorySize">1187840</I32>
+              <S N="EntryPointAddress">140719918006928</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName:     rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Procedure Call Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Procedure Call Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="494">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_child.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_child.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll</S>
+              <S N="BaseAddress">140717177962496</S>
+              <I32 N="ModuleMemorySize">87977984</I32>
+              <S N="EntryPointAddress">140717247440176</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName:     chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">85916</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="495">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OLEAUT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OLEAUT32.dll</S>
+              <S N="FileName">C:\Windows\System32\OLEAUT32.dll</S>
+              <S N="BaseAddress">140719946465280</S>
+              <I32 N="ModuleMemorySize">802816</I32>
+              <S N="EntryPointAddress">140719946574624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName:     OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OLEAUT32.DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">784</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">OLEAUT32.DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="496">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcp_win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcp_win.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcp_win.dll</S>
+              <S N="BaseAddress">140719889580032</S>
+              <I32 N="ModuleMemorySize">655360</I32>
+              <S N="EntryPointAddress">140719889658864</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName:     msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">640</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="497">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ucrtbase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ucrtbase.dll</S>
+              <S N="FileName">C:\Windows\System32\ucrtbase.dll</S>
+              <S N="BaseAddress">140719893446656</S>
+              <I32 N="ModuleMemorySize">1024000</I32>
+              <S N="EntryPointAddress">140719893528400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName:     ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1000</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="498">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (combase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">combase.dll</S>
+              <S N="FileName">C:\Windows\System32\combase.dll</S>
+              <S N="BaseAddress">140719950856192</S>
+              <I32 N="ModuleMemorySize">3325952</I32>
+              <S N="EntryPointAddress">140719951769888</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\combase.dll_x000D__x000A_InternalName:     COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft COM for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3248</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft COM for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="499">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WS2_32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WS2_32.dll</S>
+              <S N="FileName">C:\Windows\System32\WS2_32.dll</S>
+              <S N="BaseAddress">140719954198528</S>
+              <I32 N="ModuleMemorySize">446464</I32>
+              <S N="EntryPointAddress">140719954286384</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName:     ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">436</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Socket 2.0 32-Bit DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="500">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (GDI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">GDI32.dll</S>
+              <S N="FileName">C:\Windows\System32\GDI32.dll</S>
+              <S N="BaseAddress">140719950659584</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719950676208</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="501">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32full.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32full.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32full.dll</S>
+              <S N="BaseAddress">140719905112064</S>
+              <I32 N="ModuleMemorySize">1675264</I32>
+              <S N="EntryPointAddress">140719905369792</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="502">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USER32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USER32.dll</S>
+              <S N="FileName">C:\Windows\System32\USER32.dll</S>
+              <S N="BaseAddress">140719909306368</S>
+              <I32 N="ModuleMemorySize">1667072</I32>
+              <S N="EntryPointAddress">140719909414448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\USER32.dll_x000D__x000A_InternalName:     user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows USER API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows USER API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="503">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (win32u.dll)</ToString>
+            <Props>
+              <S N="ModuleName">win32u.dll</S>
+              <S N="FileName">C:\Windows\System32\win32u.dll</S>
+              <S N="BaseAddress">140719906816000</S>
+              <I32 N="ModuleMemorySize">131072</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\win32u.dll_x000D__x000A_InternalName:     Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32u_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">128</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32u</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="504">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINTRUST.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINTRUST.dll</S>
+              <S N="FileName">C:\Windows\System32\WINTRUST.dll</S>
+              <S N="BaseAddress">140719888728064</S>
+              <I32 N="ModuleMemorySize">364544</I32>
+              <S N="EntryPointAddress">140719888791376</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName:     WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Trust Verification APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">356</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft Trust Verification APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="505">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSASN1.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSASN1.dll</S>
+              <S N="FileName">C:\Windows\System32\MSASN1.dll</S>
+              <S N="BaseAddress">140719887876096</S>
+              <I32 N="ModuleMemorySize">73728</I32>
+              <S N="EntryPointAddress">140719887898576</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName:     msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  ASN.1 Runtime APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">72</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">ASN.1 Runtime APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="506">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPT32.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPT32.dll</S>
+              <S N="BaseAddress">140719891480576</S>
+              <I32 N="ModuleMemorySize">1945600</I32>
+              <S N="EntryPointAddress">140719891804832</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName:     CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Crypto API32_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1900</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Crypto API32</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="507">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IPHLPAPI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\IPHLPAPI.DLL</S>
+              <S N="BaseAddress">140719876931584</S>
+              <I32 N="ModuleMemorySize">249856</I32>
+              <S N="EntryPointAddress">140719876989024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName:     iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  IP Helper API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">244</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">IP Helper API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="508">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMM.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMM.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMM.dll</S>
+              <S N="BaseAddress">140719835054080</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719835066368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName:     winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MCI API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MCI API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="509">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USERENV.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USERENV.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\USERENV.dll</S>
+              <S N="BaseAddress">140719887024128</S>
+              <I32 N="ModuleMemorySize">163840</I32>
+              <S N="EntryPointAddress">140719887043280</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName:     userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Userenv_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Userenv</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="510">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (profapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">profapi.dll</S>
+              <S N="FileName">C:\Windows\System32\profapi.dll</S>
+              <S N="BaseAddress">140719888531456</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719888564400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\profapi.dll_x000D__x000A_InternalName:     PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  User Profile Basic API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">User Profile Basic API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="511">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (DWrite.dll)</ToString>
+            <Props>
+              <S N="ModuleName">DWrite.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\DWrite.dll</S>
+              <S N="BaseAddress">140719303819264</S>
+              <I32 N="ModuleMemorySize">3129344</I32>
+              <S N="EntryPointAddress">140719304509728</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName:     DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft DirectX Typography Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3056</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft DirectX Typography Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="512">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINSPOOL.DRV)</ToString>
+            <Props>
+              <S N="ModuleName">WINSPOOL.DRV</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINSPOOL.DRV</S>
+              <S N="BaseAddress">140719787606016</S>
+              <I32 N="ModuleMemorySize">561152</I32>
+              <S N="EntryPointAddress">140719787676448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName:     winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Spooler Driver_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">548</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Spooler Driver</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="513">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (kernel.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">kernel.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\kernel.appcore.dll</S>
+              <S N="BaseAddress">140719888400384</S>
+              <I32 N="ModuleMemorySize">69632</I32>
+              <S N="EntryPointAddress">140719888415648</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName:     kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AppModel API Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">68</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AppModel API Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="514">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcrypt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcrypt.dll</S>
+              <S N="FileName">C:\Windows\System32\bcrypt.dll</S>
+              <S N="BaseAddress">140719897247744</S>
+              <I32 N="ModuleMemorySize">155648</I32>
+              <S N="EntryPointAddress">140719897281296</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName:     bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">152</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="515">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dbghelp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dbghelp.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dbghelp.dll</S>
+              <S N="BaseAddress">140719552397312</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">140719552479168</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName:     DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Image Helper_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Image Helper</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="516">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINHTTP.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINHTTP.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINHTTP.dll</S>
+              <S N="BaseAddress">140719810019328</S>
+              <I32 N="ModuleMemorySize">991232</I32>
+              <S N="EntryPointAddress">140719810293024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName:     winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows HTTP Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">968</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows HTTP Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="517">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Secur32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Secur32.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\Secur32.dll</S>
+              <S N="BaseAddress">140719559147520</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719559156816</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName:     secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="518">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">dhcpcsvc.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dhcpcsvc.DLL</S>
+              <S N="BaseAddress">140719782494208</S>
+              <I32 N="ModuleMemorySize">114688</I32>
+              <S N="EntryPointAddress">140719782503840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName:     dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  DHCP Client Service_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">112</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">DHCP Client Service</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="519">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (NSI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">NSI.dll</S>
+              <S N="FileName">C:\Windows\System32\NSI.dll</S>
+              <S N="BaseAddress">140719916843008</S>
+              <I32 N="ModuleMemorySize">32768</I32>
+              <S N="EntryPointAddress">140719916851008</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\NSI.dll_x000D__x000A_InternalName:     nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NSI User-mode interface DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">32</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NSI User-mode interface DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="520">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMMBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMMBASE.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMMBASE.dll</S>
+              <S N="BaseAddress">140719834857472</S>
+              <I32 N="ModuleMemorySize">184320</I32>
+              <S N="EntryPointAddress">140719834890448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName:     winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base Multimedia Extension API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">180</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base Multimedia Extension API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="521">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cfgmgr32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cfgmgr32.dll</S>
+              <S N="FileName">C:\Windows\System32\cfgmgr32.dll</S>
+              <S N="BaseAddress">140719889252352</S>
+              <I32 N="ModuleMemorySize">303104</I32>
+              <S N="EntryPointAddress">140719889325904</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName:     cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Configuration Manager DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">296</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Configuration Manager DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="522">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (PROPSYS.dll)</ToString>
+            <Props>
+              <S N="ModuleName">PROPSYS.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\PROPSYS.dll</S>
+              <S N="BaseAddress">140719831187456</S>
+              <I32 N="ModuleMemorySize">1736704</I32>
+              <S N="EntryPointAddress">140719831447408</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName:     propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion:      7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Property System_x000D__x000A_Product:          Windows® Search_x000D__x000A_ProductVersion:   7.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1696</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.1</S>
+              <S N="Description">Microsoft Property System</S>
+              <S N="Product">Windows® Search</S>
+            </MS>
+          </Obj>
+          <Obj RefId="523">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shcore.dll</S>
+              <S N="FileName">C:\Windows\System32\shcore.dll</S>
+              <S N="BaseAddress">140719907143680</S>
+              <I32 N="ModuleMemorySize">688128</I32>
+              <S N="EntryPointAddress">140719907388560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shcore.dll_x000D__x000A_InternalName:     SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  SHCORE_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">672</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">SHCORE</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="524">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SSPICLI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">SSPICLI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\SSPICLI.DLL</S>
+              <S N="BaseAddress">140719886827520</S>
+              <I32 N="ModuleMemorySize">192512</I32>
+              <S N="EntryPointAddress">140719886881776</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName:     sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">188</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="525">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IMM32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IMM32.DLL</S>
+              <S N="FileName">C:\Windows\System32\IMM32.DLL</S>
+              <S N="BaseAddress">140719906947072</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719906952688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName:     imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows IMM32 API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="526">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPTBASE.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\CRYPTBASE.DLL</S>
+              <S N="BaseAddress">140719881846784</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719881855488</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName:     cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base cryptographic API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base cryptographic API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">44</I32>
+          <Obj N="SyncRoot" RefId="527">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="483" />
+              <Ref RefId="484" />
+              <Ref RefId="485" />
+              <Ref RefId="486" />
+              <Ref RefId="487" />
+              <Ref RefId="488" />
+              <Ref RefId="489" />
+              <Ref RefId="490" />
+              <Ref RefId="491" />
+              <Ref RefId="492" />
+              <Ref RefId="493" />
+              <Ref RefId="494" />
+              <Ref RefId="495" />
+              <Ref RefId="496" />
+              <Ref RefId="497" />
+              <Ref RefId="498" />
+              <Ref RefId="499" />
+              <Ref RefId="500" />
+              <Ref RefId="501" />
+              <Ref RefId="502" />
+              <Ref RefId="503" />
+              <Ref RefId="504" />
+              <Ref RefId="505" />
+              <Ref RefId="506" />
+              <Ref RefId="507" />
+              <Ref RefId="508" />
+              <Ref RefId="509" />
+              <Ref RefId="510" />
+              <Ref RefId="511" />
+              <Ref RefId="512" />
+              <Ref RefId="513" />
+              <Ref RefId="514" />
+              <Ref RefId="515" />
+              <Ref RefId="516" />
+              <Ref RefId="517" />
+              <Ref RefId="518" />
+              <Ref RefId="519" />
+              <Ref RefId="520" />
+              <Ref RefId="521" />
+              <Ref RefId="522" />
+              <Ref RefId="523" />
+              <Ref RefId="524" />
+              <Ref RefId="525" />
+              <Ref RefId="526" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">30864</I64>
+      <I32 N="NonpagedSystemMemorySize">30864</I32>
+      <I64 N="PagedMemorySize64">54034432</I64>
+      <I32 N="PagedMemorySize">54034432</I32>
+      <I64 N="PagedSystemMemorySize64">345592</I64>
+      <I32 N="PagedSystemMemorySize">345592</I32>
+      <I64 N="PeakPagedMemorySize64">57327616</I64>
+      <I32 N="PeakPagedMemorySize">57327616</I32>
+      <I64 N="PeakWorkingSet64">62857216</I64>
+      <I32 N="PeakWorkingSet">62857216</I32>
+      <I64 N="PeakVirtualMemorySize64">2203778174976</I64>
+      <I32 N="PeakVirtualMemorySize">459952128</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="528">
+        <TNRef RefId="8" />
+        <ToString>Idle</ToString>
+        <I32>64</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">54034432</I64>
+      <I32 N="PrivateMemorySize">54034432</I32>
+      <S N="ProcessName">chrome</S>
+      <Obj N="ProcessorAffinity" RefId="529">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="530">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="531">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">5</I32>
+              <I32 N="Id">19404</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.703125S</TS>
+              <DT N="StartTime">2019-08-24T14:18:25.2320411+03:00</DT>
+              <TS N="TotalProcessorTime">PT13.359375S</TS>
+              <TS N="UserProcessorTime">PT12.65625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="532">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">23468</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:25.2871957+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="533">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">2</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">11960</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.015625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:25.2884299+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.015625S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="534">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">15104</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT2.0625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:25.2892063+03:00</DT>
+              <TS N="TotalProcessorTime">PT9.515625S</TS>
+              <TS N="UserProcessorTime">PT7.453125S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="535">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">16732</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:25.2897506+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="536">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">21176</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:25.2905892+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="537">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">5</I32>
+              <I32 N="Id">21136</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:25.2967609+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="538">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">3172</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:25.2979255+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="539">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">5</I32>
+              <I32 N="Id">14200</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:25.2985009+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="540">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">22588</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:25.2989314+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="541">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">13100</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:25.2992883+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="542">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">2</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">11312</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:25.2996254+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="543">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">23864</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:54:54.3150646+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">13</I32>
+          <Obj N="SyncRoot" RefId="544">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="531" />
+              <Ref RefId="532" />
+              <Ref RefId="533" />
+              <Ref RefId="534" />
+              <Ref RefId="535" />
+              <Ref RefId="536" />
+              <Ref RefId="537" />
+              <Ref RefId="538" />
+              <Ref RefId="539" />
+              <Ref RefId="540" />
+              <Ref RefId="541" />
+              <Ref RefId="542" />
+              <Ref RefId="543" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">252</I32>
+      <I64 N="VirtualMemorySize64">2203757715456</I64>
+      <I32 N="VirtualMemorySize">439492608</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">50520064</I64>
+      <I32 N="WorkingSet">50520064</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="545">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+        <Props>
+          <S N="ModuleName">chrome.exe</S>
+          <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="BaseAddress">140702356078592</S>
+          <I32 N="ModuleMemorySize">1732608</I32>
+          <S N="EntryPointAddress">140702357044720</S>
+          <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">1692</I32>
+          <S N="Company">Google LLC</S>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT3.984375S</TS>
+      <TS N="TotalProcessorTime">PT30.328125S</TS>
+      <TS N="UserProcessorTime">PT26.34375S</TS>
+      <Obj N="MainWindowHandle" RefId="546">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">chrome</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">252</I32>
+      <I64 N="VM">2203757715456</I64>
+      <I64 N="WS">50520064</I64>
+      <I64 N="PM">54034432</I64>
+      <I64 N="NPM">30864</I64>
+      <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+      <Obj N="Parent" RefId="547">
+        <TNRef RefId="0" />
+        <ToString>System.Diagnostics.Process (chrome)</ToString>
+        <Props>
+          <S N="SafeHandle">Microsoft.Win32.SafeHandles.SafeProcessHandle</S>
+          <S N="Handle">7716</S>
+          <I32 N="BasePriority">8</I32>
+          <B N="HasExited">false</B>
+          <DT N="StartTime">2019-08-24T14:18:00.3253674+03:00</DT>
+          <I32 N="Id">23804</I32>
+          <S N="MachineName">.</S>
+          <S N="MaxWorkingSet">1413120</S>
+          <S N="MinWorkingSet">204800</S>
+          <Obj N="Modules" RefId="548">
+            <TNRef RefId="6" />
+            <IE>
+              <S>System.Diagnostics.ProcessModule (chrome.exe)</S>
+              <S>System.Diagnostics.ProcessModule (ntdll.dll)</S>
+              <S>System.Diagnostics.ProcessModule (KERNEL32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (KERNELBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome_elf.dll)</S>
+              <S>System.Diagnostics.ProcessModule (VERSION.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ADVAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sechost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RPCRT4.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</S>
+              <S>System.Diagnostics.ProcessModule (user32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (win32u.dll)</S>
+              <S>System.Diagnostics.ProcessModule (GDI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdi32full.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ucrtbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IMM32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SHELL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cfgmgr32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (combase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (powrprof.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shlwapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (kernel.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptsp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome.dll)</S>
+              <S>System.Diagnostics.ProcessModule (uxtheme.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dwmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USERENV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gpapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wkscli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ole32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSCTF.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEAUT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Secur32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SSPICLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DWrite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WS2_32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (COMCTL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (clbcatq.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RMCLIENT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NLAapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NSI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc6.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DNSAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mscms.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ColorAdapterClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (icm32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TextInputFramework.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreUIComponents.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreMessaging.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d2d1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d3d11.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PROPSYS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wintypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntmarta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxgi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WTSAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlanapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINSTA.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemcomn.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MMDevApi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DEVOBJ.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemsvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINHTTP.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fastprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wmiutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FirewallAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fwbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (LINKINFO.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dataexchange.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dcomp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atlthunk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEACC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (directmanipulation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (explorerframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnapps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (XmlLite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mswsock.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMM.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMMBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WmiPerfInst.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pdh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BiWinrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NETAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SAMCLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SAMLIB.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wdmaud.drv)</S>
+              <S>System.Diagnostics.ProcessModule (ksuser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AVRT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AUDIOSES.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (msacm32.drv)</S>
+              <S>System.Diagnostics.ProcessModule (MSACM32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (midimap.dll)</S>
+              <S>System.Diagnostics.ProcessModule (resourcepolicyclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BitsProxy.dll)</S>
+            </IE>
+          </Obj>
+          <I64 N="NonpagedSystemMemorySize64">61568</I64>
+          <I32 N="NonpagedSystemMemorySize">61568</I32>
+          <I64 N="PagedMemorySize64">316080128</I64>
+          <I32 N="PagedMemorySize">316080128</I32>
+          <I64 N="PagedSystemMemorySize64">857648</I64>
+          <I32 N="PagedSystemMemorySize">857648</I32>
+          <I64 N="PeakPagedMemorySize64">455720960</I64>
+          <I32 N="PeakPagedMemorySize">455720960</I32>
+          <I64 N="PeakWorkingSet64">398323712</I64>
+          <I32 N="PeakWorkingSet">398323712</I32>
+          <I64 N="PeakVirtualMemorySize64">2204288917504</I64>
+          <I32 N="PeakVirtualMemorySize">970694656</I32>
+          <B N="PriorityBoostEnabled">true</B>
+          <S N="PriorityClass">Normal</S>
+          <I64 N="PrivateMemorySize64">316080128</I64>
+          <I32 N="PrivateMemorySize">316080128</I32>
+          <S N="ProcessName">chrome</S>
+          <S N="ProcessorAffinity">65535</S>
+          <I32 N="SessionId">1</I32>
+          <Obj N="Threads" RefId="549">
+            <TNRef RefId="1" />
+            <IE>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+            </IE>
+          </Obj>
+          <I32 N="HandleCount">1747</I32>
+          <I64 N="VirtualMemorySize64">2204143845376</I64>
+          <I32 N="VirtualMemorySize">825622528</I32>
+          <B N="EnableRaisingEvents">false</B>
+          <I64 N="WorkingSet64">112414720</I64>
+          <I32 N="WorkingSet">112414720</I32>
+          <Nil N="SynchronizingObject" />
+          <S N="MainModule">System.Diagnostics.ProcessModule (chrome.exe)</S>
+          <TS N="PrivilegedProcessorTime">PT11M7.53125S</TS>
+          <TS N="TotalProcessorTime">PT21M46.28125S</TS>
+          <TS N="UserProcessorTime">PT10M38.75S</TS>
+          <S N="MainWindowHandle">1770664</S>
+          <S N="MainWindowTitle">The Living Tombstone Radio - Now Playing on Pandora - Google Chrome</S>
+          <B N="Responding">true</B>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <S N="Name">chrome</S>
+          <I32 N="SI">1</I32>
+          <I32 N="Handles">1747</I32>
+          <I64 N="VM">2204143845376</I64>
+          <I64 N="WS">112414720</I64>
+          <I64 N="PM">316080128</I64>
+          <I64 N="NPM">61568</I64>
+          <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="Parent">System.Diagnostics.Process (explorer)</S>
+          <S N="Company">Google LLC</S>
+          <Db N="CPU">1306.28125</Db>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+          <S N="__NounName">Process</S>
+        </MS>
+      </Obj>
+      <S N="Company">Google LLC</S>
+      <Db N="CPU">30.328125</Db>
+      <S N="FileVersion">76.0.3809.100</S>
+      <S N="ProductVersion">76.0.3809.100</S>
+      <S N="Description">Google Chrome</S>
+      <S N="Product">Google Chrome</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="550">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (chrome)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="551">
+        <TNRef RefId="5" />
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="552">
+        <TNRef RefId="4" />
+        <ToString>7080</ToString>
+      </Obj>
+      <I32 N="BasePriority">8</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-24T14:18:01.0269646+03:00</DT>
+      <I32 N="Id">16452</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="553">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="554">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="555">
+        <TNRef RefId="6" />
+        <IE>
+          <Obj RefId="556">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+            <Props>
+              <S N="ModuleName">chrome.exe</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+              <S N="BaseAddress">140702356078592</S>
+              <I32 N="ModuleMemorySize">1732608</I32>
+              <S N="EntryPointAddress">140702357044720</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1692</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="557">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="558">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNEL32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">KERNEL32.DLL</S>
+              <S N="FileName">C:\Windows\System32\KERNEL32.DLL</S>
+              <S N="BaseAddress">140719912779776</S>
+              <I32 N="ModuleMemorySize">733184</I32>
+              <S N="EntryPointAddress">140719912876560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName:     kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">716</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="559">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNELBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">KERNELBASE.dll</S>
+              <S N="FileName">C:\Windows\System32\KERNELBASE.dll</S>
+              <S N="BaseAddress">140719894495232</S>
+              <I32 N="ModuleMemorySize">2699264</I32>
+              <S N="EntryPointAddress">140719894841456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName:     Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="560">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_elf.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_elf.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll</S>
+              <S N="BaseAddress">140719325642752</S>
+              <I32 N="ModuleMemorySize">925696</I32>
+              <S N="EntryPointAddress">140719326148464</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName:     chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">904</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="561">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (VERSION.dll)</ToString>
+            <Props>
+              <S N="ModuleName">VERSION.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\VERSION.dll</S>
+              <S N="BaseAddress">140719800254464</S>
+              <I32 N="ModuleMemorySize">40960</I32>
+              <S N="EntryPointAddress">140719800259344</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName:     version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Version Checking and File Installation Libraries_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">40</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Version Checking and File Installation Libraries</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="562">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcrt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcrt.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcrt.dll</S>
+              <S N="BaseAddress">140719950004224</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719950035120</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName:     msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion:      7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT CRT DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   7.0.17763.475_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.475 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.475</S>
+              <S N="Description">Windows NT CRT DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="563">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcryptPrimitives.dll</S>
+              <S N="FileName">C:\Windows\System32\bcryptPrimitives.dll</S>
+              <S N="BaseAddress">140719890235392</S>
+              <I32 N="ModuleMemorySize">516096</I32>
+              <S N="EntryPointAddress">140719890461152</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName:     bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">504</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="564">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ADVAPI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ADVAPI32.dll</S>
+              <S N="FileName">C:\Windows\System32\ADVAPI32.dll</S>
+              <S N="BaseAddress">140719915335680</S>
+              <I32 N="ModuleMemorySize">667648</I32>
+              <S N="EntryPointAddress">140719915417840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName:     advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Advanced Windows 32 Base API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">652</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Advanced Windows 32 Base API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="565">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sechost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sechost.dll</S>
+              <S N="FileName">C:\Windows\System32\sechost.dll</S>
+              <S N="BaseAddress">140719948824576</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719948951504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\sechost.dll_x000D__x000A_InternalName:     sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Host for SCM/SDDL/LSA Lookup APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="566">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RPCRT4.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RPCRT4.dll</S>
+              <S N="FileName">C:\Windows\System32\RPCRT4.dll</S>
+              <S N="BaseAddress">140719917629440</S>
+              <I32 N="ModuleMemorySize">1187840</I32>
+              <S N="EntryPointAddress">140719918006928</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName:     rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Procedure Call Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Procedure Call Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="567">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_child.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_child.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll</S>
+              <S N="BaseAddress">140717177962496</S>
+              <I32 N="ModuleMemorySize">87977984</I32>
+              <S N="EntryPointAddress">140717247440176</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName:     chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">85916</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="568">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OLEAUT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OLEAUT32.dll</S>
+              <S N="FileName">C:\Windows\System32\OLEAUT32.dll</S>
+              <S N="BaseAddress">140719946465280</S>
+              <I32 N="ModuleMemorySize">802816</I32>
+              <S N="EntryPointAddress">140719946574624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName:     OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OLEAUT32.DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">784</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">OLEAUT32.DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="569">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcp_win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcp_win.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcp_win.dll</S>
+              <S N="BaseAddress">140719889580032</S>
+              <I32 N="ModuleMemorySize">655360</I32>
+              <S N="EntryPointAddress">140719889658864</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName:     msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">640</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="570">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ucrtbase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ucrtbase.dll</S>
+              <S N="FileName">C:\Windows\System32\ucrtbase.dll</S>
+              <S N="BaseAddress">140719893446656</S>
+              <I32 N="ModuleMemorySize">1024000</I32>
+              <S N="EntryPointAddress">140719893528400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName:     ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1000</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="571">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (combase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">combase.dll</S>
+              <S N="FileName">C:\Windows\System32\combase.dll</S>
+              <S N="BaseAddress">140719950856192</S>
+              <I32 N="ModuleMemorySize">3325952</I32>
+              <S N="EntryPointAddress">140719951769888</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\combase.dll_x000D__x000A_InternalName:     COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft COM for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3248</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft COM for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="572">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WS2_32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WS2_32.dll</S>
+              <S N="FileName">C:\Windows\System32\WS2_32.dll</S>
+              <S N="BaseAddress">140719954198528</S>
+              <I32 N="ModuleMemorySize">446464</I32>
+              <S N="EntryPointAddress">140719954286384</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName:     ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">436</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Socket 2.0 32-Bit DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="573">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (GDI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">GDI32.dll</S>
+              <S N="FileName">C:\Windows\System32\GDI32.dll</S>
+              <S N="BaseAddress">140719950659584</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719950676208</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="574">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32full.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32full.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32full.dll</S>
+              <S N="BaseAddress">140719905112064</S>
+              <I32 N="ModuleMemorySize">1675264</I32>
+              <S N="EntryPointAddress">140719905369792</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="575">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USER32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USER32.dll</S>
+              <S N="FileName">C:\Windows\System32\USER32.dll</S>
+              <S N="BaseAddress">140719909306368</S>
+              <I32 N="ModuleMemorySize">1667072</I32>
+              <S N="EntryPointAddress">140719909414448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\USER32.dll_x000D__x000A_InternalName:     user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows USER API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows USER API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="576">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (win32u.dll)</ToString>
+            <Props>
+              <S N="ModuleName">win32u.dll</S>
+              <S N="FileName">C:\Windows\System32\win32u.dll</S>
+              <S N="BaseAddress">140719906816000</S>
+              <I32 N="ModuleMemorySize">131072</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\win32u.dll_x000D__x000A_InternalName:     Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32u_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">128</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32u</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="577">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINTRUST.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINTRUST.dll</S>
+              <S N="FileName">C:\Windows\System32\WINTRUST.dll</S>
+              <S N="BaseAddress">140719888728064</S>
+              <I32 N="ModuleMemorySize">364544</I32>
+              <S N="EntryPointAddress">140719888791376</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName:     WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Trust Verification APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">356</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft Trust Verification APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="578">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSASN1.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSASN1.dll</S>
+              <S N="FileName">C:\Windows\System32\MSASN1.dll</S>
+              <S N="BaseAddress">140719887876096</S>
+              <I32 N="ModuleMemorySize">73728</I32>
+              <S N="EntryPointAddress">140719887898576</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName:     msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  ASN.1 Runtime APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">72</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">ASN.1 Runtime APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="579">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPT32.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPT32.dll</S>
+              <S N="BaseAddress">140719891480576</S>
+              <I32 N="ModuleMemorySize">1945600</I32>
+              <S N="EntryPointAddress">140719891804832</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName:     CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Crypto API32_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1900</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Crypto API32</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="580">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IPHLPAPI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\IPHLPAPI.DLL</S>
+              <S N="BaseAddress">140719876931584</S>
+              <I32 N="ModuleMemorySize">249856</I32>
+              <S N="EntryPointAddress">140719876989024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName:     iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  IP Helper API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">244</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">IP Helper API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="581">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMM.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMM.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMM.dll</S>
+              <S N="BaseAddress">140719835054080</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719835066368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName:     winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MCI API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MCI API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="582">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USERENV.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USERENV.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\USERENV.dll</S>
+              <S N="BaseAddress">140719887024128</S>
+              <I32 N="ModuleMemorySize">163840</I32>
+              <S N="EntryPointAddress">140719887043280</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName:     userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Userenv_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Userenv</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="583">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (profapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">profapi.dll</S>
+              <S N="FileName">C:\Windows\System32\profapi.dll</S>
+              <S N="BaseAddress">140719888531456</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719888564400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\profapi.dll_x000D__x000A_InternalName:     PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  User Profile Basic API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">User Profile Basic API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="584">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (DWrite.dll)</ToString>
+            <Props>
+              <S N="ModuleName">DWrite.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\DWrite.dll</S>
+              <S N="BaseAddress">140719303819264</S>
+              <I32 N="ModuleMemorySize">3129344</I32>
+              <S N="EntryPointAddress">140719304509728</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName:     DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft DirectX Typography Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3056</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft DirectX Typography Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="585">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINSPOOL.DRV)</ToString>
+            <Props>
+              <S N="ModuleName">WINSPOOL.DRV</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINSPOOL.DRV</S>
+              <S N="BaseAddress">140719787606016</S>
+              <I32 N="ModuleMemorySize">561152</I32>
+              <S N="EntryPointAddress">140719787676448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName:     winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Spooler Driver_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">548</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Spooler Driver</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="586">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (kernel.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">kernel.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\kernel.appcore.dll</S>
+              <S N="BaseAddress">140719888400384</S>
+              <I32 N="ModuleMemorySize">69632</I32>
+              <S N="EntryPointAddress">140719888415648</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName:     kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AppModel API Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">68</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AppModel API Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="587">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcrypt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcrypt.dll</S>
+              <S N="FileName">C:\Windows\System32\bcrypt.dll</S>
+              <S N="BaseAddress">140719897247744</S>
+              <I32 N="ModuleMemorySize">155648</I32>
+              <S N="EntryPointAddress">140719897281296</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName:     bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">152</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="588">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dbghelp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dbghelp.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dbghelp.dll</S>
+              <S N="BaseAddress">140719552397312</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">140719552479168</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName:     DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Image Helper_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Image Helper</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="589">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINHTTP.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINHTTP.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINHTTP.dll</S>
+              <S N="BaseAddress">140719810019328</S>
+              <I32 N="ModuleMemorySize">991232</I32>
+              <S N="EntryPointAddress">140719810293024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName:     winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows HTTP Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">968</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows HTTP Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="590">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Secur32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Secur32.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\Secur32.dll</S>
+              <S N="BaseAddress">140719559147520</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719559156816</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName:     secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="591">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">dhcpcsvc.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dhcpcsvc.DLL</S>
+              <S N="BaseAddress">140719782494208</S>
+              <I32 N="ModuleMemorySize">114688</I32>
+              <S N="EntryPointAddress">140719782503840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName:     dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  DHCP Client Service_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">112</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">DHCP Client Service</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="592">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (NSI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">NSI.dll</S>
+              <S N="FileName">C:\Windows\System32\NSI.dll</S>
+              <S N="BaseAddress">140719916843008</S>
+              <I32 N="ModuleMemorySize">32768</I32>
+              <S N="EntryPointAddress">140719916851008</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\NSI.dll_x000D__x000A_InternalName:     nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NSI User-mode interface DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">32</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NSI User-mode interface DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="593">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMMBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMMBASE.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMMBASE.dll</S>
+              <S N="BaseAddress">140719834857472</S>
+              <I32 N="ModuleMemorySize">184320</I32>
+              <S N="EntryPointAddress">140719834890448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName:     winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base Multimedia Extension API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">180</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base Multimedia Extension API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="594">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cfgmgr32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cfgmgr32.dll</S>
+              <S N="FileName">C:\Windows\System32\cfgmgr32.dll</S>
+              <S N="BaseAddress">140719889252352</S>
+              <I32 N="ModuleMemorySize">303104</I32>
+              <S N="EntryPointAddress">140719889325904</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName:     cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Configuration Manager DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">296</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Configuration Manager DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="595">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (PROPSYS.dll)</ToString>
+            <Props>
+              <S N="ModuleName">PROPSYS.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\PROPSYS.dll</S>
+              <S N="BaseAddress">140719831187456</S>
+              <I32 N="ModuleMemorySize">1736704</I32>
+              <S N="EntryPointAddress">140719831447408</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName:     propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion:      7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Property System_x000D__x000A_Product:          Windows® Search_x000D__x000A_ProductVersion:   7.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1696</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.1</S>
+              <S N="Description">Microsoft Property System</S>
+              <S N="Product">Windows® Search</S>
+            </MS>
+          </Obj>
+          <Obj RefId="596">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shcore.dll</S>
+              <S N="FileName">C:\Windows\System32\shcore.dll</S>
+              <S N="BaseAddress">140719907143680</S>
+              <I32 N="ModuleMemorySize">688128</I32>
+              <S N="EntryPointAddress">140719907388560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shcore.dll_x000D__x000A_InternalName:     SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  SHCORE_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">672</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">SHCORE</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="597">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SSPICLI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">SSPICLI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\SSPICLI.DLL</S>
+              <S N="BaseAddress">140719886827520</S>
+              <I32 N="ModuleMemorySize">192512</I32>
+              <S N="EntryPointAddress">140719886881776</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName:     sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">188</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="598">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IMM32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IMM32.DLL</S>
+              <S N="FileName">C:\Windows\System32\IMM32.DLL</S>
+              <S N="BaseAddress">140719906947072</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719906952688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName:     imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows IMM32 API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="599">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPTBASE.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\CRYPTBASE.DLL</S>
+              <S N="BaseAddress">140719881846784</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719881855488</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName:     cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base cryptographic API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base cryptographic API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">44</I32>
+          <Obj N="SyncRoot" RefId="600">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="556" />
+              <Ref RefId="557" />
+              <Ref RefId="558" />
+              <Ref RefId="559" />
+              <Ref RefId="560" />
+              <Ref RefId="561" />
+              <Ref RefId="562" />
+              <Ref RefId="563" />
+              <Ref RefId="564" />
+              <Ref RefId="565" />
+              <Ref RefId="566" />
+              <Ref RefId="567" />
+              <Ref RefId="568" />
+              <Ref RefId="569" />
+              <Ref RefId="570" />
+              <Ref RefId="571" />
+              <Ref RefId="572" />
+              <Ref RefId="573" />
+              <Ref RefId="574" />
+              <Ref RefId="575" />
+              <Ref RefId="576" />
+              <Ref RefId="577" />
+              <Ref RefId="578" />
+              <Ref RefId="579" />
+              <Ref RefId="580" />
+              <Ref RefId="581" />
+              <Ref RefId="582" />
+              <Ref RefId="583" />
+              <Ref RefId="584" />
+              <Ref RefId="585" />
+              <Ref RefId="586" />
+              <Ref RefId="587" />
+              <Ref RefId="588" />
+              <Ref RefId="589" />
+              <Ref RefId="590" />
+              <Ref RefId="591" />
+              <Ref RefId="592" />
+              <Ref RefId="593" />
