Applies ToWindows Server 2012 R2 Datacenter Windows Server 2012 R2 Standard Windows Server 2012 R2 Essentials Windows Server 2012 R2 Foundation Windows 8.1 Enterprise Windows 8.1 Pro Windows 8.1 Windows RT 8.1 Windows Server 2012 Datacenter Windows Server 2012 Datacenter Windows Server 2012 Standard Windows Server 2012 Standard Windows Server 2012 Essentials Windows Server 2012 Foundation Windows Server 2012 Foundation Windows 8 Enterprise Windows 8 Pro Windows 8 Windows RT Windows Server 2008 R2 Service Pack 1 Windows Server 2008 R2 Datacenter Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Standard Windows Server 2008 R2 Web Edition Windows Server 2008 R2 Foundation Windows 7 Service Pack 1 Windows 7 Ultimate Windows 7 Enterprise Windows 7 Professional Windows 7 Home Premium Windows 7 Home Basic Windows 7 Starter Windows Server 2008 Service Pack 2 Windows Server 2008 Datacenter Windows Server 2008 Enterprise Windows Server 2008 Standard Windows Server 2008 Web Edition Windows Server 2008 Foundation Windows Server 2008 for Itanium-Based Systems Windows Vista Service Pack 2 Windows Vista Ultimate Windows Vista Enterprise Windows Vista Business Windows Vista Home Premium Windows Vista Home Basic Windows Vista Starter

Summary

This security update resolves vulnerabilities in Microsoft Windows. The vulnerabilities could allow remote code execution if an attacker accesses a local system and runs a specially crafted application. To learn more about the vulnerability, see Microsoft Security Bulletin MS15-132.

More Information

Important

  • All future security and nonsecurity updates for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 require update 2919355 to be installed. We recommend that you install update 2919355 on your Windows RT 8.1-based, Windows 8.1-based, or Windows Server 2012 R2-based computer so that you receive future updates.

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Get security updates automatically.Note For Windows RT and Windows RT 8.1, this update is available through Windows Update only.

You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.Click the download link in Microsoft Security Bulletin MS15-132 that corresponds to the version of Windows that you are running.

More Information

Help for installing updates: Support for Microsoft UpdateSecurity solutions for IT professionals: TechNet Security Troubleshooting and SupportHelp for protecting your Windows-based computer from viruses and malware: Virus Solution and Security CenterLocal support according to your country: International Support

File Information

File name

SHA1 hash

SHA256 hash

Windows6.1-KB3108381-x86.msu

79C077F0A5CD42F5542586F6979F3A33DCC9B9F6

CE07606676F2A315B21F50CE3286BCAA5A60F4B85CD1D05FEB48355D8574D45C

Windows6.1-KB3108381-ia64.msu

60D49E90952F43EA347E2898BE8A95DC38E6AFAF

B7874859146948F0D179D68F2A51BAE7B21E603EF81779F497632F9B570080CC

Windows6.1-KB3108381-x64.msu

0B39234A75BDE39B2EB68EEB37C396B665FFC494

EC44760B2057571D2F920DCF69F28D2811388AE0ED750E9B84447D143713E627

Windows8.1-KB3108381-x64.msu

F76C075B28AE44CE9FD2BAFEE205A8C8CF3E53CB

41DB312CDBEF8FA2446C2CCCBBA6E08782CAFAFF9C66CAD5F98CFA4B56AB3130

Windows6.0-KB3108381-x86.msu

B7B3E2F57FB03EF15C2498D9D55C6F493D530087

2D1006AD98E34D3362190371DCF49E5BE810DAAD0E47039A7D1755F7B047B307

Windows6.0-KB3108381-ia64.msu

5AD018E0CDE4EF393294245C1E2A9F7AAB761D15

46840BC7FCB190CDC384D74EB863CF1F1C6E301E0CA044D568504974D1F589C0

Windows6.0-KB3108381-x64.msu

22B3DA0D96B48CF07B6A5AC70A8E950D6FE8D87E

07159F05690DB14014D8627A6A30A3C465DE2E978B13472DEB9A3D0BBB17A239

Windows8.1-KB3108381-x86.msu

4729C28B207337F3877103B074B82A3449D5B60C

CAAC961BE5830463B313DD8D1517993AD572246055B10138FFF4E896761FB34A

Windows8-RT-KB3108381-x86.msu

4D766F7216EB8199697545DB6A2356EFF7BC143B

5033E9578368AC40662678A75378342ECCF8690A58F825A422C45495B3356C0F

Windows8-RT-KB3108381-x64.msu

B9D03DB253C47ED1C22AD0B4830CD03D8701C37E

29543716446AA247A7F8CD0CCA36C144D95C0F20ADE4DAAE929C22E060FCEE93

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). Be aware that dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time bias. The dates and times may also change when you perform certain operations on the files.

