PER UTENTI

Chiudi

La mia libreria
La mia libreria

+ Aggiungi alla libreria

Ricerca
Ricerca

Supporto
Supporto 24/7 | Regole per contattare

Scrivi

Una richiesta attraverso il modulo

Chiama

+7 (495) 789-45-86

Forum

Richieste

Crea nuova richiesta

Chiama

+7 (495) 789-45-86

Profile

IT

RU CN EN ES FR IT JP KZ UZ BY ID
Chiudi
Servizi
Scanner
Dr.Web vxCube
Versione di prova
Libreria dei virus
Base di conoscenza

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Notizie

Trojan.Siggen32.61110

Aggiunto al database dei virus Dr.Web: 2026-06-28

La descrizione è stata aggiunta:

Technical Information

To ensure autorun and distribution
Modifies the following registry keys
  • [HKLM\Software\Microsoft\Windows\CurrentVersion\Run] 'Pyrite' = '<DRIVERS>\Pyrite.dat'
  • [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'Pyrite' = '<DRIVERS>\Pyrite.dat'
  • [HKLM\Software\Microsoft\Windows\CurrentVersion\Run] 'Pyrite' = '<SYSTEM32>\spool\drivers\w32x86\svchost.exe'
  • [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'Pyrite' = '<SYSTEM32>\spool\drivers\w32x86\svchost.exe'
  • [HKLM\Software\Microsoft\Windows\CurrentVersion\Run] 'Pyrite' = 'C:\$Recycle.Bin\System Volume Information\winlogon.exe'
  • [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'Pyrite' = 'C:\$Recycle.Bin\System Volume Information\winlogon.exe'
  • [HKLM\Software\Microsoft\Windows\CurrentVersion\Run] 'Pyrite' = '%ALLUSERSPROFILE%\Microsoft\Windows\Caches\{A3D5F1E2-9B4C-4D2E-8F7A-1B2C3D4E5F6E}\update.exe'
  • [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'Pyrite' = '%ALLUSERSPROFILE%\Microsoft\Windows\Caches\{A3D5F1E2-9B4C-4D2E-8F7A-1B2C3D4E5F6E}\update.exe'
Creates or modifies the following files
  • <SYSTEM32>\tasks\microsoft\windows\windowsupdate\systemmaintenance
  • <SYSTEM32>\tasks\microsoft\windows\applicationexperience\programcompatibility
Modifies master boot record (MBR).
Malicious functions
To complicate detection of its presence in the operating system,
blocks the following features:
  • Windows Recovery Environment (WinRE)
Modifies file system
Creates the following files
  • <DRIVERS>\pyrite.dat
  • <SYSTEM32>\spool\drivers\w32x86\svchost.exe
  • C:\$recycle.bin\system volume information\winlogon.exe
  • %ALLUSERSPROFILE%\microsoft\windows\caches\{a3d5f1e2-9b4c-4d2e-8f7a-1b2c3d4e5f6e}\update.exe
  • nul
Sets the 'hidden' attribute to the following files
  • <DRIVERS>\pyrite.dat
  • <SYSTEM32>\spool\drivers\w32x86\svchost.exe
  • C:\$recycle.bin\system volume information\winlogon.exe
  • %ALLUSERSPROFILE%\microsoft\windows\caches\{a3d5f1e2-9b4c-4d2e-8f7a-1b2c3d4e5f6e}\update.exe
Deletes the following system files
  • C:\recovery\windowsre\boot.sdi
  • C:\recovery\windowsre\reagent.xml
  • C:\recovery\windowsre\winre.wim
  • %WINDIR%\appcompat\programs\amcache.hve
  • %WINDIR%\appcompat\programs\amcache.hve.log1
  • %WINDIR%\appcompat\programs\amcache.hve.log2
  • %WINDIR%\appcompat\programs\amcache.hve.tmp.log1
  • %WINDIR%\appcompat\programs\amcache.hve.tmp.log2
  • %WINDIR%\appcompat\programs\install\install_0000_651a3e66-e312-4c01-92da-6bd0e16afc72.txt
  • %WINDIR%\appcompat\programs\install\install_ffff_651a3e66-e312-4c01-92da-6bd0e16afc72.txt
  • %WINDIR%\assembly\gac\adodb\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll
  • %WINDIR%\assembly\gac\adodb\7.0.3300.0__b03f5f7f11d50a3a\__assemblyinfo__.ini
  • %WINDIR%\assembly\gac\extensibility\7.0.3300.0__b03f5f7f11d50a3a\extensibility.dll
  • %WINDIR%\assembly\gac\extensibility\7.0.3300.0__b03f5f7f11d50a3a\__assemblyinfo__.ini
  • %WINDIR%\assembly\gac\microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\microsoft.mshtml.dll
  • %WINDIR%\assembly\gac\microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\__assemblyinfo__.ini
  • %WINDIR%\assembly\gac\microsoft.stdformat\7.0.3300.0__b03f5f7f11d50a3a\microsoft.stdformat.dll
  • %WINDIR%\assembly\gac\microsoft.stdformat\7.0.3300.0__b03f5f7f11d50a3a\__assemblyinfo__.ini
  • %WINDIR%\assembly\gac\mscomctl\10.0.4504.0__31bf3856ad364e35\mscomctl.dll
  • %WINDIR%\assembly\gac\mscomctl\10.0.4504.0__31bf3856ad364e35\__assemblyinfo__.ini
  • %WINDIR%\assembly\gac\msdatasrc\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll
  • %WINDIR%\assembly\gac\msdatasrc\7.0.3300.0__b03f5f7f11d50a3a\__assemblyinfo__.ini
  • %WINDIR%\assembly\gac\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll
  • %WINDIR%\assembly\gac\stdole\7.0.3300.0__b03f5f7f11d50a3a\__assemblyinfo__.ini
  • %WINDIR%\assembly\gac_32\microsoft.ink\6.1.0.0__31bf3856ad364e35\microsoft.ink.dll
  • %WINDIR%\assembly\gac_32\microsoft.interop.security.azroles\2.0.0.0__31bf3856ad364e35\microsoft.interop.security.azroles.dll
  • %WINDIR%\assembly\gac_32\srmlib\1.0.0.0__31bf3856ad364e35\srmlib.dll
  • %WINDIR%\assembly\gac_64\microsoft.ink\6.1.0.0__31bf3856ad364e35\microsoft.ink.dll
  • %WINDIR%\assembly\gac_64\microsoft.interop.security.azroles\2.0.0.0__31bf3856ad364e35\microsoft.interop.security.azroles.dll
  • %WINDIR%\assembly\gac_64\srmlib\1.0.0.0__31bf3856ad364e35\srmlib.dll
  • %WINDIR%\assembly\gac_msil\microsoft.analysisservices.adomdclient\11.0.0.0__89845dcd8080cc91\microsoft.analysisservices.adomdclient.dll
  • %WINDIR%\assembly\gac_msil\microsoft.analysisservices.spclient.interfaces\11.0.0.0__89845dcd8080cc91\microsoft.analysisservices.spclient.interfaces.dll
  • %WINDIR%\assembly\gac_msil\microsoft.ink.resources\6.1.0.0_en_31bf3856ad364e35\microsoft.ink.resources.dll
  • %WINDIR%\assembly\gac_msil\microsoft.managementconsole\3.0.0.0__31bf3856ad364e35\microsoft.managementconsole.dll
  • %WINDIR%\assembly\gac_msil\microsoft.managementconsole.resources\3.0.0.0_en_31bf3856ad364e35\microsoft.managementconsole.resources.dll
  • %WINDIR%\assembly\gac_msil\microsoft.office.interop.access\15.0.0.0__71e9bce111e9429c\microsoft.office.interop.access.dll
  • %WINDIR%\assembly\gac_msil\microsoft.office.interop.access.dao\15.0.0.0__71e9bce111e9429c\microsoft.office.interop.access.dao.dll
  • %WINDIR%\assembly\gac_msil\microsoft.office.interop.excel\15.0.0.0__71e9bce111e9429c\microsoft.office.interop.excel.dll
  • %WINDIR%\assembly\gac_msil\microsoft.office.interop.graph\15.0.0.0__71e9bce111e9429c\microsoft.office.interop.graph.dll
  • %WINDIR%\assembly\gac_msil\microsoft.office.interop.onenote\12.0.0.0__71e9bce111e9429c\microsoft.office.interop.onenote.dll
  • %WINDIR%\assembly\gac_msil\microsoft.office.interop.onenote\15.0.0.0__71e9bce111e9429c\microsoft.office.interop.onenote.dll
  • %WINDIR%\assembly\gac_msil\microsoft.office.interop.outlook\15.0.0.0__71e9bce111e9429c\microsoft.office.interop.outlook.dll
  • %WINDIR%\assembly\gac_msil\microsoft.office.interop.outlookviewctl\15.0.0.0__71e9bce111e9429c\microsoft.office.interop.outlookviewctl.dll
  • %WINDIR%\assembly\gac_msil\microsoft.office.interop.powerpoint\15.0.0.0__71e9bce111e9429c\microsoft.office.interop.powerpoint.dll
  • %WINDIR%\assembly\gac_msil\microsoft.office.interop.publisher\15.0.0.0__71e9bce111e9429c\microsoft.office.interop.publisher.dll
  • %WINDIR%\assembly\gac_msil\microsoft.office.interop.smarttag\15.0.0.0__71e9bce111e9429c\microsoft.office.interop.smarttag.dll
  • %WINDIR%\assembly\gac_msil\microsoft.office.interop.word\15.0.0.0__71e9bce111e9429c\microsoft.office.interop.word.dll
  • %WINDIR%\assembly\gac_msil\microsoft.powershell.commands.diagnostics\1.0.0.0__31bf3856ad364e35\microsoft.powershell.commands.diagnostics.dll
  • %WINDIR%\assembly\gac_msil\microsoft.powershell.commands.diagnostics.resources\1.0.0.0_en_31bf3856ad364e35\microsoft.powershell.commands.diagnostics.resources.dll
  • %WINDIR%\assembly\gac_msil\microsoft.powershell.commands.management\1.0.0.0__31bf3856ad364e35\microsoft.powershell.commands.management.dll
  • %WINDIR%\assembly\gac_msil\microsoft.powershell.commands.management.resources\1.0.0.0_en_31bf3856ad364e35\microsoft.powershell.commands.management.resources.dll
  • %WINDIR%\assembly\gac_msil\microsoft.powershell.commands.utility\1.0.0.0__31bf3856ad364e35\microsoft.powershell.commands.utility.dll
  • %WINDIR%\assembly\gac_msil\microsoft.powershell.commands.utility.resources\1.0.0.0_en_31bf3856ad364e35\microsoft.powershell.commands.utility.resources.dll
  • %WINDIR%\assembly\gac_msil\microsoft.powershell.consolehost\1.0.0.0__31bf3856ad364e35\microsoft.powershell.consolehost.dll
  • %WINDIR%\assembly\gac_msil\microsoft.powershell.consolehost.resources\1.0.0.0_en_31bf3856ad364e35\microsoft.powershell.consolehost.resources.dll
  • %WINDIR%\assembly\gac_msil\microsoft.powershell.security\1.0.0.0__31bf3856ad364e35\microsoft.powershell.security.dll
  • %WINDIR%\assembly\gac_msil\microsoft.powershell.security.resources\1.0.0.0_en_31bf3856ad364e35\microsoft.powershell.security.resources.dll
  • %WINDIR%\assembly\gac_msil\microsoft.vbe.interop\15.0.0.0__71e9bce111e9429c\microsoft.vbe.interop.dll
  • %WINDIR%\assembly\gac_msil\microsoft.vbe.interop.forms\11.0.0.0__71e9bce111e9429c\microsoft.vbe.interop.forms.dll