+              <Ref RefId="594" />
+              <Ref RefId="595" />
+              <Ref RefId="596" />
+              <Ref RefId="597" />
+              <Ref RefId="598" />
+              <Ref RefId="599" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">40248</I64>
+      <I32 N="NonpagedSystemMemorySize">40248</I32>
+      <I64 N="PagedMemorySize64">57729024</I64>
+      <I32 N="PagedMemorySize">57729024</I32>
+      <I64 N="PagedSystemMemorySize64">364304</I64>
+      <I32 N="PagedSystemMemorySize">364304</I32>
+      <I64 N="PeakPagedMemorySize64">65871872</I64>
+      <I32 N="PeakPagedMemorySize">65871872</I32>
+      <I64 N="PeakWorkingSet64">81608704</I64>
+      <I32 N="PeakWorkingSet">81608704</I32>
+      <I64 N="PeakVirtualMemorySize64">2203830345728</I64>
+      <I32 N="PeakVirtualMemorySize">512122880</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="601">
+        <TNRef RefId="8" />
+        <ToString>Normal</ToString>
+        <I32>32</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">57729024</I64>
+      <I32 N="PrivateMemorySize">57729024</I32>
+      <S N="ProcessName">chrome</S>
+      <Obj N="ProcessorAffinity" RefId="602">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="603">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="604">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">9092</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT1.734375S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0269665+03:00</DT>
+              <TS N="TotalProcessorTime">PT25.390625S</TS>
+              <TS N="UserProcessorTime">PT23.65625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="605">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">23060</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.1098393+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="606">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">23920</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.1121281+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="607">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">14128</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT3.234375S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.1133499+03:00</DT>
+              <TS N="TotalProcessorTime">PT10.640625S</TS>
+              <TS N="UserProcessorTime">PT7.40625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="608">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">14168</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.1143636+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="609">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">8156</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.1155671+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="610">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">11068</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.015625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.1252164+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.03125S</TS>
+              <TS N="UserProcessorTime">PT0.015625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="611">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">24048</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.1274934+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="612">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">6264</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.1287853+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="613">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">13592</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.1304862+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="614">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">18268</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.1316548+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="615">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">5552</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.1324836+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="616">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">19428</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:54:52.9737724+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="617">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">18148</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:56:43.10665+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="618">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">23088</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:56:43.1078534+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">15</I32>
+          <Obj N="SyncRoot" RefId="619">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="604" />
+              <Ref RefId="605" />
+              <Ref RefId="606" />
+              <Ref RefId="607" />
+              <Ref RefId="608" />
+              <Ref RefId="609" />
+              <Ref RefId="610" />
+              <Ref RefId="611" />
+              <Ref RefId="612" />
+              <Ref RefId="613" />
+              <Ref RefId="614" />
+              <Ref RefId="615" />
+              <Ref RefId="616" />
+              <Ref RefId="617" />
+              <Ref RefId="618" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">288</I32>
+      <I64 N="VirtualMemorySize64">2203804323840</I64>
+      <I32 N="VirtualMemorySize">486100992</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">60903424</I64>
+      <I32 N="WorkingSet">60903424</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="620">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+        <Props>
+          <S N="ModuleName">chrome.exe</S>
+          <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="BaseAddress">140702356078592</S>
+          <I32 N="ModuleMemorySize">1732608</I32>
+          <S N="EntryPointAddress">140702357044720</S>
+          <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">1692</I32>
+          <S N="Company">Google LLC</S>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT8.828125S</TS>
+      <TS N="TotalProcessorTime">PT52.671875S</TS>
+      <TS N="UserProcessorTime">PT43.84375S</TS>
+      <Obj N="MainWindowHandle" RefId="621">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">chrome</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">288</I32>
+      <I64 N="VM">2203804323840</I64>
+      <I64 N="WS">60903424</I64>
+      <I64 N="PM">57729024</I64>
+      <I64 N="NPM">40248</I64>
+      <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+      <Obj N="Parent" RefId="622">
+        <TNRef RefId="0" />
+        <ToString>System.Diagnostics.Process (chrome)</ToString>
+        <Props>
+          <S N="SafeHandle">Microsoft.Win32.SafeHandles.SafeProcessHandle</S>
+          <S N="Handle">7152</S>
+          <I32 N="BasePriority">8</I32>
+          <B N="HasExited">false</B>
+          <DT N="StartTime">2019-08-24T14:18:00.3253674+03:00</DT>
+          <I32 N="Id">23804</I32>
+          <S N="MachineName">.</S>
+          <S N="MaxWorkingSet">1413120</S>
+          <S N="MinWorkingSet">204800</S>
+          <Obj N="Modules" RefId="623">
+            <TNRef RefId="6" />
+            <IE>
+              <S>System.Diagnostics.ProcessModule (chrome.exe)</S>
+              <S>System.Diagnostics.ProcessModule (ntdll.dll)</S>
+              <S>System.Diagnostics.ProcessModule (KERNEL32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (KERNELBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome_elf.dll)</S>
+              <S>System.Diagnostics.ProcessModule (VERSION.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ADVAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sechost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RPCRT4.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</S>
+              <S>System.Diagnostics.ProcessModule (user32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (win32u.dll)</S>
+              <S>System.Diagnostics.ProcessModule (GDI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdi32full.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ucrtbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IMM32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SHELL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cfgmgr32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (combase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (powrprof.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shlwapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (kernel.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptsp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome.dll)</S>
+              <S>System.Diagnostics.ProcessModule (uxtheme.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dwmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USERENV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gpapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wkscli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ole32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSCTF.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEAUT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Secur32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SSPICLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DWrite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WS2_32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (COMCTL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (clbcatq.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RMCLIENT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NLAapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NSI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc6.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DNSAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mscms.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ColorAdapterClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (icm32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TextInputFramework.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreUIComponents.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreMessaging.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d2d1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d3d11.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PROPSYS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wintypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntmarta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxgi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WTSAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlanapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINSTA.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemcomn.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MMDevApi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DEVOBJ.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemsvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINHTTP.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fastprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wmiutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FirewallAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fwbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (LINKINFO.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dataexchange.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dcomp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atlthunk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEACC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (directmanipulation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (explorerframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnapps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (XmlLite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mswsock.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMM.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMMBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WmiPerfInst.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pdh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BiWinrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NETAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SAMCLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SAMLIB.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wdmaud.drv)</S>
+              <S>System.Diagnostics.ProcessModule (ksuser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AVRT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AUDIOSES.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (msacm32.drv)</S>
+              <S>System.Diagnostics.ProcessModule (MSACM32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (midimap.dll)</S>
+              <S>System.Diagnostics.ProcessModule (resourcepolicyclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BitsProxy.dll)</S>
+            </IE>
+          </Obj>
+          <I64 N="NonpagedSystemMemorySize64">61568</I64>
+          <I32 N="NonpagedSystemMemorySize">61568</I32>
+          <I64 N="PagedMemorySize64">316080128</I64>
+          <I32 N="PagedMemorySize">316080128</I32>
+          <I64 N="PagedSystemMemorySize64">857648</I64>
+          <I32 N="PagedSystemMemorySize">857648</I32>
+          <I64 N="PeakPagedMemorySize64">455720960</I64>
+          <I32 N="PeakPagedMemorySize">455720960</I32>
+          <I64 N="PeakWorkingSet64">398323712</I64>
+          <I32 N="PeakWorkingSet">398323712</I32>
+          <I64 N="PeakVirtualMemorySize64">2204288917504</I64>
+          <I32 N="PeakVirtualMemorySize">970694656</I32>
+          <B N="PriorityBoostEnabled">true</B>
+          <S N="PriorityClass">Normal</S>
+          <I64 N="PrivateMemorySize64">316080128</I64>
+          <I32 N="PrivateMemorySize">316080128</I32>
+          <S N="ProcessName">chrome</S>
+          <S N="ProcessorAffinity">65535</S>
+          <I32 N="SessionId">1</I32>
+          <Obj N="Threads" RefId="624">
+            <TNRef RefId="1" />
+            <IE>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+            </IE>
+          </Obj>
+          <I32 N="HandleCount">1747</I32>
+          <I64 N="VirtualMemorySize64">2204143845376</I64>
+          <I32 N="VirtualMemorySize">825622528</I32>
+          <B N="EnableRaisingEvents">false</B>
+          <I64 N="WorkingSet64">112414720</I64>
+          <I32 N="WorkingSet">112414720</I32>
+          <Nil N="SynchronizingObject" />
+          <S N="MainModule">System.Diagnostics.ProcessModule (chrome.exe)</S>
+          <TS N="PrivilegedProcessorTime">PT11M7.53125S</TS>
+          <TS N="TotalProcessorTime">PT21M46.28125S</TS>
+          <TS N="UserProcessorTime">PT10M38.75S</TS>
+          <S N="MainWindowHandle">1770664</S>
+          <S N="MainWindowTitle">The Living Tombstone Radio - Now Playing on Pandora - Google Chrome</S>
+          <B N="Responding">true</B>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <S N="Name">chrome</S>
+          <I32 N="SI">1</I32>
+          <I32 N="Handles">1747</I32>
+          <I64 N="VM">2204143845376</I64>
+          <I64 N="WS">112414720</I64>
+          <I64 N="PM">316080128</I64>
+          <I64 N="NPM">61568</I64>
+          <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="Parent">System.Diagnostics.Process (explorer)</S>
+          <S N="Company">Google LLC</S>
+          <Db N="CPU">1306.28125</Db>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+          <S N="__NounName">Process</S>
+        </MS>
+      </Obj>
+      <S N="Company">Google LLC</S>
+      <Db N="CPU">52.671875</Db>
+      <S N="FileVersion">76.0.3809.100</S>
+      <S N="ProductVersion">76.0.3809.100</S>
+      <S N="Description">Google Chrome</S>
+      <S N="Product">Google Chrome</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="625">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (chrome)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="626">
+        <TNRef RefId="5" />
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="627">
+        <TNRef RefId="4" />
+        <ToString>6676</ToString>
+      </Obj>
+      <I32 N="BasePriority">8</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-24T14:18:00.6284219+03:00</DT>
+      <I32 N="Id">16692</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="628">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="629">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="630">
+        <TNRef RefId="6" />
+        <IE>
+          <Obj RefId="631">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+            <Props>
+              <S N="ModuleName">chrome.exe</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+              <S N="BaseAddress">140702356078592</S>
+              <I32 N="ModuleMemorySize">1732608</I32>
+              <S N="EntryPointAddress">140702357044720</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1692</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="632">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="633">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNEL32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">KERNEL32.DLL</S>
+              <S N="FileName">C:\Windows\System32\KERNEL32.DLL</S>
+              <S N="BaseAddress">140719912779776</S>
+              <I32 N="ModuleMemorySize">733184</I32>
+              <S N="EntryPointAddress">140719912876560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName:     kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">716</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="634">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNELBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">KERNELBASE.dll</S>
+              <S N="FileName">C:\Windows\System32\KERNELBASE.dll</S>
+              <S N="BaseAddress">140719894495232</S>
+              <I32 N="ModuleMemorySize">2699264</I32>
+              <S N="EntryPointAddress">140719894841456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName:     Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="635">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_elf.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_elf.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll</S>
+              <S N="BaseAddress">140719325642752</S>
+              <I32 N="ModuleMemorySize">925696</I32>
+              <S N="EntryPointAddress">140719326148464</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName:     chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">904</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="636">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (VERSION.dll)</ToString>
+            <Props>
+              <S N="ModuleName">VERSION.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\VERSION.dll</S>
+              <S N="BaseAddress">140719800254464</S>
+              <I32 N="ModuleMemorySize">40960</I32>
+              <S N="EntryPointAddress">140719800259344</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName:     version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Version Checking and File Installation Libraries_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">40</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Version Checking and File Installation Libraries</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="637">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcrt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcrt.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcrt.dll</S>
+              <S N="BaseAddress">140719950004224</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719950035120</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName:     msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion:      7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT CRT DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   7.0.17763.475_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.475 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.475</S>
+              <S N="Description">Windows NT CRT DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="638">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcryptPrimitives.dll</S>
+              <S N="FileName">C:\Windows\System32\bcryptPrimitives.dll</S>
+              <S N="BaseAddress">140719890235392</S>
+              <I32 N="ModuleMemorySize">516096</I32>
+              <S N="EntryPointAddress">140719890461152</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName:     bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">504</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="639">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ADVAPI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ADVAPI32.dll</S>
+              <S N="FileName">C:\Windows\System32\ADVAPI32.dll</S>
+              <S N="BaseAddress">140719915335680</S>
+              <I32 N="ModuleMemorySize">667648</I32>
+              <S N="EntryPointAddress">140719915417840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName:     advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Advanced Windows 32 Base API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">652</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Advanced Windows 32 Base API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="640">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sechost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sechost.dll</S>
+              <S N="FileName">C:\Windows\System32\sechost.dll</S>
+              <S N="BaseAddress">140719948824576</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719948951504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\sechost.dll_x000D__x000A_InternalName:     sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Host for SCM/SDDL/LSA Lookup APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="641">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RPCRT4.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RPCRT4.dll</S>
+              <S N="FileName">C:\Windows\System32\RPCRT4.dll</S>
+              <S N="BaseAddress">140719917629440</S>
+              <I32 N="ModuleMemorySize">1187840</I32>
+              <S N="EntryPointAddress">140719918006928</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName:     rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Procedure Call Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Procedure Call Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="642">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (user32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">user32.dll</S>
+              <S N="FileName">C:\Windows\System32\user32.dll</S>
+              <S N="BaseAddress">140719909306368</S>
+              <I32 N="ModuleMemorySize">1667072</I32>
+              <S N="EntryPointAddress">140719909414448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\user32.dll_x000D__x000A_InternalName:     user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows USER API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows USER API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="643">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (win32u.dll)</ToString>
+            <Props>
+              <S N="ModuleName">win32u.dll</S>
+              <S N="FileName">C:\Windows\System32\win32u.dll</S>
+              <S N="BaseAddress">140719906816000</S>
+              <I32 N="ModuleMemorySize">131072</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\win32u.dll_x000D__x000A_InternalName:     Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32u_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">128</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32u</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="644">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (GDI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">GDI32.dll</S>
+              <S N="FileName">C:\Windows\System32\GDI32.dll</S>
+              <S N="BaseAddress">140719950659584</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719950676208</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="645">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32full.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32full.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32full.dll</S>
+              <S N="BaseAddress">140719905112064</S>
+              <I32 N="ModuleMemorySize">1675264</I32>
+              <S N="EntryPointAddress">140719905369792</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="646">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcp_win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcp_win.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcp_win.dll</S>
+              <S N="BaseAddress">140719889580032</S>
+              <I32 N="ModuleMemorySize">655360</I32>
+              <S N="EntryPointAddress">140719889658864</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName:     msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">640</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="647">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ucrtbase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ucrtbase.dll</S>
+              <S N="FileName">C:\Windows\System32\ucrtbase.dll</S>
+              <S N="BaseAddress">140719893446656</S>
+              <I32 N="ModuleMemorySize">1024000</I32>
+              <S N="EntryPointAddress">140719893528400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName:     ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1000</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="648">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IMM32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IMM32.DLL</S>
+              <S N="FileName">C:\Windows\System32\IMM32.DLL</S>
+              <S N="BaseAddress">140719906947072</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719906952688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName:     imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows IMM32 API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="649">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_child.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_child.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll</S>
+              <S N="BaseAddress">140717177962496</S>
+              <I32 N="ModuleMemorySize">87977984</I32>
+              <S N="EntryPointAddress">140717247440176</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName:     chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">85916</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="650">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OLEAUT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OLEAUT32.dll</S>
+              <S N="FileName">C:\Windows\System32\OLEAUT32.dll</S>
+              <S N="BaseAddress">140719946465280</S>
+              <I32 N="ModuleMemorySize">802816</I32>
+              <S N="EntryPointAddress">140719946574624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName:     OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OLEAUT32.DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">784</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">OLEAUT32.DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="651">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (combase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">combase.dll</S>
+              <S N="FileName">C:\Windows\System32\combase.dll</S>
+              <S N="BaseAddress">140719950856192</S>
+              <I32 N="ModuleMemorySize">3325952</I32>
+              <S N="EntryPointAddress">140719951769888</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\combase.dll_x000D__x000A_InternalName:     COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft COM for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3248</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft COM for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="652">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WS2_32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WS2_32.dll</S>
+              <S N="FileName">C:\Windows\System32\WS2_32.dll</S>
+              <S N="BaseAddress">140719954198528</S>
+              <I32 N="ModuleMemorySize">446464</I32>
+              <S N="EntryPointAddress">140719954286384</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName:     ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">436</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Socket 2.0 32-Bit DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="653">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINTRUST.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINTRUST.dll</S>
+              <S N="FileName">C:\Windows\System32\WINTRUST.dll</S>
+              <S N="BaseAddress">140719888728064</S>
+              <I32 N="ModuleMemorySize">364544</I32>
+              <S N="EntryPointAddress">140719888791376</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName:     WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Trust Verification APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">356</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft Trust Verification APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="654">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSASN1.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSASN1.dll</S>
+              <S N="FileName">C:\Windows\System32\MSASN1.dll</S>
+              <S N="BaseAddress">140719887876096</S>
+              <I32 N="ModuleMemorySize">73728</I32>
+              <S N="EntryPointAddress">140719887898576</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName:     msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  ASN.1 Runtime APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">72</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">ASN.1 Runtime APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="655">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPT32.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPT32.dll</S>
+              <S N="BaseAddress">140719891480576</S>
+              <I32 N="ModuleMemorySize">1945600</I32>
+              <S N="EntryPointAddress">140719891804832</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName:     CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Crypto API32_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1900</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Crypto API32</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="656">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IPHLPAPI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\IPHLPAPI.DLL</S>
+              <S N="BaseAddress">140719876931584</S>
+              <I32 N="ModuleMemorySize">249856</I32>
+              <S N="EntryPointAddress">140719876989024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName:     iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  IP Helper API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">244</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">IP Helper API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="657">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMM.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMM.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMM.dll</S>
+              <S N="BaseAddress">140719835054080</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719835066368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName:     winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MCI API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MCI API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="658">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USERENV.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USERENV.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\USERENV.dll</S>
+              <S N="BaseAddress">140719887024128</S>
+              <I32 N="ModuleMemorySize">163840</I32>
+              <S N="EntryPointAddress">140719887043280</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName:     userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Userenv_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Userenv</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="659">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (profapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">profapi.dll</S>
+              <S N="FileName">C:\Windows\System32\profapi.dll</S>
+              <S N="BaseAddress">140719888531456</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719888564400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\profapi.dll_x000D__x000A_InternalName:     PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  User Profile Basic API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">User Profile Basic API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="660">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (DWrite.dll)</ToString>
+            <Props>
+              <S N="ModuleName">DWrite.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\DWrite.dll</S>
+              <S N="BaseAddress">140719303819264</S>
+              <I32 N="ModuleMemorySize">3129344</I32>
+              <S N="EntryPointAddress">140719304509728</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName:     DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft DirectX Typography Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3056</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft DirectX Typography Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="661">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINSPOOL.DRV)</ToString>
+            <Props>
+              <S N="ModuleName">WINSPOOL.DRV</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINSPOOL.DRV</S>
+              <S N="BaseAddress">140719787606016</S>
+              <I32 N="ModuleMemorySize">561152</I32>
+              <S N="EntryPointAddress">140719787676448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName:     winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Spooler Driver_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">548</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Spooler Driver</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="662">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (kernel.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">kernel.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\kernel.appcore.dll</S>
+              <S N="BaseAddress">140719888400384</S>
+              <I32 N="ModuleMemorySize">69632</I32>
+              <S N="EntryPointAddress">140719888415648</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName:     kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AppModel API Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">68</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AppModel API Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="663">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcrypt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcrypt.dll</S>
+              <S N="FileName">C:\Windows\System32\bcrypt.dll</S>
+              <S N="BaseAddress">140719897247744</S>
+              <I32 N="ModuleMemorySize">155648</I32>
+              <S N="EntryPointAddress">140719897281296</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName:     bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">152</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="664">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dbghelp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dbghelp.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dbghelp.dll</S>
+              <S N="BaseAddress">140719552397312</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">140719552479168</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName:     DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Image Helper_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Image Helper</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="665">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINHTTP.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINHTTP.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINHTTP.dll</S>
+              <S N="BaseAddress">140719810019328</S>
+              <I32 N="ModuleMemorySize">991232</I32>
+              <S N="EntryPointAddress">140719810293024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName:     winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows HTTP Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">968</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows HTTP Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="666">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Secur32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Secur32.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\Secur32.dll</S>
+              <S N="BaseAddress">140719559147520</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719559156816</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName:     secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="667">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">dhcpcsvc.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dhcpcsvc.DLL</S>
+              <S N="BaseAddress">140719782494208</S>
+              <I32 N="ModuleMemorySize">114688</I32>
+              <S N="EntryPointAddress">140719782503840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName:     dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  DHCP Client Service_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">112</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">DHCP Client Service</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="668">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (NSI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">NSI.dll</S>
+              <S N="FileName">C:\Windows\System32\NSI.dll</S>
+              <S N="BaseAddress">140719916843008</S>
+              <I32 N="ModuleMemorySize">32768</I32>
+              <S N="EntryPointAddress">140719916851008</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\NSI.dll_x000D__x000A_InternalName:     nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NSI User-mode interface DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">32</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NSI User-mode interface DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="669">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMMBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMMBASE.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMMBASE.dll</S>
+              <S N="BaseAddress">140719834857472</S>
+              <I32 N="ModuleMemorySize">184320</I32>
+              <S N="EntryPointAddress">140719834890448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName:     winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base Multimedia Extension API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">180</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base Multimedia Extension API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="670">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cfgmgr32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cfgmgr32.dll</S>
+              <S N="FileName">C:\Windows\System32\cfgmgr32.dll</S>
+              <S N="BaseAddress">140719889252352</S>
+              <I32 N="ModuleMemorySize">303104</I32>
+              <S N="EntryPointAddress">140719889325904</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName:     cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Configuration Manager DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">296</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Configuration Manager DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="671">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (PROPSYS.dll)</ToString>
+            <Props>
+              <S N="ModuleName">PROPSYS.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\PROPSYS.dll</S>
+              <S N="BaseAddress">140719831187456</S>
+              <I32 N="ModuleMemorySize">1736704</I32>
+              <S N="EntryPointAddress">140719831447408</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName:     propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion:      7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Property System_x000D__x000A_Product:          Windows® Search_x000D__x000A_ProductVersion:   7.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1696</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.1</S>
+              <S N="Description">Microsoft Property System</S>
+              <S N="Product">Windows® Search</S>
+            </MS>
+          </Obj>
+          <Obj RefId="672">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shcore.dll</S>
+              <S N="FileName">C:\Windows\System32\shcore.dll</S>
+              <S N="BaseAddress">140719907143680</S>
+              <I32 N="ModuleMemorySize">688128</I32>
+              <S N="EntryPointAddress">140719907388560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shcore.dll_x000D__x000A_InternalName:     SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  SHCORE_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">672</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">SHCORE</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="673">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SSPICLI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">SSPICLI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\SSPICLI.DLL</S>
+              <S N="BaseAddress">140719886827520</S>
+              <I32 N="ModuleMemorySize">192512</I32>
+              <S N="EntryPointAddress">140719886881776</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName:     sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">188</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="674">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPTBASE.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\CRYPTBASE.DLL</S>
+              <S N="BaseAddress">140719881846784</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719881855488</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName:     cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base cryptographic API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base cryptographic API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="675">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (NLAapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">NLAapi.dll</S>
+              <S N="FileName">C:\Windows\system32\NLAapi.dll</S>
+              <S N="BaseAddress">140719828631552</S>
+              <I32 N="ModuleMemorySize">110592</I32>
+              <S N="EntryPointAddress">140719828656896</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\NLAapi.dll_x000D__x000A_InternalName:     nlaapi.dll_x000D__x000A_OriginalFilename: nlaapi.dll_x000D__x000A_FileVersion:      10.0.17763.134 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Network Location Awareness 2_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.134_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">108</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.134 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.134</S>
+              <S N="Description">Network Location Awareness 2</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="676">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dhcpcsvc6.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">dhcpcsvc6.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dhcpcsvc6.DLL</S>
+              <S N="BaseAddress">140719782232064</S>
+              <I32 N="ModuleMemorySize">90112</I32>
+              <S N="EntryPointAddress">140719782238752</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dhcpcsvc6.DLL_x000D__x000A_InternalName:     dhcpcsvc6.dll_x000D__x000A_OriginalFilename: dhcpcsvc6.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  DHCPv6 Client_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">88</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">DHCPv6 Client</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="677">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (DNSAPI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">DNSAPI.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\DNSAPI.dll</S>
+              <S N="BaseAddress">140719877193728</S>
+              <I32 N="ModuleMemorySize">811008</I32>
+              <S N="EntryPointAddress">140719877369872</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\DNSAPI.dll_x000D__x000A_InternalName:     dnsapi_x000D__x000A_OriginalFilename: dnsapi_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  DNS Client API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">792</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">DNS Client API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="678">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (DPAPI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">DPAPI.dll</S>
+              <S N="FileName">C:\Windows\System32\DPAPI.dll</S>
+              <S N="BaseAddress">140719875096576</S>
+              <I32 N="ModuleMemorySize">40960</I32>
+              <S N="EntryPointAddress">140719875102688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\DPAPI.dll_x000D__x000A_InternalName:     dpapi.dll_x000D__x000A_OriginalFilename: dpapi.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Data Protection API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">40</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Data Protection API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="679">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (mswsock.dll)</ToString>
+            <Props>
+              <S N="ModuleName">mswsock.dll</S>
+              <S N="FileName">C:\Windows\system32\mswsock.dll</S>
+              <S N="BaseAddress">140719879946240</S>
+              <I32 N="ModuleMemorySize">421888</I32>
+              <S N="EntryPointAddress">140719880017168</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\mswsock.dll_x000D__x000A_InternalName:     mswsock.dll_x000D__x000A_OriginalFilename: mswsock.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Windows Sockets 2.0 Service Provider_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">412</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft Windows Sockets 2.0 Service Provider</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="680">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (rasadhlp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">rasadhlp.dll</S>
+              <S N="FileName">C:\Windows\System32\rasadhlp.dll</S>
+              <S N="BaseAddress">140719719251968</S>
+              <I32 N="ModuleMemorySize">40960</I32>
+              <S N="EntryPointAddress">140719719257232</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\rasadhlp.dll_x000D__x000A_InternalName:     rasadhlp.dll_x000D__x000A_OriginalFilename: rasadhlp.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Access AutoDial Helper_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">40</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Access AutoDial Helper</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="681">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (fwpuclnt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">fwpuclnt.dll</S>
+              <S N="FileName">C:\Windows\System32\fwpuclnt.dll</S>
+              <S N="BaseAddress">140719712108544</S>
+              <I32 N="ModuleMemorySize">495616</I32>
+              <S N="EntryPointAddress">140719712131680</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\fwpuclnt.dll_x000D__x000A_InternalName:     fwpuclnt.dll_x000D__x000A_OriginalFilename: fwpuclnt.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  FWP/IPsec User-Mode API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">484</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">FWP/IPsec User-Mode API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="682">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPTSP.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPTSP.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPTSP.dll</S>
+              <S N="BaseAddress">140719889121280</S>
+              <I32 N="ModuleMemorySize">94208</I32>
+              <S N="EntryPointAddress">140719889138512</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPTSP.dll_x000D__x000A_InternalName:     cryptsp.dll_x000D__x000A_OriginalFilename: cryptsp.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Cryptographic Service Provider API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">92</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Cryptographic Service Provider API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="683">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (rsaenh.dll)</ToString>
+            <Props>
+              <S N="ModuleName">rsaenh.dll</S>
+              <S N="FileName">C:\Windows\system32\rsaenh.dll</S>
+              <S N="BaseAddress">140719874834432</S>
+              <I32 N="ModuleMemorySize">208896</I32>
+              <S N="EntryPointAddress">140719874861552</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\rsaenh.dll_x000D__x000A_InternalName:     rsaenh.dll_x000D__x000A_OriginalFilename: rsaenh.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Enhanced Cryptographic Provider_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">204</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft Enhanced Cryptographic Provider</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="684">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gpapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gpapi.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\gpapi.dll</S>
+              <S N="BaseAddress">140719867625472</S>
+              <I32 N="ModuleMemorySize">139264</I32>
+              <S N="EntryPointAddress">140719867637568</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\gpapi.dll_x000D__x000A_InternalName:     gpapi.dll_x000D__x000A_OriginalFilename: gpapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Group Policy Client API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">136</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Group Policy Client API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="685">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cryptnet.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cryptnet.dll</S>
+              <S N="FileName">C:\Windows\System32\cryptnet.dll</S>
+              <S N="BaseAddress">140719710535680</S>
+              <I32 N="ModuleMemorySize">192512</I32>
+              <S N="EntryPointAddress">140719710590816</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cryptnet.dll_x000D__x000A_InternalName:     CRYPTNET.DLL_x000D__x000A_OriginalFilename: CRYPTNET.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Crypto Network Related API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">188</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Crypto Network Related API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="686">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINNSI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">WINNSI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINNSI.DLL</S>
+              <S N="BaseAddress">140719785443328</S>
+              <I32 N="ModuleMemorySize">45056</I32>
+              <S N="EntryPointAddress">140719785450976</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINNSI.DLL_x000D__x000A_InternalName:     winnsi.dll_x000D__x000A_OriginalFilename: winnsi.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Network Store Information RPC interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">44</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Network Store Information RPC interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="687">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (webio.dll)</ToString>
+            <Props>
+              <S N="ModuleName">webio.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\webio.dll</S>
+              <S N="BaseAddress">140719648210944</S>
+              <I32 N="ModuleMemorySize">618496</I32>
+              <S N="EntryPointAddress">140719648411376</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\webio.dll_x000D__x000A_InternalName:     webio.dll_x000D__x000A_OriginalFilename: webio.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Web Transfer Protocols API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">604</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Web Transfer Protocols API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="688">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntmarta.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntmarta.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntmarta.dll</S>
+              <S N="BaseAddress">140719871557632</S>
+              <I32 N="ModuleMemorySize">200704</I32>
+              <S N="EntryPointAddress">140719871586448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntmarta.dll_x000D__x000A_InternalName:     ntmarta.dll_x000D__x000A_OriginalFilename: ntmarta.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT MARTA provider_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">196</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows NT MARTA provider</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">58</I32>
+          <Obj N="SyncRoot" RefId="689">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="631" />
+              <Ref RefId="632" />
+              <Ref RefId="633" />
+              <Ref RefId="634" />
+              <Ref RefId="635" />
+              <Ref RefId="636" />
+              <Ref RefId="637" />
+              <Ref RefId="638" />
+              <Ref RefId="639" />
+              <Ref RefId="640" />
+              <Ref RefId="641" />
+              <Ref RefId="642" />
+              <Ref RefId="643" />
+              <Ref RefId="644" />
+              <Ref RefId="645" />
+              <Ref RefId="646" />
+              <Ref RefId="647" />
+              <Ref RefId="648" />
+              <Ref RefId="649" />
+              <Ref RefId="650" />
+              <Ref RefId="651" />
+              <Ref RefId="652" />
+              <Ref RefId="653" />
+              <Ref RefId="654" />
+              <Ref RefId="655" />
+              <Ref RefId="656" />
+              <Ref RefId="657" />
+              <Ref RefId="658" />
+              <Ref RefId="659" />
+              <Ref RefId="660" />
+              <Ref RefId="661" />
+              <Ref RefId="662" />
+              <Ref RefId="663" />
+              <Ref RefId="664" />
+              <Ref RefId="665" />
+              <Ref RefId="666" />
+              <Ref RefId="667" />
+              <Ref RefId="668" />
+              <Ref RefId="669" />
+              <Ref RefId="670" />
+              <Ref RefId="671" />
+              <Ref RefId="672" />
+              <Ref RefId="673" />
+              <Ref RefId="674" />
+              <Ref RefId="675" />
+              <Ref RefId="676" />
+              <Ref RefId="677" />
+              <Ref RefId="678" />
+              <Ref RefId="679" />
+              <Ref RefId="680" />
+              <Ref RefId="681" />
+              <Ref RefId="682" />
+              <Ref RefId="683" />
+              <Ref RefId="684" />
+              <Ref RefId="685" />
+              <Ref RefId="686" />
+              <Ref RefId="687" />
+              <Ref RefId="688" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">21832</I64>
+      <I32 N="NonpagedSystemMemorySize">21832</I32>
+      <I64 N="PagedMemorySize64">19230720</I64>
+      <I32 N="PagedMemorySize">19230720</I32>
+      <I64 N="PagedSystemMemorySize64">400912</I64>
+      <I32 N="PagedSystemMemorySize">400912</I32>
+      <I64 N="PeakPagedMemorySize64">20287488</I64>
+      <I32 N="PeakPagedMemorySize">20287488</I32>
+      <I64 N="PeakWorkingSet64">36925440</I64>
+      <I32 N="PeakWorkingSet">36925440</I32>
+      <I64 N="PeakVirtualMemorySize64">2203612741632</I64>
+      <I32 N="PeakVirtualMemorySize">294518784</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="690">
+        <TNRef RefId="8" />
+        <ToString>Normal</ToString>
+        <I32>32</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">19230720</I64>
+      <I32 N="PrivateMemorySize">19230720</I32>
+      <S N="ProcessName">chrome</S>
+      <Obj N="ProcessorAffinity" RefId="691">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="692">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="693">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">18052</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.046875S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.6284233+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.046875S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="694">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">9052</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.712493+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="695">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">20416</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.7153672+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.015625S</TS>
+              <TS N="UserProcessorTime">PT0.015625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="696">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">12108</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">0</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT13.0625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.7210044+03:00</DT>
+              <TS N="TotalProcessorTime">PT52.546875S</TS>
+              <TS N="UserProcessorTime">PT39.484375S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="697">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">12532</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0.578125S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.7213994+03:00</DT>
+              <TS N="TotalProcessorTime">PT1.03125S</TS>
+              <TS N="UserProcessorTime">PT0.453125S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="698">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">4884</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT9.140625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.7515381+03:00</DT>
+              <TS N="TotalProcessorTime">PT9.359375S</TS>
+              <TS N="UserProcessorTime">PT0.21875S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="699">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">22456</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT1.734375S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.8723273+03:00</DT>
+              <TS N="TotalProcessorTime">PT2.328125S</TS>
+              <TS N="UserProcessorTime">PT0.59375S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="700">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">9</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">6416</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">AboveNormal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0.03125S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.1201511+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.03125S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="701">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">16320</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">0</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.5625S</TS>
+              <DT N="StartTime">2019-08-26T23:57:28.7558393+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.609375S</TS>
+              <TS N="UserProcessorTime">PT0.046875S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="702">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">7316</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">0</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.40625S</TS>
+              <DT N="StartTime">2019-08-27T01:30:25.4929337+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.40625S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="703">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">20892</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:28:14.3175541+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="704">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">19600</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:48:14.3176602+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">12</I32>
+          <Obj N="SyncRoot" RefId="705">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="693" />
+              <Ref RefId="694" />
+              <Ref RefId="695" />
+              <Ref RefId="696" />
+              <Ref RefId="697" />
+              <Ref RefId="698" />
+              <Ref RefId="699" />
+              <Ref RefId="700" />
+              <Ref RefId="701" />
+              <Ref RefId="702" />
+              <Ref RefId="703" />
+              <Ref RefId="704" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">420</I32>
+      <I64 N="VirtualMemorySize64">2203588632576</I64>
+      <I32 N="VirtualMemorySize">270409728</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">28524544</I64>
+      <I32 N="WorkingSet">28524544</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="706">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+        <Props>
+          <S N="ModuleName">chrome.exe</S>
+          <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="BaseAddress">140702356078592</S>
+          <I32 N="ModuleMemorySize">1732608</I32>
+          <S N="EntryPointAddress">140702357044720</S>
+          <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">1692</I32>
+          <S N="Company">Google LLC</S>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT50.09375S</TS>
+      <TS N="TotalProcessorTime">PT1M33.15625S</TS>
+      <TS N="UserProcessorTime">PT43.0625S</TS>
+      <Obj N="MainWindowHandle" RefId="707">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">chrome</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">420</I32>
+      <I64 N="VM">2203588632576</I64>
+      <I64 N="WS">28524544</I64>
+      <I64 N="PM">19230720</I64>
+      <I64 N="NPM">21832</I64>
+      <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+      <Obj N="Parent" RefId="708">
+        <TNRef RefId="0" />
+        <ToString>System.Diagnostics.Process (chrome)</ToString>
+        <Props>
+          <S N="SafeHandle">Microsoft.Win32.SafeHandles.SafeProcessHandle</S>
+          <S N="Handle">804</S>
+          <I32 N="BasePriority">8</I32>
+          <B N="HasExited">false</B>
+          <DT N="StartTime">2019-08-24T14:18:00.3253674+03:00</DT>
+          <I32 N="Id">23804</I32>
+          <S N="MachineName">.</S>
+          <S N="MaxWorkingSet">1413120</S>
+          <S N="MinWorkingSet">204800</S>
+          <Obj N="Modules" RefId="709">
+            <TNRef RefId="6" />
+            <IE>
+              <S>System.Diagnostics.ProcessModule (chrome.exe)</S>
+              <S>System.Diagnostics.ProcessModule (ntdll.dll)</S>
+              <S>System.Diagnostics.ProcessModule (KERNEL32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (KERNELBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome_elf.dll)</S>
+              <S>System.Diagnostics.ProcessModule (VERSION.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ADVAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sechost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RPCRT4.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</S>
+              <S>System.Diagnostics.ProcessModule (user32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (win32u.dll)</S>
+              <S>System.Diagnostics.ProcessModule (GDI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdi32full.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ucrtbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IMM32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SHELL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cfgmgr32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (combase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (powrprof.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shlwapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (kernel.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptsp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome.dll)</S>