Windows 7 and Windows Server 2008 R2 file information

Notes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version

    Product

    Milestone

    Service branch

    6.1.760 1.18xxx

    Windows 7 or Windows Server 2008 R2

    SP1

    GDR

    6.1.760 1.23 xxx

    Windows 7 or Windows Server 2008 R2

    SP1

    LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions

File name

File version

File size

Date

Time

Platform

Catsrvut.dll

2001.12.8531.19062

487,936

11-Nov-2015

18:39

x86

Comsvcs.dll

2001.12.8531.19062

1,242,624

11-Nov-2015

18:39

x86

Catsrvut.dll

2001.12.8531.23278

487,936

13-Nov-2015

18:37

x86

Comsvcs.dll

2001.12.8531.23278

1,242,624

13-Nov-2015

18:37

x86

For all supported ia64-based versions

File name

File version

File size

Date

Time

Platform

Catsrvut.dll

2001.12.8531.19062

1,215,488

11-Nov-2015

17:56

IA-64

Comsvcs.dll

2001.12.8531.19062

3,294,720

11-Nov-2015

17:56

IA-64

Catsrvut.dll

2001.12.8531.23278

1,215,488

13-Nov-2015

18:04

IA-64

Comsvcs.dll

2001.12.8531.23278

3,294,720

13-Nov-2015

18:04

IA-64

Catsrvut.dll

2001.12.8531.19062

487,936

11-Nov-2015

18:39

x86

Comsvcs.dll

2001.12.8531.19062

1,242,624

11-Nov-2015

18:39

x86

Catsrvut.dll

2001.12.8531.23278

487,936

13-Nov-2015

18:37

x86

Comsvcs.dll

2001.12.8531.23278

1,242,624

13-Nov-2015

18:37

x86

For all supported x64-based versions

File name

File version

File size

Date

Time

Platform

Catsrvut.dll

2001.12.8531.19062

525,312

11-Nov-2015

18:53

x64

Comsvcs.dll

2001.12.8531.19062

1,735,680

11-Nov-2015

18:53

x64

Catsrvut.dll

2001.12.8531.23278

525,824

13-Nov-2015

19:11

x64

Comsvcs.dll

2001.12.8531.23278

1,735,680

13-Nov-2015

19:11

x64

Catsrvut.dll

2001.12.8531.19062

487,936

11-Nov-2015

18:39

x86

Comsvcs.dll

2001.12.8531.19062

1,242,624

11-Nov-2015

18:39

x86

Catsrvut.dll

2001.12.8531.23278

487,936

13-Nov-2015

18:37

x86

Comsvcs.dll

2001.12.8531.23278

1,242,624

13-Nov-2015

18:37

x86

Windows 8.1 and Windows Server 2012 R2 file information

Notes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version

    Product

    Milestone

    Service branch

    6.3.960 0.17 xxx

    Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2

    RTM

    GDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x64-based versions

File name

File version

File size

Date

Time

Platform

Service branch

Winload.efi

6.3.9600.18146

1,659,568

22-Nov-2015

06:59

Not applicable

Not applicable

Winload.exe

6.3.9600.18146

1,519,592

22-Nov-2015

06:59

x64

Not applicable

Winresume.efi

6.3.9600.18146

1,487,008

22-Nov-2015

06:59

Not applicable

Not applicable

Winresume.exe

6.3.9600.18146

1,355,848

22-Nov-2015

06:59

x64

Not applicable

Catsrvut.dll

2001.12.10530.18146

522,240

21-Nov-2015

16:47

x64

Not applicable

Comsvcs.dll

2001.12.10530.18146

1,706,496

21-Nov-2015

16:59

x64

Not applicable

Ntdll.dll

6.3.9600.18146

1,735,000

22-Nov-2015

06:59

x64

Not applicable

Ntoskrnl.exe

6.3.9600.18146

7,455,064

22-Nov-2015

06:59

x64

Not applicable

Microsoft-windows-system-events.dll

6.3.9600.17734

246,272

20-Mar-2015

04:12

x64

Not applicable

Ntvdm64.dll

6.3.9600.18146

16,896

21-Nov-2015

18:32

x64

AMD64_MICROSOFT-WINDOWS-WOW

Wow64.dll

6.3.9600.17734

285,184

20-Mar-2015

04:10

x64

AMD64_MICROSOFT-WINDOWS-WOW

Wow64cpu.dll

6.3.9600.17734

13,312

20-Mar-2015

04:10

x64

AMD64_MICROSOFT-WINDOWS-WOW

Ntdll.dll

