PID: 984 (svchost.exe) Open files \WINDOWS\system32\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\net\NtControlPipe6\WINDOWS\system32\drivers\etc\Endpoint\Endpoint\lsarpcBack to Home