  • %WINDIR%\assembly\gac_msil\microsoft.wsman.management\1.0.0.0__31bf3856ad364e35\microsoft.wsman.management.dll
  • %WINDIR%\assembly\gac_msil\microsoft.wsman.management.resources\1.0.0.0_en_31bf3856ad364e35\microsoft.wsman.management.resources.dll
  • %WINDIR%\assembly\gac_msil\microsoft.wsman.runtime\1.0.0.0__31bf3856ad364e35\microsoft.wsman.runtime.dll
  • %WINDIR%\assembly\gac_msil\mmcex\3.0.0.0__31bf3856ad364e35\mmcex.dll
  • %WINDIR%\assembly\gac_msil\mmcex.resources\3.0.0.0_en_31bf3856ad364e35\mmcex.resources.dll
  • %WINDIR%\assembly\gac_msil\mmcfxcommon\3.0.0.0__31bf3856ad364e35\mmcfxcommon.dll
  • %WINDIR%\assembly\gac_msil\mmcfxcommon.resources\3.0.0.0_en_31bf3856ad364e35\mmcfxcommon.resources.dll
  • %WINDIR%\assembly\gac_msil\office\15.0.0.0__71e9bce111e9429c\office.dll
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.access\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.access.config
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.access\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.access.dll
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.excel\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.excel.config
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.excel\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.excel.dll
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.graph\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.graph.config
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.graph\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.graph.dll
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.outlook\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.outlook.config
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.outlook\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.outlook.dll
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.outlookviewctl\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.outlookviewctl.config
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.outlookviewctl\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.outlookviewctl.dll
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.powerpoint\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.powerpoint.config
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.powerpoint\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.powerpoint.dll
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.publisher\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.publisher.config
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.publisher\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.publisher.dll
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.smarttag\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.smarttag.config
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.smarttag\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.smarttag.dll
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.word\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.word.config
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.office.interop.word\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.office.interop.word.dll
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.vbe.interop\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.vbe.interop.config
  • %WINDIR%\assembly\gac_msil\policy.11.0.microsoft.vbe.interop\15.0.0.0__71e9bce111e9429c\policy.11.0.microsoft.vbe.interop.dll
  • %WINDIR%\assembly\gac_msil\policy.11.0.office\15.0.0.0__71e9bce111e9429c\policy.11.0.office.config
  • %WINDIR%\assembly\gac_msil\policy.11.0.office\15.0.0.0__71e9bce111e9429c\policy.11.0.office.dll
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.access\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.access.config
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.access\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.access.dll
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.access.dao\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.access.dao.config
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.access.dao\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.access.dao.dll
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.excel\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.excel.config
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.excel\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.excel.dll
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.graph\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.graph.config
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.graph\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.graph.dll
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.outlook\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.outlook.config
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.outlook\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.outlook.dll
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.outlookviewctl\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.outlookviewctl.config
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.outlookviewctl\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.outlookviewctl.dll
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.powerpoint\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.powerpoint.config
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.powerpoint\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.powerpoint.dll
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.publisher\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.publisher.config
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.publisher\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.publisher.dll
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.smarttag\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.smarttag.config
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.smarttag\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.smarttag.dll
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.word\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.word.config
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.office.interop.word\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.office.interop.word.dll
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.vbe.interop\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.vbe.interop.config
  • %WINDIR%\assembly\gac_msil\policy.12.0.microsoft.vbe.interop\15.0.0.0__71e9bce111e9429c\policy.12.0.microsoft.vbe.interop.dll
  • %WINDIR%\assembly\gac_msil\policy.12.0.office\15.0.0.0__71e9bce111e9429c\policy.12.0.office.config
  • %WINDIR%\assembly\gac_msil\policy.12.0.office\15.0.0.0__71e9bce111e9429c\policy.12.0.office.dll
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.access\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.access.config
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.access\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.access.dll
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.access.dao\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.access.dao.config
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.access.dao\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.access.dao.dll
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.excel\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.excel.config
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.excel\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.excel.dll
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.graph\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.graph.config
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.graph\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.graph.dll
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.onenote\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.onenote.config
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.onenote\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.onenote.dll
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.outlook\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.outlook.config
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.outlook\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.outlook.dll
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.outlookviewctl\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.outlookviewctl.config
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.outlookviewctl\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.outlookviewctl.dll
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.powerpoint\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.powerpoint.config
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.powerpoint\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.powerpoint.dll
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.publisher\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.publisher.config