6.3.9600.18146

1,499,920

22-Nov-2015

06:58

x86

Not applicable

Acwow64.dll

6.3.9600.17734

37,376

20-Mar-2015

03:06

x86

WOW64_MICROSOFT-WINDOWS-WOW

Instnm.exe

6.3.9600.17475

8,704

29-Oct-2014

01:13

x86

WOW64_MICROSOFT-WINDOWS-WOW

Ntvdm64.dll

6.3.9600.18146

14,336

21-Nov-2015

17:50

x86

WOW64_MICROSOFT-WINDOWS-WOW

Setup16.exe

3.1.0.1918

25,600

29-Oct-2014

01:13

x86

WOW64_MICROSOFT-WINDOWS-WOW

User.exe

6.3.9600.17475

4,096

29-Oct-2014

01:14

x86

WOW64_MICROSOFT-WINDOWS-WOW

Wow32.dll

6.3.9600.17475

5,632

29-Oct-2014

01:15

x86

WOW64_MICROSOFT-WINDOWS-WOW

Catsrvut.dll

2001.12.10530.18146

414,208

21-Nov-2015

16:40

x86

Not applicable

Comsvcs.dll

2001.12.10530.18146

1,344,000

21-Nov-2015

16:49

x86

Not applicable

For all supported x86-based versions

File name

File version

File size

Date

Time

Platform

Winload.efi

6.3.9600.18146

1,393,584

22-Nov-2015

07:05

Not applicable

Winload.exe

6.3.9600.18146

1,282,528

22-Nov-2015

07:04

x86

Winresume.efi

6.3.9600.18146

1,269,072

22-Nov-2015

07:04

Not applicable

Winresume.exe

6.3.9600.18146

1,168,920

22-Nov-2015

07:04

x86

Catsrvut.dll

2001.12.10530.18146

414,208

21-Nov-2015

16:40

x86

Comsvcs.dll

2001.12.10530.18146

1,344,000

21-Nov-2015

16:49

x86

Ntdll.dll

6.3.9600.18146

1,469,968

22-Nov-2015

07:05

x86

Ntoskrnl.exe

6.3.9600.18146

5,766,488

22-Nov-2015

07:04

Not applicable

Microsoft-windows-system-events.dll

6.3.9600.17734

246,272

20-Mar-2015

03:25

x86

Windows Vista and Windows Server 2008 file information

Notes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version

    Product

    Milestone

    Service branch

    6.0.600 2.19xxx

    Windows Vista or Windows Server 2008

    SP2

    GDR

    6.0.600 2.23xxx

    Windows Vista or Windows Server 2008

    SP2

    LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions

File name

File version

File size

Date

Time

Platform

Catsrvut.dll

2001.12.6932.19537

488,448

10-Nov-2015

17:03

x86

Comsvcs.dll

2001.12.6932.19537

1,208,832

10-Nov-2015

17:03

x86

Catsrvut.dll

2001.12.6932.23847

488,448

10-Nov-2015

16:31

x86

Comsvcs.dll

2001.12.6932.23847

1,208,832

10-Nov-2015

16:31

x86

For all supported ia64-based versions

File name

File version

File size

Date

Time

Platform

Catsrvut.dll

2001.12.6932.19537

1,220,096

10-Nov-2015

16:22

IA-64

Comsvcs.dll

2001.12.6932.19537

3,225,600

10-Nov-2015

16:22

IA-64

Catsrvut.dll

2001.12.6932.23847

1,220,096

10-Nov-2015

16:00

IA-64

Comsvcs.dll

2001.12.6932.23847

3,225,600

10-Nov-2015

16:00

IA-64

Catsrvut.dll

2001.12.6932.19537

488,448

10-Nov-2015

17:03

x86

Comsvcs.dll

2001.12.6932.19537

1,208,832

10-Nov-2015

17:03

x86

Catsrvut.dll

2001.12.6932.23847

488,448

10-Nov-2015

16:31

x86

Comsvcs.dll

2001.12.6932.23847

1,208,832

10-Nov-2015

16:31

x86

For all supported x64-based versions

File name

File version

File size

Date

Time

Platform

Catsrvut.dll

2001.12.6932.19537

533,504

10-Nov-2015

16:40

x64

Comsvcs.dll

2001.12.6932.19537

1,683,968

10-Nov-2015

16:40

x64

Catsrvut.dll

2001.12.6932.23847

533,504

10-Nov-2015

16:26

x64

Comsvcs.dll

2001.12.6932.23847

1,683,968

10-Nov-2015

16:26

x64

Catsrvut.dll

2001.12.6932.19537

488,448

10-Nov-2015

17:03

x86

Comsvcs.dll

2001.12.6932.19537

1,208,832

10-Nov-2015

17:03

x86

Catsrvut.dll

2001.12.6932.23847

488,448

10-Nov-2015

16:31

x86

Comsvcs.dll

2001.12.6932.23847

