OTL logfile created on: 9/4/2017 2:52:44 PM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Waseem Latif\Desktop
64bit- Professional  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18763)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
11.98 Gb Total Physical Memory | 9.60 Gb Available Physical Memory | 80.14% Memory free
14.36 Gb Paging File | 11.76 Gb Available in Paging File | 81.90% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 167.68 Gb Total Space | 115.03 Gb Free Space | 68.60% Space Free | Partition Type: NTFS
Drive D: | 97.56 Gb Total Space | 96.86 Gb Free Space | 99.29% Space Free | Partition Type: NTFS
Drive E: | 135.23 Gb Total Space | 51.11 Gb Free Space | 37.80% Space Free | Partition Type: NTFS
 
Computer Name: WASEEM | User Name: Waseem Latif | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2017/09/04 14:47:19 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Waseem Latif\Desktop\OTL.exe
PRC - [2017/08/31 05:25:20 | 002,508,760 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Google Input Tools\GoogleInputHandler.exe
PRC - [2017/08/31 05:25:20 | 000,164,312 | ---- | M] (Google Inc) -- C:\Program Files (x86)\Google\Google Input Tools\GoogleInputService.exe
PRC - [2017/04/11 12:56:00 | 000,483,992 | ---- | M] (Skillbrains) -- C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.10\Lightshot.exe
PRC - [2016/12/15 18:20:22 | 004,015,216 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe
PRC - [2016/05/20 05:37:34 | 000,275,512 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
PRC - [2014/07/02 10:44:41 | 000,411,936 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2010/12/27 07:59:58 | 000,163,840 | ---- | M] () -- C:\Windows\KMService.exe
PRC - [2010/06/15 16:44:29 | 000,008,192 | ---- | M] () -- C:\Windows\SysWOW64\srvany.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2017/06/13 09:24:42 | 002,625,368 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Security\ekrn.exe -- (ekrn)
SRV:[b]64bit:[/b] - [2017/04/16 01:37:33 | 000,116,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:[b]64bit:[/b] - [2017/01/12 09:51:17 | 000,361,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
SRV:[b]64bit:[/b] - [2017/01/12 09:51:17 | 000,119,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:[b]64bit:[/b] - [2017/01/10 14:06:07 | 000,840,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:[b]64bit:[/b] - [2016/12/24 16:39:34 | 000,133,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
SRV:[b]64bit:[/b] - [2016/08/22 06:34:40 | 001,628,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
SRV:[b]64bit:[/b] - [2016/06/07 13:32:07 | 002,988,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:[b]64bit:[/b] - [2016/02/08 09:53:04 | 001,348,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
SRV:[b]64bit:[/b] - [2016/02/03 08:11:56 | 001,673,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
SRV:[b]64bit:[/b] - [2015/07/16 11:58:34 | 000,074,752 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:[b]64bit:[/b] - [2015/05/30 12:36:24 | 000,230,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:[b]64bit:[/b] - [2015/05/12 06:19:37 | 000,294,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:[b]64bit:[/b] - [2015/05/07 08:21:51 | 000,522,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GeofenceMonitorService.dll -- (lfsvc)
SRV:[b]64bit:[/b] - [2015/02/20 16:49:18 | 000,780,800 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:[b]64bit:[/b] - [2014/10/28 21:09:06 | 000,092,992 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\KeyboardFilterSvc.dll -- (MsKeyboardFilter)
SRV:[b]64bit:[/b] - [2014/10/28 20:59:51 | 003,460,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:[b]64bit:[/b] - [2014/10/28 19:42:19 | 000,026,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
SRV:[b]64bit:[/b] - [2014/10/28 19:42:03 | 000,041,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:[b]64bit:[/b] - [2014/10/28 19:34:51 | 000,067,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:[b]64bit:[/b] - [2014/10/28 19:33:55 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:[b]64bit:[/b] - [2014/10/28 19:30:35 | 000,187,904 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:[b]64bit:[/b] - [2014/10/28 19:29:22 | 000,121,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:[b]64bit:[/b] - [2014/10/28 18:57:05 | 000,324,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv)
SRV:[b]64bit:[/b] - [2014/10/28 18:48:20 | 000,166,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:[b]64bit:[/b] - [2014/10/28 18:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:[b]64bit:[/b] - [2014/10/28 18:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:[b]64bit:[/b] - [2014/10/28 18:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:[b]64bit:[/b] - [2014/10/28 18:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:[b]64bit:[/b] - [2014/10/28 18:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:[b]64bit:[/b] - [2014/10/28 18:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:[b]64bit:[/b] - [2014/10/28 18:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
SRV:[b]64bit:[/b] - [2014/10/28 18:27:21 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
SRV:[b]64bit:[/b] - [2014/10/28 18:22:40 | 000,062,464 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:[b]64bit:[/b] - [2014/10/28 18:20:03 | 000,262,656 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:[b]64bit:[/b] - [2014/10/28 18:19:20 | 000,550,912 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:[b]64bit:[/b] - [2014/10/28 18:16:17 | 000,154,112 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
SRV:[b]64bit:[/b] - [2014/10/28 18:13:24 | 000,374,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:[b]64bit:[/b] - [2014/10/28 18:13:02 | 000,260,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:[b]64bit:[/b] - [2014/10/28 18:12:36 | 000,407,040 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:[b]64bit:[/b] - [2014/10/28 18:12:22 | 000,270,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:[b]64bit:[/b] - [2014/10/28 18:11:10 | 001,639,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:[b]64bit:[/b] - [2014/10/28 18:05:09 | 000,206,848 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:[b]64bit:[/b] - [2014/10/28 17:48:52 | 000,562,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
SRV:[b]64bit:[/b] - [2014/08/19 22:15:18 | 002,683,736 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\nvwmi64.exe -- (NVWMI)
SRV - [2017/09/01 01:42:37 | 001,045,840 | ---- | M] (Flexera Software LLC.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FlexNet Licensing Service)
SRV - [2017/08/31 05:25:20 | 000,164,312 | ---- | M] (Google Inc) [Auto | Running] -- C:\Program Files (x86)\Google\Google Input Tools\GoogleInputService.exe -- (GoogleInputService)
SRV - [2017/08/30 03:12:16 | 000,369,720 | ---- | M] (BlueStack Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe -- (BstHdLogRotatorSvc)
SRV - [2016/06/07 13:32:07 | 002,988,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2015/05/07 08:05:40 | 000,367,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc)