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.publisher\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.publisher.dll
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.smarttag\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.smarttag.config
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.smarttag\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.smarttag.dll
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.word\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.word.config
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.office.interop.word\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.office.interop.word.dll
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.vbe.interop\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.vbe.interop.config
  • %WINDIR%\assembly\gac_msil\policy.14.0.microsoft.vbe.interop\15.0.0.0__71e9bce111e9429c\policy.14.0.microsoft.vbe.interop.dll
  • %WINDIR%\assembly\gac_msil\policy.14.0.office\15.0.0.0__71e9bce111e9429c\policy.14.0.office.config
  • %WINDIR%\assembly\gac_msil\policy.14.0.office\15.0.0.0__71e9bce111e9429c\policy.14.0.office.dll
  • %WINDIR%\assembly\gac_msil\system.management.automation\1.0.0.0__31bf3856ad364e35\system.management.automation.dll
  • %WINDIR%\assembly\gac_msil\system.management.automation.resources\1.0.0.0_en_31bf3856ad364e35\system.management.automation.resources.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\auditpolicy42d3d2cc#\afbf808ff1def0b367e7fe718036376a\auditpolicygpmanagedstubs.interop.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\auditpolicy42d3d2cc#\afbf808ff1def0b367e7fe718036376a\auditpolicygpmanagedstubs.interop.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\eventviewer\7ee1cccb2c0cc72c0fd88f860789664e\eventviewer.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\eventviewer\7ee1cccb2c0cc72c0fd88f860789664e\eventviewer.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.a26c32abb#\cc5d46e0c205f24fd367660c9483f885\microsoft.applicationid.rulewizard.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.a26c32abb#\cc5d46e0c205f24fd367660c9483f885\microsoft.applicationid.rulewizard.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.abf69f55a#\8ad9387fd9d07efdaf9a62cd65becf63\microsoft.applicationid.framework.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.abf69f55a#\8ad9387fd9d07efdaf9a62cd65becf63\microsoft.applicationid.framework.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.be5f4b329#\286f0041d4b84905da50f8a9f0432b75\microsoft.businessdata.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.be5f4b329#\286f0041d4b84905da50f8a9f0432b75\microsoft.businessdata.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.d0ff51f83#\d94e67d191c1fd7bbdb66abc414e5e26\microsoft.dtc.powershell.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.d0ff51f83#\d94e67d191c1fd7bbdb66abc414e5e26\microsoft.dtc.powershell.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.ga41585c2#\d0c3b99b541614880663b8382a0abad3\microsoft.grouppolicy.admtmpleditor.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.ga41585c2#\d0c3b99b541614880663b8382a0abad3\microsoft.grouppolicy.admtmpleditor.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.i0cd65b90#\62ac7d18b30b08f107a1f821c41e1fcb\microsoft.isam.esent.interop.wsa.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.i0cd65b90#\62ac7d18b30b08f107a1f821c41e1fcb\microsoft.isam.esent.interop.wsa.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.ic1a2041b#\ce2d71ece31da00544902a21731a6d4d\microsoft.isam.esent.interop.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.ic1a2041b#\ce2d71ece31da00544902a21731a6d4d\microsoft.isam.esent.interop.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.mf49f6405#\7d40d8a8d2a2860b664bfffe17575408\microsoft.management.infrastructure.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.mf49f6405#\7d40d8a8d2a2860b664bfffe17575408\microsoft.management.infrastructure.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.mff1be75b#\73cf498f07c458ab0e2adeecb892a6c4\microsoft.managementconsole.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.mff1be75b#\73cf498f07c458ab0e2adeecb892a6c4\microsoft.managementconsole.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.o2eb0cc9a#\13a6c5173c9503d722fcb3ee0a939bdc\microsoft.office.tools.v4.0.framework.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.o2eb0cc9a#\13a6c5173c9503d722fcb3ee0a939bdc\microsoft.office.tools.v4.0.framework.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.o4161a3a3#\1c98079d3ecda00903af50106e9162b2\microsoft.office.tools.excel.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.o4161a3a3#\1c98079d3ecda00903af50106e9162b2\microsoft.office.tools.excel.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.o4a946565#\3f4f4d281010c51278292c3cbc4950df\microsoft.office.tools.common.implementation.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.o4a946565#\3f4f4d281010c51278292c3cbc4950df\microsoft.office.tools.common.implementation.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.o4b20f4dd#\3afbf57d2e26236343a22f22048f4c7e\microsoft.office.tools.outlook.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.o4b20f4dd#\3afbf57d2e26236343a22f22048f4c7e\microsoft.office.tools.outlook.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.o5263ae01#\f2f7e87348630529d52d0abbe3441adc\microsoft.office.tools.outlook.implementation.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.o5263ae01#\f2f7e87348630529d52d0abbe3441adc\microsoft.office.tools.outlook.implementation.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.o5949707a#\f5dad3f1e35d782989b26625e494c283\microsoft.office.tools.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.o5949707a#\f5dad3f1e35d782989b26625e494c283\microsoft.office.tools.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.o854200f9#\33f205ec4216d95e572520b0beaedd7d\microsoft.office.tools.common.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.o854200f9#\33f205ec4216d95e572520b0beaedd7d\microsoft.office.tools.common.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.oab3f8ec6#\fa08eac559e04fcd2a9c7af2e301553a\microsoft.office.tools.word.implementation.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.oab3f8ec6#\fa08eac559e04fcd2a9c7af2e301553a\microsoft.office.tools.word.implementation.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.ob92d13a7#\0ceabae72bca0b6c954b26166c4fab21\microsoft.office.businessdata.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.ob92d13a7#\0ceabae72bca0b6c954b26166c4fab21\microsoft.office.businessdata.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.oe2e369ff#\6335641bdeb496ca04b7a133e7f64a41\microsoft.office.tools.excel.implementation.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.oe2e369ff#\6335641bdeb496ca04b7a133e7f64a41\microsoft.office.tools.excel.implementation.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.oeab01fba#\9f891a2c82dfcfa6f0ab3c6e418dbec1\microsoft.office.tools.word.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.oeab01fba#\9f891a2c82dfcfa6f0ab3c6e418dbec1\microsoft.office.tools.word.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.of2ff78c4#\be329f32e552b62dcbe4aef4a77a30a7\microsoft.office.businessapplications.diagnostics.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.of2ff78c4#\be329f32e552b62dcbe4aef4a77a30a7\microsoft.office.businessapplications.diagnostics.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.p047767ce#\9ba9f348e6e63bf3c9f05186e03160c6\microsoft.powershell.core.activities.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.p047767ce#\9ba9f348e6e63bf3c9f05186e03160c6\microsoft.powershell.core.activities.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.p08ac43d5#\8f56b2b4cc14f7a0b19798f1000ee9de\microsoft.powershell.utility.activities.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.p08ac43d5#\8f56b2b4cc14f7a0b19798f1000ee9de\microsoft.powershell.utility.activities.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.p1706cafe#\6753a7aa4e5decf9969b25c05741c96a\microsoft.powershell.commands.diagnostics.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.p1706cafe#\6753a7aa4e5decf9969b25c05741c96a\microsoft.powershell.commands.diagnostics.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.p34f388c1#\f57a427004ce457d8becdd37772833d9\microsoft.powershell.diagnostics.activities.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.p34f388c1#\f57a427004ce457d8becdd37772833d9\microsoft.powershell.diagnostics.activities.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.p655586bb#\e98b527db92ca208c2ec56d042da7d87\microsoft.powershell.activities.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.p655586bb#\e98b527db92ca208c2ec56d042da7d87\microsoft.powershell.activities.