1,208,832

10-Nov-2015

16:31

x86

Windows 8 and Windows Server 2012 file information

Notes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version

    Product

    Milestone

    Service branch

    6.2.920 0.17xxx

    Windows 8, Windows RT, or Windows Server 2012

    RTM

    GDR

    6.2.920 0.21xxx

    Windows 8, Windows RT, or Windows Server 2012

    RTM

    LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions

File name

File version

File size

Date

Time

Platform

SP requirement

Service branch

Winload.efi

6.2.9200.17522

1,166,320

22-Sep-2015

17:53

Not applicable

None

Not applicable

Winload.exe

6.2.9200.17522

1,064,048

22-Sep-2015

17:53

x86

None

Not applicable

Winresume.efi

6.2.9200.16622

1,035,512

24-May-2013

22:08

Not applicable

None

Not applicable

Winresume.exe

6.2.9200.16622

939,448

24-May-2013

22:08

x86

None

Not applicable

Winload.efi

6.2.9200.21638

1,167,840

22-Sep-2015

21:46

Not applicable

None

Not applicable

Winload.exe

6.2.9200.21638

1,064,048

22-Sep-2015

21:46

x86

None

Not applicable

Winresume.efi

6.2.9200.20726

1,035,512

24-May-2013

22:05

Not applicable

None

Not applicable

Winresume.exe

6.2.9200.20726

939,448

24-May-2013

22:05

x86

None

Not applicable

Catsrvut.dll

2001.12.10130.17581

384,512

16-Nov-2015

14:28

x86

None

Not applicable

Comsvcs.dll

2001.12.10130.17581

1,223,168

16-Nov-2015

14:28

x86

None

Not applicable

Catsrvut.dll

2001.12.10130.21703

384,512

17-Nov-2015

08:08

x86

None

Not applicable

Comsvcs.dll

2001.12.10130.21703

1,223,168

17-Nov-2015

08:08

x86

None

Not applicable

Ksecdd.sys

6.2.9200.17361

80,728

02-May-2015

04:36

x86

None

Not applicable

Lsass.exe

6.2.9200.16864

23,552

11-Mar-2014

00:42

x86

None

Not applicable

Sspicli.dll

6.2.9200.17581

131,584

16-Nov-2015

14:29

x86

None

Not applicable

Sspisrv.dll

6.2.9200.16864

16,384

11-Mar-2014

00:41

x86

None

Not applicable

Ksecdd.sys

6.2.9200.21473

80,728

02-May-2015

03:54

x86

None

Not applicable

Lsass.exe

6.2.9200.20521

23,040

20-Sep-2012

05:56

x86

None

Not applicable

Sspicli.dll

6.2.9200.21703

130,048

17-Nov-2015

08:09

x86

None

Not applicable

Sspisrv.dll

6.2.9200.20521

16,384

20-Sep-2012

05:55

x86

None

Not applicable

Cng.sys

6.2.9200.17522

492,256

23-Sep-2015

13:10

x86

None

Not applicable

Ksecpkg.sys

6.2.9200.17581

156,504

16-Nov-2015

14:59

x86

None

Not applicable

Lsasrv.dll

6.2.9200.17581

1,026,560

16-Nov-2015

14:28

x86

None

Not applicable

Cng.sys

6.2.9200.21637

494,800

22-Sep-2015

13:43

x86

None

Not applicable

Ksecpkg.sys

6.2.9200.21703

156,504

17-Nov-2015

08:36

x86

None

Not applicable

Lsasrv.dll

6.2.9200.21703

1,033,728

17-Nov-2015

08:08

x86

None

Not applicable

Adtschema.dll

6.2.9200.17231

717,824

15-Jan-2015

09:09

x86

None

Not applicable

Msaudite.dll

6.2.9200.17150

146,944

11-Oct-2014

05:05

x86

None

Not applicable

Msobjs.dll

6.2.9200.16384

61,952

26-Jul-2012

02:47

x86

None

Not applicable

Adtschema.dll

6.2.9200.21345

719,360

12-Jan-2015

03:31

x86

None

Not applicable

Msaudite.dll

6.2.9200.21269

146,944

11-Oct-2014

04:35

x86

None

Not applicable

Msobjs.dll

6.2.9200.16384

61,952

26-Jul-2012

02:47

x86

None

Not applicable

Ntdll.dll

6.2.9200.17581

1,473,000

16-Nov-2015

14:55

x86

None

Not applicable

Ntdll.dll

6.2.9200.21703

1,470,960

17-Nov-2015

08:30

x86

None

Not applicable