SRV - [2014/10/28 18:51:55 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
SRV - [2014/10/28 18:04:45 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
SRV - [2014/07/02 10:44:41 | 000,411,936 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010/06/15 16:44:29 | 000,008,192 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\srvany.exe -- (KMService)
SRV - [2010/02/19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2017/07/08 13:14:22 | 000,376,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
DRV:[b]64bit:[/b] - [2017/07/08 12:10:28 | 000,220,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Vid.sys -- (Vid)
DRV:[b]64bit:[/b] - [2017/07/07 20:16:36 | 000,086,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
DRV:[b]64bit:[/b] - [2017/06/22 16:01:02 | 000,132,824 | ---- | M] (ESET) [File_System | System | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
DRV:[b]64bit:[/b] - [2017/05/15 15:09:32 | 000,057,688 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
DRV:[b]64bit:[/b] - [2017/05/04 13:18:04 | 000,178,056 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:[b]64bit:[/b] - [2017/05/04 13:18:04 | 000,107,344 | ---- | M] (ESET) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\edevmon.sys -- (edevmon)
DRV:[b]64bit:[/b] - [2017/05/04 13:18:04 | 000,077,224 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\epfwwfpr.sys -- (epfwwfpr)
DRV:[b]64bit:[/b] - [2017/05/04 13:18:04 | 000,014,880 | ---- | M] (ESET) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\eelam.sys -- (eelam)
DRV:[b]64bit:[/b] - [2017/04/09 13:37:46 | 000,129,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbusr.sys -- (vmbusr)
DRV:[b]64bit:[/b] - [2017/03/12 08:04:55 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
DRV:[b]64bit:[/b] - [2017/02/10 07:37:28 | 000,046,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
DRV:[b]64bit:[/b] - [2017/01/12 09:51:18 | 000,274,776 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
DRV:[b]64bit:[/b] - [2017/01/12 09:51:18 | 000,117,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
DRV:[b]64bit:[/b] - [2017/01/12 08:03:31 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsp.sys -- (storvsp)
DRV:[b]64bit:[/b] - [2017/01/12 08:03:20 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpcivsp.sys -- (vpcivsp)
DRV:[b]64bit:[/b] - [2017/01/11 10:28:42 | 000,422,744 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
DRV:[b]64bit:[/b] - [2016/10/17 08:35:48 | 000,223,464 | ---- | M] (Tonec Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\idmwfp.sys -- (IDMWFP)
DRV:[b]64bit:[/b] - [2016/10/12 14:11:01 | 000,922,968 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\refs.sys -- (ReFS)
DRV:[b]64bit:[/b] - [2016/01/26 12:15:40 | 000,072,024 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
DRV:[b]64bit:[/b] - [2015/10/10 23:34:30 | 000,468,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
DRV:[b]64bit:[/b] - [2015/09/29 05:24:42 | 000,155,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
DRV:[b]64bit:[/b] - [2015/04/15 23:17:07 | 000,325,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
DRV:[b]64bit:[/b] - [2015/03/19 18:56:10 | 000,080,384 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
DRV:[b]64bit:[/b] - [2015/03/12 21:03:31 | 000,239,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2015/03/08 19:02:51 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
DRV:[b]64bit:[/b] - [2014/11/10 11:06:59 | 000,136,512 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
DRV:[b]64bit:[/b] - [2014/10/28 20:57:42 | 000,054,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr)
DRV:[b]64bit:[/b] - [2014/10/28 20:56:04 | 000,027,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2014/10/28 19:46:43 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2014/10/28 19:46:09 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc63.sys -- (netvsc)
DRV:[b]64bit:[/b] - [2014/10/28 19:45:54 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:[b]64bit:[/b] - [2014/10/28 19:45:39 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
DRV:[b]64bit:[/b] - [2014/10/28 19:45:16 | 000,103,424 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
DRV:[b]64bit:[/b] - [2014/10/12 19:43:17 | 000,039,744 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
DRV:[b]64bit:[/b] - [2014/10/06 23:54:45 | 000,189,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UCX01000.SYS -- (UCX01000)
DRV:[b]64bit:[/b] - [2014/08/14 17:36:55 | 000,146,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:[b]64bit:[/b] - [2014/03/13 05:35:24 | 000,157,016 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\wof.sys -- (Wof)
DRV:[b]64bit:[/b] - [2014/02/22 08:49:49 | 000,079,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
DRV:[b]64bit:[/b] - [2013/10/25 18:54:32 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
DRV:[b]64bit:[/b] - [2013/09/29 21:14:11 | 000,175,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
DRV:[b]64bit:[/b] - [2013/09/29 20:54:38 | 000,022,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\kbldfltr.sys -- (kbldfltr)
DRV:[b]64bit:[/b] - [2013/09/29 20:54:24 | 000,037,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:[b]64bit:[/b] - [2013/08/22 06:25:40 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
DRV:[b]64bit:[/b] - [2013/08/22 06:25:40 | 000,030,048 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2013/08/22 05:50:19 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
DRV:[b]64bit:[/b] - [2013/08/22 05:49:54 | 000,079,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:49 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:48 | 000,041,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:45 | 003,357,024 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:45 | 000,093,536 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:45 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:45 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:44 | 000,081,760 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3.sys -- (LSI_SAS3)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:41 | 000,782,176 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:41 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:41 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:41 | 000,108,896 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:41 | 000,079,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:40 | 000,114,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:40 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:40 | 000,025,952 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:34 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:33 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:32 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:31 | 000,107,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:31 | 000,072,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
DRV:[b]64bit:[/b] - [2013/08/22 05:43:31 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
DRV:[b]64bit:[/b] - [2013/08/22 05:39:15 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