+              <S>System.Diagnostics.ProcessModule (uxtheme.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dwmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USERENV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gpapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wkscli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ole32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSCTF.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEAUT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Secur32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SSPICLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DWrite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WS2_32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (COMCTL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (clbcatq.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RMCLIENT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NLAapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NSI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc6.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DNSAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mscms.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ColorAdapterClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (icm32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TextInputFramework.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreUIComponents.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreMessaging.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d2d1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d3d11.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PROPSYS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wintypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntmarta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxgi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WTSAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlanapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINSTA.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemcomn.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MMDevApi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DEVOBJ.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemsvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINHTTP.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fastprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wmiutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FirewallAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fwbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (LINKINFO.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dataexchange.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dcomp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atlthunk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEACC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (directmanipulation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (explorerframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnapps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (XmlLite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mswsock.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMM.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMMBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WmiPerfInst.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pdh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BiWinrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NETAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SAMCLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SAMLIB.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wdmaud.drv)</S>
+              <S>System.Diagnostics.ProcessModule (ksuser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AVRT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AUDIOSES.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (msacm32.drv)</S>
+              <S>System.Diagnostics.ProcessModule (MSACM32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (midimap.dll)</S>
+              <S>System.Diagnostics.ProcessModule (resourcepolicyclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BitsProxy.dll)</S>
+            </IE>
+          </Obj>
+          <I64 N="NonpagedSystemMemorySize64">61568</I64>
+          <I32 N="NonpagedSystemMemorySize">61568</I32>
+          <I64 N="PagedMemorySize64">316080128</I64>
+          <I32 N="PagedMemorySize">316080128</I32>
+          <I64 N="PagedSystemMemorySize64">857648</I64>
+          <I32 N="PagedSystemMemorySize">857648</I32>
+          <I64 N="PeakPagedMemorySize64">455720960</I64>
+          <I32 N="PeakPagedMemorySize">455720960</I32>
+          <I64 N="PeakWorkingSet64">398323712</I64>
+          <I32 N="PeakWorkingSet">398323712</I32>
+          <I64 N="PeakVirtualMemorySize64">2204288917504</I64>
+          <I32 N="PeakVirtualMemorySize">970694656</I32>
+          <B N="PriorityBoostEnabled">true</B>
+          <S N="PriorityClass">Normal</S>
+          <I64 N="PrivateMemorySize64">316080128</I64>
+          <I32 N="PrivateMemorySize">316080128</I32>
+          <S N="ProcessName">chrome</S>
+          <S N="ProcessorAffinity">65535</S>
+          <I32 N="SessionId">1</I32>
+          <Obj N="Threads" RefId="710">
+            <TNRef RefId="1" />
+            <IE>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+            </IE>
+          </Obj>
+          <I32 N="HandleCount">1747</I32>
+          <I64 N="VirtualMemorySize64">2204143845376</I64>
+          <I32 N="VirtualMemorySize">825622528</I32>
+          <B N="EnableRaisingEvents">false</B>
+          <I64 N="WorkingSet64">112414720</I64>
+          <I32 N="WorkingSet">112414720</I32>
+          <Nil N="SynchronizingObject" />
+          <S N="MainModule">System.Diagnostics.ProcessModule (chrome.exe)</S>
+          <TS N="PrivilegedProcessorTime">PT11M7.53125S</TS>
+          <TS N="TotalProcessorTime">PT21M46.28125S</TS>
+          <TS N="UserProcessorTime">PT10M38.75S</TS>
+          <S N="MainWindowHandle">1770664</S>
+          <S N="MainWindowTitle">The Living Tombstone Radio - Now Playing on Pandora - Google Chrome</S>
+          <B N="Responding">true</B>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <S N="Name">chrome</S>
+          <I32 N="SI">1</I32>
+          <I32 N="Handles">1747</I32>
+          <I64 N="VM">2204143845376</I64>
+          <I64 N="WS">112414720</I64>
+          <I64 N="PM">316080128</I64>
+          <I64 N="NPM">61568</I64>
+          <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="Parent">System.Diagnostics.Process (explorer)</S>
+          <S N="Company">Google LLC</S>
+          <Db N="CPU">1306.28125</Db>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+          <S N="__NounName">Process</S>
+        </MS>
+      </Obj>
+      <S N="Company">Google LLC</S>
+      <Db N="CPU">93.15625</Db>
+      <S N="FileVersion">76.0.3809.100</S>
+      <S N="ProductVersion">76.0.3809.100</S>
+      <S N="Description">Google Chrome</S>
+      <S N="Product">Google Chrome</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="711">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (chrome)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="712">
+        <TNRef RefId="5" />
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="713">
+        <TNRef RefId="4" />
+        <ToString>3692</ToString>
+      </Obj>
+      <I32 N="BasePriority">8</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-24T14:18:00.891714+03:00</DT>
+      <I32 N="Id">17336</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="714">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="715">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="716">
+        <TNRef RefId="6" />
+        <IE>
+          <Obj RefId="717">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+            <Props>
+              <S N="ModuleName">chrome.exe</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+              <S N="BaseAddress">140702356078592</S>
+              <I32 N="ModuleMemorySize">1732608</I32>
+              <S N="EntryPointAddress">140702357044720</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1692</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="718">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="719">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNEL32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">KERNEL32.DLL</S>
+              <S N="FileName">C:\Windows\System32\KERNEL32.DLL</S>
+              <S N="BaseAddress">140719912779776</S>
+              <I32 N="ModuleMemorySize">733184</I32>
+              <S N="EntryPointAddress">140719912876560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName:     kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">716</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="720">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNELBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">KERNELBASE.dll</S>
+              <S N="FileName">C:\Windows\System32\KERNELBASE.dll</S>
+              <S N="BaseAddress">140719894495232</S>
+              <I32 N="ModuleMemorySize">2699264</I32>
+              <S N="EntryPointAddress">140719894841456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName:     Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="721">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_elf.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_elf.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll</S>
+              <S N="BaseAddress">140719325642752</S>
+              <I32 N="ModuleMemorySize">925696</I32>
+              <S N="EntryPointAddress">140719326148464</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName:     chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">904</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="722">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (VERSION.dll)</ToString>
+            <Props>
+              <S N="ModuleName">VERSION.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\VERSION.dll</S>
+              <S N="BaseAddress">140719800254464</S>
+              <I32 N="ModuleMemorySize">40960</I32>
+              <S N="EntryPointAddress">140719800259344</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName:     version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Version Checking and File Installation Libraries_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">40</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Version Checking and File Installation Libraries</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="723">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcrt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcrt.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcrt.dll</S>
+              <S N="BaseAddress">140719950004224</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719950035120</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName:     msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion:      7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT CRT DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   7.0.17763.475_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.475 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.475</S>
+              <S N="Description">Windows NT CRT DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="724">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcryptPrimitives.dll</S>
+              <S N="FileName">C:\Windows\System32\bcryptPrimitives.dll</S>
+              <S N="BaseAddress">140719890235392</S>
+              <I32 N="ModuleMemorySize">516096</I32>
+              <S N="EntryPointAddress">140719890461152</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName:     bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">504</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="725">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ADVAPI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ADVAPI32.dll</S>
+              <S N="FileName">C:\Windows\System32\ADVAPI32.dll</S>
+              <S N="BaseAddress">140719915335680</S>
+              <I32 N="ModuleMemorySize">667648</I32>
+              <S N="EntryPointAddress">140719915417840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName:     advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Advanced Windows 32 Base API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">652</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Advanced Windows 32 Base API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="726">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sechost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sechost.dll</S>
+              <S N="FileName">C:\Windows\System32\sechost.dll</S>
+              <S N="BaseAddress">140719948824576</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719948951504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\sechost.dll_x000D__x000A_InternalName:     sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Host for SCM/SDDL/LSA Lookup APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="727">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RPCRT4.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RPCRT4.dll</S>
+              <S N="FileName">C:\Windows\System32\RPCRT4.dll</S>
+              <S N="BaseAddress">140719917629440</S>
+              <I32 N="ModuleMemorySize">1187840</I32>
+              <S N="EntryPointAddress">140719918006928</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName:     rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Procedure Call Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Procedure Call Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="728">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_child.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_child.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll</S>
+              <S N="BaseAddress">140717177962496</S>
+              <I32 N="ModuleMemorySize">87977984</I32>
+              <S N="EntryPointAddress">140717247440176</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName:     chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">85916</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="729">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OLEAUT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OLEAUT32.dll</S>
+              <S N="FileName">C:\Windows\System32\OLEAUT32.dll</S>
+              <S N="BaseAddress">140719946465280</S>
+              <I32 N="ModuleMemorySize">802816</I32>
+              <S N="EntryPointAddress">140719946574624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName:     OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OLEAUT32.DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">784</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">OLEAUT32.DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="730">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcp_win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcp_win.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcp_win.dll</S>
+              <S N="BaseAddress">140719889580032</S>
+              <I32 N="ModuleMemorySize">655360</I32>
+              <S N="EntryPointAddress">140719889658864</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName:     msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">640</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="731">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ucrtbase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ucrtbase.dll</S>
+              <S N="FileName">C:\Windows\System32\ucrtbase.dll</S>
+              <S N="BaseAddress">140719893446656</S>
+              <I32 N="ModuleMemorySize">1024000</I32>
+              <S N="EntryPointAddress">140719893528400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName:     ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1000</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="732">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (combase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">combase.dll</S>
+              <S N="FileName">C:\Windows\System32\combase.dll</S>
+              <S N="BaseAddress">140719950856192</S>
+              <I32 N="ModuleMemorySize">3325952</I32>
+              <S N="EntryPointAddress">140719951769888</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\combase.dll_x000D__x000A_InternalName:     COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft COM for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3248</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft COM for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="733">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WS2_32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WS2_32.dll</S>
+              <S N="FileName">C:\Windows\System32\WS2_32.dll</S>
+              <S N="BaseAddress">140719954198528</S>
+              <I32 N="ModuleMemorySize">446464</I32>
+              <S N="EntryPointAddress">140719954286384</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName:     ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">436</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Socket 2.0 32-Bit DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="734">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (GDI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">GDI32.dll</S>
+              <S N="FileName">C:\Windows\System32\GDI32.dll</S>
+              <S N="BaseAddress">140719950659584</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719950676208</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="735">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32full.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32full.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32full.dll</S>
+              <S N="BaseAddress">140719905112064</S>
+              <I32 N="ModuleMemorySize">1675264</I32>
+              <S N="EntryPointAddress">140719905369792</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="736">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USER32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USER32.dll</S>
+              <S N="FileName">C:\Windows\System32\USER32.dll</S>
+              <S N="BaseAddress">140719909306368</S>
+              <I32 N="ModuleMemorySize">1667072</I32>
+              <S N="EntryPointAddress">140719909414448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\USER32.dll_x000D__x000A_InternalName:     user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows USER API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows USER API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="737">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (win32u.dll)</ToString>
+            <Props>
+              <S N="ModuleName">win32u.dll</S>
+              <S N="FileName">C:\Windows\System32\win32u.dll</S>
+              <S N="BaseAddress">140719906816000</S>
+              <I32 N="ModuleMemorySize">131072</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\win32u.dll_x000D__x000A_InternalName:     Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32u_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">128</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32u</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="738">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINTRUST.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINTRUST.dll</S>
+              <S N="FileName">C:\Windows\System32\WINTRUST.dll</S>
+              <S N="BaseAddress">140719888728064</S>
+              <I32 N="ModuleMemorySize">364544</I32>
+              <S N="EntryPointAddress">140719888791376</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName:     WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Trust Verification APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">356</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft Trust Verification APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="739">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSASN1.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSASN1.dll</S>
+              <S N="FileName">C:\Windows\System32\MSASN1.dll</S>
+              <S N="BaseAddress">140719887876096</S>
+              <I32 N="ModuleMemorySize">73728</I32>
+              <S N="EntryPointAddress">140719887898576</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName:     msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  ASN.1 Runtime APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">72</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">ASN.1 Runtime APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="740">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPT32.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPT32.dll</S>
+              <S N="BaseAddress">140719891480576</S>
+              <I32 N="ModuleMemorySize">1945600</I32>
+              <S N="EntryPointAddress">140719891804832</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName:     CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Crypto API32_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1900</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Crypto API32</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="741">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IPHLPAPI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\IPHLPAPI.DLL</S>
+              <S N="BaseAddress">140719876931584</S>
+              <I32 N="ModuleMemorySize">249856</I32>
+              <S N="EntryPointAddress">140719876989024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName:     iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  IP Helper API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">244</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">IP Helper API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="742">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMM.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMM.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMM.dll</S>
+              <S N="BaseAddress">140719835054080</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719835066368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName:     winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MCI API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MCI API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="743">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USERENV.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USERENV.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\USERENV.dll</S>
+              <S N="BaseAddress">140719887024128</S>
+              <I32 N="ModuleMemorySize">163840</I32>
+              <S N="EntryPointAddress">140719887043280</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName:     userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Userenv_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Userenv</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="744">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (profapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">profapi.dll</S>
+              <S N="FileName">C:\Windows\System32\profapi.dll</S>
+              <S N="BaseAddress">140719888531456</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719888564400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\profapi.dll_x000D__x000A_InternalName:     PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  User Profile Basic API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">User Profile Basic API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="745">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (DWrite.dll)</ToString>
+            <Props>
+              <S N="ModuleName">DWrite.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\DWrite.dll</S>
+              <S N="BaseAddress">140719303819264</S>
+              <I32 N="ModuleMemorySize">3129344</I32>
+              <S N="EntryPointAddress">140719304509728</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName:     DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft DirectX Typography Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3056</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft DirectX Typography Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="746">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINSPOOL.DRV)</ToString>
+            <Props>
+              <S N="ModuleName">WINSPOOL.DRV</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINSPOOL.DRV</S>
+              <S N="BaseAddress">140719787606016</S>
+              <I32 N="ModuleMemorySize">561152</I32>
+              <S N="EntryPointAddress">140719787676448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName:     winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Spooler Driver_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">548</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Spooler Driver</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="747">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (kernel.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">kernel.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\kernel.appcore.dll</S>
+              <S N="BaseAddress">140719888400384</S>
+              <I32 N="ModuleMemorySize">69632</I32>
+              <S N="EntryPointAddress">140719888415648</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName:     kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AppModel API Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">68</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AppModel API Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="748">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcrypt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcrypt.dll</S>
+              <S N="FileName">C:\Windows\System32\bcrypt.dll</S>
+              <S N="BaseAddress">140719897247744</S>
+              <I32 N="ModuleMemorySize">155648</I32>
+              <S N="EntryPointAddress">140719897281296</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName:     bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">152</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="749">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dbghelp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dbghelp.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dbghelp.dll</S>
+              <S N="BaseAddress">140719552397312</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">140719552479168</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName:     DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Image Helper_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Image Helper</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="750">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINHTTP.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINHTTP.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINHTTP.dll</S>
+              <S N="BaseAddress">140719810019328</S>
+              <I32 N="ModuleMemorySize">991232</I32>
+              <S N="EntryPointAddress">140719810293024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName:     winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows HTTP Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">968</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows HTTP Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="751">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Secur32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Secur32.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\Secur32.dll</S>
+              <S N="BaseAddress">140719559147520</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719559156816</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName:     secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="752">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">dhcpcsvc.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dhcpcsvc.DLL</S>
+              <S N="BaseAddress">140719782494208</S>
+              <I32 N="ModuleMemorySize">114688</I32>
+              <S N="EntryPointAddress">140719782503840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName:     dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  DHCP Client Service_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">112</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">DHCP Client Service</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="753">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (NSI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">NSI.dll</S>
+              <S N="FileName">C:\Windows\System32\NSI.dll</S>
+              <S N="BaseAddress">140719916843008</S>
+              <I32 N="ModuleMemorySize">32768</I32>
+              <S N="EntryPointAddress">140719916851008</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\NSI.dll_x000D__x000A_InternalName:     nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NSI User-mode interface DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">32</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NSI User-mode interface DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="754">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMMBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMMBASE.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMMBASE.dll</S>
+              <S N="BaseAddress">140719834857472</S>
+              <I32 N="ModuleMemorySize">184320</I32>
+              <S N="EntryPointAddress">140719834890448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName:     winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base Multimedia Extension API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">180</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base Multimedia Extension API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="755">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cfgmgr32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cfgmgr32.dll</S>
+              <S N="FileName">C:\Windows\System32\cfgmgr32.dll</S>
+              <S N="BaseAddress">140719889252352</S>
+              <I32 N="ModuleMemorySize">303104</I32>
+              <S N="EntryPointAddress">140719889325904</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName:     cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Configuration Manager DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">296</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Configuration Manager DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="756">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (PROPSYS.dll)</ToString>
+            <Props>
+              <S N="ModuleName">PROPSYS.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\PROPSYS.dll</S>
+              <S N="BaseAddress">140719831187456</S>
+              <I32 N="ModuleMemorySize">1736704</I32>
+              <S N="EntryPointAddress">140719831447408</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName:     propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion:      7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Property System_x000D__x000A_Product:          Windows® Search_x000D__x000A_ProductVersion:   7.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1696</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.1</S>
+              <S N="Description">Microsoft Property System</S>
+              <S N="Product">Windows® Search</S>
+            </MS>
+          </Obj>
+          <Obj RefId="757">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shcore.dll</S>
+              <S N="FileName">C:\Windows\System32\shcore.dll</S>
+              <S N="BaseAddress">140719907143680</S>
+              <I32 N="ModuleMemorySize">688128</I32>
+              <S N="EntryPointAddress">140719907388560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shcore.dll_x000D__x000A_InternalName:     SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  SHCORE_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">672</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">SHCORE</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="758">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SSPICLI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">SSPICLI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\SSPICLI.DLL</S>
+              <S N="BaseAddress">140719886827520</S>
+              <I32 N="ModuleMemorySize">192512</I32>
+              <S N="EntryPointAddress">140719886881776</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName:     sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">188</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="759">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IMM32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IMM32.DLL</S>
+              <S N="FileName">C:\Windows\System32\IMM32.DLL</S>
+              <S N="BaseAddress">140719906947072</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719906952688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName:     imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows IMM32 API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="760">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPTBASE.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\CRYPTBASE.DLL</S>
+              <S N="BaseAddress">140719881846784</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719881855488</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName:     cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base cryptographic API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base cryptographic API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">44</I32>
+          <Obj N="SyncRoot" RefId="761">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="717" />
+              <Ref RefId="718" />
+              <Ref RefId="719" />
+              <Ref RefId="720" />
+              <Ref RefId="721" />
+              <Ref RefId="722" />
+              <Ref RefId="723" />
+              <Ref RefId="724" />
+              <Ref RefId="725" />
+              <Ref RefId="726" />
+              <Ref RefId="727" />
+              <Ref RefId="728" />
+              <Ref RefId="729" />
+              <Ref RefId="730" />
+              <Ref RefId="731" />
+              <Ref RefId="732" />
+              <Ref RefId="733" />
+              <Ref RefId="734" />
+              <Ref RefId="735" />
+              <Ref RefId="736" />
+              <Ref RefId="737" />
+              <Ref RefId="738" />
+              <Ref RefId="739" />
+              <Ref RefId="740" />
+              <Ref RefId="741" />
+              <Ref RefId="742" />
+              <Ref RefId="743" />
+              <Ref RefId="744" />
+              <Ref RefId="745" />
+              <Ref RefId="746" />
+              <Ref RefId="747" />
+              <Ref RefId="748" />
+              <Ref RefId="749" />
+              <Ref RefId="750" />
+              <Ref RefId="751" />
+              <Ref RefId="752" />
+              <Ref RefId="753" />
+              <Ref RefId="754" />
+              <Ref RefId="755" />
+              <Ref RefId="756" />
+              <Ref RefId="757" />
+              <Ref RefId="758" />
+              <Ref RefId="759" />
+              <Ref RefId="760" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">20528</I64>
+      <I32 N="NonpagedSystemMemorySize">20528</I32>
+      <I64 N="PagedMemorySize64">21176320</I64>
+      <I32 N="PagedMemorySize">21176320</I32>
+      <I64 N="PagedSystemMemorySize64">332072</I64>
+      <I32 N="PagedSystemMemorySize">332072</I32>
+      <I64 N="PeakPagedMemorySize64">22097920</I64>
+      <I32 N="PeakPagedMemorySize">22097920</I32>
+      <I64 N="PeakWorkingSet64">33763328</I64>
+      <I32 N="PeakWorkingSet">33763328</I32>
+      <I64 N="PeakVirtualMemorySize64">2203738079232</I64>
+      <I32 N="PeakVirtualMemorySize">419856384</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="762">
+        <TNRef RefId="8" />
+        <ToString>Normal</ToString>
+        <I32>32</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">21176320</I64>
+      <I32 N="PrivateMemorySize">21176320</I32>
+      <S N="ProcessName">chrome</S>
+      <Obj N="ProcessorAffinity" RefId="763">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="764">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="765">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">17172</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.046875S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.8917162+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.234375S</TS>
+              <TS N="UserProcessorTime">PT0.1875S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="766">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">10476</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.9728349+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="767">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">14688</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.046875S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.9744074+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.046875S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="768">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">12600</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.9753449+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.03125S</TS>
+              <TS N="UserProcessorTime">PT0.03125S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="769">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">11992</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.9761278+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="770">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">9032</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.97722+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="771">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">6492</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.9872469+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="772">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">15476</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.9907187+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="773">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">18840</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.9913832+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="774">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">7796</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.9919132+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="775">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">10608</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.9923393+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="776">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">7</I32>
+              <I32 N="Id">2164</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.9929578+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="777">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">13136</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.03125S</TS>
+              <DT N="StartTime">2019-08-24T14:18:09.0915195+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.03125S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">13</I32>
+          <Obj N="SyncRoot" RefId="778">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="765" />
+              <Ref RefId="766" />
+              <Ref RefId="767" />
+              <Ref RefId="768" />
+              <Ref RefId="769" />
+              <Ref RefId="770" />
+              <Ref RefId="771" />
+              <Ref RefId="772" />
+              <Ref RefId="773" />
+              <Ref RefId="774" />
+              <Ref RefId="775" />
+              <Ref RefId="776" />
+              <Ref RefId="777" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">237</I32>
+      <I64 N="VirtualMemorySize64">2203721302016</I64>
+      <I32 N="VirtualMemorySize">403079168</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">17076224</I64>
+      <I32 N="WorkingSet">17076224</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="779">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+        <Props>
+          <S N="ModuleName">chrome.exe</S>
+          <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="BaseAddress">140702356078592</S>
+          <I32 N="ModuleMemorySize">1732608</I32>
+          <S N="EntryPointAddress">140702357044720</S>
+          <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">1692</I32>
+          <S N="Company">Google LLC</S>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT0.1875S</TS>
+      <TS N="TotalProcessorTime">PT0.40625S</TS>
+      <TS N="UserProcessorTime">PT0.21875S</TS>
+      <Obj N="MainWindowHandle" RefId="780">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">chrome</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">237</I32>
+      <I64 N="VM">2203721302016</I64>
+      <I64 N="WS">17076224</I64>
+      <I64 N="PM">21176320</I64>
+      <I64 N="NPM">20528</I64>
+      <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+      <Obj N="Parent" RefId="781">
+        <TNRef RefId="0" />
+        <ToString>System.Diagnostics.Process (chrome)</ToString>
+        <Props>
+          <S N="SafeHandle">Microsoft.Win32.SafeHandles.SafeProcessHandle</S>
+          <S N="Handle">6716</S>
+          <I32 N="BasePriority">8</I32>
+          <B N="HasExited">false</B>
+          <DT N="StartTime">2019-08-24T14:18:00.3253674+03:00</DT>
+          <I32 N="Id">23804</I32>
+          <S N="MachineName">.</S>
+          <S N="MaxWorkingSet">1413120</S>
+          <S N="MinWorkingSet">204800</S>
+          <Obj N="Modules" RefId="782">
+            <TNRef RefId="6" />
+            <IE>
+              <S>System.Diagnostics.ProcessModule (chrome.exe)</S>
+              <S>System.Diagnostics.ProcessModule (ntdll.dll)</S>
+              <S>System.Diagnostics.ProcessModule (KERNEL32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (KERNELBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome_elf.dll)</S>
+              <S>System.Diagnostics.ProcessModule (VERSION.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ADVAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sechost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RPCRT4.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</S>
+              <S>System.Diagnostics.ProcessModule (user32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (win32u.dll)</S>
+              <S>System.Diagnostics.ProcessModule (GDI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdi32full.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ucrtbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IMM32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SHELL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cfgmgr32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (combase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (powrprof.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shlwapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (kernel.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptsp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome.dll)</S>
+              <S>System.Diagnostics.ProcessModule (uxtheme.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dwmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USERENV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gpapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wkscli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ole32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSCTF.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEAUT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Secur32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SSPICLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DWrite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WS2_32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (COMCTL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (clbcatq.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RMCLIENT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NLAapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NSI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc6.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DNSAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mscms.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ColorAdapterClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (icm32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TextInputFramework.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreUIComponents.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreMessaging.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d2d1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d3d11.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PROPSYS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wintypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntmarta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxgi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WTSAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlanapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINSTA.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemcomn.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MMDevApi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DEVOBJ.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemsvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINHTTP.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fastprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wmiutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FirewallAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fwbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (LINKINFO.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dataexchange.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dcomp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atlthunk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEACC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (directmanipulation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (explorerframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnapps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (XmlLite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mswsock.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMM.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMMBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WmiPerfInst.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pdh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BiWinrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NETAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SAMCLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SAMLIB.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wdmaud.drv)</S>
+              <S>System.Diagnostics.ProcessModule (ksuser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AVRT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AUDIOSES.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (msacm32.drv)</S>
+              <S>System.Diagnostics.ProcessModule (MSACM32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (midimap.dll)</S>
+              <S>System.Diagnostics.ProcessModule (resourcepolicyclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BitsProxy.dll)</S>
+            </IE>
+          </Obj>
+          <I64 N="NonpagedSystemMemorySize64">61568</I64>
+          <I32 N="NonpagedSystemMemorySize">61568</I32>
+          <I64 N="PagedMemorySize64">316080128</I64>
+          <I32 N="PagedMemorySize">316080128</I32>
+          <I64 N="PagedSystemMemorySize64">857648</I64>
+          <I32 N="PagedSystemMemorySize">857648</I32>
+          <I64 N="PeakPagedMemorySize64">455720960</I64>
+          <I32 N="PeakPagedMemorySize">455720960</I32>
+          <I64 N="PeakWorkingSet64">398323712</I64>
+          <I32 N="PeakWorkingSet">398323712</I32>
+          <I64 N="PeakVirtualMemorySize64">2204288917504</I64>
+          <I32 N="PeakVirtualMemorySize">970694656</I32>
+          <B N="PriorityBoostEnabled">true</B>
+          <S N="PriorityClass">Normal</S>
+          <I64 N="PrivateMemorySize64">316080128</I64>
+          <I32 N="PrivateMemorySize">316080128</I32>
+          <S N="ProcessName">chrome</S>
+          <S N="ProcessorAffinity">65535</S>
+          <I32 N="SessionId">1</I32>
+          <Obj N="Threads" RefId="783">
+            <TNRef RefId="1" />
+            <IE>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+            </IE>
+          </Obj>
+          <I32 N="HandleCount">1747</I32>
+          <I64 N="VirtualMemorySize64">2204143845376</I64>
+          <I32 N="VirtualMemorySize">825622528</I32>
+          <B N="EnableRaisingEvents">false</B>
+          <I64 N="WorkingSet64">112414720</I64>
+          <I32 N="WorkingSet">112414720</I32>
+          <Nil N="SynchronizingObject" />
+          <S N="MainModule">System.Diagnostics.ProcessModule (chrome.exe)</S>
+          <TS N="PrivilegedProcessorTime">PT11M7.53125S</TS>
+          <TS N="TotalProcessorTime">PT21M46.28125S</TS>
+          <TS N="UserProcessorTime">PT10M38.75S</TS>
+          <S N="MainWindowHandle">1770664</S>
+          <S N="MainWindowTitle">The Living Tombstone Radio - Now Playing on Pandora - Google Chrome</S>
+          <B N="Responding">true</B>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <S N="Name">chrome</S>
+          <I32 N="SI">1</I32>
+          <I32 N="Handles">1747</I32>
+          <I64 N="VM">2204143845376</I64>
+          <I64 N="WS">112414720</I64>
+          <I64 N="PM">316080128</I64>
+          <I64 N="NPM">61568</I64>
+          <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="Parent">System.Diagnostics.Process (explorer)</S>
+          <S N="Company">Google LLC</S>
+          <Db N="CPU">1306.28125</Db>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+          <S N="__NounName">Process</S>
+        </MS>
+      </Obj>
+      <S N="Company">Google LLC</S>
+      <Db N="CPU">0.40625</Db>
+      <S N="FileVersion">76.0.3809.100</S>
+      <S N="ProductVersion">76.0.3809.100</S>
+      <S N="Description">Google Chrome</S>
+      <S N="Product">Google Chrome</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="784">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (chrome)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="785">
+        <TNRef RefId="5" />
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="786">
+        <TNRef RefId="4" />
+        <ToString>7324</ToString>
+      </Obj>
+      <I32 N="BasePriority">8</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-24T14:18:00.9750682+03:00</DT>
+      <I32 N="Id">19216</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="787">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="788">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="789">
+        <TNRef RefId="6" />
+        <IE>
+          <Obj RefId="790">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+            <Props>
+              <S N="ModuleName">chrome.exe</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+              <S N="BaseAddress">140702356078592</S>
+              <I32 N="ModuleMemorySize">1732608</I32>
+              <S N="EntryPointAddress">140702357044720</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1692</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="791">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="792">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNEL32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">KERNEL32.DLL</S>
+              <S N="FileName">C:\Windows\System32\KERNEL32.DLL</S>
+              <S N="BaseAddress">140719912779776</S>
+              <I32 N="ModuleMemorySize">733184</I32>
+              <S N="EntryPointAddress">140719912876560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName:     kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">716</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="793">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNELBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">KERNELBASE.dll</S>
+              <S N="FileName">C:\Windows\System32\KERNELBASE.dll</S>
+              <S N="BaseAddress">140719894495232</S>
+              <I32 N="ModuleMemorySize">2699264</I32>
+              <S N="EntryPointAddress">140719894841456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName:     Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="794">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_elf.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_elf.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll</S>
+              <S N="BaseAddress">140719325642752</S>
+              <I32 N="ModuleMemorySize">925696</I32>
+              <S N="EntryPointAddress">140719326148464</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName:     chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">904</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="795">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (VERSION.dll)</ToString>
+            <Props>
+              <S N="ModuleName">VERSION.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\VERSION.dll</S>
+              <S N="BaseAddress">140719800254464</S>
+              <I32 N="ModuleMemorySize">40960</I32>
+              <S N="EntryPointAddress">140719800259344</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName:     version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Version Checking and File Installation Libraries_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">40</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Version Checking and File Installation Libraries</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="796">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcrt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcrt.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcrt.dll</S>
+              <S N="BaseAddress">140719950004224</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719950035120</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName:     msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion:      7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT CRT DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   7.0.17763.475_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.475 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.475</S>
+              <S N="Description">Windows NT CRT DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="797">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcryptPrimitives.dll</S>
+              <S N="FileName">C:\Windows\System32\bcryptPrimitives.dll</S>
+              <S N="BaseAddress">140719890235392</S>
+              <I32 N="ModuleMemorySize">516096</I32>
+              <S N="EntryPointAddress">140719890461152</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName:     bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">504</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="798">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ADVAPI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ADVAPI32.dll</S>
+              <S N="FileName">C:\Windows\System32\ADVAPI32.dll</S>
+              <S N="BaseAddress">140719915335680</S>
+              <I32 N="ModuleMemorySize">667648</I32>
+              <S N="EntryPointAddress">140719915417840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName:     advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Advanced Windows 32 Base API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">652</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Advanced Windows 32 Base API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="799">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sechost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sechost.dll</S>
+              <S N="FileName">C:\Windows\System32\sechost.dll</S>
+              <S N="BaseAddress">140719948824576</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719948951504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\sechost.dll_x000D__x000A_InternalName:     sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Host for SCM/SDDL/LSA Lookup APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="800">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RPCRT4.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RPCRT4.dll</S>
+              <S N="FileName">C:\Windows\System32\RPCRT4.dll</S>
+              <S N="BaseAddress">140719917629440</S>
+              <I32 N="ModuleMemorySize">1187840</I32>
+              <S N="EntryPointAddress">140719918006928</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName:     rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Procedure Call Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Procedure Call Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="801">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_child.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_child.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll</S>
+              <S N="BaseAddress">140717177962496</S>
+              <I32 N="ModuleMemorySize">87977984</I32>
+              <S N="EntryPointAddress">140717247440176</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName:     chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">85916</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="802">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OLEAUT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OLEAUT32.dll</S>
+              <S N="FileName">C:\Windows\System32\OLEAUT32.dll</S>
+              <S N="BaseAddress">140719946465280</S>
+              <I32 N="ModuleMemorySize">802816</I32>
+              <S N="EntryPointAddress">140719946574624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName:     OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OLEAUT32.DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">784</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">OLEAUT32.DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="803">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcp_win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcp_win.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcp_win.dll</S>
+              <S N="BaseAddress">140719889580032</S>
+              <I32 N="ModuleMemorySize">655360</I32>
+              <S N="EntryPointAddress">140719889658864</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName:     msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">640</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="804">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ucrtbase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ucrtbase.dll</S>
+              <S N="FileName">C:\Windows\System32\ucrtbase.dll</S>
+              <S N="BaseAddress">140719893446656</S>
+              <I32 N="ModuleMemorySize">1024000</I32>
+              <S N="EntryPointAddress">140719893528400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName:     ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1000</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="805">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (combase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">combase.dll</S>
+              <S N="FileName">C:\Windows\System32\combase.dll</S>
+              <S N="BaseAddress">140719950856192</S>
+              <I32 N="ModuleMemorySize">3325952</I32>
+              <S N="EntryPointAddress">140719951769888</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\combase.dll_x000D__x000A_InternalName:     COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft COM for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3248</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft COM for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="806">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WS2_32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WS2_32.dll</S>
+              <S N="FileName">C:\Windows\System32\WS2_32.dll</S>
+              <S N="BaseAddress">140719954198528</S>
+              <I32 N="ModuleMemorySize">446464</I32>
+              <S N="EntryPointAddress">140719954286384</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName:     ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">436</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Socket 2.0 32-Bit DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="807">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (GDI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">GDI32.dll</S>
+              <S N="FileName">C:\Windows\System32\GDI32.dll</S>
+              <S N="BaseAddress">140719950659584</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719950676208</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="808">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32full.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32full.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32full.dll</S>
+              <S N="BaseAddress">140719905112064</S>
+              <I32 N="ModuleMemorySize">1675264</I32>
+              <S N="EntryPointAddress">140719905369792</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="809">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USER32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USER32.dll</S>
+              <S N="FileName">C:\Windows\System32\USER32.dll</S>
+              <S N="BaseAddress">140719909306368</S>
+              <I32 N="ModuleMemorySize">1667072</I32>
+              <S N="EntryPointAddress">140719909414448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\USER32.dll_x000D__x000A_InternalName:     user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows USER API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows USER API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="810">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (win32u.dll)</ToString>
+            <Props>
+              <S N="ModuleName">win32u.dll</S>
+              <S N="FileName">C:\Windows\System32\win32u.dll</S>
+              <S N="BaseAddress">140719906816000</S>
+              <I32 N="ModuleMemorySize">131072</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\win32u.dll_x000D__x000A_InternalName:     Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32u_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">128</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32u</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="811">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINTRUST.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINTRUST.dll</S>
+              <S N="FileName">C:\Windows\System32\WINTRUST.dll</S>
+              <S N="BaseAddress">140719888728064</S>
+              <I32 N="ModuleMemorySize">364544</I32>
+              <S N="EntryPointAddress">140719888791376</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName:     WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Trust Verification APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">356</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft Trust Verification APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="812">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSASN1.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSASN1.dll</S>
+              <S N="FileName">C:\Windows\System32\MSASN1.dll</S>
+              <S N="BaseAddress">140719887876096</S>
+              <I32 N="ModuleMemorySize">73728</I32>
+              <S N="EntryPointAddress">140719887898576</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName:     msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  ASN.1 Runtime APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">72</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">ASN.1 Runtime APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="813">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPT32.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPT32.dll</S>
+              <S N="BaseAddress">140719891480576</S>
+              <I32 N="ModuleMemorySize">1945600</I32>
+              <S N="EntryPointAddress">140719891804832</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName:     CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Crypto API32_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1900</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Crypto API32</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="814">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IPHLPAPI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\IPHLPAPI.DLL</S>
+              <S N="BaseAddress">140719876931584</S>
+              <I32 N="ModuleMemorySize">249856</I32>
+              <S N="EntryPointAddress">140719876989024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName:     iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  IP Helper API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">244</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">IP Helper API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="815">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMM.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMM.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMM.dll</S>
+              <S N="BaseAddress">140719835054080</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719835066368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName:     winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MCI API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MCI API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="816">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USERENV.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USERENV.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\USERENV.dll</S>
+              <S N="BaseAddress">140719887024128</S>
+              <I32 N="ModuleMemorySize">163840</I32>