Ntoskrnl.exe

6.2.9200.17581

5,578,072

16-Nov-2015

14:58

Not applicable

None

Not applicable

Ntoskrnl.exe

6.2.9200.21703

5,553,496

17-Nov-2015

08:32

Not applicable

None

Not applicable

Credssp.dll

6.2.9200.17581

17,408

16-Nov-2015

14:28

x86

SP_

X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Tspkg.dll

6.2.9200.17581

76,800

16-Nov-2015

14:29

x86

SP_

X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Tspkg.mof

Not applicable

964

02-Jun-2012

14:33

Not applicable

SP_

X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Credssp.dll

6.2.9200.21703

17,408

17-Nov-2015

08:08

x86

SP_

X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Tspkg.dll

6.2.9200.21703

76,800

17-Nov-2015

08:09

x86

SP_

X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Tspkg.mof

Not applicable

964

02-Jun-2012

14:33

Not applicable

SP_

X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Wdigest.dll

6.2.9200.17581

178,688

16-Nov-2015

14:29

x86

None

Not applicable

Wdigest.dll

6.2.9200.21703

176,640

17-Nov-2015

08:09

x86

None

Not applicable

Kerberos.dll

6.2.9200.17581

668,160

16-Nov-2015

14:28

x86

None

Not applicable

Kerberos.dll

6.2.9200.21703

665,600

17-Nov-2015

08:08

x86

None

Not applicable

Msv1_0.dll

6.2.9200.17581

273,920

16-Nov-2015

14:29

x86

None

Not applicable

Msv1_0.dll

6.2.9200.21703

273,920

17-Nov-2015

08:08

x86

None

Not applicable

Shcore.dll

6.2.9200.17581

452,608

16-Nov-2015

14:29

x86

None

Not applicable

Shcore.dll

6.2.9200.21703

460,800

17-Nov-2015

08:09

x86

None

Not applicable

Mrxsmb10.sys

6.2.9200.17420

246,272

25-Jun-2015

18:07

x86

None

Not applicable

Mrxsmb10.sys

6.2.9200.21529

246,272

25-Jun-2015

17:25

x86

None

Not applicable

Mrxsmb20.sys

6.2.9200.17420

160,256

25-Jun-2015

18:09

x86

None

Not applicable

Mrxsmb20.sys

6.2.9200.21548

158,720

11-Jul-2015

16:20

x86

None

Not applicable

Mrxsmb.sys

6.2.9200.17225

341,504

07-Jan-2015

03:57

x86

None

Not applicable

Mrxsmb.sys

6.2.9200.21342

340,992

06-Jan-2015

23:17

x86

None

Not applicable

Lsm.dll

6.2.9200.17581

350,720

16-Nov-2015

14:28

x86

None

Not applicable

Workerdd.dll

6.2.9200.16384

12,288

26-Jul-2012

02:38

x86

None

Not applicable

Lsm.dll

6.2.9200.21703

350,720

17-Nov-2015

08:08

x86

None

Not applicable

Workerdd.dll

6.2.9200.16384

12,288

26-Jul-2012

02:38

x86

None

Not applicable

Usercpl.dll

6.2.9200.17581

961,536

16-Nov-2015

14:29

x86

None

Not applicable

Usercpl.ptxml

Not applicable

789

11-Oct-2012

00:41

Not applicable

None

Not applicable

Usercpl.dll

6.2.9200.21703

961,536

17-Nov-2015

08:09

x86

None

Not applicable

Usercpl.ptxml

Not applicable

789

11-Oct-2012

00:42

Not applicable

None

Not applicable

Winlogon.exe

6.2.9200.17581

429,056

16-Nov-2015

14:29

x86

None

Not applicable

Winlogon.exe

6.2.9200.21703

429,056

17-Nov-2015

08:09

x86

None

Not applicable

For all supported x64-based versions

File name

File version

File size

Date

Time

Platform

SP requirement

Service branch

Winload.efi

6.2.9200.17522

1,405,408

22-Sep-2015

17:53

Not applicable

None

Not applicable

Winload.exe

6.2.9200.17522

1,273,184

22-Sep-2015

17:53

x64

None

Not applicable

Winresume.efi

6.2.9200.16622

1,217,352

24-May-2013

22:09

Not applicable

None

Not applicable

Winresume.exe

6.2.9200.16622

1,093,904

24-May-2013

22:09

x64

None

Not applicable

Winload.efi

