.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 1002CDA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 1002C440 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 1002CD60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 1002CD80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 1002CE40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 1002C4E0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ntdll.dll!LdrLoadDll 7C9163C3 5 Bytes JMP 1002A630 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ntdll.dll!LdrUnloadDll 7C91738B 5 Bytes JMP 1001CE40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ntdll.dll!LdrGetProcedureAddress 7C917EA8 5 Bytes JMP 1002CD40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!CreateFileA 7C801A28 5 Bytes JMP 1002CC80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!VirtualProtect 7C801AD4 5 Bytes JMP 1002CA20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!LoadLibraryExW 7C801AF5 7 Bytes JMP 1002CCC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!LoadLibraryExA 7C801D53 5 Bytes JMP 1002CCE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!LoadLibraryA 7C801D7B 5 Bytes JMP 1002CA80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 10027790 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10028320 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!GetProcAddress 7C80AE40 5 Bytes JMP 1002CD20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!LoadLibraryW 7C80AEEB 5 Bytes JMP 1002CA60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!GetModuleHandleA 7C80B741 5 Bytes JMP 1002CAC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!GetModuleHandleW 7C80E4DD 5 Bytes JMP 1002CAA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!CreateFileW 7C810800 5 Bytes JMP 1002CC60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!MoveFileWithProgressW 7C81F72E 5 Bytes JMP 1002CB20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!MoveFileW 7C821261 5 Bytes JMP 1002CBA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!OpenFile 7C821982 5 Bytes JMP 1002CCA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!CopyFileExW 7C827B32 7 Bytes JMP 1002CBE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!CopyFileA 7C8286EE 5 Bytes JMP 1002CC40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!CopyFileW 7C82F87B 5 Bytes JMP 1002CC20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!DeleteFileA 7C831EDD 5 Bytes JMP 1002CB00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!DeleteFileW 7C831F63 5 Bytes JMP 1002CAE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!MoveFileExW 7C83568B 5 Bytes JMP 1002CB60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!MoveFileA 7C835EBF 5 Bytes JMP 1002CBC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!MoveFileWithProgressA 7C835EDE 5 Bytes JMP 1002CB40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!MoveFileExA 7C85E49B 5 Bytes JMP 1002CB80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!CopyFileExA 7C85F39C 5 Bytes JMP 1002CC00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!WinExec 7C86250D 5 Bytes JMP 1002CA40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] kernel32.dll!LoadModule 7C86261E 5 Bytes JMP 1002CD00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ADVAPI32.dll!OpenServiceW 77DE6FFD 2 Bytes JMP 1002D830 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ADVAPI32.dll!OpenServiceW + 3 77DE7000 4 Bytes [24, 98, CC, CC] {AND AL, 0x98; INT 3 ; INT 3 }
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ADVAPI32.dll!CreateProcessAsUserW 77DEA8A9 5 Bytes JMP 100262C0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ADVAPI32.dll!OpenServiceA 77DF4C66 7 Bytes JMP 1002D590 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ADVAPI32.dll!CreateProcessAsUserA 77E10CE8 5 Bytes JMP 10026BF0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ADVAPI32.dll!CreateServiceA 77E37211 7 Bytes JMP 1002DD80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ADVAPI32.dll!CreateServiceW 77E373A9 7 Bytes JMP 1002DAA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] USER32.dll!EndTask 7E45A0A5 5 Bytes JMP 1002E3C0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] SHELL32.dll!ShellExecuteExW 7CA0991B 5 Bytes JMP 1002C9A0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] SHELL32.dll!ShellExecuteEx 7CA40E7D 5 Bytes JMP 1002C9C0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] SHELL32.dll!ShellExecuteA 7CA411A8 5 Bytes JMP 1002CA00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] SHELL32.dll!ShellExecuteW 7CAB5E68 5 Bytes JMP 1002C9E0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ole32.dll!CoCreateInstanceEx 774FF154 5 Bytes JMP 1002E840 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSSYSTEM32CTXFISPI.EXE[744] ole32.dll!CoGetClassObject 775151F5 5 Bytes JMP 1002E600 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 1002CE00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CD20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 1002CDC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 1002CE80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 1002CE60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 1002CE20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 1002C490 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 1002CDE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 1002CDA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 1002C440 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 1002CD60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 1002CD80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 1002CE40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 1002C4E0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ntdll.dll!LdrLoadDll 7C9163C3 5 Bytes JMP 1002A630 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ntdll.dll!LdrUnloadDll 7C91738B 