Sending bytes. Module added to instance Comms established to KISU instance ( ) version . . . Configuration is not fully valid - be careful with this information. Version: . . . Kernel Module Loader: Registry Key: Registry Value: User Module Loader: Registry Key: Registry Value: Module Store Directory: Registry Key: Registry Value: Launcher: Service Name: Registry Value: Persistence: Method: Module Id Size Order Flags Name Process =========================================================================================== Md5 : Sha1 : B: BootStart, S: SystemStart, A: AutoStart, D: KernelDriver U: UserMode, R: SystemMode, K: ServiceKey, E: Encrypted C: Compressed, L: DemandLoad, O: AutoStart Once Module deleted from instance Driver loaded from instance Driver unloaded from instance Id Version Name . . . Module unloaded for instance Module loaded at from instance Modules loaded into process from instance Read successful ( bytes) UserModuleLoader 64-Bit UserModuleLoader 32-Bit Persistence Identifier BH LoadModuleHelperDll