DRV:[b]64bit:[/b] - [2013/08/22 05:36:12 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:[b]64bit:[/b] - [2013/08/22 04:39:31 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:[b]64bit:[/b] - [2013/08/22 04:39:20 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo)
DRV:[b]64bit:[/b] - [2013/08/22 04:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
DRV:[b]64bit:[/b] - [2013/08/22 04:38:58 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
DRV:[b]64bit:[/b] - [2013/08/22 04:38:48 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
DRV:[b]64bit:[/b] - [2013/08/22 04:38:39 | 000,036,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:[b]64bit:[/b] - [2013/08/22 04:38:26 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
DRV:[b]64bit:[/b] - [2013/08/22 04:38:23 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
DRV:[b]64bit:[/b] - [2013/08/22 04:38:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
DRV:[b]64bit:[/b] - [2013/08/22 04:38:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
DRV:[b]64bit:[/b] - [2013/08/22 04:37:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
DRV:[b]64bit:[/b] - [2013/08/22 04:37:28 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2013/08/22 04:37:28 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
DRV:[b]64bit:[/b] - [2013/08/22 04:37:14 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:[b]64bit:[/b] - [2013/08/22 04:36:25 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
DRV:[b]64bit:[/b] - [2013/08/22 01:46:33 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fxppm.sys -- (FxPPM)
DRV:[b]64bit:[/b] - [2013/08/12 16:25:46 | 000,017,624 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
DRV:[b]64bit:[/b] - [2013/08/09 17:39:30 | 000,651,248 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
DRV:[b]64bit:[/b] - [2013/07/30 11:47:35 | 000,024,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
DRV:[b]64bit:[/b] - [2013/07/25 12:05:39 | 000,099,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
DRV:[b]64bit:[/b] - [2013/06/18 07:45:08 | 000,425,984 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2010/01/05 03:23:20 | 001,847,296 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athurx.sys -- (athur)
DRV - [2017/06/21 04:37:03 | 000,270,904 | ---- | M] (Bluestack System Inc. ) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\BlueStacks\BstkDrv.sys -- (BstkDrv)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-3339458376-1377831628-129463769-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = www.google.com
IE - HKU\S-1-5-21-3339458376-1377831628-129463769-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com
IE - HKU\S-1-5-21-3339458376-1377831628-129463769-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
IE - HKU\S-1-5-21-3339458376-1377831628-129463769-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-3339458376-1377831628-129463769-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
IE - HKU\S-1-5-21-3339458376-1377831628-129463769-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 85 21 A7 2C 39 22 D3 01  [binary data]
IE - HKU\S-1-5-21-3339458376-1377831628-129463769-1001\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = www.google.com
IE - HKU\S-1-5-21-3339458376-1377831628-129463769-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3339458376-1377831628-129463769-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
IE - HKU\S-1-5-21-3339458376-1377831628-129463769-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.6: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\Waseem Latif\AppData\Roaming\IDM\idmmzcc5 [2017/09/04 13:53:24 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc2@internetdownloadmanager.com: C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2016/11/16 08:36:50 | 000,030,387 | ---- | M] ()
 
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - Extension: No name found = C:\Users\Waseem Latif\AppData\Local\Google\Chrome\User Data\Default\Extensions\aailiojlhjbichheofhdpcongebcgcgm\1.98.5_0\
CHR - Extension: No name found = C:\Users\Waseem Latif\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\
CHR - Extension: No name found = C:\Users\Waseem Latif\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
CHR - Extension: No name found = C:\Users\Waseem Latif\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\
CHR - Extension: No name found = C:\Users\Waseem Latif\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
CHR - Extension: No name found = C:\Users\Waseem Latif\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\4.3.6_0\
CHR - Extension: No name found = C:\Users\Waseem Latif\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\
CHR - Extension: No name found = C:\Users\Waseem Latif\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\
CHR - Extension: No name found = C:\Users\Waseem Latif\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\3.15.0_0\
CHR - Extension: No name found = C:\Users\Waseem Latif\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkhmbddkmdggbhaaaodilponhnccicb\1.44.692_0\
CHR - Extension: No name found = C:\Users\Waseem Latif\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpcaainmfjjigeicjnlkdfajbioopjko\4.8_0\
CHR - Extension: No name found = C:\Users\Waseem Latif\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek\6.28.16_0\
CHR - Extension: No name found = C:\Users\Waseem Latif\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.3_0\
CHR - Extension: No name found = C:\Users\Waseem Latif\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
CHR - Extension: No name found = C:\Users\Waseem Latif\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\6017.605.1.4_0\
 
O1 HOSTS File: ([2017/09/01 19:10:28 | 000,000,880 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 0.0.0.0                   telemetry.malwarebytes.com
O2:[b]64bit:[/b] - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:[b]64bit:[/b] - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe ()
O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [Lightshot] C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe ()
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKU\S-1-5-21-3339458376-1377831628-129463769-1001..\Run: [AdobeBridge]  File not found
O4 - HKU\S-1-5-21-3339458376-1377831628-129463769-1001..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKU\S-1-5-21-3339458376-1377831628-129463769-1001..\Run: [uTorrent] C:\Users\Waseem Latif\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:[b]64bit:[/b] - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8:[b]64bit:[/b] - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O15:[b]64bit:[/b] - ..Trusted Domains: eset.com ([help] http in Trusted sites)