5 Bytes JMP 1001CE40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ntdll.dll!LdrGetProcedureAddress 7C917EA8 5 Bytes JMP 1002CD40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!CreateFileA 7C801A28 5 Bytes JMP 1002CC80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!VirtualProtect 7C801AD4 5 Bytes JMP 1002CA20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!LoadLibraryExW 7C801AF5 7 Bytes JMP 1002CCC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!LoadLibraryExA 7C801D53 5 Bytes JMP 1002CCE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!LoadLibraryA 7C801D7B 5 Bytes JMP 1002CA80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 10027790 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10028320 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!GetProcAddress 7C80AE40 5 Bytes JMP 1002CD20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!LoadLibraryW 7C80AEEB 5 Bytes JMP 1002CA60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!GetModuleHandleA 7C80B741 5 Bytes JMP 1002CAC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!GetModuleHandleW 7C80E4DD 5 Bytes JMP 1002CAA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!CreateFileW 7C810800 5 Bytes JMP 1002CC60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!MoveFileWithProgressW 7C81F72E 5 Bytes JMP 1002CB20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!MoveFileW 7C821261 5 Bytes JMP 1002CBA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!OpenFile 7C821982 5 Bytes JMP 1002CCA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!CopyFileExW 7C827B32 7 Bytes JMP 1002CBE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!CopyFileA 7C8286EE 5 Bytes JMP 1002CC40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!CopyFileW 7C82F87B 5 Bytes JMP 1002CC20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!DeleteFileA 7C831EDD 5 Bytes JMP 1002CB00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!DeleteFileW 7C831F63 5 Bytes JMP 1002CAE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!MoveFileExW 7C83568B 5 Bytes JMP 1002CB60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!MoveFileA 7C835EBF 5 Bytes JMP 1002CBC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!MoveFileWithProgressA 7C835EDE 5 Bytes JMP 1002CB40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!MoveFileExA 7C85E49B 5 Bytes JMP 1002CB80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!CopyFileExA 7C85F39C 5 Bytes JMP 1002CC00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!WinExec 7C86250D 5 Bytes JMP 1002CA40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] kernel32.dll!LoadModule 7C86261E 5 Bytes JMP 1002CD00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ADVAPI32.dll!OpenServiceW 77DE6FFD 2 Bytes JMP 1002D830 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ADVAPI32.dll!OpenServiceW + 3 77DE7000 4 Bytes [24, 98, CC, CC] {AND AL, 0x98; INT 3 ; INT 3 }
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ADVAPI32.dll!CreateProcessAsUserW 77DEA8A9 5 Bytes JMP 100262C0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ADVAPI32.dll!OpenServiceA 77DF4C66 7 Bytes JMP 1002D590 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ADVAPI32.dll!CreateProcessAsUserA 77E10CE8 5 Bytes JMP 10026BF0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ADVAPI32.dll!CreateServiceA 77E37211 7 Bytes JMP 1002DD80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ADVAPI32.dll!CreateServiceW 77E373A9 7 Bytes JMP 1002DAA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] USER32.dll!EndTask 7E45A0A5 5 Bytes JMP 1002E3C0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ole32.dll!CoCreateInstanceEx 774FF154 5 Bytes JMP 1002E840 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] ole32.dll!CoGetClassObject 775151F5 5 Bytes JMP 1002E600 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] SHELL32.dll!ShellExecuteExW 7CA0991B 5 Bytes JMP 1002C9A0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] SHELL32.dll!ShellExecuteEx 7CA40E7D 5 Bytes JMP 1002C9C0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] SHELL32.dll!ShellExecuteA 7CA411A8 5 Bytes JMP 1002CA00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesMicrosoft OfficeOfficeOSA.EXE[752] SHELL32.dll!ShellExecuteW 7CAB5E68 5 Bytes JMP 1002C9E0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 1002CE00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CD20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 1002CDC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 1002CE80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 1002CE60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 1002CE20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 1002C490 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 1002CDE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 1002CDA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 1002C440 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 1002CD60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 1002CD80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 1002CE40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 1002C4E0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ntdll.dll!LdrLoadDll 7C9163C3 5 Bytes JMP 1002A630 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ntdll.dll!LdrUnloadDll 7C91738B 5 Bytes JMP 1001CE40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ntdll.dll!LdrGetProcedureAddress 7C917EA8 5 Bytes JMP 1002CD40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!CreateFileA 7C801A28 5 Bytes JMP 1002CC80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!VirtualProtect 7C801AD4 5 Bytes JMP 1002CA20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!LoadLibraryExW 7C801AF5 7 Bytes JMP 1002CCC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!LoadLibraryExA 7C801D53 5 Bytes JMP 