6.2.9200.21638

1,405,408

22-Sep-2015

21:46

Not applicable

None

Not applicable

Winload.exe

6.2.9200.21638

1,273,184

22-Sep-2015

21:46

x64

None

Not applicable

Winresume.efi

6.2.9200.20726

1,217,352

25-May-2013

00:17

Not applicable

None

Not applicable

Winresume.exe

6.2.9200.20726

1,093,904

25-May-2013

00:17

x64

None

Not applicable

Catsrvut.dll

2001.12.10130.17581

499,200

16-Nov-2015

14:26

x64

None

Not applicable

Comsvcs.dll

2001.12.10130.17581

1,637,376

16-Nov-2015

14:26

x64

None

Not applicable

Catsrvut.dll

2001.12.10130.21703

499,200

17-Nov-2015

07:59

x64

None

Not applicable

Comsvcs.dll

2001.12.10130.21703

1,631,744

17-Nov-2015

07:59

x64

None

Not applicable

Ksecdd.sys

6.2.9200.17361

100,184

02-May-2015

06:28

x64

None

Not applicable

Lsass.exe

6.2.9200.16864

35,840

11-Mar-2014

00:39

x64

None

Not applicable

Sspicli.dll

6.2.9200.17581

164,864

16-Nov-2015

14:26

x64

None

Not applicable

Sspisrv.dll

6.2.9200.16864

27,648

11-Mar-2014

00:38

x64

None

Not applicable

Ksecdd.sys

6.2.9200.21473

100,184

02-May-2015

06:23

x64

None

Not applicable

Lsass.exe

6.2.9200.20521

35,840

20-Sep-2012

06:33

x64

None

Not applicable

Sspicli.dll

6.2.9200.21703

164,352

17-Nov-2015

08:00

x64

None

Not applicable

Sspisrv.dll

6.2.9200.20521

27,648

20-Sep-2012

06:32

x64

None

Not applicable

Cng.sys

6.2.9200.17522

570,256

23-Sep-2015

13:10

x64

None

Not applicable

Ksecpkg.sys

6.2.9200.17581

171,864

16-Nov-2015

14:42

x64

None

Not applicable

Lsasrv.dll

6.2.9200.17581

1,282,560

16-Nov-2015

14:26

x64

None

Not applicable

Cng.sys

6.2.9200.21637

566,072

22-Sep-2015

13:43

x64

None

Not applicable

Ksecpkg.sys

6.2.9200.21703

171,352

17-Nov-2015

09:52

x64

None

Not applicable

Lsasrv.dll

6.2.9200.21703

1,280,512

17-Nov-2015

08:00

x64

None

Not applicable

Adtschema.dll

6.2.9200.17231

717,824

15-Jan-2015

09:38

x64

None

Not applicable

Msaudite.dll

6.2.9200.17150

146,944

11-Oct-2014

05:41

x64

None

Not applicable

Msobjs.dll

6.2.9200.16384

61,952

26-Jul-2012

02:36

x64

None

Not applicable

Adtschema.dll

6.2.9200.21289

719,360

10-Nov-2014

04:43

x64

None

Not applicable

Msaudite.dll

6.2.9200.21269

146,944

11-Oct-2014

05:38

x64

None

Not applicable

Msobjs.dll

6.2.9200.16384

61,952

26-Jul-2012

02:36

x64

None

Not applicable

Ntdll.dll

6.2.9200.17581

1,821,192

16-Nov-2015

16:10

x64

None

Not applicable

Ntdll.dll

6.2.9200.21703

1,815,008

17-Nov-2015

09:46

x64

None

Not applicable

Ocspsvcctrs.ini

Not applicable

2,960

26-Jul-2012

05:07

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

3,134

26-Jul-2012

08:00

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

2,918

26-Jul-2012

04:43

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

3,210

26-Jul-2012

07:59

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

3,098

26-Jul-2012

08:00

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

3,028

26-Jul-2012

07:59

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

3,140

26-Jul-2012

05:21

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

2,642

26-Jul-2012

08:11

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

2,576

26-Jul-2012

05:20

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

3,026

26-Jul-2012

07:36

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

3,028

26-Jul-2012

07:48

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