O15 - HKLM\..Trusted Domains: eset.com ([help] http in Trusted sites)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.10.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1689AED8-F890-4196-9A09-D6128330A5AE}: DhcpNameServer = 192.168.10.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1689AED8-F890-4196-9A09-D6128330A5AE}: NameServer = 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{22CB13E9-2944-439F-982F-FD75FD74E887}: DhcpNameServer = 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{22CB13E9-2944-439F-982F-FD75FD74E887}: NameServer = 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8718928D-CBEB-45EA-A621-800A9249001D}: NameServer = 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{bbed3e08-0b41-11e3-8249-806e6f6e6963}: NameServer = 8.8.8.8
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (MACHINE BootExecut)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
NetSvcs:[b]64bit:[/b] lfsvc - C:\Windows\SysNative\GeofenceMonitorService.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] wlidsvc - C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DsmSvc - C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] NcaSvc - C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] MsKeyboardFilter - C:\Windows\SysNative\KeyboardFilterSvc.dll (Microsoft Corporation)
 
CREATERESTOREPOINT
Unable to start System Restore Service. Error code 2
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2017/09/04 14:47:17 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Waseem Latif\Desktop\OTL.exe
[2017/09/04 14:23:43 | 000,000,000 | ---D | C] -- C:\FRST
[2017/09/04 14:23:22 | 002,395,648 | ---- | C] (Farbar) -- C:\Users\Waseem Latif\Desktop\FRST64.exe
[2017/09/04 14:06:19 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\Documents\PICS
[2017/09/04 13:26:57 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoMedia
[2017/09/04 00:59:52 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\Desktop\DUMP
[2017/09/02 23:57:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightshot
[2017/09/02 23:57:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Skillbrains
[2017/09/02 21:04:46 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\vlc
[2017/09/02 21:04:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2017/09/02 21:04:35 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2017/09/02 02:59:05 | 000,000,000 | ---D | C] -- C:\@RestoreQuarantine
[2017/09/02 02:50:43 | 000,000,000 | ---D | C] -- C:\ProgramData\RegRun
[2017/09/02 02:50:14 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\Documents\RegRun2
[2017/09/02 02:50:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\UnHackMe
[2017/09/01 19:38:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
[2017/09/01 19:38:00 | 000,000,000 | ---D | C] -- C:\Program Files\HitmanPro
[2017/09/01 19:20:49 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro
[2017/09/01 19:07:37 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes
[2017/09/01 19:07:08 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\Identities
[2017/09/01 18:49:21 | 000,835,576 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2017/09/01 18:49:21 | 000,177,648 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2017/09/01 18:45:38 | 000,000,000 | --SD | C] -- C:\Windows\SysNative\CompatTel
[2017/09/01 18:45:38 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appraiser
[2017/09/01 15:30:03 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\Documents\Lightshot
[2017/09/01 15:28:38 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\Obsidium
[2017/09/01 14:35:21 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\Apple Computer
[2017/09/01 01:48:30 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\Documents\Toon Boom Studio - Global Libraries 7.1
[2017/09/01 01:47:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2017/09/01 01:47:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2017/09/01 01:47:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2017/09/01 01:47:42 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\Apple
[2017/09/01 01:47:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[2017/09/01 01:47:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2017/09/01 01:47:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple
[2017/09/01 01:43:41 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\Toon Boom Animation
[2017/09/01 01:43:41 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet
[2017/09/01 01:42:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Macrovision Shared
[2017/09/01 01:37:33 | 015,158,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.UI.Xaml.dll
[2017/09/01 01:37:30 | 018,825,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.UI.Xaml.dll
[2017/09/01 01:37:29 | 000,136,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wfplwfs.sys
[2017/09/01 01:37:16 | 001,487,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppobjs.dll
[2017/09/01 01:37:15 | 003,820,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll
[2017/09/01 01:37:14 | 003,273,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll
[2017/09/01 01:37:14 | 002,635,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll
[2017/09/01 01:37:13 | 002,317,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll
[2017/09/01 01:37:10 | 000,754,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FirewallAPI.dll
[2017/09/01 01:37:10 | 000,737,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fveapi.dll
[2017/09/01 01:37:10 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tpmvsc.dll
[2017/09/01 01:37:10 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msihnd.dll
[2017/09/01 01:37:09 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll
[2017/09/01 01:37:09 | 000,413,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll
[2017/09/01 01:37:09 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msihnd.dll
[2017/09/01 01:37:08 | 000,809,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fvewiz.dll
[2017/09/01 01:37:08 | 000,359,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSetupUI.dll
[2017/09/01 01:37:08 | 000,261,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppwinob.dll
[2017/09/01 01:37:07 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LocationApi.dll
[2017/09/01 01:37:07 | 000,331,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Classpnp.sys
[2017/09/01 01:37:07 | 000,306,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Geolocation.dll
[2017/09/01 01:37:07 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\LocationApi.dll
[2017/09/01 01:37:07 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Geolocation.dll
[2017/09/01 01:37:07 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gpresult.exe
[2017/09/01 01:37:07 | 000,137,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2017/09/01 01:37:06 | 000,422,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FWPUCLNT.DLL
[2017/09/01 01:37:06 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fvecpl.dll
[2017/09/01 01:37:06 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fveapibase.dll
[2017/09/01 01:37:06 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gpresult.exe
[2017/09/01 01:37:06 | 000,107,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncryptsslp.dll
[2017/09/01 01:37:05 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\httpprxm.dll
[2017/09/01 01:37:05 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BitLockerDeviceEncryption.exe