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.p6f9a5e83#\9e34228278e23772abfa683f11d8817c\microsoft.powershell.security.activities.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.p6f9a5e83#\9e34228278e23772abfa683f11d8817c\microsoft.powershell.security.activities.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.p9de5a786#\7769338d30169afc8dcf44209f71064a\microsoft.powershell.management.activities.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.p9de5a786#\7769338d30169afc8dcf44209f71064a\microsoft.powershell.management.activities.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.pefb7a36b#\fcbc18f6731633ad6bded8476ba3c7c5\microsoft.powershell.workflow.servicecore.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.pefb7a36b#\fcbc18f6731633ad6bded8476ba3c7c5\microsoft.powershell.workflow.servicecore.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.s0f8e494c#\e69cd527eaa6114ccd17f0b158d19a81\microsoft.security.applicationid.policymanagement.policymodel.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.s0f8e494c#\e69cd527eaa6114ccd17f0b158d19a81\microsoft.security.applicationid.policymanagement.policymodel.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.s356e1ba0#\f6923c41e15f3a5d72bdd92e9603bc1c\microsoft.security.applicationid.policymanagement.policyengineapi.interop.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.s356e1ba0#\f6923c41e15f3a5d72bdd92e9603bc1c\microsoft.security.applicationid.policymanagement.policyengineapi.interop.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.s54faafb0#\d4404835808c375bb7d77047daf5d35c\microsoft.security.applicationid.policymanagement.policymanager.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.s54faafb0#\d4404835808c375bb7d77047daf5d35c\microsoft.security.applicationid.policymanagement.policymanager.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.s88747207#\fbe4d49719f9e2aac322259c0f157999\microsoft.security.applicationid.policymanagement.cmdlets.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.s88747207#\fbe4d49719f9e2aac322259c0f157999\microsoft.security.applicationid.policymanagement.cmdlets.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.sa56e3556#\4943bf53c67d2af2b0d3c60e4a00462a\microsoft.security.applicationid.wizards.automaticrulegenerationwizard.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.sa56e3556#\4943bf53c67d2af2b0d3c60e4a00462a\microsoft.security.applicationid.wizards.automaticrulegenerationwizard.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.sb6a1f1bc#\7fe62ad24cc171cc3f0eaa794993d1d1\microsoft.security.applicationid.policymanagement.xmlhelper.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.sb6a1f1bc#\7fe62ad24cc171cc3f0eaa794993d1d1\microsoft.security.applicationid.policymanagement.xmlhelper.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.v1955d7fd#\e1ee04e6ae58ee8637915ffa4f560598\microsoft.visualstudio.tools.applications.serverdocument.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.v1955d7fd#\e1ee04e6ae58ee8637915ffa4f560598\microsoft.visualstudio.tools.applications.serverdocument.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.v28a60cc2#\0adb557da950462d52a1c4a00f10967e\microsoft.visualstudio.tools.office.runtime.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.v28a60cc2#\0adb557da950462d52a1c4a00f10967e\microsoft.visualstudio.tools.office.runtime.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.v5499e76b#\5b55b7a0efe219ccace350bbc10c129b\microsoft.visualstudio.tools.office.runtime.internal.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.v5499e76b#\5b55b7a0efe219ccace350bbc10c129b\microsoft.visualstudio.tools.office.runtime.internal.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.v883708cb#\0be31409e025d8971f00c671bf2100f8\microsoft.visualstudio.tools.applications.runtime.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.v883708cb#\0be31409e025d8971f00c671bf2100f8\microsoft.visualstudio.tools.applications.runtime.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.vf9a08577#\63a162cbc0a07ca8f1a204156ee6041a\microsoft.visualstudio.tools.applications.hosting.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.vf9a08577#\63a162cbc0a07ca8f1a204156ee6041a\microsoft.visualstudio.tools.applications.hosting.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.vff41975e#\e44c11ef0801d85ee092102b901e81e8\microsoft.visualstudio.tools.office.containercontrol.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.vff41975e#\e44c11ef0801d85ee092102b901e81e8\microsoft.visualstudio.tools.office.containercontrol.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.w0bb5dac4#\67fa408c73a63f9eb31f26e8534647d4\microsoft.windows.diagnosis.commands.updatediagrootcause.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.w0bb5dac4#\67fa408c73a63f9eb31f26e8534647d4\microsoft.windows.diagnosis.commands.updatediagrootcause.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.w193497eb#\a11554257a79dc9db777361f26f218f4\microsoft.wsman.runtime.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.w193497eb#\a11554257a79dc9db777361f26f218f4\microsoft.wsman.runtime.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.w3cdb5602#\54f77fa2f3827cbaac37f3daf95382fe\microsoft.windows.diagnosis.troubleshootingpack.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.w3cdb5602#\54f77fa2f3827cbaac37f3daf95382fe\microsoft.windows.diagnosis.troubleshootingpack.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.w69ef49d2#\90bcb57d6db9794b0f2b20cd48c50887\microsoft.windows.diagnosis.commands.getdiaginput.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.w69ef49d2#\90bcb57d6db9794b0f2b20cd48c50887\microsoft.windows.diagnosis.commands.getdiaginput.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.w708fc392#\bacd752947c0437da405c1a35463c79d\microsoft.windows.diagnosis.commands.writediagprogress.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.w708fc392#\bacd752947c0437da405c1a35463c79d\microsoft.windows.diagnosis.commands.writediagprogress.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.w79a81d80#\011fbdccae152be4ed4f232143302c84\microsoft.windows.diagnosis.commands.writediagtelemetry.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.w79a81d80#\011fbdccae152be4ed4f232143302c84\microsoft.windows.diagnosis.commands.writediagtelemetry.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.wad78daf4#\83e2d7b91dd5510a6a831fd3533a2731\microsoft.windows.diagnosis.sdhost.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.wad78daf4#\83e2d7b91dd5510a6a831fd3533a2731\microsoft.windows.diagnosis.sdhost.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.wcffedcb4#\3f33ea36857e24e39a27c95eb7a41e2a\microsoft.windowssearch.commands.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.wcffedcb4#\3f33ea36857e24e39a27c95eb7a41e2a\microsoft.windowssearch.commands.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.wd518ee0d#\8ddabf901dc2da0290d0f841a80c6bdb\microsoft.windows.diagnosis.commands.updatediagreport.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.wd518ee0d#\8ddabf901dc2da0290d0f841a80c6bdb\microsoft.windows.diagnosis.commands.updatediagreport.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.we9f24001#\ecc1da1894642f320dfbce5c03913e31\microsoft.wsman.management.activities.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.we9f24001#\ecc1da1894642f320dfbce5c03913e31\microsoft.wsman.management.activities.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.wed3937f9#\cf204ef2941d399efed7a978a562f3e3\microsoft.windows.diagnosis.sdcommon.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.wed3937f9#\cf204ef2941d399efed7a978a562f3e3\microsoft.windows.diagnosis.sdcommon.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\mmcex\76c62a4a54a3f6ce6bce0f680e2b9eb1\mmcex.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\mmcex\76c62a4a54a3f6ce6bce0f680e2b9eb1\mmcex.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\mmcfxcommon\f7641ab6f2f2c90486dd38793b4ef75a\mmcfxcommon.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\mmcfxcommon\f7641ab6f2f2c90486dd38793b4ef75a\mmcfxcommon.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\mscorlib\f199b274fbe7c559da6ac37893edfb2c\mscorlib.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\mscorlib\f199b274fbe7c559da6ac37893edfb2c\mscorlib.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\napinit\a7871e33a6b4fd60c638b7a644c15dac\napinit.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\napinit\a7871e33a6b4fd60c638b7a644c15dac\napinit.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\presentatio5ae0f00f#\44929abc8f57ca5c0cc3fbc341388dd9\presentationframework.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\presentatio5ae0f00f#\44929abc8f57ca5c0cc3fbc341388dd9\presentationframework.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\presentatioaec034ca#\7405091b1a874183334b9cd8ef01cf33\presentationframework.aero2.