3,188

26-Jul-2012

05:30

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

3,126

26-Jul-2012

05:08

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

3,064

26-Jul-2012

07:49

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

3,092

26-Jul-2012

07:52

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

2,828

26-Jul-2012

05:12

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

2,464

26-Jul-2012

08:05

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

2,480

26-Jul-2012

05:13

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

2,460

26-Jul-2012

08:11

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvc.exe

6.2.9200.21345

272,384

15-Jan-2015

05:27

x64

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.h

Not applicable

1,569

02-Jun-2012

14:34

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ocspsvcctrs.ini

Not applicable

2,918

02-Jun-2012

14:34

Not applicable

SPS

AMD64_MICROSOFT-WINDOWS-OCSP

Ntoskrnl.exe

6.2.9200.17581

6,970,712

16-Nov-2015

16:17

x64

None

Not applicable

Ntoskrnl.exe

6.2.9200.21703

6,941,528

17-Nov-2015

09:50

x64

None

Not applicable

Credssp.dll

6.2.9200.17581

20,480

16-Nov-2015

14:26

x64

SP_

AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Tspkg.dll

6.2.9200.17581

94,720

16-Nov-2015

14:26

x64

SP_

AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Tspkg.mof

Not applicable

964

02-Jun-2012

14:33

Not applicable

SP_

AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Credssp.dll

6.2.9200.21703

20,480

17-Nov-2015

07:59

x64

SP_

AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Tspkg.dll

6.2.9200.21703

94,720

17-Nov-2015

08:01

x64

SP_

AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Tspkg.mof

Not applicable

964

02-Jun-2012

14:33

Not applicable

SP_

AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Wdigest.dll

6.2.9200.17581

208,896

16-Nov-2015

14:26

x64

None

Not applicable

Wdigest.dll

6.2.9200.21703

208,896

17-Nov-2015

08:01

x64

None

Not applicable

Kerberos.dll

6.2.9200.17581

830,464

16-Nov-2015

14:26

x64

None

Not applicable

Kerberos.dll

6.2.9200.21703

829,440

17-Nov-2015

08:00

x64

None

Not applicable

Msv1_0.dll

6.2.9200.17581

318,464

16-Nov-2015

14:26

x64

None

Not applicable

Msv1_0.dll

6.2.9200.21703

317,440

17-Nov-2015

08:00

x64

None

Not applicable

Shcore.dll

6.2.9200.17581

588,800

16-Nov-2015

14:26

x64

None

Not applicable

Shcore.dll

6.2.9200.21703

590,848

17-Nov-2015

08:00

x64

None

Not applicable

Mrxsmb10.sys

6.2.9200.17420

281,600

25-Jun-2015

18:27

x64

None

Not applicable

Mrxsmb10.sys

6.2.9200.21529

281,600

25-Jun-2015

18:52

x64

None

Not applicable

Mrxsmb20.sys

6.2.9200.17420

210,432

25-Jun-2015

18:29

x64

None

Not applicable

Mrxsmb20.sys

6.2.9200.21548

205,312

11-Jul-2015

17:07

x64

None

Not applicable

Mrxsmb.sys

6.2.9200.17225

403,456

07-Jan-2015

04:25

x64

None

Not applicable

Mrxsmb.sys

6.2.9200.21342

396,800

06-Jan-2015

23:17

x64

None

Not applicable

Lsm.dll

6.2.9200.17581

439,808

16-Nov-2015

14:26

x64

None

Not applicable

Workerdd.dll

6.2.9200.16891

14,848

12-Apr-2014

06:58

x64

None

Not applicable

Lsm.dll

6.2.9200.21703

439,808

17-Nov-2015

08:00

x64

None

Not applicable

Workerdd.dll

6.2.9200.21012

14,848

12-Apr-2014

06:58

x64

None

Not applicable

Usercpl.dll

6.2.9200.17581

1,043,968

16-Nov-2015

14:26

x64

None