[2017/09/01 01:37:05 | 000,091,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncryptsslp.dll
[2017/09/01 01:37:04 | 000,561,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshwfp.dll
[2017/09/01 01:37:04 | 000,272,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FWPUCLNT.DLL
[2017/09/01 01:37:04 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CscMig.dll
[2017/09/01 01:37:04 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icfupgd.dll
[2017/09/01 01:37:04 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BdeHdCfgLib.dll
[2017/09/01 01:37:04 | 000,099,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptxml.dll
[2017/09/01 01:37:03 | 000,125,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptxml.dll
[2017/09/01 01:37:03 | 000,118,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
[2017/09/01 01:37:03 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adhsvc.dll
[2017/09/01 01:37:03 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2017/09/01 01:37:02 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hbaapi.dll
[2017/09/01 01:37:02 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BdeUISrv.exe
[2017/09/01 01:37:02 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2017/09/01 01:37:02 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rfxvmt.dll
[2017/09/01 01:37:02 | 000,034,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UserAccountBroker.exe
[2017/09/01 01:37:02 | 000,030,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UserAccountBroker.exe
[2017/09/01 01:37:02 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wu.upgrade.ps.dll
[2017/09/01 01:37:00 | 000,072,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dumpfve.sys
[2017/09/01 01:37:00 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certenc.dll
[2017/09/01 01:37:00 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\crypttpmeksvc.dll
[2017/09/01 01:37:00 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
[2017/09/01 01:37:00 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wfapigp.dll
[2017/09/01 01:37:00 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2017/09/01 01:37:00 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wfapigp.dll
[2017/09/01 01:36:59 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys
[2017/09/01 01:36:59 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hbaapi.dll
[2017/09/01 01:36:59 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certenc.dll
[2017/09/01 01:36:59 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnrollCtrl.exe
[2017/09/01 01:36:59 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypttpmeksvc.dll
[2017/09/01 01:36:59 | 000,027,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys
[2017/09/01 01:36:59 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\httpprxp.dll
[2017/09/01 01:36:59 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuaext.dll
[2017/09/01 01:36:59 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gpupdate.exe
[2017/09/01 01:36:59 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\keepaliveprovider.dll
[2017/09/01 01:36:59 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2017/09/01 01:36:59 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2017/09/01 01:36:58 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BdeHdCfg.exe
[2017/09/01 01:36:58 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnrollCtrl.exe
[2017/09/01 01:36:58 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adhapi.dll
[2017/09/01 01:36:58 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gpupdate.exe
[2017/09/01 01:36:58 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2017/09/01 01:36:51 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2017/09/01 01:36:46 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BitLockerWizardElev.exe
[2017/09/01 01:36:46 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BitLockerWizard.exe
[2017/09/01 01:36:45 | 000,154,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll
[2017/09/01 01:36:45 | 000,154,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll
[2017/09/01 01:36:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2017/09/01 01:36:45 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2017/09/01 01:36:44 | 000,032,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidparse.sys
[2017/08/31 23:43:14 | 000,748,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll
[2017/08/31 23:43:11 | 000,670,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll
[2017/08/31 23:43:11 | 000,561,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll
[2017/08/31 23:43:09 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rmcast.sys
[2017/08/31 23:43:08 | 000,155,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tpm.sys
[2017/08/31 23:43:06 | 000,564,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apphelp.dll
[2017/08/31 23:43:06 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdbinst.exe
[2017/08/31 23:43:06 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sdbinst.exe
[2017/08/31 23:42:46 | 000,522,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\GeofenceMonitorService.dll
[2017/08/31 23:42:46 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\GeofenceMonitorService.dll
[2017/08/31 23:42:41 | 002,256,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmcore.dll
[2017/08/31 23:42:41 | 001,943,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dwmcore.dll
[2017/08/31 23:42:38 | 004,710,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2017/08/31 23:42:10 | 000,534,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.UI.dll
[2017/08/31 23:42:10 | 000,375,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.UI.dll
[2017/08/31 23:42:10 | 000,347,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\photowiz.dll
[2017/08/31 23:42:10 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\photowiz.dll
[2017/08/31 23:42:09 | 002,745,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
[2017/08/31 23:42:09 | 002,528,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
[2017/08/31 23:42:09 | 002,450,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVENCOD.DLL
[2017/08/31 23:42:09 | 002,334,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfcore.dll
[2017/08/31 23:42:09 | 002,324,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfcore.dll
[2017/08/31 23:42:09 | 001,877,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2adec.dll
[2017/08/31 23:42:09 | 001,484,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2adec.dll
[2017/08/31 23:42:09 | 001,288,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfnetsrc.dll
[2017/08/31 23:42:08 | 002,447,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVENCOD.DLL
[2017/08/31 23:42:08 | 001,210,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMADMOD.DLL
[2017/08/31 23:42:08 | 001,115,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfnetsrc.dll
[2017/08/31 23:42:08 | 001,037,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMADMOD.DLL
[2017/08/31 23:42:08 | 001,010,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMSPDMOD.DLL