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\presentatioaec034ca#\7405091b1a874183334b9cd8ef01cf33\presentationframework.aero2.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationcore\f6a81a3249c1dccccff4d7440cee1078\presentationcore.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationcore\f6a81a3249c1dccccff4d7440cee1078\presentationcore.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\securityaudf6921413#\000d953d66f370814758b026cfb2e853\securityauditpoliciessnapin.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\securityaudf6921413#\000d953d66f370814758b026cfb2e853\securityauditpoliciessnapin.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\srpuxsnapin\082106b1f9cc07e144e8a76655cd2568\srpuxsnapin.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\srpuxsnapin\082106b1f9cc07e144e8a76655cd2568\srpuxsnapin.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system\35f241abd078f125e3e216c2d269f486\system.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system\35f241abd078f125e3e216c2d269f486\system.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system.configuration\30dc486f862df74aa47e592708349de1\system.configuration.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system.configuration\30dc486f862df74aa47e592708349de1\system.configuration.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system.core\ff2ac853d6c7abb7c5bfb9a5d30eb5e9\system.core.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system.core\ff2ac853d6c7abb7c5bfb9a5d30eb5e9\system.core.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system.net.http\428f5ef5f4326f7c4baa0856322225a2\system.net.http.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system.net.http\428f5ef5f4326f7c4baa0856322225a2\system.net.http.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system.runtc259d85b#\94250f9319daeed18646f350ec23f5f7\system.runtime.windowsruntime.ui.xaml.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system.runtc259d85b#\94250f9319daeed18646f350ec23f5f7\system.runtime.windowsruntime.ui.xaml.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system.runteb92aa12#\8cdea85d4b1a029bb3e922c0f7eedec7\system.runtime.serialization.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system.runteb92aa12#\8cdea85d4b1a029bb3e922c0f7eedec7\system.runtime.serialization.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system.xaml\2d322049feb5a8bbd669887cb9bd0210\system.xaml.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system.xaml\2d322049feb5a8bbd669887cb9bd0210\system.xaml.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system.xml\7342dc859ad2559f0b423a5a65100aa4\system.xml.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system.xml\7342dc859ad2559f0b423a5a65100aa4\system.xml.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system.xml.linq\48f5a1c33c73856b71ed5adc6ca13601\system.xml.linq.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\system.xml.linq\48f5a1c33c73856b71ed5adc6ca13601\system.xml.linq.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\taskscheduler\3c84e49262084975cb85585fb05bea27\taskscheduler.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\taskscheduler\3c84e49262084975cb85585fb05bea27\taskscheduler.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\windowsbase\141832bef31c4a83031fcdf198802e9b\windowsbase.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\windowsbase\141832bef31c4a83031fcdf198802e9b\windowsbase.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\accessibility\0e86a7f9916cb76d0617a568ffeb2fc6\accessibility.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\accessibility\0e86a7f9916cb76d0617a568ffeb2fc6\accessibility.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\auditpolicy42d3d2cc#\6581efa5b9e62f34d94b526b18e5f820\auditpolicygpmanagedstubs.interop.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\auditpolicy42d3d2cc#\6581efa5b9e62f34d94b526b18e5f820\auditpolicygpmanagedstubs.interop.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\custommarshalers\ee3d020d55dafb2f618292d32776fa6e\custommarshalers.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\custommarshalers\ee3d020d55dafb2f618292d32776fa6e\custommarshalers.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\eventviewer\8659a8d04bed5f8d742b829b33f76a41\eventviewer.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\eventviewer\8659a8d04bed5f8d742b829b33f76a41\eventviewer.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.a26c32abb#\a88d371a87cdb7c815efb99ae0747cc4\microsoft.applicationid.rulewizard.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.a26c32abb#\a88d371a87cdb7c815efb99ae0747cc4\microsoft.applicationid.rulewizard.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.abf69f55a#\e5c9546de83c561e8244229bbe3456eb\microsoft.applicationid.framework.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.abf69f55a#\e5c9546de83c561e8244229bbe3456eb\microsoft.applicationid.framework.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.c26a36d2b#\587a8f9fba3092c108b07f6549452d87\microsoft.certificateservices.pkiclient.cmdlets.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.c26a36d2b#\587a8f9fba3092c108b07f6549452d87\microsoft.certificateservices.pkiclient.cmdlets.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.c99be4d25#\0ec645fd32b6ccac72cc1ebe2278173d\microsoft.configci.commands.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.c99be4d25#\0ec645fd32b6ccac72cc1ebe2278173d\microsoft.configci.commands.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.d0ff51f83#\4ef700d2853e26966bc5a8b952b406b4\microsoft.dtc.powershell.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.d0ff51f83#\4ef700d2853e26966bc5a8b952b406b4\microsoft.dtc.powershell.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.g46fcc235#\191495d4658bc176ef2f81f86d6d1269\microsoft.grouppolicy.interop.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.g46fcc235#\191495d4658bc176ef2f81f86d6d1269\microsoft.grouppolicy.interop.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.g91a07420#\6bbcc8f5128813bfd5c0cdf0304f5c1d\microsoft.grouppolicy.reporting.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.g91a07420#\6bbcc8f5128813bfd5c0cdf0304f5c1d\microsoft.grouppolicy.reporting.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.ga41585c2#\ae3f1ff289c79abee53270bd391295fe\microsoft.grouppolicy.admtmpleditor.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.ga41585c2#\ae3f1ff289c79abee53270bd391295fe\microsoft.grouppolicy.admtmpleditor.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.i0cd65b90#\684f1023064f92e1943bff58b8f6e1a9\microsoft.isam.esent.interop.wsa.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.i0cd65b90#\684f1023064f92e1943bff58b8f6e1a9\microsoft.isam.esent.interop.wsa.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.i7676db1a#\c76f46528197db506de3adea0c8e8e48\microsoft.internationalsettings.commands.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.i7676db1a#\c76f46528197db506de3adea0c8e8e48\microsoft.internationalsettings.commands.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.ic1a2041b#\fa54318bd665d9c67e77a97d1681c5ce\microsoft.isam.esent.interop.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.ic1a2041b#\fa54318bd665d9c67e77a97d1681c5ce\microsoft.isam.esent.interop.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.kd58820a5#\8c690a4a75c478653dbaa4c0a7563b54\microsoft.keydistributionservice.cmdlets.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.kd58820a5#\8c690a4a75c478653dbaa4c0a7563b54\microsoft.keydistributionservice.cmdlets.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.m870d558a#\624406aa9218f693dae9665739c49735\microsoft.management.infrastructure.native.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.m870d558a#\624406aa9218f693dae9665739c49735\microsoft.management.infrastructure.native.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.mf49f6405#\fdc9e50e7c17b1195e7568c6c9bff255\microsoft.management.infrastructure.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.mf49f6405#\fdc9e50e7c17b1195e7568c6c9bff255\microsoft.management.infrastructure.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.mf5ac9168#\c6e6beb1dae1de7995bb5cb888cccb90\microsoft.management.infrastructure.cimcmdlets.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.mf5ac9168#\c6e6beb1dae1de7995bb5cb888cccb90\microsoft.management.infrastructure.cimcmdlets.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.mff1be75b#\44cfa9c3a1f9dd2ec91ff3f2c457a090\microsoft.managementconsole.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.mff1be75b#\44cfa9c3a1f9dd2ec91ff3f2c457a090\microsoft.managementconsole.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.o2eb0cc9a#\040c115e95965b18354fe532589b3f73\microsoft.office.tools.v4.0.framework.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.o2eb0cc9a#\040c115e95965b18354fe532589b3f73\microsoft.office.tools.v4.0.framework.