1002CCE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!LoadLibraryA 7C801D7B 5 Bytes JMP 1002CA80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 10027790 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10028320 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!GetProcAddress 7C80AE40 5 Bytes JMP 1002CD20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!LoadLibraryW 7C80AEEB 5 Bytes JMP 1002CA60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!GetModuleHandleA 7C80B741 5 Bytes JMP 1002CAC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!GetModuleHandleW 7C80E4DD 5 Bytes JMP 1002CAA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!CreateFileW 7C810800 5 Bytes JMP 1002CC60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!MoveFileWithProgressW 7C81F72E 5 Bytes JMP 1002CB20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!MoveFileW 7C821261 5 Bytes JMP 1002CBA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!OpenFile 7C821982 5 Bytes JMP 1002CCA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!CopyFileExW 7C827B32 7 Bytes JMP 1002CBE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!CopyFileA 7C8286EE 5 Bytes JMP 1002CC40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!CopyFileW 7C82F87B 5 Bytes JMP 1002CC20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!DeleteFileA 7C831EDD 5 Bytes JMP 1002CB00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!DeleteFileW 7C831F63 5 Bytes JMP 1002CAE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!MoveFileExW 7C83568B 5 Bytes JMP 1002CB60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!MoveFileA 7C835EBF 5 Bytes JMP 1002CBC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!MoveFileWithProgressA 7C835EDE 5 Bytes JMP 1002CB40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!MoveFileExA 7C85E49B 5 Bytes JMP 1002CB80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!CopyFileExA 7C85F39C 5 Bytes JMP 1002CC00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!WinExec 7C86250D 5 Bytes JMP 1002CA40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] kernel32.dll!LoadModule 7C86261E 5 Bytes JMP 1002CD00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ADVAPI32.dll!OpenServiceW 77DE6FFD 2 Bytes JMP 1002D830 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ADVAPI32.dll!OpenServiceW + 3 77DE7000 4 Bytes [24, 98, CC, CC] {AND AL, 0x98; INT 3 ; INT 3 }
.text CWINDOWSsystem32services.exe[932] ADVAPI32.dll!CreateProcessAsUserW 77DEA8A9 5 Bytes JMP 100262C0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ADVAPI32.dll!OpenServiceA 77DF4C66 7 Bytes JMP 1002D590 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ADVAPI32.dll!CreateProcessAsUserA 77E10CE8 5 Bytes JMP 10026BF0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ADVAPI32.dll!CreateServiceA 77E37211 7 Bytes JMP 1002DD80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] ADVAPI32.dll!CreateServiceW 77E373A9 7 Bytes JMP 1002DAA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32services.exe[932] USER32.dll!EndTask 7E45A0A5 5 Bytes JMP 1002E3C0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 1002CE00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CD20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 1002CDC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 1002CE80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 1002CE60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 1002CE20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 1002C490 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 1002CDE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 1002CDA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 1002C440 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 1002CD60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 1002CD80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 1002CE40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 1002C4E0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ntdll.dll!LdrLoadDll 7C9163C3 5 Bytes JMP 1002A630 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ntdll.dll!LdrUnloadDll 7C91738B 5 Bytes JMP 1001CE40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ntdll.dll!LdrGetProcedureAddress 7C917EA8 5 Bytes JMP 1002CD40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!CreateFileA 7C801A28 5 Bytes JMP 1002CC80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!VirtualProtect 7C801AD4 5 Bytes JMP 1002CA20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!LoadLibraryExW 7C801AF5 7 Bytes JMP 1002CCC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!LoadLibraryExA 7C801D53 5 Bytes JMP 1002CCE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!LoadLibraryA 7C801D7B 5 Bytes JMP 1002CA80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 10027790 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10028320 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!GetProcAddress 7C80AE40 5 Bytes JMP 1002CD20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!LoadLibraryW 7C80AEEB 5 Bytes JMP 1002CA60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!GetModuleHandleA 7C80B741 5 Bytes JMP 1002CAC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!GetModuleHandleW 7C80E4DD 5 Bytes JMP 1002CAA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!CreateFileW 7C810800 5 Bytes JMP 1002CC60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!MoveFileWithProgressW 7C81F72E 5 Bytes JMP 1002CB20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!MoveFileW 7C821261 5 Bytes JMP 1002CBA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!OpenFile 7C821982 5 Bytes JMP 1002CCA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!CopyFileExW 7C827B32 7 Bytes JMP 1002CBE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!CopyFileA 7C8286EE 5 Bytes JMP 1002CC40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!CopyFileW 7C82F87B 5 Bytes JMP 