[2017/08/31 23:42:08 | 000,850,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfnetcore.dll
[2017/08/31 23:42:08 | 000,735,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\evr.dll
[2017/08/31 23:42:08 | 000,700,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfnetcore.dll
[2017/08/31 23:42:08 | 000,584,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\evr.dll
[2017/08/31 23:42:07 | 001,798,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMALFXGFXDSP.dll
[2017/08/31 23:42:07 | 001,664,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMSPDMOE.DLL
[2017/08/31 23:42:07 | 001,411,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMSPDMOE.DLL
[2017/08/31 23:42:07 | 001,150,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMADMOE.DLL
[2017/08/31 23:42:07 | 000,914,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMADMOE.DLL
[2017/08/31 23:42:07 | 000,887,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMSPDMOD.DLL
[2017/08/31 23:42:07 | 000,743,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFWMAAEC.DLL
[2017/08/31 23:42:07 | 000,736,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVXENCD.DLL
[2017/08/31 23:42:07 | 000,644,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVXENCD.DLL
[2017/08/31 23:42:07 | 000,629,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MP4SDECD.DLL
[2017/08/31 23:42:07 | 000,557,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVSDECD.DLL
[2017/08/31 23:42:07 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll
[2017/08/31 23:42:07 | 000,492,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVSDECD.DLL
[2017/08/31 23:42:07 | 000,468,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFWMAAEC.DLL
[2017/08/31 23:42:07 | 000,463,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MP4SDECD.DLL
[2017/08/31 23:42:07 | 000,451,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVSENCD.DLL
[2017/08/31 23:42:07 | 000,402,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVSENCD.DLL
[2017/08/31 23:42:07 | 000,378,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SysFxUI.dll
[2017/08/31 23:42:07 | 000,340,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
[2017/08/31 23:42:07 | 000,299,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VIDRESZR.DLL
[2017/08/31 23:42:07 | 000,289,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ksproxy.ax
[2017/08/31 23:42:07 | 000,275,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MPG4DECD.DLL
[2017/08/31 23:42:07 | 000,274,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MP43DECD.DLL
[2017/08/31 23:42:07 | 000,272,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\portcls.sys
[2017/08/31 23:42:07 | 000,250,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MPG4DECD.DLL
[2017/08/31 23:42:07 | 000,248,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MP43DECD.DLL
[2017/08/31 23:42:07 | 000,246,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RESAMPLEDMO.DLL
[2017/08/31 23:42:07 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ksproxy.ax
[2017/08/31 23:42:07 | 000,244,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll
[2017/08/31 23:42:07 | 000,229,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RESAMPLEDMO.DLL
[2017/08/31 23:42:07 | 000,203,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\COLORCNV.DLL
[2017/08/31 23:42:07 | 000,184,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\COLORCNV.DLL
[2017/08/31 23:42:07 | 000,183,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VIDRESZR.DLL
[2017/08/31 23:42:07 | 000,116,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MP3DMOD.DLL
[2017/08/31 23:42:07 | 000,110,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfps.dll
[2017/08/31 23:42:07 | 000,099,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MP3DMOD.DLL
[2017/08/31 23:42:07 | 000,090,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\devenum.dll
[2017/08/31 23:42:07 | 000,090,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfvdsp.dll
[2017/08/31 23:42:07 | 000,081,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\devenum.dll
[2017/08/31 23:42:07 | 000,076,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfvdsp.dll
[2017/08/31 23:41:40 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntprint.dll
[2017/08/31 23:41:40 | 000,306,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntprint.dll
[2017/08/31 23:41:40 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetpp.dll
[2017/08/31 23:41:34 | 000,538,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scesrv.dll
[2017/08/31 23:41:34 | 000,393,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scesrv.dll
[2017/08/31 23:41:32 | 000,183,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuthHost.exe
[2017/08/31 23:41:30 | 000,951,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdh.dll
[2017/08/31 23:41:30 | 000,749,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdh.dll
[2017/08/31 23:41:25 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ahcache.sys
[2017/08/31 23:40:59 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.UI.Input.Inking.dll
[2017/08/31 23:40:59 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.UI.Input.Inking.dll
[2017/08/31 23:40:57 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemSettingsDatabase.dll
[2017/08/31 23:40:31 | 000,218,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rsaenh.dll
[2017/08/31 23:39:28 | 004,417,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbgeng.dll
[2017/08/31 23:39:27 | 002,985,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbgeng.dll
[2017/08/31 23:39:27 | 001,491,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbghelp.dll
[2017/08/31 23:39:27 | 001,207,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbghelp.dll
[2017/08/31 23:39:25 | 002,162,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SRH.dll
[2017/08/31 23:39:25 | 001,812,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SRH.dll
[2017/08/31 23:39:20 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWbPrxy.exe
[2017/08/31 23:36:18 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\@ByELDI
[2017/08/31 23:33:54 | 001,673,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\workfolderssvc.dll
[2017/08/31 23:33:54 | 000,787,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WorkfoldersControl.dll
[2017/08/31 23:33:54 | 000,445,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PhotoMetadataHandler.dll
[2017/08/31 23:33:54 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PhotoMetadataHandler.dll
[2017/08/31 23:33:54 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rgb9rast.dll
[2017/08/31 23:33:50 | 004,840,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SyncEngine.dll
[2017/08/31 23:33:50 | 001,154,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SkyDrive.exe
[2017/08/31 23:33:50 | 000,733,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SkyDriveTelemetry.dll
[2017/08/31 23:33:50 | 000,291,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SkyDriveShell.dll
[2017/08/31 23:33:50 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SkyDriveShell.dll