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.o4161a3a3#\652c736b5be8945e3e3997033aa5403d\microsoft.office.tools.excel.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.o4161a3a3#\652c736b5be8945e3e3997033aa5403d\microsoft.office.tools.excel.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.o4a946565#\dc8b4530cd6f997aa278afe0cf35159c\microsoft.office.tools.common.implementation.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.o4a946565#\dc8b4530cd6f997aa278afe0cf35159c\microsoft.office.tools.common.implementation.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.o4b20f4dd#\0b26d28d3bf6deea60ceaf080f3b459b\microsoft.office.tools.outlook.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.o4b20f4dd#\0b26d28d3bf6deea60ceaf080f3b459b\microsoft.office.tools.outlook.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.o5263ae01#\80d0334111a7ef3fe51117d0b7beb6c0\microsoft.office.tools.outlook.implementation.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.o5263ae01#\80d0334111a7ef3fe51117d0b7beb6c0\microsoft.office.tools.outlook.implementation.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.o5949707a#\89deb1a5554678e98f080f9fce0cd1cd\microsoft.office.tools.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.o5949707a#\89deb1a5554678e98f080f9fce0cd1cd\microsoft.office.tools.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.o854200f9#\b5bf9bae1a40ab63e77ad92711ad25fc\microsoft.office.tools.common.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.o854200f9#\b5bf9bae1a40ab63e77ad92711ad25fc\microsoft.office.tools.common.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.oab3f8ec6#\bebdbbd4582830aa36bd67b53eb5d369\microsoft.office.tools.word.implementation.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.oab3f8ec6#\bebdbbd4582830aa36bd67b53eb5d369\microsoft.office.tools.word.implementation.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.oe2e369ff#\1e2d6a50abc25f434c57145f6c1b3252\microsoft.office.tools.excel.implementation.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.oe2e369ff#\1e2d6a50abc25f434c57145f6c1b3252\microsoft.office.tools.excel.implementation.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.oeab01fba#\b7b42be7eec098ba4fe6706c18e0815f\microsoft.office.tools.word.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.oeab01fba#\b7b42be7eec098ba4fe6706c18e0815f\microsoft.office.tools.word.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p047767ce#\33ea7301e837a984f1ab11285f5e327d\microsoft.powershell.core.activities.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p047767ce#\33ea7301e837a984f1ab11285f5e327d\microsoft.powershell.core.activities.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p08ac43d5#\216f5037591655df3cadc47a9f3d0c7b\microsoft.powershell.utility.activities.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p08ac43d5#\216f5037591655df3cadc47a9f3d0c7b\microsoft.powershell.utility.activities.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p0e11b656#\7b2503652f449f027e554da21aa478e4\microsoft.powershell.gpowershell.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p0e11b656#\7b2503652f449f027e554da21aa478e4\microsoft.powershell.gpowershell.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p10d01611#\32f7b02b54e774a0b6e1db92f8fc4536\microsoft.powershell.editor.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p10d01611#\32f7b02b54e774a0b6e1db92f8fc4536\microsoft.powershell.editor.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p1706cafe#\26d230e02fc6dc6e0c93f872f3c634d2\microsoft.powershell.commands.diagnostics.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p1706cafe#\26d230e02fc6dc6e0c93f872f3c634d2\microsoft.powershell.commands.diagnostics.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p34f388c1#\8608a73d14db35a5a3188194ab517300\microsoft.powershell.diagnostics.activities.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p34f388c1#\8608a73d14db35a5a3188194ab517300\microsoft.powershell.diagnostics.activities.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p39041136#\f9ee89b17988b7f9e9e336cde46afada\microsoft.powershell.scheduledjob.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p39041136#\f9ee89b17988b7f9e9e336cde46afada\microsoft.powershell.scheduledjob.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p521220ea#\0a432d7b70f8cd88d05a2e5c45d24d58\microsoft.powershell.commands.utility.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p521220ea#\0a432d7b70f8cd88d05a2e5c45d24d58\microsoft.powershell.commands.utility.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p655586bb#\8e76e1686c18d49af05587672dad1f6d\microsoft.powershell.activities.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p655586bb#\8e76e1686c18d49af05587672dad1f6d\microsoft.powershell.activities.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p6f792626#\ca2ba24e07e06f2507e2429ab8ae191c\microsoft.powershell.security.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p6f792626#\ca2ba24e07e06f2507e2429ab8ae191c\microsoft.powershell.security.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p6f9a5e83#\ef08aca5a9cda69ed83f1f5d82a94e27\microsoft.powershell.security.activities.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p6f9a5e83#\ef08aca5a9cda69ed83f1f5d82a94e27\microsoft.powershell.security.activities.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p9de5a786#\2c4136a7866b7f0868a0975d7b5abf16\microsoft.powershell.management.activities.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.p9de5a786#\2c4136a7866b7f0868a0975d7b5abf16\microsoft.powershell.management.activities.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.pad0e0718#\d5ca6051696b53fb3eb3420417b10c8f\microsoft.powershell.cmdletization.odata.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.pad0e0718#\d5ca6051696b53fb3eb3420417b10c8f\microsoft.powershell.cmdletization.odata.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.pae3498d9#\e0a1d7a22b63348697cf9feeea34a951\microsoft.powershell.commands.management.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.pae3498d9#\e0a1d7a22b63348697cf9feeea34a951\microsoft.powershell.commands.management.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.pb378ec07#\5a58af9c01811acb5b4273627f2dd4d6\microsoft.powershell.consolehost.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.pb378ec07#\5a58af9c01811acb5b4273627f2dd4d6\microsoft.powershell.consolehost.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.pcd26229b#\9827249879eacb62c4809787e9559056\microsoft.powershell.graphicalhost.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.pcd26229b#\9827249879eacb62c4809787e9559056\microsoft.powershell.graphicalhost.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.pd3efef62#\024b4ff02c6e04d574f477e6c6766bbf\microsoft.powershell.isecommon.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.pd3efef62#\024b4ff02c6e04d574f477e6c6766bbf\microsoft.powershell.isecommon.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.pefb7a36b#\815492d8a9a0c767f55789cb2e11ac10\microsoft.powershell.workflow.servicecore.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.pefb7a36b#\815492d8a9a0c767f55789cb2e11ac10\microsoft.powershell.workflow.servicecore.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.s0f8e494c#\d3277de9d9ca4a5cf8533fd25756c4c8\microsoft.security.applicationid.policymanagement.policymodel.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.s0f8e494c#\d3277de9d9ca4a5cf8533fd25756c4c8\microsoft.security.applicationid.policymanagement.policymodel.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.s1bc92e04#\081a534b9d1806f78447d117764319bd\microsoft.secureboot.commands.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.s1bc92e04#\081a534b9d1806f78447d117764319bd\microsoft.secureboot.commands.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.s356e1ba0#\cc1040b5bb9b9155c9444525b34f95ca\microsoft.security.applicationid.policymanagement.policyengineapi.interop.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.s356e1ba0#\cc1040b5bb9b9155c9444525b34f95ca\microsoft.security.applicationid.policymanagement.policyengineapi.interop.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.s54faafb0#\51bb69e87b7a0b27b15ca3d47b8face7\microsoft.security.applicationid.policymanagement.policymanager.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.s54faafb0#\51bb69e87b7a0b27b15ca3d47b8face7\microsoft.security.applicationid.policymanagement.policymanager.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.s88747207#\7a10a050832d11240577b0f509ebca51\microsoft.security.applicationid.policymanagement.cmdlets.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.s88747207#\7a10a050832d11240577b0f509ebca51\microsoft.security.applicationid.policymanagement.cmdlets.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.sa56e3556#\a58e35c1a77af0b9b72ada573cd3e898\microsoft.security.applicationid.wizards.automaticrulegenerationwizard.