+              <S N="EntryPointAddress">140719887043280</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName:     userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Userenv_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Userenv</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="817">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (profapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">profapi.dll</S>
+              <S N="FileName">C:\Windows\System32\profapi.dll</S>
+              <S N="BaseAddress">140719888531456</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719888564400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\profapi.dll_x000D__x000A_InternalName:     PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  User Profile Basic API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">User Profile Basic API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="818">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (DWrite.dll)</ToString>
+            <Props>
+              <S N="ModuleName">DWrite.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\DWrite.dll</S>
+              <S N="BaseAddress">140719303819264</S>
+              <I32 N="ModuleMemorySize">3129344</I32>
+              <S N="EntryPointAddress">140719304509728</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName:     DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft DirectX Typography Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3056</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft DirectX Typography Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="819">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINSPOOL.DRV)</ToString>
+            <Props>
+              <S N="ModuleName">WINSPOOL.DRV</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINSPOOL.DRV</S>
+              <S N="BaseAddress">140719787606016</S>
+              <I32 N="ModuleMemorySize">561152</I32>
+              <S N="EntryPointAddress">140719787676448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName:     winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Spooler Driver_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">548</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Spooler Driver</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="820">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (kernel.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">kernel.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\kernel.appcore.dll</S>
+              <S N="BaseAddress">140719888400384</S>
+              <I32 N="ModuleMemorySize">69632</I32>
+              <S N="EntryPointAddress">140719888415648</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName:     kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AppModel API Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">68</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AppModel API Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="821">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcrypt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcrypt.dll</S>
+              <S N="FileName">C:\Windows\System32\bcrypt.dll</S>
+              <S N="BaseAddress">140719897247744</S>
+              <I32 N="ModuleMemorySize">155648</I32>
+              <S N="EntryPointAddress">140719897281296</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName:     bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">152</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="822">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dbghelp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dbghelp.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dbghelp.dll</S>
+              <S N="BaseAddress">140719552397312</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">140719552479168</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName:     DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Image Helper_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Image Helper</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="823">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINHTTP.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINHTTP.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINHTTP.dll</S>
+              <S N="BaseAddress">140719810019328</S>
+              <I32 N="ModuleMemorySize">991232</I32>
+              <S N="EntryPointAddress">140719810293024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName:     winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows HTTP Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">968</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows HTTP Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="824">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Secur32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Secur32.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\Secur32.dll</S>
+              <S N="BaseAddress">140719559147520</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719559156816</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName:     secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="825">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">dhcpcsvc.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dhcpcsvc.DLL</S>
+              <S N="BaseAddress">140719782494208</S>
+              <I32 N="ModuleMemorySize">114688</I32>
+              <S N="EntryPointAddress">140719782503840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName:     dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  DHCP Client Service_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">112</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">DHCP Client Service</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="826">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (NSI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">NSI.dll</S>
+              <S N="FileName">C:\Windows\System32\NSI.dll</S>
+              <S N="BaseAddress">140719916843008</S>
+              <I32 N="ModuleMemorySize">32768</I32>
+              <S N="EntryPointAddress">140719916851008</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\NSI.dll_x000D__x000A_InternalName:     nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NSI User-mode interface DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">32</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NSI User-mode interface DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="827">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMMBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMMBASE.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMMBASE.dll</S>
+              <S N="BaseAddress">140719834857472</S>
+              <I32 N="ModuleMemorySize">184320</I32>
+              <S N="EntryPointAddress">140719834890448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName:     winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base Multimedia Extension API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">180</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base Multimedia Extension API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="828">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cfgmgr32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cfgmgr32.dll</S>
+              <S N="FileName">C:\Windows\System32\cfgmgr32.dll</S>
+              <S N="BaseAddress">140719889252352</S>
+              <I32 N="ModuleMemorySize">303104</I32>
+              <S N="EntryPointAddress">140719889325904</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName:     cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Configuration Manager DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">296</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Configuration Manager DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="829">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (PROPSYS.dll)</ToString>
+            <Props>
+              <S N="ModuleName">PROPSYS.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\PROPSYS.dll</S>
+              <S N="BaseAddress">140719831187456</S>
+              <I32 N="ModuleMemorySize">1736704</I32>
+              <S N="EntryPointAddress">140719831447408</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName:     propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion:      7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Property System_x000D__x000A_Product:          Windows® Search_x000D__x000A_ProductVersion:   7.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1696</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.1</S>
+              <S N="Description">Microsoft Property System</S>
+              <S N="Product">Windows® Search</S>
+            </MS>
+          </Obj>
+          <Obj RefId="830">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shcore.dll</S>
+              <S N="FileName">C:\Windows\System32\shcore.dll</S>
+              <S N="BaseAddress">140719907143680</S>
+              <I32 N="ModuleMemorySize">688128</I32>
+              <S N="EntryPointAddress">140719907388560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shcore.dll_x000D__x000A_InternalName:     SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  SHCORE_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">672</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">SHCORE</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="831">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SSPICLI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">SSPICLI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\SSPICLI.DLL</S>
+              <S N="BaseAddress">140719886827520</S>
+              <I32 N="ModuleMemorySize">192512</I32>
+              <S N="EntryPointAddress">140719886881776</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName:     sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">188</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="832">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IMM32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IMM32.DLL</S>
+              <S N="FileName">C:\Windows\System32\IMM32.DLL</S>
+              <S N="BaseAddress">140719906947072</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719906952688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName:     imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows IMM32 API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="833">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPTBASE.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\CRYPTBASE.DLL</S>
+              <S N="BaseAddress">140719881846784</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719881855488</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName:     cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base cryptographic API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base cryptographic API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">44</I32>
+          <Obj N="SyncRoot" RefId="834">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="790" />
+              <Ref RefId="791" />
+              <Ref RefId="792" />
+              <Ref RefId="793" />
+              <Ref RefId="794" />
+              <Ref RefId="795" />
+              <Ref RefId="796" />
+              <Ref RefId="797" />
+              <Ref RefId="798" />
+              <Ref RefId="799" />
+              <Ref RefId="800" />
+              <Ref RefId="801" />
+              <Ref RefId="802" />
+              <Ref RefId="803" />
+              <Ref RefId="804" />
+              <Ref RefId="805" />
+              <Ref RefId="806" />
+              <Ref RefId="807" />
+              <Ref RefId="808" />
+              <Ref RefId="809" />
+              <Ref RefId="810" />
+              <Ref RefId="811" />
+              <Ref RefId="812" />
+              <Ref RefId="813" />
+              <Ref RefId="814" />
+              <Ref RefId="815" />
+              <Ref RefId="816" />
+              <Ref RefId="817" />
+              <Ref RefId="818" />
+              <Ref RefId="819" />
+              <Ref RefId="820" />
+              <Ref RefId="821" />
+              <Ref RefId="822" />
+              <Ref RefId="823" />
+              <Ref RefId="824" />
+              <Ref RefId="825" />
+              <Ref RefId="826" />
+              <Ref RefId="827" />
+              <Ref RefId="828" />
+              <Ref RefId="829" />
+              <Ref RefId="830" />
+              <Ref RefId="831" />
+              <Ref RefId="832" />
+              <Ref RefId="833" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">29640</I64>
+      <I32 N="NonpagedSystemMemorySize">29640</I32>
+      <I64 N="PagedMemorySize64">63090688</I64>
+      <I32 N="PagedMemorySize">63090688</I32>
+      <I64 N="PagedSystemMemorySize64">340264</I64>
+      <I32 N="PagedSystemMemorySize">340264</I32>
+      <I64 N="PeakPagedMemorySize64">75571200</I64>
+      <I32 N="PeakPagedMemorySize">75571200</I32>
+      <I64 N="PeakWorkingSet64">72970240</I64>
+      <I32 N="PeakWorkingSet">72970240</I32>
+      <I64 N="PeakVirtualMemorySize64">2203804340224</I64>
+      <I32 N="PeakVirtualMemorySize">486117376</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="835">
+        <TNRef RefId="8" />
+        <ToString>Normal</ToString>
+        <I32>32</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">63090688</I64>
+      <I32 N="PrivateMemorySize">63090688</I32>
+      <S N="ProcessName">chrome</S>
+      <Obj N="ProcessorAffinity" RefId="836">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="837">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="838">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">9724</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT1.8125S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.97507+03:00</DT>
+              <TS N="TotalProcessorTime">PT12.453125S</TS>
+              <TS N="UserProcessorTime">PT10.640625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="839">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">7440</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0706884+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="840">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">23216</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.015625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0725577+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.015625S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="841">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">20024</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT5.125S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0748313+03:00</DT>
+              <TS N="TotalProcessorTime">PT12S</TS>
+              <TS N="UserProcessorTime">PT6.875S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="842">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">23700</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.075694+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="843">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">5736</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0791088+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="844">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">20820</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0888845+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="845">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">3340</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0909397+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="846">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">18184</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0915003+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="847">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">19060</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.091958+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="848">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">20792</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0924597+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="849">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">7</I32>
+              <I32 N="Id">11268</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.092959+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="850">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">21936</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:36:39.1963672+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">13</I32>
+          <Obj N="SyncRoot" RefId="851">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="838" />
+              <Ref RefId="839" />
+              <Ref RefId="840" />
+              <Ref RefId="841" />
+              <Ref RefId="842" />
+              <Ref RefId="843" />
+              <Ref RefId="844" />
+              <Ref RefId="845" />
+              <Ref RefId="846" />
+              <Ref RefId="847" />
+              <Ref RefId="848" />
+              <Ref RefId="849" />
+              <Ref RefId="850" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">237</I32>
+      <I64 N="VirtualMemorySize64">2203782578176</I64>
+      <I32 N="VirtualMemorySize">464355328</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">33050624</I64>
+      <I32 N="WorkingSet">33050624</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="852">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+        <Props>
+          <S N="ModuleName">chrome.exe</S>
+          <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="BaseAddress">140702356078592</S>
+          <I32 N="ModuleMemorySize">1732608</I32>
+          <S N="EntryPointAddress">140702357044720</S>
+          <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">1692</I32>
+          <S N="Company">Google LLC</S>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT7.21875S</TS>
+      <TS N="TotalProcessorTime">PT24.796875S</TS>
+      <TS N="UserProcessorTime">PT17.578125S</TS>
+      <Obj N="MainWindowHandle" RefId="853">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">chrome</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">237</I32>
+      <I64 N="VM">2203782578176</I64>
+      <I64 N="WS">33050624</I64>
+      <I64 N="PM">63090688</I64>
+      <I64 N="NPM">29640</I64>
+      <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+      <Obj N="Parent" RefId="854">
+        <TNRef RefId="0" />
+        <ToString>System.Diagnostics.Process (chrome)</ToString>
+        <Props>
+          <S N="SafeHandle">Microsoft.Win32.SafeHandles.SafeProcessHandle</S>
+          <S N="Handle">5292</S>
+          <I32 N="BasePriority">8</I32>
+          <B N="HasExited">false</B>
+          <DT N="StartTime">2019-08-24T14:18:00.3253674+03:00</DT>
+          <I32 N="Id">23804</I32>
+          <S N="MachineName">.</S>
+          <S N="MaxWorkingSet">1413120</S>
+          <S N="MinWorkingSet">204800</S>
+          <Obj N="Modules" RefId="855">
+            <TNRef RefId="6" />
+            <IE>
+              <S>System.Diagnostics.ProcessModule (chrome.exe)</S>
+              <S>System.Diagnostics.ProcessModule (ntdll.dll)</S>
+              <S>System.Diagnostics.ProcessModule (KERNEL32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (KERNELBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome_elf.dll)</S>
+              <S>System.Diagnostics.ProcessModule (VERSION.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ADVAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sechost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RPCRT4.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</S>
+              <S>System.Diagnostics.ProcessModule (user32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (win32u.dll)</S>
+              <S>System.Diagnostics.ProcessModule (GDI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdi32full.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ucrtbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IMM32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SHELL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cfgmgr32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (combase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (powrprof.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shlwapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (kernel.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptsp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome.dll)</S>
+              <S>System.Diagnostics.ProcessModule (uxtheme.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dwmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USERENV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gpapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wkscli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ole32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSCTF.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEAUT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Secur32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SSPICLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DWrite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WS2_32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (COMCTL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (clbcatq.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RMCLIENT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NLAapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NSI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc6.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DNSAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mscms.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ColorAdapterClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (icm32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TextInputFramework.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreUIComponents.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreMessaging.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d2d1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d3d11.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PROPSYS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wintypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntmarta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxgi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WTSAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlanapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINSTA.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemcomn.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MMDevApi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DEVOBJ.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemsvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINHTTP.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fastprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wmiutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FirewallAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fwbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (LINKINFO.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dataexchange.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dcomp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atlthunk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEACC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (directmanipulation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (explorerframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnapps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (XmlLite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mswsock.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMM.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMMBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WmiPerfInst.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pdh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BiWinrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NETAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SAMCLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SAMLIB.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wdmaud.drv)</S>
+              <S>System.Diagnostics.ProcessModule (ksuser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AVRT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AUDIOSES.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (msacm32.drv)</S>
+              <S>System.Diagnostics.ProcessModule (MSACM32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (midimap.dll)</S>
+              <S>System.Diagnostics.ProcessModule (resourcepolicyclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BitsProxy.dll)</S>
+            </IE>
+          </Obj>
+          <I64 N="NonpagedSystemMemorySize64">61568</I64>
+          <I32 N="NonpagedSystemMemorySize">61568</I32>
+          <I64 N="PagedMemorySize64">316080128</I64>
+          <I32 N="PagedMemorySize">316080128</I32>
+          <I64 N="PagedSystemMemorySize64">857648</I64>
+          <I32 N="PagedSystemMemorySize">857648</I32>
+          <I64 N="PeakPagedMemorySize64">455720960</I64>
+          <I32 N="PeakPagedMemorySize">455720960</I32>
+          <I64 N="PeakWorkingSet64">398323712</I64>
+          <I32 N="PeakWorkingSet">398323712</I32>
+          <I64 N="PeakVirtualMemorySize64">2204288917504</I64>
+          <I32 N="PeakVirtualMemorySize">970694656</I32>
+          <B N="PriorityBoostEnabled">true</B>
+          <S N="PriorityClass">Normal</S>
+          <I64 N="PrivateMemorySize64">316080128</I64>
+          <I32 N="PrivateMemorySize">316080128</I32>
+          <S N="ProcessName">chrome</S>
+          <S N="ProcessorAffinity">65535</S>
+          <I32 N="SessionId">1</I32>
+          <Obj N="Threads" RefId="856">
+            <TNRef RefId="1" />
+            <IE>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+            </IE>
+          </Obj>
+          <I32 N="HandleCount">1747</I32>
+          <I64 N="VirtualMemorySize64">2204143845376</I64>
+          <I32 N="VirtualMemorySize">825622528</I32>
+          <B N="EnableRaisingEvents">false</B>
+          <I64 N="WorkingSet64">112414720</I64>
+          <I32 N="WorkingSet">112414720</I32>
+          <Nil N="SynchronizingObject" />
+          <S N="MainModule">System.Diagnostics.ProcessModule (chrome.exe)</S>
+          <TS N="PrivilegedProcessorTime">PT11M7.53125S</TS>
+          <TS N="TotalProcessorTime">PT21M46.28125S</TS>
+          <TS N="UserProcessorTime">PT10M38.75S</TS>
+          <S N="MainWindowHandle">1770664</S>
+          <S N="MainWindowTitle">The Living Tombstone Radio - Now Playing on Pandora - Google Chrome</S>
+          <B N="Responding">true</B>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <S N="Name">chrome</S>
+          <I32 N="SI">1</I32>
+          <I32 N="Handles">1747</I32>
+          <I64 N="VM">2204143845376</I64>
+          <I64 N="WS">112414720</I64>
+          <I64 N="PM">316080128</I64>
+          <I64 N="NPM">61568</I64>
+          <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="Parent">System.Diagnostics.Process (explorer)</S>
+          <S N="Company">Google LLC</S>
+          <Db N="CPU">1306.28125</Db>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+          <S N="__NounName">Process</S>
+        </MS>
+      </Obj>
+      <S N="Company">Google LLC</S>
+      <Db N="CPU">24.796875</Db>
+      <S N="FileVersion">76.0.3809.100</S>
+      <S N="ProductVersion">76.0.3809.100</S>
+      <S N="Description">Google Chrome</S>
+      <S N="Product">Google Chrome</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="857">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (chrome)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="858">
+        <TNRef RefId="5" />
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="859">
+        <TNRef RefId="4" />
+        <ToString>5440</ToString>
+      </Obj>
+      <I32 N="BasePriority">4</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-24T14:18:42.7422991+03:00</DT>
+      <I32 N="Id">19408</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="860">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="861">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="862">
+        <TNRef RefId="6" />
+        <IE>
+          <Obj RefId="863">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+            <Props>
+              <S N="ModuleName">chrome.exe</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+              <S N="BaseAddress">140702356078592</S>
+              <I32 N="ModuleMemorySize">1732608</I32>
+              <S N="EntryPointAddress">140702357044720</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1692</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="864">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="865">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNEL32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">KERNEL32.DLL</S>
+              <S N="FileName">C:\Windows\System32\KERNEL32.DLL</S>
+              <S N="BaseAddress">140719912779776</S>
+              <I32 N="ModuleMemorySize">733184</I32>
+              <S N="EntryPointAddress">140719912876560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName:     kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">716</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="866">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNELBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">KERNELBASE.dll</S>
+              <S N="FileName">C:\Windows\System32\KERNELBASE.dll</S>
+              <S N="BaseAddress">140719894495232</S>
+              <I32 N="ModuleMemorySize">2699264</I32>
+              <S N="EntryPointAddress">140719894841456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName:     Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="867">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_elf.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_elf.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll</S>
+              <S N="BaseAddress">140719325642752</S>
+              <I32 N="ModuleMemorySize">925696</I32>
+              <S N="EntryPointAddress">140719326148464</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName:     chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">904</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="868">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (VERSION.dll)</ToString>
+            <Props>
+              <S N="ModuleName">VERSION.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\VERSION.dll</S>
+              <S N="BaseAddress">140719800254464</S>
+              <I32 N="ModuleMemorySize">40960</I32>
+              <S N="EntryPointAddress">140719800259344</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName:     version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Version Checking and File Installation Libraries_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">40</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Version Checking and File Installation Libraries</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="869">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcrt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcrt.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcrt.dll</S>
+              <S N="BaseAddress">140719950004224</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719950035120</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName:     msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion:      7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT CRT DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   7.0.17763.475_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.475 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.475</S>
+              <S N="Description">Windows NT CRT DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="870">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcryptPrimitives.dll</S>
+              <S N="FileName">C:\Windows\System32\bcryptPrimitives.dll</S>
+              <S N="BaseAddress">140719890235392</S>
+              <I32 N="ModuleMemorySize">516096</I32>
+              <S N="EntryPointAddress">140719890461152</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName:     bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">504</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="871">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ADVAPI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ADVAPI32.dll</S>
+              <S N="FileName">C:\Windows\System32\ADVAPI32.dll</S>
+              <S N="BaseAddress">140719915335680</S>
+              <I32 N="ModuleMemorySize">667648</I32>
+              <S N="EntryPointAddress">140719915417840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName:     advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Advanced Windows 32 Base API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">652</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Advanced Windows 32 Base API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="872">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sechost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sechost.dll</S>
+              <S N="FileName">C:\Windows\System32\sechost.dll</S>
+              <S N="BaseAddress">140719948824576</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719948951504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\sechost.dll_x000D__x000A_InternalName:     sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Host for SCM/SDDL/LSA Lookup APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="873">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RPCRT4.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RPCRT4.dll</S>
+              <S N="FileName">C:\Windows\System32\RPCRT4.dll</S>
+              <S N="BaseAddress">140719917629440</S>
+              <I32 N="ModuleMemorySize">1187840</I32>
+              <S N="EntryPointAddress">140719918006928</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName:     rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Procedure Call Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Procedure Call Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="874">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_child.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_child.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll</S>
+              <S N="BaseAddress">140717177962496</S>
+              <I32 N="ModuleMemorySize">87977984</I32>
+              <S N="EntryPointAddress">140717247440176</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName:     chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">85916</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="875">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OLEAUT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OLEAUT32.dll</S>
+              <S N="FileName">C:\Windows\System32\OLEAUT32.dll</S>
+              <S N="BaseAddress">140719946465280</S>
+              <I32 N="ModuleMemorySize">802816</I32>
+              <S N="EntryPointAddress">140719946574624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName:     OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OLEAUT32.DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">784</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">OLEAUT32.DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="876">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcp_win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcp_win.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcp_win.dll</S>
+              <S N="BaseAddress">140719889580032</S>
+              <I32 N="ModuleMemorySize">655360</I32>
+              <S N="EntryPointAddress">140719889658864</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName:     msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">640</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="877">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ucrtbase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ucrtbase.dll</S>
+              <S N="FileName">C:\Windows\System32\ucrtbase.dll</S>
+              <S N="BaseAddress">140719893446656</S>
+              <I32 N="ModuleMemorySize">1024000</I32>
+              <S N="EntryPointAddress">140719893528400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName:     ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1000</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="878">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (combase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">combase.dll</S>
+              <S N="FileName">C:\Windows\System32\combase.dll</S>
+              <S N="BaseAddress">140719950856192</S>
+              <I32 N="ModuleMemorySize">3325952</I32>
+              <S N="EntryPointAddress">140719951769888</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\combase.dll_x000D__x000A_InternalName:     COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft COM for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3248</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft COM for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="879">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WS2_32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WS2_32.dll</S>
+              <S N="FileName">C:\Windows\System32\WS2_32.dll</S>
+              <S N="BaseAddress">140719954198528</S>
+              <I32 N="ModuleMemorySize">446464</I32>
+              <S N="EntryPointAddress">140719954286384</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName:     ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">436</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Socket 2.0 32-Bit DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="880">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (GDI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">GDI32.dll</S>
+              <S N="FileName">C:\Windows\System32\GDI32.dll</S>
+              <S N="BaseAddress">140719950659584</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719950676208</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="881">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32full.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32full.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32full.dll</S>
+              <S N="BaseAddress">140719905112064</S>
+              <I32 N="ModuleMemorySize">1675264</I32>
+              <S N="EntryPointAddress">140719905369792</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="882">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USER32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USER32.dll</S>
+              <S N="FileName">C:\Windows\System32\USER32.dll</S>
+              <S N="BaseAddress">140719909306368</S>
+              <I32 N="ModuleMemorySize">1667072</I32>
+              <S N="EntryPointAddress">140719909414448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\USER32.dll_x000D__x000A_InternalName:     user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows USER API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows USER API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="883">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (win32u.dll)</ToString>
+            <Props>
+              <S N="ModuleName">win32u.dll</S>
+              <S N="FileName">C:\Windows\System32\win32u.dll</S>
+              <S N="BaseAddress">140719906816000</S>
+              <I32 N="ModuleMemorySize">131072</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\win32u.dll_x000D__x000A_InternalName:     Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32u_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">128</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32u</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="884">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINTRUST.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINTRUST.dll</S>
+              <S N="FileName">C:\Windows\System32\WINTRUST.dll</S>
+              <S N="BaseAddress">140719888728064</S>
+              <I32 N="ModuleMemorySize">364544</I32>
+              <S N="EntryPointAddress">140719888791376</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName:     WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Trust Verification APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">356</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft Trust Verification APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="885">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSASN1.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSASN1.dll</S>
+              <S N="FileName">C:\Windows\System32\MSASN1.dll</S>
+              <S N="BaseAddress">140719887876096</S>
+              <I32 N="ModuleMemorySize">73728</I32>
+              <S N="EntryPointAddress">140719887898576</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName:     msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  ASN.1 Runtime APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">72</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">ASN.1 Runtime APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="886">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPT32.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPT32.dll</S>
+              <S N="BaseAddress">140719891480576</S>
+              <I32 N="ModuleMemorySize">1945600</I32>
+              <S N="EntryPointAddress">140719891804832</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName:     CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Crypto API32_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1900</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Crypto API32</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="887">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IPHLPAPI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\IPHLPAPI.DLL</S>
+              <S N="BaseAddress">140719876931584</S>
+              <I32 N="ModuleMemorySize">249856</I32>
+              <S N="EntryPointAddress">140719876989024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName:     iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  IP Helper API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">244</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">IP Helper API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="888">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMM.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMM.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMM.dll</S>
+              <S N="BaseAddress">140719835054080</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719835066368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName:     winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MCI API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MCI API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="889">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USERENV.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USERENV.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\USERENV.dll</S>
+              <S N="BaseAddress">140719887024128</S>
+              <I32 N="ModuleMemorySize">163840</I32>
+              <S N="EntryPointAddress">140719887043280</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName:     userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Userenv_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Userenv</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="890">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (profapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">profapi.dll</S>
+              <S N="FileName">C:\Windows\System32\profapi.dll</S>
+              <S N="BaseAddress">140719888531456</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719888564400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\profapi.dll_x000D__x000A_InternalName:     PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  User Profile Basic API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">User Profile Basic API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="891">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (DWrite.dll)</ToString>
+            <Props>
+              <S N="ModuleName">DWrite.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\DWrite.dll</S>
+              <S N="BaseAddress">140719303819264</S>
+              <I32 N="ModuleMemorySize">3129344</I32>
+              <S N="EntryPointAddress">140719304509728</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName:     DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft DirectX Typography Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3056</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft DirectX Typography Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="892">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINSPOOL.DRV)</ToString>
+            <Props>
+              <S N="ModuleName">WINSPOOL.DRV</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINSPOOL.DRV</S>
+              <S N="BaseAddress">140719787606016</S>
+              <I32 N="ModuleMemorySize">561152</I32>
+              <S N="EntryPointAddress">140719787676448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName:     winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Spooler Driver_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">548</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Spooler Driver</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="893">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (kernel.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">kernel.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\kernel.appcore.dll</S>
+              <S N="BaseAddress">140719888400384</S>
+              <I32 N="ModuleMemorySize">69632</I32>
+              <S N="EntryPointAddress">140719888415648</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName:     kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AppModel API Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">68</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AppModel API Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="894">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcrypt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcrypt.dll</S>
+              <S N="FileName">C:\Windows\System32\bcrypt.dll</S>
+              <S N="BaseAddress">140719897247744</S>
+              <I32 N="ModuleMemorySize">155648</I32>
+              <S N="EntryPointAddress">140719897281296</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName:     bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">152</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="895">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dbghelp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dbghelp.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dbghelp.dll</S>
+              <S N="BaseAddress">140719552397312</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">140719552479168</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName:     DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Image Helper_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Image Helper</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="896">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINHTTP.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINHTTP.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINHTTP.dll</S>
+              <S N="BaseAddress">140719810019328</S>
+              <I32 N="ModuleMemorySize">991232</I32>
+              <S N="EntryPointAddress">140719810293024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName:     winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows HTTP Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">968</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows HTTP Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="897">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Secur32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Secur32.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\Secur32.dll</S>
+              <S N="BaseAddress">140719559147520</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719559156816</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName:     secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="898">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">dhcpcsvc.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dhcpcsvc.DLL</S>
+              <S N="BaseAddress">140719782494208</S>
+              <I32 N="ModuleMemorySize">114688</I32>
+              <S N="EntryPointAddress">140719782503840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName:     dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  DHCP Client Service_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">112</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">DHCP Client Service</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="899">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (NSI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">NSI.dll</S>
+              <S N="FileName">C:\Windows\System32\NSI.dll</S>
+              <S N="BaseAddress">140719916843008</S>
+              <I32 N="ModuleMemorySize">32768</I32>
+              <S N="EntryPointAddress">140719916851008</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\NSI.dll_x000D__x000A_InternalName:     nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NSI User-mode interface DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">32</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NSI User-mode interface DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="900">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMMBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMMBASE.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMMBASE.dll</S>
+              <S N="BaseAddress">140719834857472</S>
+              <I32 N="ModuleMemorySize">184320</I32>
+              <S N="EntryPointAddress">140719834890448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName:     winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base Multimedia Extension API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">180</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base Multimedia Extension API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="901">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cfgmgr32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cfgmgr32.dll</S>
+              <S N="FileName">C:\Windows\System32\cfgmgr32.dll</S>
+              <S N="BaseAddress">140719889252352</S>
+              <I32 N="ModuleMemorySize">303104</I32>
+              <S N="EntryPointAddress">140719889325904</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName:     cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Configuration Manager DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">296</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Configuration Manager DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="902">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (PROPSYS.dll)</ToString>
+            <Props>
+              <S N="ModuleName">PROPSYS.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\PROPSYS.dll</S>
+              <S N="BaseAddress">140719831187456</S>
+              <I32 N="ModuleMemorySize">1736704</I32>
+              <S N="EntryPointAddress">140719831447408</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName:     propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion:      7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Property System_x000D__x000A_Product:          Windows® Search_x000D__x000A_ProductVersion:   7.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1696</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.1</S>
+              <S N="Description">Microsoft Property System</S>
+              <S N="Product">Windows® Search</S>
+            </MS>
+          </Obj>
+          <Obj RefId="903">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shcore.dll</S>
+              <S N="FileName">C:\Windows\System32\shcore.dll</S>
+              <S N="BaseAddress">140719907143680</S>
+              <I32 N="ModuleMemorySize">688128</I32>
+              <S N="EntryPointAddress">140719907388560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shcore.dll_x000D__x000A_InternalName:     SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  SHCORE_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">672</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">SHCORE</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="904">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SSPICLI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">SSPICLI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\SSPICLI.DLL</S>
+              <S N="BaseAddress">140719886827520</S>
+              <I32 N="ModuleMemorySize">192512</I32>
+              <S N="EntryPointAddress">140719886881776</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName:     sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">188</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="905">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IMM32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IMM32.DLL</S>
+              <S N="FileName">C:\Windows\System32\IMM32.DLL</S>
+              <S N="BaseAddress">140719906947072</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719906952688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName:     imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows IMM32 API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="906">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPTBASE.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\CRYPTBASE.DLL</S>
+              <S N="BaseAddress">140719881846784</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719881855488</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName:     cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base cryptographic API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base cryptographic API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">44</I32>
+          <Obj N="SyncRoot" RefId="907">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="863" />
+              <Ref RefId="864" />
+              <Ref RefId="865" />
+              <Ref RefId="866" />
+              <Ref RefId="867" />
+              <Ref RefId="868" />
+              <Ref RefId="869" />
+              <Ref RefId="870" />
+              <Ref RefId="871" />
+              <Ref RefId="872" />
+              <Ref RefId="873" />
+              <Ref RefId="874" />
+              <Ref RefId="875" />
+              <Ref RefId="876" />
+              <Ref RefId="877" />
+              <Ref RefId="878" />
+              <Ref RefId="879" />
+              <Ref RefId="880" />
+              <Ref RefId="881" />
+              <Ref RefId="882" />
+              <Ref RefId="883" />
+              <Ref RefId="884" />
+              <Ref RefId="885" />
+              <Ref RefId="886" />
+              <Ref RefId="887" />
+              <Ref RefId="888" />
+              <Ref RefId="889" />
+              <Ref RefId="890" />
+              <Ref RefId="891" />
+              <Ref RefId="892" />
+              <Ref RefId="893" />
+              <Ref RefId="894" />
+              <Ref RefId="895" />
+              <Ref RefId="896" />
+              <Ref RefId="897" />
+              <Ref RefId="898" />
+              <Ref RefId="899" />
+              <Ref RefId="900" />
+              <Ref RefId="901" />
+              <Ref RefId="902" />
+              <Ref RefId="903" />
+              <Ref RefId="904" />
+              <Ref RefId="905" />
+              <Ref RefId="906" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">27872</I64>
+      <I32 N="NonpagedSystemMemorySize">27872</I32>
+      <I64 N="PagedMemorySize64">40718336</I64>
+      <I32 N="PagedMemorySize">40718336</I32>
+      <I64 N="PagedSystemMemorySize64">349664</I64>
+      <I32 N="PagedSystemMemorySize">349664</I32>
+      <I64 N="PeakPagedMemorySize64">47194112</I64>
+      <I32 N="PeakPagedMemorySize">47194112</I32>
+      <I64 N="PeakWorkingSet64">50327552</I64>
+      <I32 N="PeakWorkingSet">50327552</I32>
+      <I64 N="PeakVirtualMemorySize64">2203768713216</I64>
+      <I32 N="PeakVirtualMemorySize">450490368</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="908">
+        <TNRef RefId="8" />
+        <ToString>Idle</ToString>
+        <I32>64</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">40718336</I64>
+      <I32 N="PrivateMemorySize">40718336</I32>
+      <S N="ProcessName">chrome</S>
+      <Obj N="ProcessorAffinity" RefId="909">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="910">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="911">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">5</I32>
+              <I32 N="Id">23128</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.6875S</TS>
+              <DT N="StartTime">2019-08-24T14:18:42.7423016+03:00</DT>
+              <TS N="TotalProcessorTime">PT9.640625S</TS>
+              <TS N="UserProcessorTime">PT8.953125S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="912">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">564</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:42.7985453+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="913">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">2</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">13700</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:42.7998575+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="914">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">23576</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT1.34375S</TS>
+              <DT N="StartTime">2019-08-24T14:18:42.8006891+03:00</DT>
+              <TS N="TotalProcessorTime">PT6.890625S</TS>
+              <TS N="UserProcessorTime">PT5.546875S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="915">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">23680</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:42.8012881+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="916">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">19328</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:42.8021576+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="917">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">5</I32>
+              <I32 N="Id">17648</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:42.8084287+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="918">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">21252</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:42.8096096+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="919">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">23924</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:42.8103373+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="920">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">14676</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:42.8109084+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="921">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">1888</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:42.8113991+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="922">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">2</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">16288</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:42.8118186+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="923">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">4</I32>
+              <I32 N="CurrentPriority">4</I32>
+              <I32 N="Id">22992</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T02:34:29.4502554+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">13</I32>
+          <Obj N="SyncRoot" RefId="924">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="911" />
+              <Ref RefId="912" />
+              <Ref RefId="913" />
+              <Ref RefId="914" />
+              <Ref RefId="915" />
+              <Ref RefId="916" />
+              <Ref RefId="917" />
+              <Ref RefId="918" />
+              <Ref RefId="919" />
+              <Ref RefId="920" />
+              <Ref RefId="921" />
+              <Ref RefId="922" />
+              <Ref RefId="923" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">240</I32>
+      <I64 N="VirtualMemorySize64">2203746955264</I64>
+      <I32 N="VirtualMemorySize">428732416</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">39317504</I64>
+      <I32 N="WorkingSet">39317504</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="925">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+        <Props>
+          <S N="ModuleName">chrome.exe</S>
+          <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="BaseAddress">140702356078592</S>
+          <I32 N="ModuleMemorySize">1732608</I32>
+          <S N="EntryPointAddress">140702357044720</S>
+          <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">1692</I32>
+          <S N="Company">Google LLC</S>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT2.828125S</TS>
+      <TS N="TotalProcessorTime">PT18.625S</TS>
+      <TS N="UserProcessorTime">PT15.796875S</TS>
+      <Obj N="MainWindowHandle" RefId="926">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">chrome</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">240</I32>
+      <I64 N="VM">2203746955264</I64>
+      <I64 N="WS">39317504</I64>
+      <I64 N="PM">40718336</I64>
+      <I64 N="NPM">27872</I64>
+      <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+      <Obj N="Parent" RefId="927">
+        <TNRef RefId="0" />
+        <ToString>System.Diagnostics.Process (chrome)</ToString>
+        <Props>
+          <S N="SafeHandle">Microsoft.Win32.SafeHandles.SafeProcessHandle</S>
+          <S N="Handle">6252</S>
+          <I32 N="BasePriority">8</I32>
+          <B N="HasExited">false</B>
+          <DT N="StartTime">2019-08-24T14:18:00.3253674+03:00</DT>
+          <I32 N="Id">23804</I32>
+          <S N="MachineName">.</S>
+          <S N="MaxWorkingSet">1413120</S>
+          <S N="MinWorkingSet">204800</S>
+          <Obj N="Modules" RefId="928">
+            <TNRef RefId="6" />
+            <IE>
+              <S>System.Diagnostics.ProcessModule (chrome.exe)</S>
+              <S>System.Diagnostics.ProcessModule (ntdll.dll)</S>
+              <S>System.Diagnostics.ProcessModule (KERNEL32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (KERNELBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome_elf.dll)</S>
+              <S>System.Diagnostics.ProcessModule (VERSION.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ADVAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sechost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RPCRT4.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</S>
+              <S>System.Diagnostics.ProcessModule (user32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (win32u.dll)</S>
+              <S>System.Diagnostics.ProcessModule (GDI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdi32full.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ucrtbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IMM32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SHELL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cfgmgr32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (combase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (powrprof.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shlwapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (kernel.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptsp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome.dll)</S>