[2017/08/31 23:33:50 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winbici.dll
[2017/08/31 23:33:50 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BulkOperationHost.exe
[2017/08/31 23:29:57 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\Desktop\RDP
[2017/08/31 23:26:09 | 000,000,000 | ---D | C] -- C:\Program Files\KMSpico
[2017/08/31 23:22:45 | 000,177,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll
[2017/08/31 23:22:45 | 000,148,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll
[2017/08/31 23:22:45 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscisvif.dll
[2017/08/31 23:22:45 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscisvif.dll
[2017/08/31 23:22:45 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscproxystub.dll
[2017/08/31 23:22:45 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscproxystub.dll
[2017/08/31 23:22:21 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mtxoci.dll
[2017/08/31 23:22:21 | 000,161,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msorcl32.dll
[2017/08/31 23:22:21 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mtxoci.dll
[2017/08/31 23:20:34 | 000,072,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vpci.sys
[2017/08/31 23:20:33 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tracerpt.exe
[2017/08/31 23:20:33 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tracerpt.exe
[2017/08/31 23:20:33 | 000,360,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sechost.dll
[2017/08/31 23:20:33 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logman.exe
[2017/08/31 23:20:33 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logman.exe
[2017/08/31 23:20:33 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\typeperf.exe
[2017/08/31 23:20:33 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\relog.exe
[2017/08/31 23:20:33 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\typeperf.exe
[2017/08/31 23:20:33 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\relog.exe
[2017/08/31 23:20:33 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskperf.exe
[2017/08/31 23:20:33 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskperf.exe
[2017/08/31 23:19:31 | 000,268,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\InkEd.dll
[2017/08/31 23:19:31 | 000,230,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\InkEd.dll
[2017/08/31 23:19:04 | 000,780,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsm.dll
[2017/08/31 23:19:04 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\workerdd.dll
[2017/08/31 23:14:01 | 001,307,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
[2017/08/31 23:13:59 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WiFiDisplay.dll
[2017/08/31 23:13:58 | 000,933,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\calc.exe
[2017/08/31 23:13:58 | 000,816,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\calc.exe
[2017/08/31 23:13:57 | 000,898,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll
[2017/08/31 23:13:57 | 000,702,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll
[2017/08/31 23:13:57 | 000,532,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll
[2017/08/31 23:13:57 | 000,443,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll
[2017/08/31 23:13:57 | 000,291,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\polstore.dll
[2017/08/31 23:13:57 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cfgbkend.dll
[2017/08/31 23:13:57 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cfgbkend.dll
[2017/08/31 23:13:56 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\polstore.dll
[2017/08/31 23:13:56 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FwRemoteSvr.dll
[2017/08/31 23:13:56 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FwRemoteSvr.dll
[2017/08/31 23:13:56 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gpscript.dll
[2017/08/31 23:13:56 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gpscript.dll
[2017/08/31 23:13:56 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceSetupStatusProvider.dll
[2017/08/31 23:13:56 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DeviceSetupStatusProvider.dll
[2017/08/31 23:13:05 | 000,723,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SHCore.dll
[2017/08/31 23:13:05 | 000,560,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SHCore.dll
[2017/08/31 23:03:17 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\Diagnostics
[2017/08/31 22:52:18 | 000,468,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe
[2017/08/31 22:52:18 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe
[2017/08/31 22:52:18 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe
[2017/08/31 22:52:18 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsparse.dll
[2017/08/31 22:52:18 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dsparse.dll
[2017/08/31 22:47:59 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\storewuauth.dll
[2017/08/31 22:47:58 | 014,466,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twinui.dll
[2017/08/31 22:47:58 | 012,879,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twinui.dll
[2017/08/31 22:47:58 | 002,881,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\actxprxy.dll
[2017/08/31 22:47:58 | 002,755,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2017/08/31 22:47:58 | 002,411,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
[2017/08/31 22:47:58 | 000,133,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RestoreOptIn.exe
[2017/08/31 22:47:58 | 000,113,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RestoreOptIn.exe
[2017/08/31 22:46:25 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wincorlib.dll
[2017/08/31 22:46:21 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll
[2017/08/31 22:46:18 | 000,429,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vpnike.dll
[2017/08/31 22:46:17 | 000,713,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nshwfp.dll
[2017/08/31 22:46:17 | 000,704,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasapi32.dll
[2017/08/31 22:46:17 | 000,377,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mprddm.dll
[2017/08/31 22:46:17 | 000,360,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpclip.exe
[2017/08/31 22:46:17 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iprtrmgr.dll
[2017/08/31 22:46:17 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mprddm.dll
[2017/08/31 22:46:17 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iprtrmgr.dll
[2017/08/31 22:46:17 | 000,272,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasppp.dll
[2017/08/31 22:46:17 | 000,254,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rascustom.dll
[2017/08/31 22:46:17 | 000,197,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dssenh.dll
[2017/08/31 22:46:17 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasppp.dll
[2017/08/31 22:46:17 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasman.dll
[2017/08/31 22:46:17 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtm.dll
[2017/08/31 22:46:17 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rtm.dll