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.sa56e3556#\a58e35c1a77af0b9b72ada573cd3e898\microsoft.security.applicationid.wizards.automaticrulegenerationwizard.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.sb6a1f1bc#\f4ff6d08e18f1ffd9c1d2881267a288c\microsoft.security.applicationid.policymanagement.xmlhelper.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.sb6a1f1bc#\f4ff6d08e18f1ffd9c1d2881267a288c\microsoft.security.applicationid.policymanagement.xmlhelper.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.t9d753d8c#\3504eea25c41caeadd2014db1d506598\microsoft.tpm.commands.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.t9d753d8c#\3504eea25c41caeadd2014db1d506598\microsoft.tpm.commands.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.v1955d7fd#\44b589b47496e739f03042c3ba437978\microsoft.visualstudio.tools.applications.serverdocument.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.v1955d7fd#\44b589b47496e739f03042c3ba437978\microsoft.visualstudio.tools.applications.serverdocument.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.v28a60cc2#\4da4615e39a4d19864cb1edf6a242cfa\microsoft.visualstudio.tools.office.runtime.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.v28a60cc2#\4da4615e39a4d19864cb1edf6a242cfa\microsoft.visualstudio.tools.office.runtime.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.v5499e76b#\7f68bef53aa34c8e138139abcd34ba3c\microsoft.visualstudio.tools.office.runtime.internal.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.v5499e76b#\7f68bef53aa34c8e138139abcd34ba3c\microsoft.visualstudio.tools.office.runtime.internal.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.v883708cb#\e74e9c9932d8d996bbaa86275ac00fb1\microsoft.visualstudio.tools.applications.runtime.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.v883708cb#\e74e9c9932d8d996bbaa86275ac00fb1\microsoft.visualstudio.tools.applications.runtime.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.v9921e851#\970a329f9d22356b8e3347c1e644d912\microsoft.visualbasic.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.v9921e851#\970a329f9d22356b8e3347c1e644d912\microsoft.visualbasic.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.vf9a08577#\3a7441ce858ac950d3dcbf078ec110a8\microsoft.visualstudio.tools.applications.hosting.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.vf9a08577#\3a7441ce858ac950d3dcbf078ec110a8\microsoft.visualstudio.tools.applications.hosting.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.vff41975e#\27903aa48166bd600430714cd7ec69bf\microsoft.visualstudio.tools.office.containercontrol.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.vff41975e#\27903aa48166bd600430714cd7ec69bf\microsoft.visualstudio.tools.office.containercontrol.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.w0bb5dac4#\2091f5bdacb81ef1c5851872c1951030\microsoft.windows.diagnosis.commands.updatediagrootcause.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.w0bb5dac4#\2091f5bdacb81ef1c5851872c1951030\microsoft.windows.diagnosis.commands.updatediagrootcause.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.w193497eb#\96d156c8f0fc4b410dadcf9f0e74ddf7\microsoft.wsman.runtime.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.w193497eb#\96d156c8f0fc4b410dadcf9f0e74ddf7\microsoft.wsman.runtime.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.w2d29a719#\58c84629e1de3e086e07faa5bfd3642b\microsoft.windows.dsc.coreconfproviders.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.w2d29a719#\58c84629e1de3e086e07faa5bfd3642b\microsoft.windows.dsc.coreconfproviders.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.w2ded559f#\fdde6aaf0b42df516742aef700e0dbe6\microsoft.windowsauthenticationprotocols.commands.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.w2ded559f#\fdde6aaf0b42df516742aef700e0dbe6\microsoft.windowsauthenticationprotocols.commands.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.w3cdb5602#\592eb16ee7e47ed475e786894d7c1ee1\microsoft.windows.diagnosis.troubleshootingpack.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.w3cdb5602#\592eb16ee7e47ed475e786894d7c1ee1\microsoft.windows.diagnosis.troubleshootingpack.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.w69ef49d2#\0785aba58c6808b29c61b4e5d8e48090\microsoft.windows.diagnosis.commands.getdiaginput.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.w69ef49d2#\0785aba58c6808b29c61b4e5d8e48090\microsoft.windows.diagnosis.commands.getdiaginput.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.w708fc392#\bf2f3c21a86b9ad54c6b32d84886bb60\microsoft.windows.diagnosis.commands.writediagprogress.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.w708fc392#\bf2f3c21a86b9ad54c6b32d84886bb60\microsoft.windows.diagnosis.commands.writediagprogress.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.w79a81d80#\0a91ddc5575cc02d2582c887a52cce9b\microsoft.windows.diagnosis.commands.writediagtelemetry.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.w79a81d80#\0a91ddc5575cc02d2582c887a52cce9b\microsoft.windows.diagnosis.commands.writediagtelemetry.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.wad78daf4#\793536d1a76a543f8487c7cf71c777c5\microsoft.windows.diagnosis.sdhost.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.wad78daf4#\793536d1a76a543f8487c7cf71c777c5\microsoft.windows.diagnosis.sdhost.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.wcffedcb4#\04c9a1067ab06d9438e6438036fc01c4\microsoft.windowssearch.commands.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.wcffedcb4#\04c9a1067ab06d9438e6438036fc01c4\microsoft.windowssearch.commands.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.wd518ee0d#\83fa96e623f08820a74ece11c0807043\microsoft.windows.diagnosis.commands.updatediagreport.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.wd518ee0d#\83fa96e623f08820a74ece11c0807043\microsoft.windows.diagnosis.commands.updatediagreport.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.wd75d181a#\5d39f2bbd7ea4bfed46f80de8c267d1a\microsoft.windows.diagnosis.sdengine.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.wd75d181a#\5d39f2bbd7ea4bfed46f80de8c267d1a\microsoft.windows.diagnosis.sdengine.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.we0722664#\287afc4def3e88e0a53c68ee84b0a2b1\microsoft.wsman.management.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.we0722664#\287afc4def3e88e0a53c68ee84b0a2b1\microsoft.wsman.management.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.we9f24001#\c0a9029cde1021afb782942f08d7f01a\microsoft.wsman.management.activities.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.we9f24001#\c0a9029cde1021afb782942f08d7f01a\microsoft.wsman.management.activities.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.wed3937f9#\7e4df1971ebd0c370d678ca8c90fd2f3\microsoft.windows.diagnosis.sdcommon.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\microsoft.wed3937f9#\7e4df1971ebd0c370d678ca8c90fd2f3\microsoft.windows.diagnosis.sdcommon.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\miguicontrols\e7783b5a9acaf0d2381d3fd0bbec2dba\miguicontrols.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\miguicontrols\e7783b5a9acaf0d2381d3fd0bbec2dba\miguicontrols.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\mmcex\6a0d97d06f8a851bc2e6fa026c4636ce\mmcex.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\mmcex\6a0d97d06f8a851bc2e6fa026c4636ce\mmcex.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\mmcfxcommon\ef9bfe9e799878aa9ad3286095f89290\mmcfxcommon.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\mmcfxcommon\ef9bfe9e799878aa9ad3286095f89290\mmcfxcommon.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\mscorlib\0715c4fdaf0442fe6a5f74fe860f1fef\mscorlib.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\mscorlib\0715c4fdaf0442fe6a5f74fe860f1fef\mscorlib.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\napcrypt\cd969171bf27c5c9019483b498e035c1\napcrypt.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\napcrypt\cd969171bf27c5c9019483b498e035c1\napcrypt.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\napinit\b5e3f3afdeaca0b05ff0b0224e860966\napinit.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\napinit\b5e3f3afdeaca0b05ff0b0224e860966\napinit.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\presentatio5ae0f00f#\b8ac2915615db579aab0c9bf35f525d8\presentationframework.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\presentatio5ae0f00f#\b8ac2915615db579aab0c9bf35f525d8\presentationframework.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\presentatioaec034ca#\c2ec9484ee68d7515618f4fe571e87fe\presentationframework.aero2.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\presentatioaec034ca#\c2ec9484ee68d7515618f4fe571e87fe\presentationframework.aero2.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\presentationcore\a9f69a5e56727fb1fa0d4ad00bbd7620\presentationcore.