+              <S>System.Diagnostics.ProcessModule (uxtheme.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dwmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USERENV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gpapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wkscli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ole32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSCTF.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEAUT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Secur32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SSPICLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DWrite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WS2_32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (COMCTL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (clbcatq.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RMCLIENT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NLAapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NSI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc6.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DNSAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mscms.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ColorAdapterClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (icm32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TextInputFramework.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreUIComponents.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreMessaging.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d2d1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d3d11.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PROPSYS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wintypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntmarta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxgi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WTSAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlanapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINSTA.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemcomn.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MMDevApi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DEVOBJ.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemsvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINHTTP.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fastprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wmiutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FirewallAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fwbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (LINKINFO.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dataexchange.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dcomp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atlthunk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEACC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (directmanipulation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (explorerframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnapps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (XmlLite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mswsock.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMM.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMMBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WmiPerfInst.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pdh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BiWinrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NETAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SAMCLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SAMLIB.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wdmaud.drv)</S>
+              <S>System.Diagnostics.ProcessModule (ksuser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AVRT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AUDIOSES.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (msacm32.drv)</S>
+              <S>System.Diagnostics.ProcessModule (MSACM32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (midimap.dll)</S>
+              <S>System.Diagnostics.ProcessModule (resourcepolicyclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BitsProxy.dll)</S>
+            </IE>
+          </Obj>
+          <I64 N="NonpagedSystemMemorySize64">61568</I64>
+          <I32 N="NonpagedSystemMemorySize">61568</I32>
+          <I64 N="PagedMemorySize64">316080128</I64>
+          <I32 N="PagedMemorySize">316080128</I32>
+          <I64 N="PagedSystemMemorySize64">857648</I64>
+          <I32 N="PagedSystemMemorySize">857648</I32>
+          <I64 N="PeakPagedMemorySize64">455720960</I64>
+          <I32 N="PeakPagedMemorySize">455720960</I32>
+          <I64 N="PeakWorkingSet64">398323712</I64>
+          <I32 N="PeakWorkingSet">398323712</I32>
+          <I64 N="PeakVirtualMemorySize64">2204288917504</I64>
+          <I32 N="PeakVirtualMemorySize">970694656</I32>
+          <B N="PriorityBoostEnabled">true</B>
+          <S N="PriorityClass">Normal</S>
+          <I64 N="PrivateMemorySize64">316080128</I64>
+          <I32 N="PrivateMemorySize">316080128</I32>
+          <S N="ProcessName">chrome</S>
+          <S N="ProcessorAffinity">65535</S>
+          <I32 N="SessionId">1</I32>
+          <Obj N="Threads" RefId="929">
+            <TNRef RefId="1" />
+            <IE>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+            </IE>
+          </Obj>
+          <I32 N="HandleCount">1747</I32>
+          <I64 N="VirtualMemorySize64">2204143845376</I64>
+          <I32 N="VirtualMemorySize">825622528</I32>
+          <B N="EnableRaisingEvents">false</B>
+          <I64 N="WorkingSet64">112414720</I64>
+          <I32 N="WorkingSet">112414720</I32>
+          <Nil N="SynchronizingObject" />
+          <S N="MainModule">System.Diagnostics.ProcessModule (chrome.exe)</S>
+          <TS N="PrivilegedProcessorTime">PT11M7.53125S</TS>
+          <TS N="TotalProcessorTime">PT21M46.28125S</TS>
+          <TS N="UserProcessorTime">PT10M38.75S</TS>
+          <S N="MainWindowHandle">1770664</S>
+          <S N="MainWindowTitle">The Living Tombstone Radio - Now Playing on Pandora - Google Chrome</S>
+          <B N="Responding">true</B>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <S N="Name">chrome</S>
+          <I32 N="SI">1</I32>
+          <I32 N="Handles">1747</I32>
+          <I64 N="VM">2204143845376</I64>
+          <I64 N="WS">112414720</I64>
+          <I64 N="PM">316080128</I64>
+          <I64 N="NPM">61568</I64>
+          <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="Parent">System.Diagnostics.Process (explorer)</S>
+          <S N="Company">Google LLC</S>
+          <Db N="CPU">1306.28125</Db>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+          <S N="__NounName">Process</S>
+        </MS>
+      </Obj>
+      <S N="Company">Google LLC</S>
+      <Db N="CPU">18.625</Db>
+      <S N="FileVersion">76.0.3809.100</S>
+      <S N="ProductVersion">76.0.3809.100</S>
+      <S N="Description">Google Chrome</S>
+      <S N="Product">Google Chrome</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="930">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (chrome)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="931">
+        <TNRef RefId="5" />
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="932">
+        <TNRef RefId="4" />
+        <ToString>6688</ToString>
+      </Obj>
+      <I32 N="BasePriority">8</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-24T14:18:00.4967237+03:00</DT>
+      <I32 N="Id">19596</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="933">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="934">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="935">
+        <TNRef RefId="6" />
+        <IE>
+          <Obj RefId="936">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+            <Props>
+              <S N="ModuleName">chrome.exe</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+              <S N="BaseAddress">140702356078592</S>
+              <I32 N="ModuleMemorySize">1732608</I32>
+              <S N="EntryPointAddress">140702357044720</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1692</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="937">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="938">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNEL32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">KERNEL32.DLL</S>
+              <S N="FileName">C:\Windows\System32\KERNEL32.DLL</S>
+              <S N="BaseAddress">140719912779776</S>
+              <I32 N="ModuleMemorySize">733184</I32>
+              <S N="EntryPointAddress">140719912876560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName:     kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">716</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="939">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNELBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">KERNELBASE.dll</S>
+              <S N="FileName">C:\Windows\System32\KERNELBASE.dll</S>
+              <S N="BaseAddress">140719894495232</S>
+              <I32 N="ModuleMemorySize">2699264</I32>
+              <S N="EntryPointAddress">140719894841456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName:     Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="940">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_elf.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_elf.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll</S>
+              <S N="BaseAddress">140719325642752</S>
+              <I32 N="ModuleMemorySize">925696</I32>
+              <S N="EntryPointAddress">140719326148464</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName:     chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">904</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="941">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (VERSION.dll)</ToString>
+            <Props>
+              <S N="ModuleName">VERSION.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\VERSION.dll</S>
+              <S N="BaseAddress">140719800254464</S>
+              <I32 N="ModuleMemorySize">40960</I32>
+              <S N="EntryPointAddress">140719800259344</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName:     version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Version Checking and File Installation Libraries_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">40</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Version Checking and File Installation Libraries</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="942">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcrt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcrt.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcrt.dll</S>
+              <S N="BaseAddress">140719950004224</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719950035120</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName:     msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion:      7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT CRT DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   7.0.17763.475_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.475 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.475</S>
+              <S N="Description">Windows NT CRT DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="943">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcryptPrimitives.dll</S>
+              <S N="FileName">C:\Windows\System32\bcryptPrimitives.dll</S>
+              <S N="BaseAddress">140719890235392</S>
+              <I32 N="ModuleMemorySize">516096</I32>
+              <S N="EntryPointAddress">140719890461152</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName:     bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">504</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="944">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ADVAPI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ADVAPI32.dll</S>
+              <S N="FileName">C:\Windows\System32\ADVAPI32.dll</S>
+              <S N="BaseAddress">140719915335680</S>
+              <I32 N="ModuleMemorySize">667648</I32>
+              <S N="EntryPointAddress">140719915417840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName:     advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Advanced Windows 32 Base API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">652</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Advanced Windows 32 Base API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="945">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sechost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sechost.dll</S>
+              <S N="FileName">C:\Windows\System32\sechost.dll</S>
+              <S N="BaseAddress">140719948824576</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719948951504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\sechost.dll_x000D__x000A_InternalName:     sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Host for SCM/SDDL/LSA Lookup APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="946">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RPCRT4.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RPCRT4.dll</S>
+              <S N="FileName">C:\Windows\System32\RPCRT4.dll</S>
+              <S N="BaseAddress">140719917629440</S>
+              <I32 N="ModuleMemorySize">1187840</I32>
+              <S N="EntryPointAddress">140719918006928</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName:     rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Procedure Call Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Procedure Call Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="947">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (user32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">user32.dll</S>
+              <S N="FileName">C:\Windows\System32\user32.dll</S>
+              <S N="BaseAddress">140719909306368</S>
+              <I32 N="ModuleMemorySize">1667072</I32>
+              <S N="EntryPointAddress">140719909414448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\user32.dll_x000D__x000A_InternalName:     user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows USER API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows USER API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="948">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (win32u.dll)</ToString>
+            <Props>
+              <S N="ModuleName">win32u.dll</S>
+              <S N="FileName">C:\Windows\System32\win32u.dll</S>
+              <S N="BaseAddress">140719906816000</S>
+              <I32 N="ModuleMemorySize">131072</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\win32u.dll_x000D__x000A_InternalName:     Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32u_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">128</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32u</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="949">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (GDI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">GDI32.dll</S>
+              <S N="FileName">C:\Windows\System32\GDI32.dll</S>
+              <S N="BaseAddress">140719950659584</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719950676208</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="950">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32full.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32full.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32full.dll</S>
+              <S N="BaseAddress">140719905112064</S>
+              <I32 N="ModuleMemorySize">1675264</I32>
+              <S N="EntryPointAddress">140719905369792</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="951">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcp_win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcp_win.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcp_win.dll</S>
+              <S N="BaseAddress">140719889580032</S>
+              <I32 N="ModuleMemorySize">655360</I32>
+              <S N="EntryPointAddress">140719889658864</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName:     msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">640</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="952">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ucrtbase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ucrtbase.dll</S>
+              <S N="FileName">C:\Windows\System32\ucrtbase.dll</S>
+              <S N="BaseAddress">140719893446656</S>
+              <I32 N="ModuleMemorySize">1024000</I32>
+              <S N="EntryPointAddress">140719893528400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName:     ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1000</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="953">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IMM32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IMM32.DLL</S>
+              <S N="FileName">C:\Windows\System32\IMM32.DLL</S>
+              <S N="BaseAddress">140719906947072</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719906952688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName:     imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows IMM32 API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="954">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SHELL32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">SHELL32.dll</S>
+              <S N="FileName">C:\Windows\System32\SHELL32.dll</S>
+              <S N="BaseAddress">140719923593216</S>
+              <I32 N="ModuleMemorySize">21954560</I32>
+              <S N="EntryPointAddress">140719924695456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\SHELL32.dll_x000D__x000A_InternalName:     SHELL32_x000D__x000A_OriginalFilename: SHELL32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Shell Common Dll_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">21440</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Shell Common Dll</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="955">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cfgmgr32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cfgmgr32.dll</S>
+              <S N="FileName">C:\Windows\System32\cfgmgr32.dll</S>
+              <S N="BaseAddress">140719889252352</S>
+              <I32 N="ModuleMemorySize">303104</I32>
+              <S N="EntryPointAddress">140719889325904</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName:     cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Configuration Manager DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">296</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Configuration Manager DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="956">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shcore.dll</S>
+              <S N="FileName">C:\Windows\System32\shcore.dll</S>
+              <S N="BaseAddress">140719907143680</S>
+              <I32 N="ModuleMemorySize">688128</I32>
+              <S N="EntryPointAddress">140719907388560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shcore.dll_x000D__x000A_InternalName:     SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  SHCORE_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">672</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">SHCORE</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="957">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (combase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">combase.dll</S>
+              <S N="FileName">C:\Windows\System32\combase.dll</S>
+              <S N="BaseAddress">140719950856192</S>
+              <I32 N="ModuleMemorySize">3325952</I32>
+              <S N="EntryPointAddress">140719951769888</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\combase.dll_x000D__x000A_InternalName:     COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft COM for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3248</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft COM for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="958">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (windows.storage.dll)</ToString>
+            <Props>
+              <S N="ModuleName">windows.storage.dll</S>
+              <S N="FileName">C:\Windows\System32\windows.storage.dll</S>
+              <S N="BaseAddress">140719897444352</S>
+              <I32 N="ModuleMemorySize">7643136</I32>
+              <S N="EntryPointAddress">140719899226624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\windows.storage.dll_x000D__x000A_InternalName:     Windows.Storage_x000D__x000A_OriginalFilename: Windows.Storage.dll.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft WinRT Storage API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">7464</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft WinRT Storage API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="959">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (profapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">profapi.dll</S>
+              <S N="FileName">C:\Windows\System32\profapi.dll</S>
+              <S N="BaseAddress">140719888531456</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719888564400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\profapi.dll_x000D__x000A_InternalName:     PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  User Profile Basic API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">User Profile Basic API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="960">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (powrprof.dll)</ToString>
+            <Props>
+              <S N="ModuleName">powrprof.dll</S>
+              <S N="FileName">C:\Windows\System32\powrprof.dll</S>
+              <S N="BaseAddress">140719888007168</S>
+              <I32 N="ModuleMemorySize">380928</I32>
+              <S N="EntryPointAddress">140719888020992</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\powrprof.dll_x000D__x000A_InternalName:     POWRPROF_x000D__x000A_OriginalFilename: POWRPROF.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Power Profile Helper DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">372</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Power Profile Helper DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="961">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shlwapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shlwapi.dll</S>
+              <S N="FileName">C:\Windows\System32\shlwapi.dll</S>
+              <S N="BaseAddress">140719945547776</S>
+              <I32 N="ModuleMemorySize">335872</I32>
+              <S N="EntryPointAddress">140719945588304</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shlwapi.dll_x000D__x000A_InternalName:     SHLWAPI_x000D__x000A_OriginalFilename: SHLWAPI.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Shell Light-weight Utility Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">328</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Shell Light-weight Utility Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="962">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (kernel.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">kernel.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\kernel.appcore.dll</S>
+              <S N="BaseAddress">140719888400384</S>
+              <I32 N="ModuleMemorySize">69632</I32>
+              <S N="EntryPointAddress">140719888415648</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName:     kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AppModel API Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">68</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AppModel API Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="963">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cryptsp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cryptsp.dll</S>
+              <S N="FileName">C:\Windows\System32\cryptsp.dll</S>
+              <S N="BaseAddress">140719889121280</S>
+              <I32 N="ModuleMemorySize">94208</I32>
+              <S N="EntryPointAddress">140719889138512</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cryptsp.dll_x000D__x000A_InternalName:     cryptsp.dll_x000D__x000A_OriginalFilename: cryptsp.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Cryptographic Service Provider API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">92</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Cryptographic Service Provider API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="964">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_watcher.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_watcher.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_watcher.dll</S>
+              <S N="BaseAddress">140719307489280</S>
+              <I32 N="ModuleMemorySize">950272</I32>
+              <S N="EntryPointAddress">140719308049024</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_watcher.dll_x000D__x000A_InternalName:     chrome_watcher_dll_x000D__x000A_OriginalFilename: chrome_watcher.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">928</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="965">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ole32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ole32.dll</S>
+              <S N="FileName">C:\Windows\System32\ole32.dll</S>
+              <S N="BaseAddress">140719907864576</S>
+              <I32 N="ModuleMemorySize">1396736</I32>
+              <S N="EntryPointAddress">140719908019504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ole32.dll_x000D__x000A_InternalName:     OLE32.DLL_x000D__x000A_OriginalFilename: OLE32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft OLE for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1364</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft OLE for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="966">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMM.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMM.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMM.dll</S>
+              <S N="BaseAddress">140719835054080</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719835066368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName:     winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MCI API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MCI API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="967">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMMBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMMBASE.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMMBASE.dll</S>
+              <S N="BaseAddress">140719834857472</S>
+              <I32 N="ModuleMemorySize">184320</I32>
+              <S N="EntryPointAddress">140719834890448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName:     winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base Multimedia Extension API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">180</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base Multimedia Extension API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="968">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPTBASE.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\CRYPTBASE.DLL</S>
+              <S N="BaseAddress">140719881846784</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719881855488</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName:     cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base cryptographic API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base cryptographic API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="969">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (uxtheme.dll)</ToString>
+            <Props>
+              <S N="ModuleName">uxtheme.dll</S>
+              <S N="FileName">C:\Windows\system32\uxtheme.dll</S>
+              <S N="BaseAddress">140719860547584</S>
+              <I32 N="ModuleMemorySize">638976</I32>
+              <S N="EntryPointAddress">140719860712368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\uxtheme.dll_x000D__x000A_InternalName:     UxTheme.dll_x000D__x000A_OriginalFilename: UxTheme.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft UxTheme Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">624</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft UxTheme Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="970">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dwmapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dwmapi.dll</S>
+              <S N="FileName">C:\Windows\system32\dwmapi.dll</S>
+              <S N="BaseAddress">140719861399552</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719861412880</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\dwmapi.dll_x000D__x000A_InternalName:     dwmapi.dll_x000D__x000A_OriginalFilename: dwmapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Desktop Window Manager API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft Desktop Window Manager API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="971">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPT32.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPT32.dll</S>
+              <S N="BaseAddress">140719891480576</S>
+              <I32 N="ModuleMemorySize">1945600</I32>
+              <S N="EntryPointAddress">140719891804832</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName:     CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Crypto API32_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1900</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Crypto API32</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="972">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSASN1.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSASN1.dll</S>
+              <S N="FileName">C:\Windows\System32\MSASN1.dll</S>
+              <S N="BaseAddress">140719887876096</S>
+              <I32 N="ModuleMemorySize">73728</I32>
+              <S N="EntryPointAddress">140719887898576</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName:     msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  ASN.1 Runtime APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">72</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">ASN.1 Runtime APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="973">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSCTF.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSCTF.dll</S>
+              <S N="FileName">C:\Windows\System32\MSCTF.dll</S>
+              <S N="BaseAddress">140719947317248</S>
+              <I32 N="ModuleMemorySize">1486848</I32>
+              <S N="EntryPointAddress">140719947597184</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSCTF.dll_x000D__x000A_InternalName:     MSCTF_x000D__x000A_OriginalFilename: MSCTF.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MSCTF Server DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1452</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MSCTF Server DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="974">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OLEAUT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OLEAUT32.dll</S>
+              <S N="FileName">C:\Windows\System32\OLEAUT32.dll</S>
+              <S N="BaseAddress">140719946465280</S>
+              <I32 N="ModuleMemorySize">802816</I32>
+              <S N="EntryPointAddress">140719946574624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName:     OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OLEAUT32.DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">784</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">OLEAUT32.DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">39</I32>
+          <Obj N="SyncRoot" RefId="975">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="936" />
+              <Ref RefId="937" />
+              <Ref RefId="938" />
+              <Ref RefId="939" />
+              <Ref RefId="940" />
+              <Ref RefId="941" />
+              <Ref RefId="942" />
+              <Ref RefId="943" />
+              <Ref RefId="944" />
+              <Ref RefId="945" />
+              <Ref RefId="946" />
+              <Ref RefId="947" />
+              <Ref RefId="948" />
+              <Ref RefId="949" />
+              <Ref RefId="950" />
+              <Ref RefId="951" />
+              <Ref RefId="952" />
+              <Ref RefId="953" />
+              <Ref RefId="954" />
+              <Ref RefId="955" />
+              <Ref RefId="956" />
+              <Ref RefId="957" />
+              <Ref RefId="958" />
+              <Ref RefId="959" />
+              <Ref RefId="960" />
+              <Ref RefId="961" />
+              <Ref RefId="962" />
+              <Ref RefId="963" />
+              <Ref RefId="964" />
+              <Ref RefId="965" />
+              <Ref RefId="966" />
+              <Ref RefId="967" />
+              <Ref RefId="968" />
+              <Ref RefId="969" />
+              <Ref RefId="970" />
+              <Ref RefId="971" />
+              <Ref RefId="972" />
+              <Ref RefId="973" />
+              <Ref RefId="974" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">11080</I64>
+      <I32 N="NonpagedSystemMemorySize">11080</I32>
+      <I64 N="PagedMemorySize64">2084864</I64>
+      <I32 N="PagedMemorySize">2084864</I32>
+      <I64 N="PagedSystemMemorySize64">185848</I64>
+      <I32 N="PagedSystemMemorySize">185848</I32>
+      <I64 N="PeakPagedMemorySize64">2134016</I64>
+      <I32 N="PeakPagedMemorySize">2134016</I32>
+      <I64 N="PeakWorkingSet64">9211904</I64>
+      <I32 N="PeakWorkingSet">9211904</I32>
+      <I64 N="PeakVirtualMemorySize64">2203457196032</I64>
+      <I32 N="PeakVirtualMemorySize">138973184</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="976">
+        <TNRef RefId="8" />
+        <ToString>Normal</ToString>
+        <I32>32</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">2084864</I64>
+      <I32 N="PrivateMemorySize">2084864</I32>
+      <S N="ProcessName">chrome</S>
+      <Obj N="ProcessorAffinity" RefId="977">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="978">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="979">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">1004</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.03125S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.496725+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.03125S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="980">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">18292</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.5228201+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">2</I32>
+          <Obj N="SyncRoot" RefId="981">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="979" />
+              <Ref RefId="980" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">139</I32>
+      <I64 N="VirtualMemorySize64">2203455098880</I64>
+      <I32 N="VirtualMemorySize">136876032</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">6107136</I64>
+      <I32 N="WorkingSet">6107136</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="982">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+        <Props>
+          <S N="ModuleName">chrome.exe</S>
+          <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="BaseAddress">140702356078592</S>
+          <I32 N="ModuleMemorySize">1732608</I32>
+          <S N="EntryPointAddress">140702357044720</S>
+          <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">1692</I32>
+          <S N="Company">Google LLC</S>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT0.03125S</TS>
+      <TS N="TotalProcessorTime">PT0.03125S</TS>
+      <TS N="UserProcessorTime">PT0S</TS>
+      <Obj N="MainWindowHandle" RefId="983">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">chrome</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">139</I32>
+      <I64 N="VM">2203455098880</I64>
+      <I64 N="WS">6107136</I64>
+      <I64 N="PM">2084864</I64>
+      <I64 N="NPM">11080</I64>
+      <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+      <Obj N="Parent" RefId="984">
+        <TNRef RefId="0" />
+        <ToString>System.Diagnostics.Process (chrome)</ToString>
+        <Props>
+          <S N="SafeHandle">Microsoft.Win32.SafeHandles.SafeProcessHandle</S>
+          <S N="Handle">5692</S>
+          <I32 N="BasePriority">8</I32>
+          <B N="HasExited">false</B>
+          <DT N="StartTime">2019-08-24T14:18:00.3253674+03:00</DT>
+          <I32 N="Id">23804</I32>
+          <S N="MachineName">.</S>
+          <S N="MaxWorkingSet">1413120</S>
+          <S N="MinWorkingSet">204800</S>
+          <Obj N="Modules" RefId="985">
+            <TNRef RefId="6" />
+            <IE>
+              <S>System.Diagnostics.ProcessModule (chrome.exe)</S>
+              <S>System.Diagnostics.ProcessModule (ntdll.dll)</S>
+              <S>System.Diagnostics.ProcessModule (KERNEL32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (KERNELBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome_elf.dll)</S>
+              <S>System.Diagnostics.ProcessModule (VERSION.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ADVAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sechost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RPCRT4.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</S>
+              <S>System.Diagnostics.ProcessModule (user32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (win32u.dll)</S>
+              <S>System.Diagnostics.ProcessModule (GDI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdi32full.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ucrtbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IMM32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SHELL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cfgmgr32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (combase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (powrprof.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shlwapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (kernel.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptsp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome.dll)</S>
+              <S>System.Diagnostics.ProcessModule (uxtheme.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dwmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USERENV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gpapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wkscli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ole32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSCTF.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEAUT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Secur32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SSPICLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DWrite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WS2_32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (COMCTL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (clbcatq.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RMCLIENT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NLAapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NSI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc6.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DNSAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mscms.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ColorAdapterClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (icm32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TextInputFramework.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreUIComponents.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreMessaging.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d2d1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d3d11.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PROPSYS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wintypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntmarta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxgi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WTSAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlanapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINSTA.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemcomn.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MMDevApi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DEVOBJ.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemsvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINHTTP.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fastprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wmiutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FirewallAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fwbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (LINKINFO.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dataexchange.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dcomp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atlthunk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEACC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (directmanipulation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (explorerframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnapps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (XmlLite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mswsock.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMM.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMMBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WmiPerfInst.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pdh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BiWinrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NETAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SAMCLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SAMLIB.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wdmaud.drv)</S>
+              <S>System.Diagnostics.ProcessModule (ksuser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AVRT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AUDIOSES.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (msacm32.drv)</S>
+              <S>System.Diagnostics.ProcessModule (MSACM32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (midimap.dll)</S>
+              <S>System.Diagnostics.ProcessModule (resourcepolicyclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BitsProxy.dll)</S>
+            </IE>
+          </Obj>
+          <I64 N="NonpagedSystemMemorySize64">61568</I64>
+          <I32 N="NonpagedSystemMemorySize">61568</I32>
+          <I64 N="PagedMemorySize64">316080128</I64>
+          <I32 N="PagedMemorySize">316080128</I32>
+          <I64 N="PagedSystemMemorySize64">857648</I64>
+          <I32 N="PagedSystemMemorySize">857648</I32>
+          <I64 N="PeakPagedMemorySize64">455720960</I64>
+          <I32 N="PeakPagedMemorySize">455720960</I32>
+          <I64 N="PeakWorkingSet64">398323712</I64>
+          <I32 N="PeakWorkingSet">398323712</I32>
+          <I64 N="PeakVirtualMemorySize64">2204288917504</I64>
+          <I32 N="PeakVirtualMemorySize">970694656</I32>
+          <B N="PriorityBoostEnabled">true</B>
+          <S N="PriorityClass">Normal</S>
+          <I64 N="PrivateMemorySize64">316080128</I64>
+          <I32 N="PrivateMemorySize">316080128</I32>
+          <S N="ProcessName">chrome</S>
+          <S N="ProcessorAffinity">65535</S>
+          <I32 N="SessionId">1</I32>
+          <Obj N="Threads" RefId="986">
+            <TNRef RefId="1" />
+            <IE>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+            </IE>
+          </Obj>
+          <I32 N="HandleCount">1747</I32>
+          <I64 N="VirtualMemorySize64">2204143845376</I64>
+          <I32 N="VirtualMemorySize">825622528</I32>
+          <B N="EnableRaisingEvents">false</B>
+          <I64 N="WorkingSet64">112414720</I64>
+          <I32 N="WorkingSet">112414720</I32>
+          <Nil N="SynchronizingObject" />
+          <S N="MainModule">System.Diagnostics.ProcessModule (chrome.exe)</S>
+          <TS N="PrivilegedProcessorTime">PT11M7.53125S</TS>
+          <TS N="TotalProcessorTime">PT21M46.28125S</TS>
+          <TS N="UserProcessorTime">PT10M38.75S</TS>
+          <S N="MainWindowHandle">1770664</S>
+          <S N="MainWindowTitle">The Living Tombstone Radio - Now Playing on Pandora - Google Chrome</S>
+          <B N="Responding">true</B>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <S N="Name">chrome</S>
+          <I32 N="SI">1</I32>
+          <I32 N="Handles">1747</I32>
+          <I64 N="VM">2204143845376</I64>
+          <I64 N="WS">112414720</I64>
+          <I64 N="PM">316080128</I64>
+          <I64 N="NPM">61568</I64>
+          <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="Parent">System.Diagnostics.Process (explorer)</S>
+          <S N="Company">Google LLC</S>
+          <Db N="CPU">1306.28125</Db>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+          <S N="__NounName">Process</S>
+        </MS>
+      </Obj>
+      <S N="Company">Google LLC</S>
+      <Db N="CPU">0.03125</Db>
+      <S N="FileVersion">76.0.3809.100</S>
+      <S N="ProductVersion">76.0.3809.100</S>
+      <S N="Description">Google Chrome</S>
+      <S N="Product">Google Chrome</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="987">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (chrome)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="988">
+        <TNRef RefId="5" />
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="989">
+        <TNRef RefId="4" />
+        <ToString>1876</ToString>
+      </Obj>
+      <I32 N="BasePriority">8</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-24T14:18:44.9573029+03:00</DT>
+      <I32 N="Id">19776</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="990">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="991">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="992">
+        <TNRef RefId="6" />
+        <IE>
+          <Obj RefId="993">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+            <Props>
+              <S N="ModuleName">chrome.exe</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+              <S N="BaseAddress">140702356078592</S>
+              <I32 N="ModuleMemorySize">1732608</I32>
+              <S N="EntryPointAddress">140702357044720</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1692</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="994">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="995">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNEL32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">KERNEL32.DLL</S>
+              <S N="FileName">C:\Windows\System32\KERNEL32.DLL</S>
+              <S N="BaseAddress">140719912779776</S>
+              <I32 N="ModuleMemorySize">733184</I32>
+              <S N="EntryPointAddress">140719912876560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName:     kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">716</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="996">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNELBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">KERNELBASE.dll</S>
+              <S N="FileName">C:\Windows\System32\KERNELBASE.dll</S>
+              <S N="BaseAddress">140719894495232</S>
+              <I32 N="ModuleMemorySize">2699264</I32>
+              <S N="EntryPointAddress">140719894841456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName:     Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="997">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_elf.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_elf.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll</S>
+              <S N="BaseAddress">140719325642752</S>
+              <I32 N="ModuleMemorySize">925696</I32>
+              <S N="EntryPointAddress">140719326148464</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName:     chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">904</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="998">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (VERSION.dll)</ToString>
+            <Props>
+              <S N="ModuleName">VERSION.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\VERSION.dll</S>
+              <S N="BaseAddress">140719800254464</S>
+              <I32 N="ModuleMemorySize">40960</I32>
+              <S N="EntryPointAddress">140719800259344</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName:     version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Version Checking and File Installation Libraries_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">40</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Version Checking and File Installation Libraries</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="999">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcrt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcrt.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcrt.dll</S>
+              <S N="BaseAddress">140719950004224</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719950035120</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName:     msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion:      7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT CRT DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   7.0.17763.475_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.475 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.475</S>
+              <S N="Description">Windows NT CRT DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1000">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcryptPrimitives.dll</S>
+              <S N="FileName">C:\Windows\System32\bcryptPrimitives.dll</S>
+              <S N="BaseAddress">140719890235392</S>
+              <I32 N="ModuleMemorySize">516096</I32>
+              <S N="EntryPointAddress">140719890461152</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName:     bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">504</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1001">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ADVAPI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ADVAPI32.dll</S>
+              <S N="FileName">C:\Windows\System32\ADVAPI32.dll</S>
+              <S N="BaseAddress">140719915335680</S>
+              <I32 N="ModuleMemorySize">667648</I32>
+              <S N="EntryPointAddress">140719915417840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName:     advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Advanced Windows 32 Base API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">652</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Advanced Windows 32 Base API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1002">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sechost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sechost.dll</S>
+              <S N="FileName">C:\Windows\System32\sechost.dll</S>
+              <S N="BaseAddress">140719948824576</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719948951504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\sechost.dll_x000D__x000A_InternalName:     sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Host for SCM/SDDL/LSA Lookup APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1003">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RPCRT4.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RPCRT4.dll</S>
+              <S N="FileName">C:\Windows\System32\RPCRT4.dll</S>
+              <S N="BaseAddress">140719917629440</S>
+              <I32 N="ModuleMemorySize">1187840</I32>
+              <S N="EntryPointAddress">140719918006928</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName:     rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Procedure Call Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Procedure Call Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1004">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_child.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_child.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll</S>
+              <S N="BaseAddress">140717177962496</S>
+              <I32 N="ModuleMemorySize">87977984</I32>
+              <S N="EntryPointAddress">140717247440176</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName:     chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">85916</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1005">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OLEAUT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OLEAUT32.dll</S>
+              <S N="FileName">C:\Windows\System32\OLEAUT32.dll</S>
+              <S N="BaseAddress">140719946465280</S>
+              <I32 N="ModuleMemorySize">802816</I32>
+              <S N="EntryPointAddress">140719946574624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName:     OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OLEAUT32.DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">784</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">OLEAUT32.DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1006">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcp_win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcp_win.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcp_win.dll</S>
+              <S N="BaseAddress">140719889580032</S>
+              <I32 N="ModuleMemorySize">655360</I32>
+              <S N="EntryPointAddress">140719889658864</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName:     msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">640</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1007">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ucrtbase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ucrtbase.dll</S>
+              <S N="FileName">C:\Windows\System32\ucrtbase.dll</S>
+              <S N="BaseAddress">140719893446656</S>
+              <I32 N="ModuleMemorySize">1024000</I32>
+              <S N="EntryPointAddress">140719893528400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName:     ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1000</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1008">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (combase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">combase.dll</S>
+              <S N="FileName">C:\Windows\System32\combase.dll</S>
+              <S N="BaseAddress">140719950856192</S>
+              <I32 N="ModuleMemorySize">3325952</I32>
+              <S N="EntryPointAddress">140719951769888</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\combase.dll_x000D__x000A_InternalName:     COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft COM for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3248</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft COM for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1009">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WS2_32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WS2_32.dll</S>
+              <S N="FileName">C:\Windows\System32\WS2_32.dll</S>
+              <S N="BaseAddress">140719954198528</S>
+              <I32 N="ModuleMemorySize">446464</I32>
+              <S N="EntryPointAddress">140719954286384</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName:     ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">436</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Socket 2.0 32-Bit DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1010">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (GDI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">GDI32.dll</S>
+              <S N="FileName">C:\Windows\System32\GDI32.dll</S>
+              <S N="BaseAddress">140719950659584</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719950676208</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1011">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32full.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32full.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32full.dll</S>
+              <S N="BaseAddress">140719905112064</S>
+              <I32 N="ModuleMemorySize">1675264</I32>
+              <S N="EntryPointAddress">140719905369792</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1012">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USER32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USER32.dll</S>
+              <S N="FileName">C:\Windows\System32\USER32.dll</S>
+              <S N="BaseAddress">140719909306368</S>
+              <I32 N="ModuleMemorySize">1667072</I32>
+              <S N="EntryPointAddress">140719909414448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\USER32.dll_x000D__x000A_InternalName:     user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows USER API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows USER API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1013">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (win32u.dll)</ToString>
+            <Props>
+              <S N="ModuleName">win32u.dll</S>
+              <S N="FileName">C:\Windows\System32\win32u.dll</S>
+              <S N="BaseAddress">140719906816000</S>
+              <I32 N="ModuleMemorySize">131072</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\win32u.dll_x000D__x000A_InternalName:     Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32u_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">128</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32u</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1014">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINTRUST.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINTRUST.dll</S>
+              <S N="FileName">C:\Windows\System32\WINTRUST.dll</S>
+              <S N="BaseAddress">140719888728064</S>
+              <I32 N="ModuleMemorySize">364544</I32>
+              <S N="EntryPointAddress">140719888791376</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName:     WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Trust Verification APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">356</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft Trust Verification APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1015">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSASN1.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSASN1.dll</S>
+              <S N="FileName">C:\Windows\System32\MSASN1.dll</S>
+              <S N="BaseAddress">140719887876096</S>
+              <I32 N="ModuleMemorySize">73728</I32>
+              <S N="EntryPointAddress">140719887898576</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName:     msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  ASN.1 Runtime APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">72</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">ASN.1 Runtime APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1016">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPT32.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPT32.dll</S>
+              <S N="BaseAddress">140719891480576</S>
+              <I32 N="ModuleMemorySize">1945600</I32>
+              <S N="EntryPointAddress">140719891804832</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName:     CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Crypto API32_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1900</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Crypto API32</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1017">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IPHLPAPI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\IPHLPAPI.DLL</S>
+              <S N="BaseAddress">140719876931584</S>
+              <I32 N="ModuleMemorySize">249856</I32>
+              <S N="EntryPointAddress">140719876989024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName:     iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  IP Helper API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">244</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">IP Helper API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1018">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMM.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMM.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMM.dll</S>
+              <S N="BaseAddress">140719835054080</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719835066368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName:     winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MCI API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MCI API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1019">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USERENV.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USERENV.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\USERENV.dll</S>
+              <S N="BaseAddress">140719887024128</S>
+              <I32 N="ModuleMemorySize">163840</I32>
+              <S N="EntryPointAddress">140719887043280</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName:     userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Userenv_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Userenv</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1020">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (profapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">profapi.dll</S>
+              <S N="FileName">C:\Windows\System32\profapi.dll</S>
+              <S N="BaseAddress">140719888531456</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719888564400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\profapi.dll_x000D__x000A_InternalName:     PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  User Profile Basic API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">User Profile Basic API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1021">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (DWrite.dll)</ToString>
+            <Props>
+              <S N="ModuleName">DWrite.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\DWrite.dll</S>
+              <S N="BaseAddress">140719303819264</S>
+              <I32 N="ModuleMemorySize">3129344</I32>
+              <S N="EntryPointAddress">140719304509728</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName:     DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft DirectX Typography Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3056</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft DirectX Typography Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1022">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINSPOOL.DRV)</ToString>
+            <Props>
+              <S N="ModuleName">WINSPOOL.DRV</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINSPOOL.DRV</S>
+              <S N="BaseAddress">140719787606016</S>
+              <I32 N="ModuleMemorySize">561152</I32>
+              <S N="EntryPointAddress">140719787676448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName:     winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Spooler Driver_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">548</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Spooler Driver</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1023">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (kernel.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">kernel.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\kernel.appcore.dll</S>
+              <S N="BaseAddress">140719888400384</S>
+              <I32 N="ModuleMemorySize">69632</I32>
+              <S N="EntryPointAddress">140719888415648</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName:     kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AppModel API Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">68</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AppModel API Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1024">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcrypt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcrypt.dll</S>
+              <S N="FileName">C:\Windows\System32\bcrypt.dll</S>
+              <S N="BaseAddress">140719897247744</S>
+              <I32 N="ModuleMemorySize">155648</I32>
+              <S N="EntryPointAddress">140719897281296</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName:     bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">152</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1025">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dbghelp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dbghelp.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dbghelp.dll</S>
+              <S N="BaseAddress">140719552397312</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">140719552479168</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName:     DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Image Helper_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Image Helper</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1026">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINHTTP.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINHTTP.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINHTTP.dll</S>
+              <S N="BaseAddress">140719810019328</S>
+              <I32 N="ModuleMemorySize">991232</I32>
+              <S N="EntryPointAddress">140719810293024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName:     winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows HTTP Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">968</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows HTTP Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1027">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Secur32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Secur32.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\Secur32.dll</S>
+              <S N="BaseAddress">140719559147520</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719559156816</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName:     secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1028">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">dhcpcsvc.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dhcpcsvc.DLL</S>
+              <S N="BaseAddress">140719782494208</S>
+              <I32 N="ModuleMemorySize">114688</I32>