1002CC20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!DeleteFileA 7C831EDD 5 Bytes JMP 1002CB00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!DeleteFileW 7C831F63 5 Bytes JMP 1002CAE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!MoveFileExW 7C83568B 5 Bytes JMP 1002CB60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!MoveFileA 7C835EBF 5 Bytes JMP 1002CBC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!MoveFileWithProgressA 7C835EDE 5 Bytes JMP 1002CB40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!MoveFileExA 7C85E49B 5 Bytes JMP 1002CB80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!CopyFileExA 7C85F39C 5 Bytes JMP 1002CC00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!WinExec 7C86250D 5 Bytes JMP 1002CA40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] kernel32.dll!LoadModule 7C86261E 5 Bytes JMP 1002CD00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ADVAPI32.dll!OpenServiceW 77DE6FFD 2 Bytes JMP 1002D830 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ADVAPI32.dll!OpenServiceW + 3 77DE7000 4 Bytes [24, 98, CC, CC] {AND AL, 0x98; INT 3 ; INT 3 }
.text CWINDOWSsystem32lsass.exe[944] ADVAPI32.dll!CreateProcessAsUserW 77DEA8A9 5 Bytes JMP 100262C0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ADVAPI32.dll!OpenServiceA 77DF4C66 7 Bytes JMP 1002D590 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ADVAPI32.dll!CreateProcessAsUserA 77E10CE8 5 Bytes JMP 10026BF0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ADVAPI32.dll!CreateServiceA 77E37211 7 Bytes JMP 1002DD80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ADVAPI32.dll!CreateServiceW 77E373A9 7 Bytes JMP 1002DAA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] USER32.dll!EndTask 7E45A0A5 5 Bytes JMP 1002E3C0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] WS2_32.dll!WSASocketW 71AB404E 7 Bytes JMP 1002C920 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] WS2_32.dll!WSASocketA 71AB8B6A 5 Bytes JMP 1002C940 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ole32.dll!CoCreateInstanceEx 774FF154 5 Bytes JMP 1002E840 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] ole32.dll!CoGetClassObject 775151F5 5 Bytes JMP 1002E600 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] SHELL32.dll!ShellExecuteExW 7CA0991B 5 Bytes JMP 1002C9A0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] SHELL32.dll!ShellExecuteEx 7CA40E7D 5 Bytes JMP 1002C9C0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] SHELL32.dll!ShellExecuteA 7CA411A8 5 Bytes JMP 1002CA00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CWINDOWSsystem32lsass.exe[944] SHELL32.dll!ShellExecuteW 7CAB5E68 5 Bytes JMP 1002C9E0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 1002CE00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CD20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 1002CDC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 1002CE80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 1002CE60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 1002CE20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 1002C490 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 1002CDE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 1002CDA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 1002C440 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 1002CD60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 1002CD80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 1002CE40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 1002C4E0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] ntdll.dll!LdrLoadDll 7C9163C3 5 Bytes JMP 1002A630 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] ntdll.dll!LdrUnloadDll 7C91738B 5 Bytes JMP 1001CE40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] ntdll.dll!LdrGetProcedureAddress 7C917EA8 5 Bytes JMP 1002CD40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!CreateFileA 7C801A28 5 Bytes JMP 1002CC80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!VirtualProtect 7C801AD4 5 Bytes JMP 1002CA20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!LoadLibraryExW 7C801AF5 7 Bytes JMP 1002CCC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!LoadLibraryExA 7C801D53 5 Bytes JMP 1002CCE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!LoadLibraryA 7C801D7B 5 Bytes JMP 1002CA80 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 10027790 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10028320 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!GetProcAddress 7C80AE40 5 Bytes JMP 1002CD20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!LoadLibraryW 7C80AEEB 5 Bytes JMP 1002CA60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!GetModuleHandleA 7C80B741 5 Bytes JMP 1002CAC0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!GetModuleHandleW 7C80E4DD 5 Bytes JMP 1002CAA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!CreateFileW 7C810800 5 Bytes JMP 1002CC60 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!MoveFileWithProgressW 7C81F72E 5 Bytes JMP 1002CB20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!MoveFileW 7C821261 5 Bytes JMP 1002CBA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!OpenFile 7C821982 5 Bytes JMP 1002CCA0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!CopyFileExW 7C827B32 7 Bytes JMP 1002CBE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!CopyFileA 7C8286EE 5 Bytes JMP 1002CC40 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!CopyFileW 7C82F87B 5 Bytes JMP 1002CC20 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!DeleteFileA 7C831EDD 5 Bytes JMP 1002CB00 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram FilesCommon FilesMicrosoft SharedVS7DEBUGmdm.exe[992] kernel32.dll!DeleteFileW 7C831F63 5 Bytes JMP 1002CAE0 CWINDOWSsystem32guard32.dll (COMODO Internet SecurityCOMODO)
.text CProgram