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\presentationcore\a9f69a5e56727fb1fa0d4ad00bbd7620\presentationcore.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\securityaudf6921413#\276eecd4d257f83e031ddfaf81126199\securityauditpoliciessnapin.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\securityaudf6921413#\276eecd4d257f83e031ddfaf81126199\securityauditpoliciessnapin.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\srpuxsnapin\287eaf4cecb7ed5722e2348abc9d7ead\srpuxsnapin.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\srpuxsnapin\287eaf4cecb7ed5722e2348abc9d7ead\srpuxsnapin.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system\efd3159e60232ec8e5174000f8455fab\system.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system\efd3159e60232ec8e5174000f8455fab\system.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.confe64a9051#\7b0f5d26832171afde358988e315654b\system.configuration.install.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.confe64a9051#\7b0f5d26832171afde358988e315654b\system.configuration.install.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.configuration\435cfedea8b54c0c24d4dc44eef40f37\system.configuration.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.configuration\435cfedea8b54c0c24d4dc44eef40f37\system.configuration.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.core\ba4e683435148aef24ee448ce345449d\system.core.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.core\ba4e683435148aef24ee448ce345449d\system.core.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.data\923096692af3cfc353e9f6695a9ec36f\system.data.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.data\923096692af3cfc353e9f6695a9ec36f\system.data.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.dired13b18a9#\27d5358e670c09aa966eae25f7645b5f\system.directoryservices.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.dired13b18a9#\27d5358e670c09aa966eae25f7645b5f\system.directoryservices.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.drawing\f54c6cca68b2fed17f5c0a9fabc41f73\system.drawing.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.drawing\f54c6cca68b2fed17f5c0a9fabc41f73\system.drawing.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.manaa57fc8cc#\d1514ba1ef61dfbe4c0e048e194a953c\system.management.automation.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.manaa57fc8cc#\d1514ba1ef61dfbe4c0e048e194a953c\system.management.automation.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.management\1ad8d3c130050cbc8b336c5b64e8daa0\system.management.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.management\1ad8d3c130050cbc8b336c5b64e8daa0\system.management.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.net.http\24eeb3ab7da7eab131e38872536a2fdc\system.net.http.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.net.http\24eeb3ab7da7eab131e38872536a2fdc\system.net.http.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.runt73a1fc9d#\4ebf3edcd73cab5303d2d63b0635d91b\system.runtime.remoting.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.runt73a1fc9d#\4ebf3edcd73cab5303d2d63b0635d91b\system.runtime.remoting.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.runtc259d85b#\7a0e4c761368100d15dba7a8d8873ba3\system.runtime.windowsruntime.ui.xaml.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.runtc259d85b#\7a0e4c761368100d15dba7a8d8873ba3\system.runtime.windowsruntime.ui.xaml.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.runteb92aa12#\5eb6452492038c58fe6f8df5484284e2\system.runtime.serialization.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.runteb92aa12#\5eb6452492038c58fe6f8df5484284e2\system.runtime.serialization.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.serv759bfb78#\21249f8ca1e67294bb499d68301bef7a\system.serviceprocess.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.serv759bfb78#\21249f8ca1e67294bb499d68301bef7a\system.serviceprocess.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.servicemodel\0fdff5efe6f2045ec5703149b1bf01f8\system.servicemodel.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.servicemodel\0fdff5efe6f2045ec5703149b1bf01f8\system.servicemodel.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.transactions\a0ca926f47fd13b4ef3269c31ab1e8ef\system.transactions.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.transactions\a0ca926f47fd13b4ef3269c31ab1e8ef\system.transactions.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.web.services\4427f95238a28d7826e2ab5ade08e93f\system.web.services.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.web.services\4427f95238a28d7826e2ab5ade08e93f\system.web.services.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.windows.forms\95a4fbda54eb0324a3289bf0166d19ed\system.windows.forms.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.windows.forms\95a4fbda54eb0324a3289bf0166d19ed\system.windows.forms.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.xaml\af3ad81d4806473a1453ec3c2d2fc3f9\system.xaml.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.xaml\af3ad81d4806473a1453ec3c2d2fc3f9\system.xaml.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.xml\96a52e0b049f765ed35e430304943896\system.xml.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.xml\96a52e0b049f765ed35e430304943896\system.xml.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.xml.linq\3d491b5769a3518e60dc5492aa940da6\system.xml.linq.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\system.xml.linq\3d491b5769a3518e60dc5492aa940da6\system.xml.linq.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\taskscheduler\a6f8526b8c5d5d01f3ff40257a25c001\taskscheduler.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\taskscheduler\a6f8526b8c5d5d01f3ff40257a25c001\taskscheduler.ni.dll.aux
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\windowsbase\c02643062c6f25d6513d2052e45ff99f\windowsbase.ni.dll
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\windowsbase\c02643062c6f25d6513d2052e45ff99f\windowsbase.ni.dll.aux
  • %WINDIR%\assembly\publisherpolicy.tme
  • %WINDIR%\assembly\pubpol36.dat
Deletes following files that it created itself
  • C:\$recycle.bin\system volume information\winlogon.exe
  • %ALLUSERSPROFILE%\microsoft\windows\caches\{a3d5f1e2-9b4c-4d2e-8f7a-1b2c3d4e5f6e}\update.exe
  • %TEMP%\content\2668-5916-powershell.exe-17-42-29-461.dump
  • %TEMP%\content\2668-5916-powershell.exe-17-42-29-767.dump
  • %TEMP%\content\2668-5916-powershell.exe-17-42-29-885.dump
  • %TEMP%\content\2668-5916-powershell.exe-17-42-30-445.dump
  • %TEMP%\content\2668-5916-powershell.exe-17-42-35-882.dump
  • %TEMP%\content\2680-2140-powershell.exe-17-42-02-119.dump
  • %TEMP%\content\2680-2140-powershell.exe-17-42-02-397.dump
  • %TEMP%\content\2680-2140-powershell.exe-17-42-02-782.dump
  • %TEMP%\content\2680-2140-powershell.exe-17-42-03-039.dump
  • %TEMP%\content\2680-2140-powershell.exe-17-42-04-747.dump
Deletes itself.
Miscellaneous
Executes the following
  • '<SYSTEM32>\cmd.exe' /c schtasks /delete /tn "Microsoft\Windows\WindowsUpdate\SystemMaintenance" /f 2>nul
  • '<SYSTEM32>\schtasks.exe' /delete /tn "Microsoft\Windows\WindowsUpdate\SystemMaintenance" /f
  • '<SYSTEM32>\cmd.exe' /c schtasks /create /tn "Microsoft\Windows\WindowsUpdate\SystemMaintenance" /tr "<DRIVERS>\Pyrite.dat" /sc onstart /ru SYSTEM /rl HIGHEST /f
  • '<SYSTEM32>\schtasks.exe' /create /tn "Microsoft\Windows\WindowsUpdate\SystemMaintenance" /tr "<DRIVERS>\Pyrite.dat" /sc onstart /ru SYSTEM /rl HIGHEST /f
  • '<SYSTEM32>\cmd.exe' /c schtasks /delete /tn "Microsoft\Windows\ApplicationExperience\ProgramCompatibility" /f 2>nul
  • '<SYSTEM32>\schtasks.exe' /delete /tn "Microsoft\Windows\ApplicationExperience\ProgramCompatibility" /f
  • '<SYSTEM32>\cmd.exe' /c schtasks /create /tn "Microsoft\Windows\ApplicationExperience\ProgramCompatibility" /tr "<DRIVERS>\Pyrite.dat" /sc onlogon /ru SYSTEM /rl HIGHEST /f
  • '<SYSTEM32>\schtasks.exe' /create /tn "Microsoft\Windows\ApplicationExperience\ProgramCompatibility" /tr "<DRIVERS>\Pyrite.dat" /sc onlogon /ru SYSTEM /rl HIGHEST /f
  • '<SYSTEM32>\cmd.exe' /c bcdedit /deletevalue {bootmgr} path 2>nul
  • '<SYSTEM32>\bcdedit.exe' /deletevalue {bootmgr} path
  • '<SYSTEM32>\cmd.exe' /c bcdedit /deletevalue {default} path 2>nul
  • '<SYSTEM32>\bcdedit.exe' /deletevalue {default} path
  • '<SYSTEM32>\cmd.exe' /c bcdedit /deletevalue {memdiag} path 2>nul
  • '<SYSTEM32>\bcdedit.exe' /deletevalue {memdiag} path
  • '<SYSTEM32>\cmd.exe' /c bcdedit /deletevalue {current} path 2>nul
  • '<SYSTEM32>\bcdedit.exe' /deletevalue {current} path

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Free trial

 

Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

Free trial

 

Download Dr.Web

Download by serial number

Download on App Store

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

 

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android

Free trial

14 days

Download now
Get it on Google Play