+              <S N="EntryPointAddress">140719782503840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName:     dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  DHCP Client Service_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">112</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">DHCP Client Service</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1029">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (NSI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">NSI.dll</S>
+              <S N="FileName">C:\Windows\System32\NSI.dll</S>
+              <S N="BaseAddress">140719916843008</S>
+              <I32 N="ModuleMemorySize">32768</I32>
+              <S N="EntryPointAddress">140719916851008</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\NSI.dll_x000D__x000A_InternalName:     nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NSI User-mode interface DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">32</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NSI User-mode interface DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1030">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMMBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMMBASE.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMMBASE.dll</S>
+              <S N="BaseAddress">140719834857472</S>
+              <I32 N="ModuleMemorySize">184320</I32>
+              <S N="EntryPointAddress">140719834890448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName:     winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base Multimedia Extension API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">180</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base Multimedia Extension API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1031">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cfgmgr32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cfgmgr32.dll</S>
+              <S N="FileName">C:\Windows\System32\cfgmgr32.dll</S>
+              <S N="BaseAddress">140719889252352</S>
+              <I32 N="ModuleMemorySize">303104</I32>
+              <S N="EntryPointAddress">140719889325904</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName:     cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Configuration Manager DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">296</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Configuration Manager DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1032">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (PROPSYS.dll)</ToString>
+            <Props>
+              <S N="ModuleName">PROPSYS.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\PROPSYS.dll</S>
+              <S N="BaseAddress">140719831187456</S>
+              <I32 N="ModuleMemorySize">1736704</I32>
+              <S N="EntryPointAddress">140719831447408</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName:     propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion:      7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Property System_x000D__x000A_Product:          Windows® Search_x000D__x000A_ProductVersion:   7.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1696</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.1</S>
+              <S N="Description">Microsoft Property System</S>
+              <S N="Product">Windows® Search</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1033">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shcore.dll</S>
+              <S N="FileName">C:\Windows\System32\shcore.dll</S>
+              <S N="BaseAddress">140719907143680</S>
+              <I32 N="ModuleMemorySize">688128</I32>
+              <S N="EntryPointAddress">140719907388560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shcore.dll_x000D__x000A_InternalName:     SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  SHCORE_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">672</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">SHCORE</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1034">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SSPICLI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">SSPICLI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\SSPICLI.DLL</S>
+              <S N="BaseAddress">140719886827520</S>
+              <I32 N="ModuleMemorySize">192512</I32>
+              <S N="EntryPointAddress">140719886881776</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName:     sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">188</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1035">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IMM32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IMM32.DLL</S>
+              <S N="FileName">C:\Windows\System32\IMM32.DLL</S>
+              <S N="BaseAddress">140719906947072</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719906952688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName:     imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows IMM32 API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1036">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPTBASE.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\CRYPTBASE.DLL</S>
+              <S N="BaseAddress">140719881846784</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719881855488</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName:     cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base cryptographic API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base cryptographic API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">44</I32>
+          <Obj N="SyncRoot" RefId="1037">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="993" />
+              <Ref RefId="994" />
+              <Ref RefId="995" />
+              <Ref RefId="996" />
+              <Ref RefId="997" />
+              <Ref RefId="998" />
+              <Ref RefId="999" />
+              <Ref RefId="1000" />
+              <Ref RefId="1001" />
+              <Ref RefId="1002" />
+              <Ref RefId="1003" />
+              <Ref RefId="1004" />
+              <Ref RefId="1005" />
+              <Ref RefId="1006" />
+              <Ref RefId="1007" />
+              <Ref RefId="1008" />
+              <Ref RefId="1009" />
+              <Ref RefId="1010" />
+              <Ref RefId="1011" />
+              <Ref RefId="1012" />
+              <Ref RefId="1013" />
+              <Ref RefId="1014" />
+              <Ref RefId="1015" />
+              <Ref RefId="1016" />
+              <Ref RefId="1017" />
+              <Ref RefId="1018" />
+              <Ref RefId="1019" />
+              <Ref RefId="1020" />
+              <Ref RefId="1021" />
+              <Ref RefId="1022" />
+              <Ref RefId="1023" />
+              <Ref RefId="1024" />
+              <Ref RefId="1025" />
+              <Ref RefId="1026" />
+              <Ref RefId="1027" />
+              <Ref RefId="1028" />
+              <Ref RefId="1029" />
+              <Ref RefId="1030" />
+              <Ref RefId="1031" />
+              <Ref RefId="1032" />
+              <Ref RefId="1033" />
+              <Ref RefId="1034" />
+              <Ref RefId="1035" />
+              <Ref RefId="1036" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">19576</I64>
+      <I32 N="NonpagedSystemMemorySize">19576</I32>
+      <I64 N="PagedMemorySize64">19427328</I64>
+      <I32 N="PagedMemorySize">19427328</I32>
+      <I64 N="PagedSystemMemorySize64">332072</I64>
+      <I32 N="PagedSystemMemorySize">332072</I32>
+      <I64 N="PeakPagedMemorySize64">19427328</I64>
+      <I32 N="PeakPagedMemorySize">19427328</I32>
+      <I64 N="PeakWorkingSet64">25186304</I64>
+      <I32 N="PeakWorkingSet">25186304</I32>
+      <I64 N="PeakVirtualMemorySize64">2203727597568</I64>
+      <I32 N="PeakVirtualMemorySize">409374720</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="1038">
+        <TNRef RefId="8" />
+        <ToString>Normal</ToString>
+        <I32>32</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">19427328</I64>
+      <I32 N="PrivateMemorySize">19427328</I32>
+      <S N="ProcessName">chrome</S>
+      <Obj N="ProcessorAffinity" RefId="1039">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="1040">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="1041">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">15116</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.03125S</TS>
+              <DT N="StartTime">2019-08-24T14:18:44.9573044+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.15625S</TS>
+              <TS N="UserProcessorTime">PT0.125S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1042">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">24396</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:45.0066902+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1043">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">19684</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.046875S</TS>
+              <DT N="StartTime">2019-08-24T14:18:45.007819+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.046875S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1044">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">11524</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0.03125S</TS>
+              <DT N="StartTime">2019-08-24T14:18:45.0085315+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.09375S</TS>
+              <TS N="UserProcessorTime">PT0.0625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1045">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">24000</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:45.009294+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1046">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">7032</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:45.0102892+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1047">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">11756</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.015625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:45.016436+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.015625S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1048">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">4864</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:45.0176657+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1049">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">2340</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:45.0181709+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1050">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">22976</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:45.0186556+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1051">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">14836</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:45.0189918+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1052">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">13628</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:45.0193882+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1053">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">6312</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.03125S</TS>
+              <DT N="StartTime">2019-08-24T14:18:53.1281298+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.03125S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">13</I32>
+          <Obj N="SyncRoot" RefId="1054">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="1041" />
+              <Ref RefId="1042" />
+              <Ref RefId="1043" />
+              <Ref RefId="1044" />
+              <Ref RefId="1045" />
+              <Ref RefId="1046" />
+              <Ref RefId="1047" />
+              <Ref RefId="1048" />
+              <Ref RefId="1049" />
+              <Ref RefId="1050" />
+              <Ref RefId="1051" />
+              <Ref RefId="1052" />
+              <Ref RefId="1053" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">340</I32>
+      <I64 N="VirtualMemorySize64">2203714748416</I64>
+      <I32 N="VirtualMemorySize">396525568</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">17444864</I64>
+      <I32 N="WorkingSet">17444864</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="1055">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+        <Props>
+          <S N="ModuleName">chrome.exe</S>
+          <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="BaseAddress">140702356078592</S>
+          <I32 N="ModuleMemorySize">1732608</I32>
+          <S N="EntryPointAddress">140702357044720</S>
+          <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">1692</I32>
+          <S N="Company">Google LLC</S>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT0.25S</TS>
+      <TS N="TotalProcessorTime">PT0.4375S</TS>
+      <TS N="UserProcessorTime">PT0.1875S</TS>
+      <Obj N="MainWindowHandle" RefId="1056">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">chrome</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">340</I32>
+      <I64 N="VM">2203714748416</I64>
+      <I64 N="WS">17444864</I64>
+      <I64 N="PM">19427328</I64>
+      <I64 N="NPM">19576</I64>
+      <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+      <Obj N="Parent" RefId="1057">
+        <TNRef RefId="0" />
+        <ToString>System.Diagnostics.Process (chrome)</ToString>
+        <Props>
+          <S N="SafeHandle">Microsoft.Win32.SafeHandles.SafeProcessHandle</S>
+          <S N="Handle">3424</S>
+          <I32 N="BasePriority">8</I32>
+          <B N="HasExited">false</B>
+          <DT N="StartTime">2019-08-24T14:18:00.3253674+03:00</DT>
+          <I32 N="Id">23804</I32>
+          <S N="MachineName">.</S>
+          <S N="MaxWorkingSet">1413120</S>
+          <S N="MinWorkingSet">204800</S>
+          <Obj N="Modules" RefId="1058">
+            <TNRef RefId="6" />
+            <IE>
+              <S>System.Diagnostics.ProcessModule (chrome.exe)</S>
+              <S>System.Diagnostics.ProcessModule (ntdll.dll)</S>
+              <S>System.Diagnostics.ProcessModule (KERNEL32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (KERNELBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome_elf.dll)</S>
+              <S>System.Diagnostics.ProcessModule (VERSION.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ADVAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sechost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RPCRT4.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</S>
+              <S>System.Diagnostics.ProcessModule (user32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (win32u.dll)</S>
+              <S>System.Diagnostics.ProcessModule (GDI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdi32full.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ucrtbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IMM32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SHELL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cfgmgr32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (combase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (powrprof.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shlwapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (kernel.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptsp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome.dll)</S>
+              <S>System.Diagnostics.ProcessModule (uxtheme.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dwmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USERENV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gpapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wkscli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ole32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSCTF.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEAUT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Secur32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SSPICLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DWrite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WS2_32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (COMCTL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (clbcatq.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RMCLIENT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NLAapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NSI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc6.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DNSAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mscms.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ColorAdapterClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (icm32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TextInputFramework.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreUIComponents.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreMessaging.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d2d1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d3d11.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PROPSYS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wintypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntmarta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxgi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WTSAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlanapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINSTA.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemcomn.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MMDevApi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DEVOBJ.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemsvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINHTTP.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fastprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wmiutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FirewallAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fwbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (LINKINFO.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dataexchange.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dcomp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atlthunk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEACC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (directmanipulation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (explorerframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnapps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (XmlLite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mswsock.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMM.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMMBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WmiPerfInst.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pdh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BiWinrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NETAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SAMCLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SAMLIB.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wdmaud.drv)</S>
+              <S>System.Diagnostics.ProcessModule (ksuser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AVRT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AUDIOSES.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (msacm32.drv)</S>
+              <S>System.Diagnostics.ProcessModule (MSACM32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (midimap.dll)</S>
+              <S>System.Diagnostics.ProcessModule (resourcepolicyclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BitsProxy.dll)</S>
+            </IE>
+          </Obj>
+          <I64 N="NonpagedSystemMemorySize64">61568</I64>
+          <I32 N="NonpagedSystemMemorySize">61568</I32>
+          <I64 N="PagedMemorySize64">316080128</I64>
+          <I32 N="PagedMemorySize">316080128</I32>
+          <I64 N="PagedSystemMemorySize64">857648</I64>
+          <I32 N="PagedSystemMemorySize">857648</I32>
+          <I64 N="PeakPagedMemorySize64">455720960</I64>
+          <I32 N="PeakPagedMemorySize">455720960</I32>
+          <I64 N="PeakWorkingSet64">398323712</I64>
+          <I32 N="PeakWorkingSet">398323712</I32>
+          <I64 N="PeakVirtualMemorySize64">2204288917504</I64>
+          <I32 N="PeakVirtualMemorySize">970694656</I32>
+          <B N="PriorityBoostEnabled">true</B>
+          <S N="PriorityClass">Normal</S>
+          <I64 N="PrivateMemorySize64">316080128</I64>
+          <I32 N="PrivateMemorySize">316080128</I32>
+          <S N="ProcessName">chrome</S>
+          <S N="ProcessorAffinity">65535</S>
+          <I32 N="SessionId">1</I32>
+          <Obj N="Threads" RefId="1059">
+            <TNRef RefId="1" />
+            <IE>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+            </IE>
+          </Obj>
+          <I32 N="HandleCount">1747</I32>
+          <I64 N="VirtualMemorySize64">2204143845376</I64>
+          <I32 N="VirtualMemorySize">825622528</I32>
+          <B N="EnableRaisingEvents">false</B>
+          <I64 N="WorkingSet64">112414720</I64>
+          <I32 N="WorkingSet">112414720</I32>
+          <Nil N="SynchronizingObject" />
+          <S N="MainModule">System.Diagnostics.ProcessModule (chrome.exe)</S>
+          <TS N="PrivilegedProcessorTime">PT11M7.53125S</TS>
+          <TS N="TotalProcessorTime">PT21M46.28125S</TS>
+          <TS N="UserProcessorTime">PT10M38.75S</TS>
+          <S N="MainWindowHandle">1770664</S>
+          <S N="MainWindowTitle">The Living Tombstone Radio - Now Playing on Pandora - Google Chrome</S>
+          <B N="Responding">true</B>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <S N="Name">chrome</S>
+          <I32 N="SI">1</I32>
+          <I32 N="Handles">1747</I32>
+          <I64 N="VM">2204143845376</I64>
+          <I64 N="WS">112414720</I64>
+          <I64 N="PM">316080128</I64>
+          <I64 N="NPM">61568</I64>
+          <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="Parent">System.Diagnostics.Process (explorer)</S>
+          <S N="Company">Google LLC</S>
+          <Db N="CPU">1306.28125</Db>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+          <S N="__NounName">Process</S>
+        </MS>
+      </Obj>
+      <S N="Company">Google LLC</S>
+      <Db N="CPU">0.4375</Db>
+      <S N="FileVersion">76.0.3809.100</S>
+      <S N="ProductVersion">76.0.3809.100</S>
+      <S N="Description">Google Chrome</S>
+      <S N="Product">Google Chrome</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="1060">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (chrome)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="1061">
+        <TNRef RefId="5" />
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="1062">
+        <TNRef RefId="4" />
+        <ToString>6896</ToString>
+      </Obj>
+      <I32 N="BasePriority">8</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-24T14:18:00.6190822+03:00</DT>
+      <I32 N="Id">20652</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="1063">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="1064">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="1065">
+        <TNRef RefId="6" />
+        <IE>
+          <Obj RefId="1066">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+            <Props>
+              <S N="ModuleName">chrome.exe</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+              <S N="BaseAddress">140702356078592</S>
+              <I32 N="ModuleMemorySize">1732608</I32>
+              <S N="EntryPointAddress">140702357044720</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1692</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1067">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1068">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNEL32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">KERNEL32.DLL</S>
+              <S N="FileName">C:\Windows\System32\KERNEL32.DLL</S>
+              <S N="BaseAddress">140719912779776</S>
+              <I32 N="ModuleMemorySize">733184</I32>
+              <S N="EntryPointAddress">140719912876560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName:     kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">716</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1069">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNELBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">KERNELBASE.dll</S>
+              <S N="FileName">C:\Windows\System32\KERNELBASE.dll</S>
+              <S N="BaseAddress">140719894495232</S>
+              <I32 N="ModuleMemorySize">2699264</I32>
+              <S N="EntryPointAddress">140719894841456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName:     Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1070">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_elf.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_elf.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll</S>
+              <S N="BaseAddress">140719325642752</S>
+              <I32 N="ModuleMemorySize">925696</I32>
+              <S N="EntryPointAddress">140719326148464</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName:     chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">904</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1071">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (VERSION.dll)</ToString>
+            <Props>
+              <S N="ModuleName">VERSION.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\VERSION.dll</S>
+              <S N="BaseAddress">140719800254464</S>
+              <I32 N="ModuleMemorySize">40960</I32>
+              <S N="EntryPointAddress">140719800259344</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName:     version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Version Checking and File Installation Libraries_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">40</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Version Checking and File Installation Libraries</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1072">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcrt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcrt.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcrt.dll</S>
+              <S N="BaseAddress">140719950004224</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719950035120</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName:     msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion:      7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT CRT DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   7.0.17763.475_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.475 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.475</S>
+              <S N="Description">Windows NT CRT DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1073">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcryptPrimitives.dll</S>
+              <S N="FileName">C:\Windows\System32\bcryptPrimitives.dll</S>
+              <S N="BaseAddress">140719890235392</S>
+              <I32 N="ModuleMemorySize">516096</I32>
+              <S N="EntryPointAddress">140719890461152</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName:     bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">504</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1074">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ADVAPI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ADVAPI32.dll</S>
+              <S N="FileName">C:\Windows\System32\ADVAPI32.dll</S>
+              <S N="BaseAddress">140719915335680</S>
+              <I32 N="ModuleMemorySize">667648</I32>
+              <S N="EntryPointAddress">140719915417840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName:     advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Advanced Windows 32 Base API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">652</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Advanced Windows 32 Base API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1075">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sechost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sechost.dll</S>
+              <S N="FileName">C:\Windows\System32\sechost.dll</S>
+              <S N="BaseAddress">140719948824576</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719948951504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\sechost.dll_x000D__x000A_InternalName:     sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Host for SCM/SDDL/LSA Lookup APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1076">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RPCRT4.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RPCRT4.dll</S>
+              <S N="FileName">C:\Windows\System32\RPCRT4.dll</S>
+              <S N="BaseAddress">140719917629440</S>
+              <I32 N="ModuleMemorySize">1187840</I32>
+              <S N="EntryPointAddress">140719918006928</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName:     rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Procedure Call Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Procedure Call Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1077">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (user32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">user32.dll</S>
+              <S N="FileName">C:\Windows\System32\user32.dll</S>
+              <S N="BaseAddress">140719909306368</S>
+              <I32 N="ModuleMemorySize">1667072</I32>
+              <S N="EntryPointAddress">140719909414448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\user32.dll_x000D__x000A_InternalName:     user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows USER API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows USER API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1078">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (win32u.dll)</ToString>
+            <Props>
+              <S N="ModuleName">win32u.dll</S>
+              <S N="FileName">C:\Windows\System32\win32u.dll</S>
+              <S N="BaseAddress">140719906816000</S>
+              <I32 N="ModuleMemorySize">131072</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\win32u.dll_x000D__x000A_InternalName:     Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32u_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">128</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32u</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1079">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (GDI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">GDI32.dll</S>
+              <S N="FileName">C:\Windows\System32\GDI32.dll</S>
+              <S N="BaseAddress">140719950659584</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719950676208</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1080">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32full.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32full.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32full.dll</S>
+              <S N="BaseAddress">140719905112064</S>
+              <I32 N="ModuleMemorySize">1675264</I32>
+              <S N="EntryPointAddress">140719905369792</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1081">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcp_win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcp_win.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcp_win.dll</S>
+              <S N="BaseAddress">140719889580032</S>
+              <I32 N="ModuleMemorySize">655360</I32>
+              <S N="EntryPointAddress">140719889658864</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName:     msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">640</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1082">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ucrtbase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ucrtbase.dll</S>
+              <S N="FileName">C:\Windows\System32\ucrtbase.dll</S>
+              <S N="BaseAddress">140719893446656</S>
+              <I32 N="ModuleMemorySize">1024000</I32>
+              <S N="EntryPointAddress">140719893528400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName:     ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1000</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1083">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IMM32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IMM32.DLL</S>
+              <S N="FileName">C:\Windows\System32\IMM32.DLL</S>
+              <S N="BaseAddress">140719906947072</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719906952688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName:     imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows IMM32 API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1084">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_child.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_child.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll</S>
+              <S N="BaseAddress">140717177962496</S>
+              <I32 N="ModuleMemorySize">87977984</I32>
+              <S N="EntryPointAddress">140717247440176</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName:     chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">85916</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1085">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OLEAUT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OLEAUT32.dll</S>
+              <S N="FileName">C:\Windows\System32\OLEAUT32.dll</S>
+              <S N="BaseAddress">140719946465280</S>
+              <I32 N="ModuleMemorySize">802816</I32>
+              <S N="EntryPointAddress">140719946574624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName:     OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OLEAUT32.DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">784</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">OLEAUT32.DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1086">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (combase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">combase.dll</S>
+              <S N="FileName">C:\Windows\System32\combase.dll</S>
+              <S N="BaseAddress">140719950856192</S>
+              <I32 N="ModuleMemorySize">3325952</I32>
+              <S N="EntryPointAddress">140719951769888</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\combase.dll_x000D__x000A_InternalName:     COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft COM for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3248</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft COM for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1087">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WS2_32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WS2_32.dll</S>
+              <S N="FileName">C:\Windows\System32\WS2_32.dll</S>
+              <S N="BaseAddress">140719954198528</S>
+              <I32 N="ModuleMemorySize">446464</I32>
+              <S N="EntryPointAddress">140719954286384</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName:     ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">436</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Socket 2.0 32-Bit DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1088">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINTRUST.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINTRUST.dll</S>
+              <S N="FileName">C:\Windows\System32\WINTRUST.dll</S>
+              <S N="BaseAddress">140719888728064</S>
+              <I32 N="ModuleMemorySize">364544</I32>
+              <S N="EntryPointAddress">140719888791376</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName:     WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Trust Verification APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">356</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft Trust Verification APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1089">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSASN1.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSASN1.dll</S>
+              <S N="FileName">C:\Windows\System32\MSASN1.dll</S>
+              <S N="BaseAddress">140719887876096</S>
+              <I32 N="ModuleMemorySize">73728</I32>
+              <S N="EntryPointAddress">140719887898576</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName:     msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  ASN.1 Runtime APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">72</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">ASN.1 Runtime APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1090">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPT32.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPT32.dll</S>
+              <S N="BaseAddress">140719891480576</S>
+              <I32 N="ModuleMemorySize">1945600</I32>
+              <S N="EntryPointAddress">140719891804832</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName:     CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Crypto API32_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1900</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Crypto API32</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1091">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IPHLPAPI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\IPHLPAPI.DLL</S>
+              <S N="BaseAddress">140719876931584</S>
+              <I32 N="ModuleMemorySize">249856</I32>
+              <S N="EntryPointAddress">140719876989024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName:     iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  IP Helper API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">244</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">IP Helper API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1092">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMM.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMM.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMM.dll</S>
+              <S N="BaseAddress">140719835054080</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719835066368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName:     winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MCI API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MCI API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1093">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USERENV.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USERENV.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\USERENV.dll</S>
+              <S N="BaseAddress">140719887024128</S>
+              <I32 N="ModuleMemorySize">163840</I32>
+              <S N="EntryPointAddress">140719887043280</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName:     userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Userenv_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Userenv</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1094">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (profapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">profapi.dll</S>
+              <S N="FileName">C:\Windows\System32\profapi.dll</S>
+              <S N="BaseAddress">140719888531456</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719888564400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\profapi.dll_x000D__x000A_InternalName:     PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  User Profile Basic API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">User Profile Basic API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1095">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (DWrite.dll)</ToString>
+            <Props>
+              <S N="ModuleName">DWrite.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\DWrite.dll</S>
+              <S N="BaseAddress">140719303819264</S>
+              <I32 N="ModuleMemorySize">3129344</I32>
+              <S N="EntryPointAddress">140719304509728</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName:     DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft DirectX Typography Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3056</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft DirectX Typography Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1096">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINSPOOL.DRV)</ToString>
+            <Props>
+              <S N="ModuleName">WINSPOOL.DRV</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINSPOOL.DRV</S>
+              <S N="BaseAddress">140719787606016</S>
+              <I32 N="ModuleMemorySize">561152</I32>
+              <S N="EntryPointAddress">140719787676448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName:     winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Spooler Driver_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">548</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Spooler Driver</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1097">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (kernel.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">kernel.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\kernel.appcore.dll</S>
+              <S N="BaseAddress">140719888400384</S>
+              <I32 N="ModuleMemorySize">69632</I32>
+              <S N="EntryPointAddress">140719888415648</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName:     kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AppModel API Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">68</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AppModel API Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1098">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcrypt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcrypt.dll</S>
+              <S N="FileName">C:\Windows\System32\bcrypt.dll</S>
+              <S N="BaseAddress">140719897247744</S>
+              <I32 N="ModuleMemorySize">155648</I32>
+              <S N="EntryPointAddress">140719897281296</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName:     bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">152</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1099">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dbghelp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dbghelp.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dbghelp.dll</S>
+              <S N="BaseAddress">140719552397312</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">140719552479168</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName:     DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Image Helper_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Image Helper</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1100">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINHTTP.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINHTTP.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINHTTP.dll</S>
+              <S N="BaseAddress">140719810019328</S>
+              <I32 N="ModuleMemorySize">991232</I32>
+              <S N="EntryPointAddress">140719810293024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName:     winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows HTTP Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">968</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows HTTP Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1101">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Secur32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Secur32.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\Secur32.dll</S>
+              <S N="BaseAddress">140719559147520</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719559156816</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName:     secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1102">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">dhcpcsvc.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dhcpcsvc.DLL</S>
+              <S N="BaseAddress">140719782494208</S>
+              <I32 N="ModuleMemorySize">114688</I32>
+              <S N="EntryPointAddress">140719782503840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName:     dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  DHCP Client Service_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">112</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">DHCP Client Service</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1103">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (NSI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">NSI.dll</S>
+              <S N="FileName">C:\Windows\System32\NSI.dll</S>
+              <S N="BaseAddress">140719916843008</S>
+              <I32 N="ModuleMemorySize">32768</I32>
+              <S N="EntryPointAddress">140719916851008</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\NSI.dll_x000D__x000A_InternalName:     nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NSI User-mode interface DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">32</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NSI User-mode interface DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1104">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMMBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMMBASE.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMMBASE.dll</S>
+              <S N="BaseAddress">140719834857472</S>
+              <I32 N="ModuleMemorySize">184320</I32>
+              <S N="EntryPointAddress">140719834890448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName:     winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base Multimedia Extension API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">180</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base Multimedia Extension API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1105">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cfgmgr32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cfgmgr32.dll</S>
+              <S N="FileName">C:\Windows\System32\cfgmgr32.dll</S>
+              <S N="BaseAddress">140719889252352</S>
+              <I32 N="ModuleMemorySize">303104</I32>
+              <S N="EntryPointAddress">140719889325904</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName:     cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Configuration Manager DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">296</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Configuration Manager DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1106">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (PROPSYS.dll)</ToString>
+            <Props>
+              <S N="ModuleName">PROPSYS.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\PROPSYS.dll</S>
+              <S N="BaseAddress">140719831187456</S>
+              <I32 N="ModuleMemorySize">1736704</I32>
+              <S N="EntryPointAddress">140719831447408</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName:     propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion:      7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Property System_x000D__x000A_Product:          Windows® Search_x000D__x000A_ProductVersion:   7.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1696</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.1</S>
+              <S N="Description">Microsoft Property System</S>
+              <S N="Product">Windows® Search</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1107">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shcore.dll</S>
+              <S N="FileName">C:\Windows\System32\shcore.dll</S>
+              <S N="BaseAddress">140719907143680</S>
+              <I32 N="ModuleMemorySize">688128</I32>
+              <S N="EntryPointAddress">140719907388560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shcore.dll_x000D__x000A_InternalName:     SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  SHCORE_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">672</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">SHCORE</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1108">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SSPICLI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">SSPICLI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\SSPICLI.DLL</S>
+              <S N="BaseAddress">140719886827520</S>
+              <I32 N="ModuleMemorySize">192512</I32>
+              <S N="EntryPointAddress">140719886881776</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName:     sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">188</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1109">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ole32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ole32.dll</S>
+              <S N="FileName">C:\Windows\System32\ole32.dll</S>
+              <S N="BaseAddress">140719907864576</S>
+              <I32 N="ModuleMemorySize">1396736</I32>
+              <S N="EntryPointAddress">140719908019504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ole32.dll_x000D__x000A_InternalName:     OLE32.DLL_x000D__x000A_OriginalFilename: OLE32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft OLE for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1364</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft OLE for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1110">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SETUPAPI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">SETUPAPI.dll</S>
+              <S N="FileName">C:\Windows\System32\SETUPAPI.dll</S>
+              <S N="BaseAddress">140719918874624</S>
+              <I32 N="ModuleMemorySize">4677632</I32>
+              <S N="EntryPointAddress">140719919015360</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\SETUPAPI.dll_x000D__x000A_InternalName:     SETUPAPI.DLL_x000D__x000A_OriginalFilename: SETUPAPI.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Setup API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">4568</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Setup API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1111">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (DEVOBJ.dll)</ToString>
+            <Props>
+              <S N="ModuleName">DEVOBJ.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\DEVOBJ.dll</S>
+              <S N="BaseAddress">140719885844480</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719885874112</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\DEVOBJ.dll_x000D__x000A_InternalName:     devinfoset.dll_x000D__x000A_OriginalFilename: devinfoset.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Device Information Set DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Device Information Set DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1112">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SHELL32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">SHELL32.dll</S>
+              <S N="FileName">C:\Windows\System32\SHELL32.dll</S>
+              <S N="BaseAddress">140719923593216</S>
+              <I32 N="ModuleMemorySize">21954560</I32>
+              <S N="EntryPointAddress">140719924695456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\SHELL32.dll_x000D__x000A_InternalName:     SHELL32_x000D__x000A_OriginalFilename: SHELL32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Shell Common Dll_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">21440</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Shell Common Dll</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1113">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (windows.storage.dll)</ToString>
+            <Props>
+              <S N="ModuleName">windows.storage.dll</S>
+              <S N="FileName">C:\Windows\System32\windows.storage.dll</S>
+              <S N="BaseAddress">140719897444352</S>
+              <I32 N="ModuleMemorySize">7643136</I32>
+              <S N="EntryPointAddress">140719899226624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\windows.storage.dll_x000D__x000A_InternalName:     Windows.Storage_x000D__x000A_OriginalFilename: Windows.Storage.dll.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft WinRT Storage API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">7464</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft WinRT Storage API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1114">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (powrprof.dll)</ToString>
+            <Props>
+              <S N="ModuleName">powrprof.dll</S>
+              <S N="FileName">C:\Windows\System32\powrprof.dll</S>
+              <S N="BaseAddress">140719888007168</S>
+              <I32 N="ModuleMemorySize">380928</I32>
+              <S N="EntryPointAddress">140719888020992</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\powrprof.dll_x000D__x000A_InternalName:     POWRPROF_x000D__x000A_OriginalFilename: POWRPROF.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Power Profile Helper DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">372</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Power Profile Helper DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1115">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shlwapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shlwapi.dll</S>
+              <S N="FileName">C:\Windows\System32\shlwapi.dll</S>
+              <S N="BaseAddress">140719945547776</S>
+              <I32 N="ModuleMemorySize">335872</I32>
+              <S N="EntryPointAddress">140719945588304</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shlwapi.dll_x000D__x000A_InternalName:     SHLWAPI_x000D__x000A_OriginalFilename: SHLWAPI.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Shell Light-weight Utility Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">328</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Shell Light-weight Utility Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1116">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cryptsp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cryptsp.dll</S>
+              <S N="FileName">C:\Windows\System32\cryptsp.dll</S>
+              <S N="BaseAddress">140719889121280</S>
+              <I32 N="ModuleMemorySize">94208</I32>
+              <S N="EntryPointAddress">140719889138512</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cryptsp.dll_x000D__x000A_InternalName:     cryptsp.dll_x000D__x000A_OriginalFilename: cryptsp.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Cryptographic Service Provider API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">92</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Cryptographic Service Provider API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1117">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (nvml.dll)</ToString>
+            <Props>
+              <S N="ModuleName">nvml.dll</S>
+              <S N="FileName">C:\Program Files\NVIDIA Corporation\NVSMI\nvml.dll</S>
+              <S N="BaseAddress">140719101837312</S>
+              <I32 N="ModuleMemorySize">3960832</I32>
+              <S N="EntryPointAddress">140719102489260</S>
+              <S N="FileVersionInfo">File:             C:\Program Files\NVIDIA Corporation\NVSMI\nvml.dll_x000D__x000A_InternalName:     _x000D__x000A_OriginalFilename: _x000D__x000A_FileVersion:      8.17.14.3160_x000D__x000A_FileDescription:  NVIDIA Management Library 431.60_x000D__x000A_Product:          NVIDIA Management Library 431.60_x000D__x000A_ProductVersion:   8.17.14.3160_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     True_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3868</I32>
+              <S N="Company">NVIDIA Corporation</S>
+              <S N="FileVersion">8.17.14.3160</S>
+              <S N="ProductVersion">8.17.14.3160</S>
+              <S N="Description">NVIDIA Management Library 431.60</S>
+              <S N="Product">NVIDIA Management Library 431.60</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1118">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (PSAPI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">PSAPI.DLL</S>
+              <S N="FileName">C:\Windows\System32\PSAPI.DLL</S>
+              <S N="BaseAddress">140719945940992</S>
+              <I32 N="ModuleMemorySize">32768</I32>
+              <S N="EntryPointAddress">140719945945216</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\PSAPI.DLL_x000D__x000A_InternalName:     PSAPI_x000D__x000A_OriginalFilename: PSAPI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Process Status Helper_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">32</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Process Status Helper</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1119">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPTBASE.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\CRYPTBASE.DLL</S>
+              <S N="BaseAddress">140719881846784</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719881855488</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName:     cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base cryptographic API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base cryptographic API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1120">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (mf.dll)</ToString>
+            <Props>
+              <S N="ModuleName">mf.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\mf.dll</S>
+              <S N="BaseAddress">140719261155328</S>
+              <I32 N="ModuleMemorySize">520192</I32>
+              <S N="EntryPointAddress">140719261200272</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\mf.dll_x000D__x000A_InternalName:     Media Foundation DLL_x000D__x000A_OriginalFilename: mf.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Media Foundation DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">508</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Media Foundation DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1121">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (mfplat.dll)</ToString>
+            <Props>
+              <S N="ModuleName">mfplat.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\mfplat.dll</S>
+              <S N="BaseAddress">140719258402816</S>
+              <I32 N="ModuleMemorySize">2101248</I32>
+              <S N="EntryPointAddress">140719258613664</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\mfplat.dll_x000D__x000A_InternalName:     Media Foundation Platform DLL_x000D__x000A_OriginalFilename: mfplat.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Media Foundation Platform DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2052</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Media Foundation Platform DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1122">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RTWorkQ.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">RTWorkQ.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\RTWorkQ.DLL</S>
+              <S N="BaseAddress">140719257092096</S>
+              <I32 N="ModuleMemorySize">192512</I32>
+              <S N="EntryPointAddress">140719257137776</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\RTWorkQ.DLL_x000D__x000A_InternalName:     Realtime WorkQueue DLL_x000D__x000A_OriginalFilename: RTWorkQ.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Realtime WorkQueue DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">188</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Realtime WorkQueue DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1123">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msmpeg2vdec.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msmpeg2vdec.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\msmpeg2vdec.dll</S>
+              <S N="BaseAddress">140719099281408</S>
+              <I32 N="ModuleMemorySize">2551808</I32>
+              <S N="EntryPointAddress">140719099476384</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\msmpeg2vdec.dll_x000D__x000A_InternalName:     MSMPEG2VDEC.dll_x000D__x000A_OriginalFilename: MSMPEG2VDEC.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft DTV-DVD Video Decoder_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2492</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Microsoft DTV-DVD Video Decoder</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1124">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (mfperfhelper.dll)</ToString>
+            <Props>
+              <S N="ModuleName">mfperfhelper.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\mfperfhelper.dll</S>
+              <S N="BaseAddress">140719779086336</S>
+              <I32 N="ModuleMemorySize">1232896</I32>
+              <S N="EntryPointAddress">140719780219008</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\mfperfhelper.dll_x000D__x000A_InternalName:     MFPerf DLL_x000D__x000A_OriginalFilename: mfperfhelper.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MFPerf DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1204</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MFPerf DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1125">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dxva2.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dxva2.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dxva2.dll</S>
+              <S N="BaseAddress">140719255977984</S>
+              <I32 N="ModuleMemorySize">139264</I32>
+              <S N="EntryPointAddress">140719255986176</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dxva2.dll_x000D__x000A_InternalName:     DirectX Video Acceleration 2.0 DLL_x000D__x000A_OriginalFilename: dxva2.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  DirectX Video Acceleration 2.0 DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">136</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">DirectX Video Acceleration 2.0 DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1126">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvproc.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvproc.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\msvproc.dll</S>
+              <S N="BaseAddress">140719097774080</S>
+              <I32 N="ModuleMemorySize">1462272</I32>
+              <S N="EntryPointAddress">140719097865456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\msvproc.dll_x000D__x000A_InternalName:     Media Foundation Video Processor_x000D__x000A_OriginalFilename: msvproc.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Media Foundation Video Processor_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1428</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Media Foundation Video Processor</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1127">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CompPkgSup.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">CompPkgSup.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\CompPkgSup.DLL</S>
+              <S N="BaseAddress">140719692578816</S>
+              <I32 N="ModuleMemorySize">126976</I32>
+              <S N="EntryPointAddress">140719692650528</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\CompPkgSup.DLL_x000D__x000A_InternalName:     Component Package Support DLL_x000D__x000A_OriginalFilename: CompPkgSup.dll_x000D__x000A_FileVersion:      10.0.17763.529 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Component Package Support DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.529_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">124</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.529 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.529</S>
+              <S N="Description">Component Package Support DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1128">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (D3DCompiler_47.dll)</ToString>
+            <Props>
+              <S N="ModuleName">D3DCompiler_47.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\D3DCompiler_47.dll</S>
+              <S N="BaseAddress">140719836102656</S>
+              <I32 N="ModuleMemorySize">4530176</I32>
+              <S N="EntryPointAddress">140719838620976</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\D3DCompiler_47.dll_x000D__x000A_InternalName:     d3dcompiler_47.dll_x000D__x000A_OriginalFilename: d3dcompiler_47.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Direct3D HLSL Compiler_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">4424</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Direct3D HLSL Compiler</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1129">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (libglesv2.dll)</ToString>
+            <Props>
+              <S N="ModuleName">libglesv2.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\libglesv2.dll</S>
+              <S N="BaseAddress">140718604877824</S>
+              <I32 N="ModuleMemorySize">13099008</I32>
+              <S N="EntryPointAddress">140718609347568</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\libglesv2.dll_x000D__x000A_InternalName:     libGLESv2_x000D__x000A_OriginalFilename: libGLESv2.dll_x000D__x000A_FileVersion:      2.1.0.9379eed38531_x000D__x000A_FileDescription:  ANGLE libGLESv2 Dynamic Link Library_x000D__x000A_Product:          ANGLE libGLESv2 Dynamic Link Library_x000D__x000A_ProductVersion:   2.1.0.9379eed38531_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">12792</I32>