Not applicable

Usercpl.ptxml

Not applicable

789

11-Oct-2012

00:40

Not applicable

None

Not applicable

Usercpl.dll

6.2.9200.21703

1,043,968

17-Nov-2015

08:01

x64

None

Not applicable

Usercpl.ptxml

Not applicable

789

11-Oct-2012

00:40

Not applicable

None

Not applicable

Winlogon.exe

6.2.9200.17581

578,048

16-Nov-2015

14:27

x64

None

Not applicable

Winlogon.exe

6.2.9200.21703

578,048

17-Nov-2015

08:01

x64

None

Not applicable

Sspicli.dll

6.2.9200.16864

99,840

10-Mar-2014

01:27

x86

None

Not applicable

Sspicli.dll

6.2.9200.20984

99,840

10-Mar-2014

01:34

x86

None

Not applicable

Ntdll.dll

6.2.9200.17581

1,410,000

16-Nov-2015

14:55

x86

None

Not applicable

Ntdll.dll

6.2.9200.21703

1,410,512

17-Nov-2015

08:30

x86

None

Not applicable

Wdigest.dll

6.2.9200.17581

178,688

16-Nov-2015

14:29

x86

None

Not applicable

Wdigest.dll

6.2.9200.21703

176,640

17-Nov-2015

08:09

x86

None

Not applicable

Kerberos.dll

6.2.9200.17581

668,160

16-Nov-2015

14:28

x86

None

Not applicable

Kerberos.dll

6.2.9200.21703

665,600

17-Nov-2015

08:08

x86

None

Not applicable

Msv1_0.dll

6.2.9200.17581

273,920

16-Nov-2015

14:29

x86

None

Not applicable

Msv1_0.dll

6.2.9200.21703

273,920

17-Nov-2015

08:08

x86

None

Not applicable

Catsrvut.dll

2001.12.10130.17581

384,512

16-Nov-2015

14:28

x86

None

Not applicable

Comsvcs.dll

2001.12.10130.17581

1,223,168

16-Nov-2015

14:28

x86

None

Not applicable

Catsrvut.dll

2001.12.10130.21703

384,512

17-Nov-2015

08:08

x86

None

Not applicable

Comsvcs.dll

2001.12.10130.21703

1,223,168

17-Nov-2015

08:08

x86

None

Not applicable

Adtschema.dll

6.2.9200.17231

717,824

15-Jan-2015

09:09

x86

None

Not applicable

Msaudite.dll

6.2.9200.17150

146,944

11-Oct-2014

05:05

x86

None

Not applicable

Msobjs.dll

6.2.9200.16384

61,952

26-Jul-2012

02:47

x86

None

Not applicable

Adtschema.dll

6.2.9200.21289

719,360

10-Nov-2014

03:40

x86

None

Not applicable

Msaudite.dll

6.2.9200.21269

146,944

11-Oct-2014

04:35

x86

None

Not applicable

Msobjs.dll

6.2.9200.16384

61,952

26-Jul-2012

02:47

x86

None

Not applicable

Credssp.dll

6.2.9200.17581

17,408

16-Nov-2015

14:28

x86

SP_

X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Tspkg.dll

6.2.9200.17581

76,800

16-Nov-2015

14:29

x86

SP_

X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Tspkg.mof

Not applicable

964

02-Jun-2012

14:33

Not applicable

SP_

X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Credssp.dll

6.2.9200.21703

17,408

17-Nov-2015

08:08

x86

SP_

X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Tspkg.dll

6.2.9200.21703

76,800

17-Nov-2015

08:09

x86

SP_

X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Tspkg.mof

Not applicable

964

02-Jun-2012

14:33

Not applicable

SP_

X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP

Shcore.dll

6.2.9200.17581

452,608

16-Nov-2015

14:29

x86

None

Not applicable

Shcore.dll

6.2.9200.21703

460,800

17-Nov-2015

08:09

x86

None

Not applicable

Usercpl.dll

6.2.9200.17581

961,536

16-Nov-2015

14:29

x86

None

Not applicable

Usercpl.ptxml

Not applicable

789

11-Oct-2012

00:41

Not applicable

None

Not applicable

Usercpl.dll

6.2.9200.21703

961,536

17-Nov-2015

08:09

x86

None

Not applicable

Usercpl.ptxml

Not applicable

789

11-Oct-2012

00:42

Not applicable

None

Not applicable

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.