+              <S N="Company"></S>
+              <S N="FileVersion">2.1.0.9379eed38531</S>
+              <S N="ProductVersion">2.1.0.9379eed38531</S>
+              <S N="Description">ANGLE libGLESv2 Dynamic Link Library</S>
+              <S N="Product">ANGLE libGLESv2 Dynamic Link Library</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1130">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (libegl.dll)</ToString>
+            <Props>
+              <S N="ModuleName">libegl.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\libegl.dll</S>
+              <S N="BaseAddress">140719354150912</S>
+              <I32 N="ModuleMemorySize">405504</I32>
+              <S N="EntryPointAddress">140719354269296</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\libegl.dll_x000D__x000A_InternalName:     libEGL_x000D__x000A_OriginalFilename: libEGL.dll_x000D__x000A_FileVersion:      2.1.0.9379eed38531_x000D__x000A_FileDescription:  ANGLE libEGL Dynamic Link Library_x000D__x000A_Product:          ANGLE libEGL Dynamic Link Library_x000D__x000A_ProductVersion:   2.1.0.9379eed38531_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">396</I32>
+              <S N="Company"></S>
+              <S N="FileVersion">2.1.0.9379eed38531</S>
+              <S N="ProductVersion">2.1.0.9379eed38531</S>
+              <S N="Description">ANGLE libEGL Dynamic Link Library</S>
+              <S N="Product">ANGLE libEGL Dynamic Link Library</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1131">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dwmapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dwmapi.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dwmapi.dll</S>
+              <S N="BaseAddress">140719861399552</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719861412880</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dwmapi.dll_x000D__x000A_InternalName:     dwmapi.dll_x000D__x000A_OriginalFilename: dwmapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Desktop Window Manager API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft Desktop Window Manager API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1132">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dxgi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dxgi.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dxgi.dll</S>
+              <S N="BaseAddress">140719868149760</S>
+              <I32 N="ModuleMemorySize">794624</I32>
+              <S N="EntryPointAddress">140719868291472</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dxgi.dll_x000D__x000A_InternalName:     dxgi.dll_x000D__x000A_OriginalFilename: dxgi.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  DirectX Graphics Infrastructure_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">776</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">DirectX Graphics Infrastructure</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1133">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (d3d11.dll)</ToString>
+            <Props>
+              <S N="ModuleName">d3d11.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\d3d11.dll</S>
+              <S N="BaseAddress">140719840690176</S>
+              <I32 N="ModuleMemorySize">2613248</I32>
+              <S N="EntryPointAddress">140719841252320</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\d3d11.dll_x000D__x000A_InternalName:     D3D11.dll_x000D__x000A_OriginalFilename: D3D11.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Direct3D 11 Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2552</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Direct3D 11 Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1134">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dcomp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dcomp.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dcomp.dll</S>
+              <S N="BaseAddress">140719849340928</S>
+              <I32 N="ModuleMemorySize">1847296</I32>
+              <S N="EntryPointAddress">140719849715008</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dcomp.dll_x000D__x000A_InternalName:     dcomp.dll_x000D__x000A_OriginalFilename: dcomp.dll_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft DirectComposition Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1804</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Microsoft DirectComposition Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1135">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (nvldumdx.dll)</ToString>
+            <Props>
+              <S N="ModuleName">nvldumdx.dll</S>
+              <S N="FileName">C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_547eeefb57db4499\nvldumdx.dll</S>
+              <S N="BaseAddress">140719802286080</S>
+              <I32 N="ModuleMemorySize">974848</I32>
+              <S N="EntryPointAddress">140719802337632</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_547eeefb57db4499\nvldumdx.dll_x000D__x000A_InternalName:     nvldumd_x000D__x000A_OriginalFilename: nvldumd.dll_x000D__x000A_FileVersion:      26.21.14.3160_x000D__x000A_FileDescription:  NVIDIA Driver Loader, Version 431.60 _x000D__x000A_Product:          NVIDIA driver loader_x000D__x000A_ProductVersion:   26.21.14.3160_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     True_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">952</I32>
+              <S N="Company">NVIDIA Corporation</S>
+              <S N="FileVersion">26.21.14.3160</S>
+              <S N="ProductVersion">26.21.14.3160</S>
+              <S N="Description">NVIDIA Driver Loader, Version 431.60 </S>
+              <S N="Product">NVIDIA driver loader</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1136">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (imagehlp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">imagehlp.dll</S>
+              <S N="FileName">C:\Windows\System32\imagehlp.dll</S>
+              <S N="BaseAddress">140719954657280</S>
+              <I32 N="ModuleMemorySize">118784</I32>
+              <S N="EntryPointAddress">140719954669248</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\imagehlp.dll_x000D__x000A_InternalName:     IMAGEHLP.DLL_x000D__x000A_OriginalFilename: IMAGEHLP.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT Image Helper_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">116</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows NT Image Helper</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1137">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (rsaenh.dll)</ToString>
+            <Props>
+              <S N="ModuleName">rsaenh.dll</S>
+              <S N="FileName">C:\Windows\system32\rsaenh.dll</S>
+              <S N="BaseAddress">140719874834432</S>
+              <I32 N="ModuleMemorySize">208896</I32>
+              <S N="EntryPointAddress">140719874861552</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\rsaenh.dll_x000D__x000A_InternalName:     rsaenh.dll_x000D__x000A_OriginalFilename: rsaenh.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Enhanced Cryptographic Provider_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">204</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft Enhanced Cryptographic Provider</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1138">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (nvwgf2umx_cfg.dll)</ToString>
+            <Props>
+              <S N="ModuleName">nvwgf2umx_cfg.dll</S>
+              <S N="FileName">C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_547eeefb57db4499\nvwgf2umx_cfg.dll</S>
+              <S N="BaseAddress">140719734063104</S>
+              <I32 N="ModuleMemorySize">40022016</I32>
+              <S N="EntryPointAddress">140719735659216</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_547eeefb57db4499\nvwgf2umx_cfg.dll_x000D__x000A_InternalName:     nvwgf2um_x000D__x000A_OriginalFilename: nvwgf2um.dll_x000D__x000A_FileVersion:      26.21.14.3160_x000D__x000A_FileDescription:  NVIDIA D3D10 Driver, Version 431.60 _x000D__x000A_Product:          NVIDIA D3D10 drivers_x000D__x000A_ProductVersion:   26.21.14.3160_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     True_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">39084</I32>
+              <S N="Company">NVIDIA Corporation</S>
+              <S N="FileVersion">26.21.14.3160</S>
+              <S N="ProductVersion">26.21.14.3160</S>
+              <S N="Description">NVIDIA D3D10 Driver, Version 431.60 </S>
+              <S N="Product">NVIDIA D3D10 drivers</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1139">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (clbcatq.dll)</ToString>
+            <Props>
+              <S N="ModuleName">clbcatq.dll</S>
+              <S N="FileName">C:\Windows\System32\clbcatq.dll</S>
+              <S N="BaseAddress">140719916908544</S>
+              <I32 N="ModuleMemorySize">663552</I32>
+              <S N="EntryPointAddress">140719916925344</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\clbcatq.dll_x000D__x000A_InternalName:     CLBCATQ.DLL_x000D__x000A_OriginalFilename: CLBCATQ.DLL_x000D__x000A_FileVersion:      2001.12.10941.16384 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  COM+ Configuration Catalog_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">648</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">2001.12.10941.16384 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">COM+ Configuration Catalog</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1140">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WinTypes.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WinTypes.dll</S>
+              <S N="FileName">C:\Windows\System32\WinTypes.dll</S>
+              <S N="BaseAddress">140719817687040</S>
+              <I32 N="ModuleMemorySize">1388544</I32>
+              <S N="EntryPointAddress">140719817864912</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WinTypes.dll_x000D__x000A_InternalName:     Windows Base Types DLL_x000D__x000A_OriginalFilename: WinTypes.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Base Types DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1356</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Base Types DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1141">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (mfh264enc.dll)</ToString>
+            <Props>
+              <S N="ModuleName">mfh264enc.dll</S>
+              <S N="FileName">C:\Windows\System32\mfh264enc.dll</S>
+              <S N="BaseAddress">140719083880448</S>
+              <I32 N="ModuleMemorySize">585728</I32>
+              <S N="EntryPointAddress">140719083922336</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\mfh264enc.dll_x000D__x000A_InternalName:     Media Foundation H264 Encoder_x000D__x000A_OriginalFilename: mfH264Enc.dll_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Media Foundation H264 Encoder_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">572</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Media Foundation H264 Encoder</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1142">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Windows.Media.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Windows.Media.dll</S>
+              <S N="FileName">C:\Windows\System32\Windows.Media.dll</S>
+              <S N="BaseAddress">140719084470272</S>
+              <I32 N="ModuleMemorySize">7675904</I32>
+              <S N="EntryPointAddress">140719084571616</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\Windows.Media.dll_x000D__x000A_InternalName:     Windows Media Runtime DLL_x000D__x000A_OriginalFilename: Windows.Media.dll.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Media Runtime DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">7496</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Media Runtime DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1143">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntmarta.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntmarta.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntmarta.dll</S>
+              <S N="BaseAddress">140719871557632</S>
+              <I32 N="ModuleMemorySize">200704</I32>
+              <S N="EntryPointAddress">140719871586448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntmarta.dll_x000D__x000A_InternalName:     ntmarta.dll_x000D__x000A_OriginalFilename: ntmarta.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT MARTA provider_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">196</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows NT MARTA provider</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1144">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (uxtheme.dll)</ToString>
+            <Props>
+              <S N="ModuleName">uxtheme.dll</S>
+              <S N="FileName">C:\Windows\system32\uxtheme.dll</S>
+              <S N="BaseAddress">140719860547584</S>
+              <I32 N="ModuleMemorySize">638976</I32>
+              <S N="EntryPointAddress">140719860712368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\uxtheme.dll_x000D__x000A_InternalName:     UxTheme.dll_x000D__x000A_OriginalFilename: UxTheme.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft UxTheme Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">624</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft UxTheme Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1145">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSCTF.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSCTF.dll</S>
+              <S N="FileName">C:\Windows\System32\MSCTF.dll</S>
+              <S N="BaseAddress">140719947317248</S>
+              <I32 N="ModuleMemorySize">1486848</I32>
+              <S N="EntryPointAddress">140719947597184</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSCTF.dll_x000D__x000A_InternalName:     MSCTF_x000D__x000A_OriginalFilename: MSCTF.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MSCTF Server DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1452</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MSCTF Server DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">80</I32>
+          <Obj N="SyncRoot" RefId="1146">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="1066" />
+              <Ref RefId="1067" />
+              <Ref RefId="1068" />
+              <Ref RefId="1069" />
+              <Ref RefId="1070" />
+              <Ref RefId="1071" />
+              <Ref RefId="1072" />
+              <Ref RefId="1073" />
+              <Ref RefId="1074" />
+              <Ref RefId="1075" />
+              <Ref RefId="1076" />
+              <Ref RefId="1077" />
+              <Ref RefId="1078" />
+              <Ref RefId="1079" />
+              <Ref RefId="1080" />
+              <Ref RefId="1081" />
+              <Ref RefId="1082" />
+              <Ref RefId="1083" />
+              <Ref RefId="1084" />
+              <Ref RefId="1085" />
+              <Ref RefId="1086" />
+              <Ref RefId="1087" />
+              <Ref RefId="1088" />
+              <Ref RefId="1089" />
+              <Ref RefId="1090" />
+              <Ref RefId="1091" />
+              <Ref RefId="1092" />
+              <Ref RefId="1093" />
+              <Ref RefId="1094" />
+              <Ref RefId="1095" />
+              <Ref RefId="1096" />
+              <Ref RefId="1097" />
+              <Ref RefId="1098" />
+              <Ref RefId="1099" />
+              <Ref RefId="1100" />
+              <Ref RefId="1101" />
+              <Ref RefId="1102" />
+              <Ref RefId="1103" />
+              <Ref RefId="1104" />
+              <Ref RefId="1105" />
+              <Ref RefId="1106" />
+              <Ref RefId="1107" />
+              <Ref RefId="1108" />
+              <Ref RefId="1109" />
+              <Ref RefId="1110" />
+              <Ref RefId="1111" />
+              <Ref RefId="1112" />
+              <Ref RefId="1113" />
+              <Ref RefId="1114" />
+              <Ref RefId="1115" />
+              <Ref RefId="1116" />
+              <Ref RefId="1117" />
+              <Ref RefId="1118" />
+              <Ref RefId="1119" />
+              <Ref RefId="1120" />
+              <Ref RefId="1121" />
+              <Ref RefId="1122" />
+              <Ref RefId="1123" />
+              <Ref RefId="1124" />
+              <Ref RefId="1125" />
+              <Ref RefId="1126" />
+              <Ref RefId="1127" />
+              <Ref RefId="1128" />
+              <Ref RefId="1129" />
+              <Ref RefId="1130" />
+              <Ref RefId="1131" />
+              <Ref RefId="1132" />
+              <Ref RefId="1133" />
+              <Ref RefId="1134" />
+              <Ref RefId="1135" />
+              <Ref RefId="1136" />
+              <Ref RefId="1137" />
+              <Ref RefId="1138" />
+              <Ref RefId="1139" />
+              <Ref RefId="1140" />
+              <Ref RefId="1141" />
+              <Ref RefId="1142" />
+              <Ref RefId="1143" />
+              <Ref RefId="1144" />
+              <Ref RefId="1145" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">40392</I64>
+      <I32 N="NonpagedSystemMemorySize">40392</I32>
+      <I64 N="PagedMemorySize64">210436096</I64>
+      <I32 N="PagedMemorySize">210436096</I32>
+      <I64 N="PagedSystemMemorySize64">648752</I64>
+      <I32 N="PagedSystemMemorySize">648752</I32>
+      <I64 N="PeakPagedMemorySize64">950525952</I64>
+      <I32 N="PeakPagedMemorySize">950525952</I32>
+      <I64 N="PeakWorkingSet64">307183616</I64>
+      <I32 N="PeakWorkingSet">307183616</I32>
+      <I64 N="PeakVirtualMemorySize64">2204958838784</I64>
+      <I32 N="PeakVirtualMemorySize">1640615936</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="1147">
+        <TNRef RefId="8" />
+        <ToString>Normal</ToString>
+        <I32>32</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">210436096</I64>
+      <I32 N="PrivateMemorySize">210436096</I32>
+      <S N="ProcessName">chrome</S>
+      <Obj N="ProcessorAffinity" RefId="1148">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="1149">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="1150">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">11548</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT1M56.109375S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.6190839+03:00</DT>
+              <TS N="TotalProcessorTime">PT2M17.453125S</TS>
+              <TS N="UserProcessorTime">PT21.34375S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1151">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">6980</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.7368817+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1152">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">9</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">11504</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">AboveNormal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT3.3125S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.878744+03:00</DT>
+              <TS N="TotalProcessorTime">PT16.78125S</TS>
+              <TS N="UserProcessorTime">PT13.46875S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1153">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">14120</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.9080066+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1154">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">22972</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.03125S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.9086503+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.03125S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1155">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">8584</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.015625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.9099407+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.015625S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1156">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">21200</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT1.796875S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.911373+03:00</DT>
+              <TS N="TotalProcessorTime">PT4.34375S</TS>
+              <TS N="UserProcessorTime">PT2.546875S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1157">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">22420</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.9120465+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1158">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">22780</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT2.125S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.9130161+03:00</DT>
+              <TS N="TotalProcessorTime">PT18.625S</TS>
+              <TS N="UserProcessorTime">PT16.5S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1159">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">19748</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.015625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.11242+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.015625S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1160">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">1</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">21024</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Idle</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.2196498+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.015625S</TS>
+              <TS N="UserProcessorTime">PT0.015625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1161">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">1</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">23868</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Idle</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.2201268+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.015625S</TS>
+              <TS N="UserProcessorTime">PT0.015625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1162">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">1</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">24024</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Idle</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.2204867+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.015625S</TS>
+              <TS N="UserProcessorTime">PT0.015625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1163">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">1</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">17144</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Idle</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.2211154+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1164">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">1</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">18416</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Idle</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.2216496+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1165">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">1</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">20452</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Idle</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.015625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.2220167+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.03125S</TS>
+              <TS N="UserProcessorTime">PT0.015625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1166">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">1</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">10284</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Idle</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.2224458+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1167">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">1</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">13764</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Idle</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.2228834+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1168">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">10280</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.2473734+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1169">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">1</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">12236</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Idle</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.0625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.2835698+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.140625S</TS>
+              <TS N="UserProcessorTime">PT0.078125S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1170">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">1</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">20772</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Idle</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.015625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.2839176+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.046875S</TS>
+              <TS N="UserProcessorTime">PT0.03125S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1171">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">1</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">24444</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Idle</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.046875S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.29098+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.125S</TS>
+              <TS N="UserProcessorTime">PT0.078125S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1172">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">1</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">8816</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Idle</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.046875S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.2912455+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.09375S</TS>
+              <TS N="UserProcessorTime">PT0.046875S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1173">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">1</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">22404</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Idle</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.0625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.2914743+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.109375S</TS>
+              <TS N="UserProcessorTime">PT0.046875S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1174">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">1</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">8548</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Idle</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.03125S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.291712+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.09375S</TS>
+              <TS N="UserProcessorTime">PT0.0625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1175">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">1</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">1960</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Idle</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.046875S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.294471+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.125S</TS>
+              <TS N="UserProcessorTime">PT0.078125S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1176">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">1</I32>
+              <I32 N="CurrentPriority">2</I32>
+              <I32 N="Id">10604</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Idle</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.046875S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.2948051+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.171875S</TS>
+              <TS N="UserProcessorTime">PT0.125S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1177">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">3104</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.3125S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.6786677+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.328125S</TS>
+              <TS N="UserProcessorTime">PT0.015625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1178">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">12740</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-27T00:13:45.1604446+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">29</I32>
+          <Obj N="SyncRoot" RefId="1179">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="1150" />
+              <Ref RefId="1151" />
+              <Ref RefId="1152" />
+              <Ref RefId="1153" />
+              <Ref RefId="1154" />
+              <Ref RefId="1155" />
+              <Ref RefId="1156" />
+              <Ref RefId="1157" />
+              <Ref RefId="1158" />
+              <Ref RefId="1159" />
+              <Ref RefId="1160" />
+              <Ref RefId="1161" />
+              <Ref RefId="1162" />
+              <Ref RefId="1163" />
+              <Ref RefId="1164" />
+              <Ref RefId="1165" />
+              <Ref RefId="1166" />
+              <Ref RefId="1167" />
+              <Ref RefId="1168" />
+              <Ref RefId="1169" />
+              <Ref RefId="1170" />
+              <Ref RefId="1171" />
+              <Ref RefId="1172" />
+              <Ref RefId="1173" />
+              <Ref RefId="1174" />
+              <Ref RefId="1175" />
+              <Ref RefId="1176" />
+              <Ref RefId="1177" />
+              <Ref RefId="1178" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">615</I32>
+      <I64 N="VirtualMemorySize64">2204253376512</I64>
+      <I32 N="VirtualMemorySize">935153664</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">33325056</I64>
+      <I32 N="WorkingSet">33325056</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="1180">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+        <Props>
+          <S N="ModuleName">chrome.exe</S>
+          <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="BaseAddress">140702356078592</S>
+          <I32 N="ModuleMemorySize">1732608</I32>
+          <S N="EntryPointAddress">140702357044720</S>
+          <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">1692</I32>
+          <S N="Company">Google LLC</S>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT2M4.546875S</TS>
+      <TS N="TotalProcessorTime">PT3M0.375S</TS>
+      <TS N="UserProcessorTime">PT55.828125S</TS>
+      <Obj N="MainWindowHandle" RefId="1181">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">chrome</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">615</I32>
+      <I64 N="VM">2204253376512</I64>
+      <I64 N="WS">33325056</I64>
+      <I64 N="PM">210436096</I64>
+      <I64 N="NPM">40392</I64>
+      <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+      <Obj N="Parent" RefId="1182">
+        <TNRef RefId="0" />
+        <ToString>System.Diagnostics.Process (chrome)</ToString>
+        <Props>
+          <S N="SafeHandle">Microsoft.Win32.SafeHandles.SafeProcessHandle</S>
+          <S N="Handle">6308</S>
+          <I32 N="BasePriority">8</I32>
+          <B N="HasExited">false</B>
+          <DT N="StartTime">2019-08-24T14:18:00.3253674+03:00</DT>
+          <I32 N="Id">23804</I32>
+          <S N="MachineName">.</S>
+          <S N="MaxWorkingSet">1413120</S>
+          <S N="MinWorkingSet">204800</S>
+          <Obj N="Modules" RefId="1183">
+            <TNRef RefId="6" />
+            <IE>
+              <S>System.Diagnostics.ProcessModule (chrome.exe)</S>
+              <S>System.Diagnostics.ProcessModule (ntdll.dll)</S>
+              <S>System.Diagnostics.ProcessModule (KERNEL32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (KERNELBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome_elf.dll)</S>
+              <S>System.Diagnostics.ProcessModule (VERSION.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ADVAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sechost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RPCRT4.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</S>
+              <S>System.Diagnostics.ProcessModule (user32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (win32u.dll)</S>
+              <S>System.Diagnostics.ProcessModule (GDI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdi32full.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ucrtbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IMM32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SHELL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cfgmgr32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (combase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (powrprof.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shlwapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (kernel.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptsp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome.dll)</S>
+              <S>System.Diagnostics.ProcessModule (uxtheme.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dwmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USERENV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gpapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wkscli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ole32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSCTF.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEAUT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Secur32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SSPICLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DWrite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WS2_32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (COMCTL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (clbcatq.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RMCLIENT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NLAapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NSI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc6.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DNSAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mscms.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ColorAdapterClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (icm32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TextInputFramework.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreUIComponents.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreMessaging.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d2d1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d3d11.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PROPSYS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wintypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntmarta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxgi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WTSAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlanapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINSTA.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemcomn.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MMDevApi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DEVOBJ.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemsvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINHTTP.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fastprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wmiutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FirewallAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fwbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (LINKINFO.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dataexchange.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dcomp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atlthunk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEACC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (directmanipulation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (explorerframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnapps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (XmlLite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mswsock.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMM.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMMBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WmiPerfInst.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pdh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BiWinrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NETAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SAMCLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SAMLIB.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wdmaud.drv)</S>
+              <S>System.Diagnostics.ProcessModule (ksuser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AVRT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AUDIOSES.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (msacm32.drv)</S>
+              <S>System.Diagnostics.ProcessModule (MSACM32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (midimap.dll)</S>
+              <S>System.Diagnostics.ProcessModule (resourcepolicyclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BitsProxy.dll)</S>
+            </IE>
+          </Obj>
+          <I64 N="NonpagedSystemMemorySize64">61568</I64>
+          <I32 N="NonpagedSystemMemorySize">61568</I32>
+          <I64 N="PagedMemorySize64">316080128</I64>
+          <I32 N="PagedMemorySize">316080128</I32>
+          <I64 N="PagedSystemMemorySize64">857648</I64>
+          <I32 N="PagedSystemMemorySize">857648</I32>
+          <I64 N="PeakPagedMemorySize64">455720960</I64>
+          <I32 N="PeakPagedMemorySize">455720960</I32>
+          <I64 N="PeakWorkingSet64">398323712</I64>
+          <I32 N="PeakWorkingSet">398323712</I32>
+          <I64 N="PeakVirtualMemorySize64">2204288917504</I64>
+          <I32 N="PeakVirtualMemorySize">970694656</I32>
+          <B N="PriorityBoostEnabled">true</B>
+          <S N="PriorityClass">Normal</S>
+          <I64 N="PrivateMemorySize64">316080128</I64>
+          <I32 N="PrivateMemorySize">316080128</I32>
+          <S N="ProcessName">chrome</S>
+          <S N="ProcessorAffinity">65535</S>
+          <I32 N="SessionId">1</I32>
+          <Obj N="Threads" RefId="1184">
+            <TNRef RefId="1" />
+            <IE>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+            </IE>
+          </Obj>
+          <I32 N="HandleCount">1747</I32>
+          <I64 N="VirtualMemorySize64">2204143845376</I64>
+          <I32 N="VirtualMemorySize">825622528</I32>
+          <B N="EnableRaisingEvents">false</B>
+          <I64 N="WorkingSet64">112414720</I64>
+          <I32 N="WorkingSet">112414720</I32>
+          <Nil N="SynchronizingObject" />
+          <S N="MainModule">System.Diagnostics.ProcessModule (chrome.exe)</S>
+          <TS N="PrivilegedProcessorTime">PT11M7.53125S</TS>
+          <TS N="TotalProcessorTime">PT21M46.28125S</TS>
+          <TS N="UserProcessorTime">PT10M38.75S</TS>
+          <S N="MainWindowHandle">1770664</S>
+          <S N="MainWindowTitle">The Living Tombstone Radio - Now Playing on Pandora - Google Chrome</S>
+          <B N="Responding">true</B>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <S N="Name">chrome</S>
+          <I32 N="SI">1</I32>
+          <I32 N="Handles">1747</I32>
+          <I64 N="VM">2204143845376</I64>
+          <I64 N="WS">112414720</I64>
+          <I64 N="PM">316080128</I64>
+          <I64 N="NPM">61568</I64>
+          <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="Parent">System.Diagnostics.Process (explorer)</S>
+          <S N="Company">Google LLC</S>
+          <Db N="CPU">1306.28125</Db>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+          <S N="__NounName">Process</S>
+        </MS>
+      </Obj>
+      <S N="Company">Google LLC</S>
+      <Db N="CPU">180.375</Db>
+      <S N="FileVersion">76.0.3809.100</S>
+      <S N="ProductVersion">76.0.3809.100</S>
+      <S N="Description">Google Chrome</S>
+      <S N="Product">Google Chrome</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="1185">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (chrome)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="1186">
+        <TNRef RefId="5" />
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="1187">
+        <TNRef RefId="4" />
+        <ToString>7708</ToString>
+      </Obj>
+      <I32 N="BasePriority">8</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-24T14:18:00.4604945+03:00</DT>
+      <I32 N="Id">21256</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="1188">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="1189">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="1190">
+        <TNRef RefId="6" />
+        <IE>
+          <Obj RefId="1191">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+            <Props>
+              <S N="ModuleName">chrome.exe</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+              <S N="BaseAddress">140702356078592</S>
+              <I32 N="ModuleMemorySize">1732608</I32>
+              <S N="EntryPointAddress">140702357044720</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1692</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1192">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1193">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNEL32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">KERNEL32.DLL</S>
+              <S N="FileName">C:\Windows\System32\KERNEL32.DLL</S>
+              <S N="BaseAddress">140719912779776</S>
+              <I32 N="ModuleMemorySize">733184</I32>
+              <S N="EntryPointAddress">140719912876560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName:     kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">716</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1194">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNELBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">KERNELBASE.dll</S>
+              <S N="FileName">C:\Windows\System32\KERNELBASE.dll</S>
+              <S N="BaseAddress">140719894495232</S>
+              <I32 N="ModuleMemorySize">2699264</I32>
+              <S N="EntryPointAddress">140719894841456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName:     Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1195">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_elf.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_elf.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll</S>
+              <S N="BaseAddress">140719325642752</S>
+              <I32 N="ModuleMemorySize">925696</I32>
+              <S N="EntryPointAddress">140719326148464</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName:     chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">904</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1196">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (VERSION.dll)</ToString>
+            <Props>
+              <S N="ModuleName">VERSION.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\VERSION.dll</S>
+              <S N="BaseAddress">140719800254464</S>
+              <I32 N="ModuleMemorySize">40960</I32>
+              <S N="EntryPointAddress">140719800259344</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName:     version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Version Checking and File Installation Libraries_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">40</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Version Checking and File Installation Libraries</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1197">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcrt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcrt.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcrt.dll</S>
+              <S N="BaseAddress">140719950004224</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719950035120</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName:     msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion:      7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT CRT DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   7.0.17763.475_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.475 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.475</S>
+              <S N="Description">Windows NT CRT DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1198">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcryptPrimitives.dll</S>
+              <S N="FileName">C:\Windows\System32\bcryptPrimitives.dll</S>
+              <S N="BaseAddress">140719890235392</S>
+              <I32 N="ModuleMemorySize">516096</I32>
+              <S N="EntryPointAddress">140719890461152</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName:     bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">504</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1199">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USER32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USER32.dll</S>
+              <S N="FileName">C:\Windows\System32\USER32.dll</S>
+              <S N="BaseAddress">140719909306368</S>
+              <I32 N="ModuleMemorySize">1667072</I32>
+              <S N="EntryPointAddress">140719909414448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\USER32.dll_x000D__x000A_InternalName:     user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows USER API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows USER API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1200">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (win32u.dll)</ToString>
+            <Props>
+              <S N="ModuleName">win32u.dll</S>
+              <S N="FileName">C:\Windows\System32\win32u.dll</S>
+              <S N="BaseAddress">140719906816000</S>
+              <I32 N="ModuleMemorySize">131072</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\win32u.dll_x000D__x000A_InternalName:     Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32u_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">128</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32u</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1201">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (GDI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">GDI32.dll</S>
+              <S N="FileName">C:\Windows\System32\GDI32.dll</S>
+              <S N="BaseAddress">140719950659584</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719950676208</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1202">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32full.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32full.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32full.dll</S>
+              <S N="BaseAddress">140719905112064</S>
+              <I32 N="ModuleMemorySize">1675264</I32>
+              <S N="EntryPointAddress">140719905369792</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1203">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcp_win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcp_win.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcp_win.dll</S>
+              <S N="BaseAddress">140719889580032</S>
+              <I32 N="ModuleMemorySize">655360</I32>
+              <S N="EntryPointAddress">140719889658864</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName:     msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">640</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1204">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ucrtbase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ucrtbase.dll</S>
+              <S N="FileName">C:\Windows\System32\ucrtbase.dll</S>
+              <S N="BaseAddress">140719893446656</S>
+              <I32 N="ModuleMemorySize">1024000</I32>
+              <S N="EntryPointAddress">140719893528400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName:     ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1000</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1205">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IMM32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IMM32.DLL</S>
+              <S N="FileName">C:\Windows\System32\IMM32.DLL</S>
+              <S N="BaseAddress">140719906947072</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719906952688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName:     imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows IMM32 API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1206">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (uxtheme.dll)</ToString>
+            <Props>
+              <S N="ModuleName">uxtheme.dll</S>
+              <S N="FileName">C:\Windows\system32\uxtheme.dll</S>
+              <S N="BaseAddress">140719860547584</S>
+              <I32 N="ModuleMemorySize">638976</I32>
+              <S N="EntryPointAddress">140719860712368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\uxtheme.dll_x000D__x000A_InternalName:     UxTheme.dll_x000D__x000A_OriginalFilename: UxTheme.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft UxTheme Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">624</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft UxTheme Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1207">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (combase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">combase.dll</S>
+              <S N="FileName">C:\Windows\System32\combase.dll</S>
+              <S N="BaseAddress">140719950856192</S>
+              <I32 N="ModuleMemorySize">3325952</I32>
+              <S N="EntryPointAddress">140719951769888</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\combase.dll_x000D__x000A_InternalName:     COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft COM for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3248</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft COM for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1208">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RPCRT4.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RPCRT4.dll</S>
+              <S N="FileName">C:\Windows\System32\RPCRT4.dll</S>
+              <S N="BaseAddress">140719917629440</S>
+              <I32 N="ModuleMemorySize">1187840</I32>
+              <S N="EntryPointAddress">140719918006928</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName:     rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Procedure Call Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Procedure Call Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1209">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSCTF.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSCTF.dll</S>
+              <S N="FileName">C:\Windows\System32\MSCTF.dll</S>
+              <S N="BaseAddress">140719947317248</S>
+              <I32 N="ModuleMemorySize">1486848</I32>
+              <S N="EntryPointAddress">140719947597184</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSCTF.dll_x000D__x000A_InternalName:     MSCTF_x000D__x000A_OriginalFilename: MSCTF.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MSCTF Server DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1452</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MSCTF Server DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1210">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sechost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sechost.dll</S>
+              <S N="FileName">C:\Windows\System32\sechost.dll</S>
+              <S N="BaseAddress">140719948824576</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719948951504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\sechost.dll_x000D__x000A_InternalName:     sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Host for SCM/SDDL/LSA Lookup APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1211">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OLEAUT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OLEAUT32.dll</S>
+              <S N="FileName">C:\Windows\System32\OLEAUT32.dll</S>
+              <S N="BaseAddress">140719946465280</S>
+              <I32 N="ModuleMemorySize">802816</I32>
+              <S N="EntryPointAddress">140719946574624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName:     OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OLEAUT32.DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">784</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">OLEAUT32.DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1212">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ADVAPI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ADVAPI32.dll</S>
+              <S N="FileName">C:\Windows\System32\ADVAPI32.dll</S>
+              <S N="BaseAddress">140719915335680</S>
+              <I32 N="ModuleMemorySize">667648</I32>
+              <S N="EntryPointAddress">140719915417840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName:     advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Advanced Windows 32 Base API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">652</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Advanced Windows 32 Base API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1213">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPTBASE.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\CRYPTBASE.DLL</S>
+              <S N="BaseAddress">140719881846784</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719881855488</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName:     cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base cryptographic API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base cryptographic API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1214">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dwmapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dwmapi.dll</S>
+              <S N="FileName">C:\Windows\system32\dwmapi.dll</S>
+              <S N="BaseAddress">140719861399552</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719861412880</S>
+              <S N="FileVersionInfo">File:             C:\Windows\system32\dwmapi.dll_x000D__x000A_InternalName:     dwmapi.dll_x000D__x000A_OriginalFilename: dwmapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Desktop Window Manager API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft Desktop Window Manager API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1215">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPT32.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPT32.dll</S>
+              <S N="BaseAddress">140719891480576</S>
+              <I32 N="ModuleMemorySize">1945600</I32>
+              <S N="EntryPointAddress">140719891804832</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName:     CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Crypto API32_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1900</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Crypto API32</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1216">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSASN1.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSASN1.dll</S>
+              <S N="FileName">C:\Windows\System32\MSASN1.dll</S>
+              <S N="BaseAddress">140719887876096</S>
+              <I32 N="ModuleMemorySize">73728</I32>
+              <S N="EntryPointAddress">140719887898576</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName:     msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  ASN.1 Runtime APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">72</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">ASN.1 Runtime APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1217">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPTSP.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPTSP.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPTSP.dll</S>
+              <S N="BaseAddress">140719889121280</S>
+              <I32 N="ModuleMemorySize">94208</I32>
+              <S N="EntryPointAddress">140719889138512</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPTSP.dll_x000D__x000A_InternalName:     cryptsp.dll_x000D__x000A_OriginalFilename: cryptsp.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Cryptographic Service Provider API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">92</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Cryptographic Service Provider API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1218">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (kernel.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">kernel.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\kernel.appcore.dll</S>
+              <S N="BaseAddress">140719888400384</S>
+              <I32 N="ModuleMemorySize">69632</I32>
+              <S N="EntryPointAddress">140719888415648</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName:     kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AppModel API Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">68</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AppModel API Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">28</I32>
+          <Obj N="SyncRoot" RefId="1219">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="1191" />
+              <Ref RefId="1192" />
+              <Ref RefId="1193" />
+              <Ref RefId="1194" />
+              <Ref RefId="1195" />
+              <Ref RefId="1196" />
+              <Ref RefId="1197" />
+              <Ref RefId="1198" />
+              <Ref RefId="1199" />
+              <Ref RefId="1200" />
+              <Ref RefId="1201" />
+              <Ref RefId="1202" />
+              <Ref RefId="1203" />
+              <Ref RefId="1204" />
+              <Ref RefId="1205" />
+              <Ref RefId="1206" />
+              <Ref RefId="1207" />
+              <Ref RefId="1208" />
+              <Ref RefId="1209" />
+              <Ref RefId="1210" />
+              <Ref RefId="1211" />
+              <Ref RefId="1212" />
+              <Ref RefId="1213" />
+              <Ref RefId="1214" />
+              <Ref RefId="1215" />
+              <Ref RefId="1216" />
+              <Ref RefId="1217" />
+              <Ref RefId="1218" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">9584</I64>
+      <I32 N="NonpagedSystemMemorySize">9584</I32>
+      <I64 N="PagedMemorySize64">1843200</I64>
+      <I32 N="PagedMemorySize">1843200</I32>
+      <I64 N="PagedSystemMemorySize64">115088</I64>
+      <I32 N="PagedSystemMemorySize">115088</I32>
+      <I64 N="PeakPagedMemorySize64">1912832</I64>
+      <I32 N="PeakPagedMemorySize">1912832</I32>
+      <I64 N="PeakWorkingSet64">7131136</I64>
+      <I32 N="PeakWorkingSet">7131136</I32>
+      <I64 N="PeakVirtualMemorySize64">2203429707776</I64>
+      <I32 N="PeakVirtualMemorySize">111484928</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="1220">
+        <TNRef RefId="8" />
+        <ToString>Normal</ToString>
+        <I32>32</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">1843200</I64>
+      <I32 N="PrivateMemorySize">1843200</I32>
+      <S N="ProcessName">chrome</S>
+      <Obj N="ProcessorAffinity" RefId="1221">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="1222">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="1223">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">5268</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.4604959+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1224">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">11568</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.47136+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1225">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">14856</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.1875S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.4727013+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.21875S</TS>
+              <TS N="UserProcessorTime">PT0.03125S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1226">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">15880</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.4728353+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1227">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">7520</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Executive</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.4779961+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1228">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">10</I32>
+              <I32 N="Id">18820</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Executive</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.478148+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">6</I32>
+          <Obj N="SyncRoot" RefId="1229">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="1223" />
+              <Ref RefId="1224" />
+              <Ref RefId="1225" />
+              <Ref RefId="1226" />
+              <Ref RefId="1227" />
+              <Ref RefId="1228" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">219</I32>
+      <I64 N="VirtualMemorySize64">2203425513472</I64>
+      <I32 N="VirtualMemorySize">107290624</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">5230592</I64>
+      <I32 N="WorkingSet">5230592</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="1230">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+        <Props>
+          <S N="ModuleName">chrome.exe</S>
+          <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="BaseAddress">140702356078592</S>
+          <I32 N="ModuleMemorySize">1732608</I32>
+          <S N="EntryPointAddress">140702357044720</S>
+          <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">1692</I32>
+          <S N="Company">Google LLC</S>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT0.1875S</TS>
+      <TS N="TotalProcessorTime">PT0.21875S</TS>
+      <TS N="UserProcessorTime">PT0.03125S</TS>
+      <Obj N="MainWindowHandle" RefId="1231">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">chrome</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">219</I32>
+      <I64 N="VM">2203425513472</I64>
+      <I64 N="WS">5230592</I64>
+      <I64 N="PM">1843200</I64>
+      <I64 N="NPM">9584</I64>
+      <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+      <Obj N="Parent" RefId="1232">
+        <TNRef RefId="0" />
+        <ToString>System.Diagnostics.Process (chrome)</ToString>
+        <Props>
+          <S N="SafeHandle">Microsoft.Win32.SafeHandles.SafeProcessHandle</S>
+          <S N="Handle">7604</S>
+          <I32 N="BasePriority">8</I32>
+          <B N="HasExited">false</B>
+          <DT N="StartTime">2019-08-24T14:18:00.3253674+03:00</DT>
+          <I32 N="Id">23804</I32>
+          <S N="MachineName">.</S>
+          <S N="MaxWorkingSet">1413120</S>
+          <S N="MinWorkingSet">204800</S>
+          <Obj N="Modules" RefId="1233">
+            <TNRef RefId="6" />
+            <IE>
+              <S>System.Diagnostics.ProcessModule (chrome.exe)</S>
+              <S>System.Diagnostics.ProcessModule (ntdll.dll)</S>
+              <S>System.Diagnostics.ProcessModule (KERNEL32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (KERNELBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome_elf.dll)</S>
+              <S>System.Diagnostics.ProcessModule (VERSION.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ADVAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sechost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RPCRT4.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</S>
+              <S>System.Diagnostics.ProcessModule (user32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (win32u.dll)</S>
+              <S>System.Diagnostics.ProcessModule (GDI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdi32full.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ucrtbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IMM32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SHELL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cfgmgr32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (combase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (powrprof.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shlwapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (kernel.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptsp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome.dll)</S>
+              <S>System.Diagnostics.ProcessModule (uxtheme.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dwmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USERENV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gpapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wkscli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ole32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSCTF.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEAUT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Secur32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SSPICLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DWrite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WS2_32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (COMCTL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (clbcatq.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RMCLIENT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NLAapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NSI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc6.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DNSAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mscms.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ColorAdapterClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (icm32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TextInputFramework.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreUIComponents.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreMessaging.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d2d1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d3d11.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PROPSYS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wintypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntmarta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxgi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WTSAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlanapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINSTA.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemcomn.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MMDevApi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DEVOBJ.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemsvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINHTTP.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fastprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wmiutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FirewallAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fwbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (LINKINFO.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dataexchange.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dcomp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atlthunk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEACC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (directmanipulation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (explorerframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnapps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (XmlLite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mswsock.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMM.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMMBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WmiPerfInst.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pdh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BiWinrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NETAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SAMCLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SAMLIB.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wdmaud.drv)</S>
+              <S>System.Diagnostics.ProcessModule (ksuser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AVRT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AUDIOSES.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (msacm32.drv)</S>
+              <S>System.Diagnostics.ProcessModule (MSACM32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (midimap.dll)</S>
+              <S>System.Diagnostics.ProcessModule (resourcepolicyclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BitsProxy.dll)</S>
+            </IE>
+          </Obj>
+          <I64 N="NonpagedSystemMemorySize64">61568</I64>
+          <I32 N="NonpagedSystemMemorySize">61568</I32>
+          <I64 N="PagedMemorySize64">316080128</I64>
+          <I32 N="PagedMemorySize">316080128</I32>
+          <I64 N="PagedSystemMemorySize64">857648</I64>
+          <I32 N="PagedSystemMemorySize">857648</I32>
+          <I64 N="PeakPagedMemorySize64">455720960</I64>
+          <I32 N="PeakPagedMemorySize">455720960</I32>
+          <I64 N="PeakWorkingSet64">398323712</I64>
+          <I32 N="PeakWorkingSet">398323712</I32>
+          <I64 N="PeakVirtualMemorySize64">2204288917504</I64>
+          <I32 N="PeakVirtualMemorySize">970694656</I32>
+          <B N="PriorityBoostEnabled">true</B>
+          <S N="PriorityClass">Normal</S>
+          <I64 N="PrivateMemorySize64">316080128</I64>
+          <I32 N="PrivateMemorySize">316080128</I32>
+          <S N="ProcessName">chrome</S>
+          <S N="ProcessorAffinity">65535</S>
+          <I32 N="SessionId">1</I32>
+          <Obj N="Threads" RefId="1234">
+            <TNRef RefId="1" />
+            <IE>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+            </IE>
+          </Obj>
+          <I32 N="HandleCount">1747</I32>
+          <I64 N="VirtualMemorySize64">2204143845376</I64>
+          <I32 N="VirtualMemorySize">825622528</I32>
+          <B N="EnableRaisingEvents">false</B>
+          <I64 N="WorkingSet64">112414720</I64>
+          <I32 N="WorkingSet">112414720</I32>
+          <Nil N="SynchronizingObject" />
+          <S N="MainModule">System.Diagnostics.ProcessModule (chrome.exe)</S>
+          <TS N="PrivilegedProcessorTime">PT11M7.53125S</TS>
+          <TS N="TotalProcessorTime">PT21M46.28125S</TS>
+          <TS N="UserProcessorTime">PT10M38.75S</TS>
+          <S N="MainWindowHandle">1770664</S>
+          <S N="MainWindowTitle">The Living Tombstone Radio - Now Playing on Pandora - Google Chrome</S>
+          <B N="Responding">true</B>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <S N="Name">chrome</S>
+          <I32 N="SI">1</I32>
+          <I32 N="Handles">1747</I32>
+          <I64 N="VM">2204143845376</I64>
+          <I64 N="WS">112414720</I64>
+          <I64 N="PM">316080128</I64>
+          <I64 N="NPM">61568</I64>
+          <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="Parent">System.Diagnostics.Process (explorer)</S>
+          <S N="Company">Google LLC</S>
+          <Db N="CPU">1306.28125</Db>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+          <S N="__NounName">Process</S>
+        </MS>
+      </Obj>
+      <S N="Company">Google LLC</S>
+      <Db N="CPU">0.21875</Db>
+      <S N="FileVersion">76.0.3809.100</S>
+      <S N="ProductVersion">76.0.3809.100</S>
+      <S N="Description">Google Chrome</S>
+      <S N="Product">Google Chrome</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+  <Obj RefId="1235">
+    <TNRef RefId="0" />
+    <ToString>System.Diagnostics.Process (chrome)</ToString>
+    <Props>
+      <Obj N="SafeHandle" RefId="1236">
+        <TNRef RefId="5" />
+        <ToString>Microsoft.Win32.SafeHandles.SafeProcessHandle</ToString>
+        <Props>
+          <B N="IsInvalid">false</B>
+          <B N="IsClosed">false</B>
+        </Props>
+      </Obj>
+      <Obj N="Handle" RefId="1237">
+        <TNRef RefId="4" />
+        <ToString>5648</ToString>
+      </Obj>
+      <I32 N="BasePriority">8</I32>
+      <B N="HasExited">false</B>
+      <DT N="StartTime">2019-08-24T14:18:00.9927237+03:00</DT>
+      <I32 N="Id">22468</I32>
+      <S N="MachineName">.</S>
+      <Obj N="MaxWorkingSet" RefId="1238">
+        <TNRef RefId="4" />
+        <ToString>1413120</ToString>
+      </Obj>
+      <Obj N="MinWorkingSet" RefId="1239">
+        <TNRef RefId="4" />
+        <ToString>204800</ToString>
+      </Obj>
+      <Obj N="Modules" RefId="1240">
+        <TNRef RefId="6" />
+        <IE>
+          <Obj RefId="1241">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+            <Props>
+              <S N="ModuleName">chrome.exe</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+              <S N="BaseAddress">140702356078592</S>
+              <I32 N="ModuleMemorySize">1732608</I32>
+              <S N="EntryPointAddress">140702357044720</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1692</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1242">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ntdll.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ntdll.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\ntdll.dll</S>
+              <S N="BaseAddress">140719954984960</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\ntdll.dll_x000D__x000A_InternalName:     ntdll.dll_x000D__x000A_OriginalFilename: ntdll.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NT Layer DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NT Layer DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1243">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNEL32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">KERNEL32.DLL</S>
+              <S N="FileName">C:\Windows\System32\KERNEL32.DLL</S>
+              <S N="BaseAddress">140719912779776</S>
+              <I32 N="ModuleMemorySize">733184</I32>
+              <S N="EntryPointAddress">140719912876560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNEL32.DLL_x000D__x000A_InternalName:     kernel32_x000D__x000A_OriginalFilename: kernel32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">716</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1244">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (KERNELBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">KERNELBASE.dll</S>
+              <S N="FileName">C:\Windows\System32\KERNELBASE.dll</S>
+              <S N="BaseAddress">140719894495232</S>
+              <I32 N="ModuleMemorySize">2699264</I32>
+              <S N="EntryPointAddress">140719894841456</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\KERNELBASE.dll_x000D__x000A_InternalName:     Kernelbase.dll_x000D__x000A_OriginalFilename: Kernelbase.dll.mui_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT BASE API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">2636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">Windows NT BASE API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1245">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_elf.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_elf.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll</S>
+              <S N="BaseAddress">140719325642752</S>
+              <I32 N="ModuleMemorySize">925696</I32>
+              <S N="EntryPointAddress">140719326148464</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_elf.dll_x000D__x000A_InternalName:     chrome_elf_dll_x000D__x000A_OriginalFilename: chrome_elf.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">904</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1246">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (VERSION.dll)</ToString>
+            <Props>
+              <S N="ModuleName">VERSION.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\VERSION.dll</S>
+              <S N="BaseAddress">140719800254464</S>
+              <I32 N="ModuleMemorySize">40960</I32>
+              <S N="EntryPointAddress">140719800259344</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\VERSION.dll_x000D__x000A_InternalName:     version_x000D__x000A_OriginalFilename: VERSION.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Version Checking and File Installation Libraries_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">40</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Version Checking and File Installation Libraries</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1247">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcrt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcrt.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcrt.dll</S>
+              <S N="BaseAddress">140719950004224</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719950035120</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcrt.dll_x000D__x000A_InternalName:     msvcrt.dll_x000D__x000A_OriginalFilename: msvcrt.dll_x000D__x000A_FileVersion:      7.0.17763.475 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows NT CRT DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   7.0.17763.475_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.475 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.475</S>
+              <S N="Description">Windows NT CRT DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1248">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcryptPrimitives.dll</S>
+              <S N="FileName">C:\Windows\System32\bcryptPrimitives.dll</S>
+              <S N="BaseAddress">140719890235392</S>
+              <I32 N="ModuleMemorySize">516096</I32>
+              <S N="EntryPointAddress">140719890461152</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcryptPrimitives.dll_x000D__x000A_InternalName:     bcryptprimitives.dll_x000D__x000A_OriginalFilename: bcryptprimitives.dll_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">504</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1249">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ADVAPI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ADVAPI32.dll</S>
+              <S N="FileName">C:\Windows\System32\ADVAPI32.dll</S>
+              <S N="BaseAddress">140719915335680</S>
+              <I32 N="ModuleMemorySize">667648</I32>
+              <S N="EntryPointAddress">140719915417840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ADVAPI32.dll_x000D__x000A_InternalName:     advapi32.dll_x000D__x000A_OriginalFilename: advapi32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Advanced Windows 32 Base API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">652</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Advanced Windows 32 Base API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1250">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (sechost.dll)</ToString>
+            <Props>
+              <S N="ModuleName">sechost.dll</S>
+              <S N="FileName">C:\Windows\System32\sechost.dll</S>
+              <S N="BaseAddress">140719948824576</S>
+              <I32 N="ModuleMemorySize">647168</I32>
+              <S N="EntryPointAddress">140719948951504</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\sechost.dll_x000D__x000A_InternalName:     sechost.dll_x000D__x000A_OriginalFilename: sechost.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Host for SCM/SDDL/LSA Lookup APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">632</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Host for SCM/SDDL/LSA Lookup APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1251">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (RPCRT4.dll)</ToString>
+            <Props>
+              <S N="ModuleName">RPCRT4.dll</S>
+              <S N="FileName">C:\Windows\System32\RPCRT4.dll</S>
+              <S N="BaseAddress">140719917629440</S>
+              <I32 N="ModuleMemorySize">1187840</I32>
+              <S N="EntryPointAddress">140719918006928</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\RPCRT4.dll_x000D__x000A_InternalName:     rpcrt4.dll_x000D__x000A_OriginalFilename: rpcrt4.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Remote Procedure Call Runtime_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Remote Procedure Call Runtime</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1252">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (chrome_child.dll)</ToString>
+            <Props>
+              <S N="ModuleName">chrome_child.dll</S>
+              <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll</S>
+              <S N="BaseAddress">140717177962496</S>
+              <I32 N="ModuleMemorySize">87977984</I32>
+              <S N="EntryPointAddress">140717247440176</S>
+              <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.100\chrome_child.dll_x000D__x000A_InternalName:     chrome_dll_x000D__x000A_OriginalFilename: chrome.dll_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">85916</I32>
+              <S N="Company">Google LLC</S>
+              <S N="FileVersion">76.0.3809.100</S>
+              <S N="ProductVersion">76.0.3809.100</S>
+              <S N="Description">Google Chrome</S>
+              <S N="Product">Google Chrome</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1253">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (OLEAUT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">OLEAUT32.dll</S>
+              <S N="FileName">C:\Windows\System32\OLEAUT32.dll</S>
+              <S N="BaseAddress">140719946465280</S>
+              <I32 N="ModuleMemorySize">802816</I32>
+              <S N="EntryPointAddress">140719946574624</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\OLEAUT32.dll_x000D__x000A_InternalName:     OLEAUT32.DLL_x000D__x000A_OriginalFilename: OLEAUT32.DLL_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  OLEAUT32.DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">784</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">OLEAUT32.DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1254">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (msvcp_win.dll)</ToString>
+            <Props>
+              <S N="ModuleName">msvcp_win.dll</S>
+              <S N="FileName">C:\Windows\System32\msvcp_win.dll</S>
+              <S N="BaseAddress">140719889580032</S>
+              <I32 N="ModuleMemorySize">655360</I32>
+              <S N="EntryPointAddress">140719889658864</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\msvcp_win.dll_x000D__x000A_InternalName:     msvcp_win.dll_x000D__x000A_OriginalFilename: msvcp_win.dll_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">640</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1255">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (ucrtbase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">ucrtbase.dll</S>
+              <S N="FileName">C:\Windows\System32\ucrtbase.dll</S>
+              <S N="BaseAddress">140719893446656</S>
+              <I32 N="ModuleMemorySize">1024000</I32>
+              <S N="EntryPointAddress">140719893528400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\ucrtbase.dll_x000D__x000A_InternalName:     ucrtbase.dll_x000D__x000A_OriginalFilename: ucrtbase.dll_x000D__x000A_FileVersion:      10.0.17763.404 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft® C Runtime Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.404_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1000</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.404 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.404</S>
+              <S N="Description">Microsoft® C Runtime Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1256">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (combase.dll)</ToString>
+            <Props>
+              <S N="ModuleName">combase.dll</S>
+              <S N="FileName">C:\Windows\System32\combase.dll</S>
+              <S N="BaseAddress">140719950856192</S>
+              <I32 N="ModuleMemorySize">3325952</I32>
+              <S N="EntryPointAddress">140719951769888</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\combase.dll_x000D__x000A_InternalName:     COMBASE.DLL_x000D__x000A_OriginalFilename: COMBASE.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft COM for Windows_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3248</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft COM for Windows</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1257">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WS2_32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WS2_32.dll</S>
+              <S N="FileName">C:\Windows\System32\WS2_32.dll</S>
+              <S N="BaseAddress">140719954198528</S>
+              <I32 N="ModuleMemorySize">446464</I32>
+              <S N="EntryPointAddress">140719954286384</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WS2_32.dll_x000D__x000A_InternalName:     ws2_32.dll_x000D__x000A_OriginalFilename: ws2_32.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Socket 2.0 32-Bit DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">436</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Socket 2.0 32-Bit DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1258">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (GDI32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">GDI32.dll</S>
+              <S N="FileName">C:\Windows\System32\GDI32.dll</S>
+              <S N="BaseAddress">140719950659584</S>
+              <I32 N="ModuleMemorySize">167936</I32>
+              <S N="EntryPointAddress">140719950676208</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\GDI32.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.592 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.592_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">164</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.592 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.592</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1259">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (gdi32full.dll)</ToString>
+            <Props>
+              <S N="ModuleName">gdi32full.dll</S>
+              <S N="FileName">C:\Windows\System32\gdi32full.dll</S>
+              <S N="BaseAddress">140719905112064</S>
+              <I32 N="ModuleMemorySize">1675264</I32>
+              <S N="EntryPointAddress">140719905369792</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\gdi32full.dll_x000D__x000A_InternalName:     gdi32_x000D__x000A_OriginalFilename: gdi32_x000D__x000A_FileVersion:      10.0.17763.678 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  GDI Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.678_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1636</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.678 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.678</S>
+              <S N="Description">GDI Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1260">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USER32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USER32.dll</S>
+              <S N="FileName">C:\Windows\System32\USER32.dll</S>
+              <S N="BaseAddress">140719909306368</S>
+              <I32 N="ModuleMemorySize">1667072</I32>
+              <S N="EntryPointAddress">140719909414448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\USER32.dll_x000D__x000A_InternalName:     user32_x000D__x000A_OriginalFilename: user32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows USER API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1628</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows USER API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1261">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (win32u.dll)</ToString>
+            <Props>
+              <S N="ModuleName">win32u.dll</S>
+              <S N="FileName">C:\Windows\System32\win32u.dll</S>
+              <S N="BaseAddress">140719906816000</S>
+              <I32 N="ModuleMemorySize">131072</I32>
+              <S N="EntryPointAddress">0</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\win32u.dll_x000D__x000A_InternalName:     Win32u_x000D__x000A_OriginalFilename: Win32u.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Win32u_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">128</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Win32u</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1262">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINTRUST.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINTRUST.dll</S>
+              <S N="FileName">C:\Windows\System32\WINTRUST.dll</S>
+              <S N="BaseAddress">140719888728064</S>
+              <I32 N="ModuleMemorySize">364544</I32>
+              <S N="EntryPointAddress">140719888791376</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\WINTRUST.dll_x000D__x000A_InternalName:     WINTRUST.DLL_x000D__x000A_OriginalFilename: WINTRUST.DLL_x000D__x000A_FileVersion:      10.0.17763.348 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Trust Verification APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.348_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">356</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.348 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.348</S>
+              <S N="Description">Microsoft Trust Verification APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1263">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (MSASN1.dll)</ToString>
+            <Props>
+              <S N="ModuleName">MSASN1.dll</S>
+              <S N="FileName">C:\Windows\System32\MSASN1.dll</S>
+              <S N="BaseAddress">140719887876096</S>
+              <I32 N="ModuleMemorySize">73728</I32>
+              <S N="EntryPointAddress">140719887898576</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\MSASN1.dll_x000D__x000A_InternalName:     msasn1.dll_x000D__x000A_OriginalFilename: msasn1.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  ASN.1 Runtime APIs_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">72</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">ASN.1 Runtime APIs</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1264">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPT32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPT32.dll</S>
+              <S N="FileName">C:\Windows\System32\CRYPT32.dll</S>
+              <S N="BaseAddress">140719891480576</S>
+              <I32 N="ModuleMemorySize">1945600</I32>
+              <S N="EntryPointAddress">140719891804832</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\CRYPT32.dll_x000D__x000A_InternalName:     CRYPT32.DLL_x000D__x000A_OriginalFilename: CRYPT32.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Crypto API32_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1900</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Crypto API32</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1265">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IPHLPAPI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\IPHLPAPI.DLL</S>
+              <S N="BaseAddress">140719876931584</S>
+              <I32 N="ModuleMemorySize">249856</I32>
+              <S N="EntryPointAddress">140719876989024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\IPHLPAPI.DLL_x000D__x000A_InternalName:     iphlpapi.dll_x000D__x000A_OriginalFilename: iphlpapi.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  IP Helper API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">244</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">IP Helper API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1266">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMM.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMM.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMM.dll</S>
+              <S N="BaseAddress">140719835054080</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719835066368</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMM.dll_x000D__x000A_InternalName:     winmm.dll_x000D__x000A_OriginalFilename: WINMM.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  MCI API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">MCI API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1267">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (USERENV.dll)</ToString>
+            <Props>
+              <S N="ModuleName">USERENV.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\USERENV.dll</S>
+              <S N="BaseAddress">140719887024128</S>
+              <I32 N="ModuleMemorySize">163840</I32>
+              <S N="EntryPointAddress">140719887043280</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\USERENV.dll_x000D__x000A_InternalName:     userenv_x000D__x000A_OriginalFilename: userenv.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Userenv_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">160</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Userenv</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1268">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (profapi.dll)</ToString>
+            <Props>
+              <S N="ModuleName">profapi.dll</S>
+              <S N="FileName">C:\Windows\System32\profapi.dll</S>
+              <S N="BaseAddress">140719888531456</S>
+              <I32 N="ModuleMemorySize">147456</I32>
+              <S N="EntryPointAddress">140719888564400</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\profapi.dll_x000D__x000A_InternalName:     PROFAPI.DLL_x000D__x000A_OriginalFilename: PROFAPI.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  User Profile Basic API_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">144</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">User Profile Basic API</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1269">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (DWrite.dll)</ToString>
+            <Props>
+              <S N="ModuleName">DWrite.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\DWrite.dll</S>
+              <S N="BaseAddress">140719303819264</S>
+              <I32 N="ModuleMemorySize">3129344</I32>
+              <S N="EntryPointAddress">140719304509728</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\DWrite.dll_x000D__x000A_InternalName:     DWrite_x000D__x000A_OriginalFilename: DWrite_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft DirectX Typography Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">3056</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Microsoft DirectX Typography Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1270">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINSPOOL.DRV)</ToString>
+            <Props>
+              <S N="ModuleName">WINSPOOL.DRV</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINSPOOL.DRV</S>
+              <S N="BaseAddress">140719787606016</S>
+              <I32 N="ModuleMemorySize">561152</I32>
+              <S N="EntryPointAddress">140719787676448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINSPOOL.DRV_x000D__x000A_InternalName:     winspool.drv_x000D__x000A_OriginalFilename: winspool.drv.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Spooler Driver_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">548</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Spooler Driver</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1271">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (kernel.appcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">kernel.appcore.dll</S>
+              <S N="FileName">C:\Windows\System32\kernel.appcore.dll</S>
+              <S N="BaseAddress">140719888400384</S>
+              <I32 N="ModuleMemorySize">69632</I32>
+              <S N="EntryPointAddress">140719888415648</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\kernel.appcore.dll_x000D__x000A_InternalName:     kernel.appcore.dll_x000D__x000A_OriginalFilename: kernel.appcore.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  AppModel API Host_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">68</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">AppModel API Host</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1272">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (bcrypt.dll)</ToString>
+            <Props>
+              <S N="ModuleName">bcrypt.dll</S>
+              <S N="FileName">C:\Windows\System32\bcrypt.dll</S>
+              <S N="BaseAddress">140719897247744</S>
+              <I32 N="ModuleMemorySize">155648</I32>
+              <S N="EntryPointAddress">140719897281296</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\bcrypt.dll_x000D__x000A_InternalName:     bcrypt.dll_x000D__x000A_OriginalFilename: bcrypt.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Cryptographic Primitives Library_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">152</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Cryptographic Primitives Library</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1273">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dbghelp.dll)</ToString>
+            <Props>
+              <S N="ModuleName">dbghelp.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dbghelp.dll</S>
+              <S N="BaseAddress">140719552397312</S>
+              <I32 N="ModuleMemorySize">2019328</I32>
+              <S N="EntryPointAddress">140719552479168</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dbghelp.dll_x000D__x000A_InternalName:     DBGHELP.DLL_x000D__x000A_OriginalFilename: DBGHELP.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows Image Helper_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1972</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows Image Helper</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1274">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINHTTP.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINHTTP.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINHTTP.dll</S>
+              <S N="BaseAddress">140719810019328</S>
+              <I32 N="ModuleMemorySize">991232</I32>
+              <S N="EntryPointAddress">140719810293024</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINHTTP.dll_x000D__x000A_InternalName:     winhttp.dll_x000D__x000A_OriginalFilename: winhttp.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Windows HTTP Services_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">968</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Windows HTTP Services</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1275">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (Secur32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">Secur32.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\Secur32.dll</S>
+              <S N="BaseAddress">140719559147520</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719559156816</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\Secur32.dll_x000D__x000A_InternalName:     secur32.dll_x000D__x000A_OriginalFilename: secur32.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1276">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">dhcpcsvc.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\dhcpcsvc.DLL</S>
+              <S N="BaseAddress">140719782494208</S>
+              <I32 N="ModuleMemorySize">114688</I32>
+              <S N="EntryPointAddress">140719782503840</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\dhcpcsvc.DLL_x000D__x000A_InternalName:     dhcpcsvc.dll_x000D__x000A_OriginalFilename: dhcpcsvc.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  DHCP Client Service_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">112</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">DHCP Client Service</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1277">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (NSI.dll)</ToString>
+            <Props>
+              <S N="ModuleName">NSI.dll</S>
+              <S N="FileName">C:\Windows\System32\NSI.dll</S>
+              <S N="BaseAddress">140719916843008</S>
+              <I32 N="ModuleMemorySize">32768</I32>
+              <S N="EntryPointAddress">140719916851008</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\NSI.dll_x000D__x000A_InternalName:     nsi.dll_x000D__x000A_OriginalFilename: nsi.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  NSI User-mode interface DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">32</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">NSI User-mode interface DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1278">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (WINMMBASE.dll)</ToString>
+            <Props>
+              <S N="ModuleName">WINMMBASE.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\WINMMBASE.dll</S>
+              <S N="BaseAddress">140719834857472</S>
+              <I32 N="ModuleMemorySize">184320</I32>
+              <S N="EntryPointAddress">140719834890448</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\WINMMBASE.dll_x000D__x000A_InternalName:     winmmbase.dll_x000D__x000A_OriginalFilename: WINMMbase.DLL.MUI_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base Multimedia Extension API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">180</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base Multimedia Extension API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1279">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (cfgmgr32.dll)</ToString>
+            <Props>
+              <S N="ModuleName">cfgmgr32.dll</S>
+              <S N="FileName">C:\Windows\System32\cfgmgr32.dll</S>
+              <S N="BaseAddress">140719889252352</S>
+              <I32 N="ModuleMemorySize">303104</I32>
+              <S N="EntryPointAddress">140719889325904</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\cfgmgr32.dll_x000D__x000A_InternalName:     cfgmgr32.dll_x000D__x000A_OriginalFilename: CFGMGR32.DLL_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Configuration Manager DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">296</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Configuration Manager DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1280">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (PROPSYS.dll)</ToString>
+            <Props>
+              <S N="ModuleName">PROPSYS.dll</S>
+              <S N="FileName">C:\Windows\SYSTEM32\PROPSYS.dll</S>
+              <S N="BaseAddress">140719831187456</S>
+              <I32 N="ModuleMemorySize">1736704</I32>
+              <S N="EntryPointAddress">140719831447408</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\PROPSYS.dll_x000D__x000A_InternalName:     propsys.dll_x000D__x000A_OriginalFilename: propsys.dll.mui_x000D__x000A_FileVersion:      7.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Microsoft Property System_x000D__x000A_Product:          Windows® Search_x000D__x000A_ProductVersion:   7.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">1696</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">7.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">7.0.17763.1</S>
+              <S N="Description">Microsoft Property System</S>
+              <S N="Product">Windows® Search</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1281">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (shcore.dll)</ToString>
+            <Props>
+              <S N="ModuleName">shcore.dll</S>
+              <S N="FileName">C:\Windows\System32\shcore.dll</S>
+              <S N="BaseAddress">140719907143680</S>
+              <I32 N="ModuleMemorySize">688128</I32>
+              <S N="EntryPointAddress">140719907388560</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\shcore.dll_x000D__x000A_InternalName:     SHCORE_x000D__x000A_OriginalFilename: SHCORE.dll.mui_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  SHCORE_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">672</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">SHCORE</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1282">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (SSPICLI.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">SSPICLI.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\SSPICLI.DLL</S>
+              <S N="BaseAddress">140719886827520</S>
+              <I32 N="ModuleMemorySize">192512</I32>
+              <S N="EntryPointAddress">140719886881776</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\SSPICLI.DLL_x000D__x000A_InternalName:     sspicli.dll_x000D__x000A_OriginalFilename: sspicli.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Security Support Provider Interface_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">188</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Security Support Provider Interface</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1283">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (IMM32.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">IMM32.DLL</S>
+              <S N="FileName">C:\Windows\System32\IMM32.DLL</S>
+              <S N="BaseAddress">140719906947072</S>
+              <I32 N="ModuleMemorySize">188416</I32>
+              <S N="EntryPointAddress">140719906952688</S>
+              <S N="FileVersionInfo">File:             C:\Windows\System32\IMM32.DLL_x000D__x000A_InternalName:     imm32_x000D__x000A_OriginalFilename: imm32_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Multi-User Windows IMM32 API Client DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">184</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Multi-User Windows IMM32 API Client DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+          <Obj RefId="1284">
+            <TNRef RefId="7" />
+            <ToString>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</ToString>
+            <Props>
+              <S N="ModuleName">CRYPTBASE.DLL</S>
+              <S N="FileName">C:\Windows\SYSTEM32\CRYPTBASE.DLL</S>
+              <S N="BaseAddress">140719881846784</S>
+              <I32 N="ModuleMemorySize">49152</I32>
+              <S N="EntryPointAddress">140719881855488</S>
+              <S N="FileVersionInfo">File:             C:\Windows\SYSTEM32\CRYPTBASE.DLL_x000D__x000A_InternalName:     cryptbase.dll_x000D__x000A_OriginalFilename: cryptbase.dll_x000D__x000A_FileVersion:      10.0.17763.1 (WinBuild.160101.0800)_x000D__x000A_FileDescription:  Base cryptographic API DLL_x000D__x000A_Product:          Microsoft® Windows® Operating System_x000D__x000A_ProductVersion:   10.0.17763.1_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+            <MS>
+              <I32 N="Size">48</I32>
+              <S N="Company">Microsoft Corporation</S>
+              <S N="FileVersion">10.0.17763.1 (WinBuild.160101.0800)</S>
+              <S N="ProductVersion">10.0.17763.1</S>
+              <S N="Description">Base cryptographic API DLL</S>
+              <S N="Product">Microsoft® Windows® Operating System</S>
+            </MS>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">44</I32>
+          <Obj N="SyncRoot" RefId="1285">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="1241" />
+              <Ref RefId="1242" />
+              <Ref RefId="1243" />
+              <Ref RefId="1244" />
+              <Ref RefId="1245" />
+              <Ref RefId="1246" />
+              <Ref RefId="1247" />
+              <Ref RefId="1248" />
+              <Ref RefId="1249" />
+              <Ref RefId="1250" />
+              <Ref RefId="1251" />
+              <Ref RefId="1252" />
+              <Ref RefId="1253" />
+              <Ref RefId="1254" />
+              <Ref RefId="1255" />
+              <Ref RefId="1256" />
+              <Ref RefId="1257" />
+              <Ref RefId="1258" />
+              <Ref RefId="1259" />
+              <Ref RefId="1260" />
+              <Ref RefId="1261" />
+              <Ref RefId="1262" />
+              <Ref RefId="1263" />
+              <Ref RefId="1264" />
+              <Ref RefId="1265" />
+              <Ref RefId="1266" />
+              <Ref RefId="1267" />
+              <Ref RefId="1268" />
+              <Ref RefId="1269" />
+              <Ref RefId="1270" />
+              <Ref RefId="1271" />
+              <Ref RefId="1272" />
+              <Ref RefId="1273" />
+              <Ref RefId="1274" />
+              <Ref RefId="1275" />
+              <Ref RefId="1276" />
+              <Ref RefId="1277" />
+              <Ref RefId="1278" />
+              <Ref RefId="1279" />
+              <Ref RefId="1280" />
+              <Ref RefId="1281" />
+              <Ref RefId="1282" />
+              <Ref RefId="1283" />
+              <Ref RefId="1284" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I64 N="NonpagedSystemMemorySize64">28960</I64>
+      <I32 N="NonpagedSystemMemorySize">28960</I32>
+      <I64 N="PagedMemorySize64">38973440</I64>
+      <I32 N="PagedMemorySize">38973440</I32>
+      <I64 N="PagedSystemMemorySize64">360048</I64>
+      <I32 N="PagedSystemMemorySize">360048</I32>
+      <I64 N="PeakPagedMemorySize64">45535232</I64>
+      <I32 N="PeakPagedMemorySize">45535232</I32>
+      <I64 N="PeakWorkingSet64">65232896</I64>
+      <I32 N="PeakWorkingSet">65232896</I32>
+      <I64 N="PeakVirtualMemorySize64">2203789897728</I64>
+      <I32 N="PeakVirtualMemorySize">471674880</I32>
+      <B N="PriorityBoostEnabled">true</B>
+      <Obj N="PriorityClass" RefId="1286">
+        <TNRef RefId="8" />
+        <ToString>Normal</ToString>
+        <I32>32</I32>
+      </Obj>
+      <I64 N="PrivateMemorySize64">38973440</I64>
+      <I32 N="PrivateMemorySize">38973440</I32>
+      <S N="ProcessName">chrome</S>
+      <Obj N="ProcessorAffinity" RefId="1287">
+        <TNRef RefId="4" />
+        <ToString>65535</ToString>
+      </Obj>
+      <I32 N="SessionId">1</I32>
+      <Obj N="Threads" RefId="1288">
+        <TNRef RefId="1" />
+        <IE>
+          <Obj RefId="1289">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">14712</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.515625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:00.9927255+03:00</DT>
+              <TS N="TotalProcessorTime">PT3.453125S</TS>
+              <TS N="UserProcessorTime">PT2.9375S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1290">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">4696</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0767085+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1291">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">21084</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.015625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0784573+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.015625S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1292">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">22848</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0.234375S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0795982+03:00</DT>
+              <TS N="TotalProcessorTime">PT1.203125S</TS>
+              <TS N="UserProcessorTime">PT0.96875S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1293">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">18736</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">EventPairLow</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0805741+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1294">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">6688</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0817489+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1295">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">7036</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0915583+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.0625S</TS>
+              <TS N="UserProcessorTime">PT0.0625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1296">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">19192</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0.015625S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0936767+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.015625S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1297">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">22864</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0.03125S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0941059+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.03125S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1298">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">14696</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0945295+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.015625S</TS>
+              <TS N="UserProcessorTime">PT0.015625S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1299">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">9</I32>
+              <I32 N="Id">3272</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0951787+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1300">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">6</I32>
+              <I32 N="CurrentPriority">6</I32>
+              <I32 N="Id">17120</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Lowest</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">Unknown</S>
+              <TS N="PrivilegedProcessorTime">PT0S</TS>
+              <DT N="StartTime">2019-08-24T14:18:01.0956001+03:00</DT>
+              <TS N="TotalProcessorTime">PT0S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+          <Obj RefId="1301">
+            <TNRef RefId="2" />
+            <ToString>System.Diagnostics.ProcessThread</ToString>
+            <Props>
+              <I32 N="BasePriority">8</I32>
+              <I32 N="CurrentPriority">8</I32>
+              <I32 N="Id">27616</I32>
+              <B N="PriorityBoostEnabled">true</B>
+              <S N="PriorityLevel">Normal</S>
+              <S N="StartAddress">140719955419728</S>
+              <S N="ThreadState">Wait</S>
+              <S N="WaitReason">UserRequest</S>
+              <TS N="PrivilegedProcessorTime">PT0.015625S</TS>
+              <DT N="StartTime">2019-08-27T02:00:52.309162+03:00</DT>
+              <TS N="TotalProcessorTime">PT0.015625S</TS>
+              <TS N="UserProcessorTime">PT0S</TS>
+              <Nil N="Site" />
+              <Nil N="Container" />
+            </Props>
+          </Obj>
+        </IE>
+        <Props>
+          <I32 N="Count">13</I32>
+          <Obj N="SyncRoot" RefId="1302">
+            <TNRef RefId="3" />
+            <LST>
+              <Ref RefId="1289" />
+              <Ref RefId="1290" />
+              <Ref RefId="1291" />
+              <Ref RefId="1292" />
+              <Ref RefId="1293" />
+              <Ref RefId="1294" />
+              <Ref RefId="1295" />
+              <Ref RefId="1296" />
+              <Ref RefId="1297" />
+              <Ref RefId="1298" />
+              <Ref RefId="1299" />
+              <Ref RefId="1300" />
+              <Ref RefId="1301" />
+            </LST>
+          </Obj>
+          <B N="IsSynchronized">false</B>
+        </Props>
+      </Obj>
+      <I32 N="HandleCount">273</I32>
+      <I64 N="VirtualMemorySize64">2203764723712</I64>
+      <I32 N="VirtualMemorySize">446500864</I32>
+      <B N="EnableRaisingEvents">false</B>
+      <I64 N="WorkingSet64">28418048</I64>
+      <I32 N="WorkingSet">28418048</I32>
+      <Nil N="SynchronizingObject" />
+      <Obj N="MainModule" RefId="1303">
+        <TNRef RefId="7" />
+        <ToString>System.Diagnostics.ProcessModule (chrome.exe)</ToString>
+        <Props>
+          <S N="ModuleName">chrome.exe</S>
+          <S N="FileName">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="BaseAddress">140702356078592</S>
+          <I32 N="ModuleMemorySize">1732608</I32>
+          <S N="EntryPointAddress">140702357044720</S>
+          <S N="FileVersionInfo">File:             C:\Program Files (x86)\Google\Chrome\Application\chrome.exe_x000D__x000A_InternalName:     chrome_exe_x000D__x000A_OriginalFilename: chrome.exe_x000D__x000A_FileVersion:      76.0.3809.100_x000D__x000A_FileDescription:  Google Chrome_x000D__x000A_Product:          Google Chrome_x000D__x000A_ProductVersion:   76.0.3809.100_x000D__x000A_Debug:            False_x000D__x000A_Patched:          False_x000D__x000A_PreRelease:       False_x000D__x000A_PrivateBuild:     False_x000D__x000A_SpecialBuild:     False_x000D__x000A_Language:         English (United States)_x000D__x000A_</S>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <I32 N="Size">1692</I32>
+          <S N="Company">Google LLC</S>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+        </MS>
+      </Obj>
+      <TS N="PrivilegedProcessorTime">PT1.40625S</TS>
+      <TS N="TotalProcessorTime">PT5.484375S</TS>
+      <TS N="UserProcessorTime">PT4.078125S</TS>
+      <Obj N="MainWindowHandle" RefId="1304">
+        <TNRef RefId="4" />
+        <ToString>0</ToString>
+      </Obj>
+      <S N="MainWindowTitle"></S>
+      <B N="Responding">true</B>
+      <Nil N="Site" />
+      <Nil N="Container" />
+    </Props>
+    <MS>
+      <S N="Name">chrome</S>
+      <I32 N="SI">1</I32>
+      <I32 N="Handles">273</I32>
+      <I64 N="VM">2203764723712</I64>
+      <I64 N="WS">28418048</I64>
+      <I64 N="PM">38973440</I64>
+      <I64 N="NPM">28960</I64>
+      <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+      <Obj N="Parent" RefId="1305">
+        <TNRef RefId="0" />
+        <ToString>System.Diagnostics.Process (chrome)</ToString>
+        <Props>
+          <S N="SafeHandle">Microsoft.Win32.SafeHandles.SafeProcessHandle</S>
+          <S N="Handle">2468</S>
+          <I32 N="BasePriority">8</I32>
+          <B N="HasExited">false</B>
+          <DT N="StartTime">2019-08-24T14:18:00.3253674+03:00</DT>
+          <I32 N="Id">23804</I32>
+          <S N="MachineName">.</S>
+          <S N="MaxWorkingSet">1413120</S>
+          <S N="MinWorkingSet">204800</S>
+          <Obj N="Modules" RefId="1306">
+            <TNRef RefId="6" />
+            <IE>
+              <S>System.Diagnostics.ProcessModule (chrome.exe)</S>
+              <S>System.Diagnostics.ProcessModule (ntdll.dll)</S>
+              <S>System.Diagnostics.ProcessModule (KERNEL32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (KERNELBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome_elf.dll)</S>
+              <S>System.Diagnostics.ProcessModule (VERSION.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ADVAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (sechost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RPCRT4.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPTBASE.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (bcryptPrimitives.dll)</S>
+              <S>System.Diagnostics.ProcessModule (user32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (win32u.dll)</S>
+              <S>System.Diagnostics.ProcessModule (GDI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gdi32full.dll)</S>
+              <S>System.Diagnostics.ProcessModule (msvcp_win.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ucrtbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IMM32.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SHELL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cfgmgr32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (combase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (windows.storage.dll)</S>
+              <S>System.Diagnostics.ProcessModule (profapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (powrprof.dll)</S>
+              <S>System.Diagnostics.ProcessModule (shlwapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (kernel.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (cryptsp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (chrome.dll)</S>
+              <S>System.Diagnostics.ProcessModule (uxtheme.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dwmapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CRYPT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSASN1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (USERENV.dll)</S>
+              <S>System.Diagnostics.ProcessModule (gpapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wkscli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (bcrypt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (netutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ole32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MSCTF.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEAUT32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Secur32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SSPICLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DWrite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WS2_32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (COMCTL32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (clbcatq.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.appcore.dll)</S>
+              <S>System.Diagnostics.ProcessModule (RMCLIENT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (twinapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NLAapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (IPHLPAPI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (NSI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc6.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (dhcpcsvc.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (DNSAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mscms.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ColorAdapterClient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (icm32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.UI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (TextInputFramework.dll)</S>
+              <S>System.Diagnostics.ProcessModule (InputHost.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreUIComponents.dll)</S>
+              <S>System.Diagnostics.ProcessModule (CoreMessaging.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d2d1.dll)</S>
+              <S>System.Diagnostics.ProcessModule (d3d11.dll)</S>
+              <S>System.Diagnostics.ProcessModule (PROPSYS.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wintypes.dll)</S>
+              <S>System.Diagnostics.ProcessModule (ntmarta.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dxgi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WTSAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wlanapi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINSTA.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemcomn.dll)</S>
+              <S>System.Diagnostics.ProcessModule (MMDevApi.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DEVOBJ.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wbemsvc.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINHTTP.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fastprox.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wmiutils.dll)</S>
+              <S>System.Diagnostics.ProcessModule (DPAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FirewallAPI.dll)</S>
+              <S>System.Diagnostics.ProcessModule (fwbase.dll)</S>
+              <S>System.Diagnostics.ProcessModule (LINKINFO.dll)</S>
+              <S>System.Diagnostics.ProcessModule (FWPolicyIOMgr.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dataexchange.dll)</S>
+              <S>System.Diagnostics.ProcessModule (dcomp.dll)</S>
+              <S>System.Diagnostics.ProcessModule (atlthunk.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OLEACC.dll)</S>
+              <S>System.Diagnostics.ProcessModule (directmanipulation.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreUAPCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (explorerframe.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wpnapps.dll)</S>
+              <S>System.Diagnostics.ProcessModule (XmlLite.dll)</S>
+              <S>System.Diagnostics.ProcessModule (usermgrcli.dll)</S>
+              <S>System.Diagnostics.ProcessModule (mswsock.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMM.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WINMMBASE.dll)</S>
+              <S>System.Diagnostics.ProcessModule (OneCoreCommonProxyStub.dll)</S>
+              <S>System.Diagnostics.ProcessModule (WmiPerfInst.dll)</S>
+              <S>System.Diagnostics.ProcessModule (pdh.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Bluetooth.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.HostName.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BiWinrt.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Networking.Connectivity.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Enumeration.dll)</S>
+              <S>System.Diagnostics.ProcessModule (Windows.Devices.Radios.dll)</S>
+              <S>System.Diagnostics.ProcessModule (NETAPI32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (SAMCLI.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (SAMLIB.dll)</S>
+              <S>System.Diagnostics.ProcessModule (wdmaud.drv)</S>
+              <S>System.Diagnostics.ProcessModule (ksuser.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AVRT.dll)</S>
+              <S>System.Diagnostics.ProcessModule (AUDIOSES.DLL)</S>
+              <S>System.Diagnostics.ProcessModule (msacm32.drv)</S>
+              <S>System.Diagnostics.ProcessModule (MSACM32.dll)</S>
+              <S>System.Diagnostics.ProcessModule (midimap.dll)</S>
+              <S>System.Diagnostics.ProcessModule (resourcepolicyclient.dll)</S>
+              <S>System.Diagnostics.ProcessModule (BitsProxy.dll)</S>
+            </IE>
+          </Obj>
+          <I64 N="NonpagedSystemMemorySize64">61568</I64>
+          <I32 N="NonpagedSystemMemorySize">61568</I32>
+          <I64 N="PagedMemorySize64">316080128</I64>
+          <I32 N="PagedMemorySize">316080128</I32>
+          <I64 N="PagedSystemMemorySize64">857648</I64>
+          <I32 N="PagedSystemMemorySize">857648</I32>
+          <I64 N="PeakPagedMemorySize64">455720960</I64>
+          <I32 N="PeakPagedMemorySize">455720960</I32>
+          <I64 N="PeakWorkingSet64">398323712</I64>
+          <I32 N="PeakWorkingSet">398323712</I32>
+          <I64 N="PeakVirtualMemorySize64">2204288917504</I64>
+          <I32 N="PeakVirtualMemorySize">970694656</I32>
+          <B N="PriorityBoostEnabled">true</B>
+          <S N="PriorityClass">Normal</S>
+          <I64 N="PrivateMemorySize64">316080128</I64>
+          <I32 N="PrivateMemorySize">316080128</I32>
+          <S N="ProcessName">chrome</S>
+          <S N="ProcessorAffinity">65535</S>
+          <I32 N="SessionId">1</I32>
+          <Obj N="Threads" RefId="1307">
+            <TNRef RefId="1" />
+            <IE>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+              <S>System.Diagnostics.ProcessThread</S>
+            </IE>
+          </Obj>
+          <I32 N="HandleCount">1747</I32>
+          <I64 N="VirtualMemorySize64">2204143845376</I64>
+          <I32 N="VirtualMemorySize">825622528</I32>
+          <B N="EnableRaisingEvents">false</B>
+          <I64 N="WorkingSet64">112414720</I64>
+          <I32 N="WorkingSet">112414720</I32>
+          <Nil N="SynchronizingObject" />
+          <S N="MainModule">System.Diagnostics.ProcessModule (chrome.exe)</S>
+          <TS N="PrivilegedProcessorTime">PT11M7.53125S</TS>
+          <TS N="TotalProcessorTime">PT21M46.28125S</TS>
+          <TS N="UserProcessorTime">PT10M38.75S</TS>
+          <S N="MainWindowHandle">1770664</S>
+          <S N="MainWindowTitle">The Living Tombstone Radio - Now Playing on Pandora - Google Chrome</S>
+          <B N="Responding">true</B>
+          <Nil N="Site" />
+          <Nil N="Container" />
+        </Props>
+        <MS>
+          <S N="Name">chrome</S>
+          <I32 N="SI">1</I32>
+          <I32 N="Handles">1747</I32>
+          <I64 N="VM">2204143845376</I64>
+          <I64 N="WS">112414720</I64>
+          <I64 N="PM">316080128</I64>
+          <I64 N="NPM">61568</I64>
+          <S N="Path">C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</S>
+          <S N="Parent">System.Diagnostics.Process (explorer)</S>
+          <S N="Company">Google LLC</S>
+          <Db N="CPU">1306.28125</Db>
+          <S N="FileVersion">76.0.3809.100</S>
+          <S N="ProductVersion">76.0.3809.100</S>
+          <S N="Description">Google Chrome</S>
+          <S N="Product">Google Chrome</S>
+          <S N="__NounName">Process</S>
+        </MS>
+      </Obj>
+      <S N="Company">Google LLC</S>
+      <Db N="CPU">5.484375</Db>
+      <S N="FileVersion">76.0.3809.100</S>
+      <S N="ProductVersion">76.0.3809.100</S>
+      <S N="Description">Google Chrome</S>
+      <S N="Product">Google Chrome</S>
+      <S N="__NounName">Process</S>
+    </MS>
+  </Obj>
+</Objs>
\ No newline at end of file
diff --git a/__tests__/Samples/Get-Service.xml b/__tests__/Samples/Get-Service.xml
new file mode 100644
index 0000000..d8181a5
Binary files /dev/null and b/__tests__/Samples/Get-Service.xml differ
diff --git a/__tests__/Samples/Samples.ps1 b/__tests__/Samples/Samples.ps1
new file mode 100644
index 0000000..6de82ac
--- /dev/null
+++ b/__tests__/Samples/Samples.ps1
@@ -0,0 +1,38 @@
+<#
+Get-Service | Select-Object -First 30 | Export-Clixml -Path Get-Service.xml
+
+$Disk = Get-CimInstance -ClassName win32_logicaldisk | Select-Object -Property DeviceId,VolumeName, Size,Freespace
+$Disk | Export-Clixml -Path Get-CimInstanceDisk.xml
+
+$NetAdapter = Get-CimInstance -Namespace root/StandardCimv2 -class MSFT_NetAdapter | Select-Object -Property Name, InterfaceDescription, MacAddress, LinkSpeed
+$NetAdapter | Export-Clixml -Path Get-CimInstanceNetAdapter.xml
+
+$Process = Get-Process | Where-Object { $_.StartTime } | Select-Object -first 20
+$Process | Export-Clixml -Path Get-Process.xml
+#>
+
+if ($IsLinux -or $IsMacOS) {
+    if (-not (Get-Command 'Get-Service' -ErrorAction SilentlyContinue)) {
+        function Get-Service {
+            Import-Clixml -Path (Join-Path $PSScriptRoot Get-Service.xml)
+        }
+    }
+    if (-not (Get-Command 'Get-CimInstance' -ErrorAction SilentlyContinue)) {
+        function Get-CimInstance {
+            param (
+                $ClassName,
+                $Namespace,
+                $class
+            )
+            if ($ClassName -eq 'win32_logicaldisk') {
+                Import-Clixml -Path (Join-Path $PSScriptRoot Get-CimInstanceDisk.xml)
+            }
+            elseif ($class -eq 'MSFT_NetAdapter') {
+                Import-Clixml -Path (Join-Path $PSScriptRoot Get-CimInstanceNetAdapter.xml)
+            }
+        }
+    }
+    function Get-Process {
+        Import-Clixml -Path (Join-Path $PSScriptRoot Get-Process.xml)
+    }
+}
\ No newline at end of file