[2017/08/31 22:46:17 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iprtprio.dll
[2017/08/31 22:46:17 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iprtprio.dll
[2017/08/31 22:46:15 | 000,487,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcfgx.dll
[2017/08/31 22:46:15 | 000,393,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcfgx.dll
[2017/08/31 22:46:12 | 000,363,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ws2_32.dll
[2017/08/31 22:46:11 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemEventsBrokerServer.dll
[2017/08/31 22:46:06 | 007,032,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll
[2017/08/31 22:46:06 | 006,213,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll
[2017/08/31 22:46:06 | 001,101,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdvidcrl.dll
[2017/08/31 22:46:06 | 000,856,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdvidcrl.dll
[2017/08/31 22:46:06 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll
[2017/08/31 22:46:06 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsgqec.dll
[2017/08/31 22:46:02 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2017/08/31 22:45:08 | 000,713,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSync.dll
[2017/08/31 22:45:08 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NcdAutoSetup.dll
[2017/08/31 22:45:07 | 000,578,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinSync.dll
[2017/08/31 22:45:01 | 000,685,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll
[2017/08/31 22:45:01 | 000,160,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IPHLPAPI.DLL
[2017/08/31 22:44:42 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clfsw32.dll
[2017/08/31 22:44:42 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PCPKsp.dll
[2017/08/31 22:44:42 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clfsw32.dll
[2017/08/31 22:44:42 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PCPKsp.dll
[2017/08/31 22:44:36 | 000,086,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mrt_map.dll
[2017/08/31 22:44:36 | 000,080,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mrt_map.dll
[2017/08/31 22:44:36 | 000,028,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mrt100.dll
[2017/08/31 22:44:36 | 000,026,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mrt100.dll
[2017/08/31 22:44:15 | 000,570,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe
[2017/08/31 22:44:00 | 000,402,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2017/08/31 22:44:00 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2017/08/31 22:43:54 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shacct.dll
[2017/08/31 22:43:54 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shacct.dll
[2017/08/31 22:43:51 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\notepad.exe
[2017/08/31 22:43:48 | 000,332,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhcpl.dll
[2017/08/31 22:43:42 | 000,239,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sdbus.sys
[2017/08/31 22:43:42 | 000,154,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dumpsd.sys
[2017/08/31 22:43:35 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmsgapi.dll
[2017/08/31 22:43:35 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmsgapi.dll
[2017/08/31 22:43:32 | 000,397,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcryptprimitives.dll
[2017/08/31 22:43:32 | 000,340,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bcryptprimitives.dll
[2017/08/31 22:43:32 | 000,179,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2017/08/31 22:43:32 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2017/08/31 22:43:31 | 000,468,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBHUB3.SYS
[2017/08/31 22:43:31 | 000,443,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys
[2017/08/31 22:43:31 | 000,027,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys
[2017/08/31 22:43:28 | 000,222,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpsapi.dll
[2017/08/31 22:43:28 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dhcpsapi.dll
[2017/08/31 22:43:18 | 001,249,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAutomationCore.dll
[2017/08/31 22:43:18 | 001,018,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAutomationCore.dll
[2017/08/31 22:43:13 | 000,325,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBXHCI.SYS
[2017/08/31 22:43:13 | 000,189,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\UCX01000.SYS
[2017/08/31 22:42:55 | 000,203,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ubpm.dll
[2017/08/31 22:42:55 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usb8023.sys
[2017/08/31 22:42:52 | 000,423,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hal.dll
[2017/08/31 22:42:47 | 000,971,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSShared.dll
[2017/08/31 22:42:47 | 000,811,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSShared.dll
[2017/08/31 22:42:47 | 000,410,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\services.exe
[2017/08/31 22:42:47 | 000,274,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll
[2017/08/31 22:42:47 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
[2017/08/31 22:42:45 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\basesrv.dll
[2017/08/31 22:42:39 | 000,616,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msra.exe
[2017/08/31 22:42:39 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\racpldlg.dll
[2017/08/31 22:42:39 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\racpldlg.dll
[2017/08/31 22:42:39 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msra.exe
[2017/08/31 22:42:39 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdchange.exe
[2017/08/31 22:42:39 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sdchange.exe
[2017/08/31 22:42:35 | 001,728,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.UI.Immersive.dll
[2017/08/31 22:42:35 | 001,546,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.UI.Immersive.dll
[2017/08/31 22:42:35 | 000,275,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authz.dll
[2017/08/31 22:42:34 | 001,707,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comsvcs.dll
[2017/08/31 22:42:34 | 001,344,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comsvcs.dll
[2017/08/31 22:42:34 | 000,522,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\catsrvut.dll
[2017/08/31 22:42:34 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\catsrvut.dll
[2017/08/31 22:42:09 | 000,292,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMASF.DLL
[2017/08/31 22:42:09 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LAPRXY.DLL
[2017/08/31 22:42:09 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwmp.dll
[2017/08/31 22:42:09 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\LAPRXY.DLL
[2017/08/31 22:42:09 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwmp.dll
[2017/08/31 22:42:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdxm.ocx
[2017/08/31 22:42:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxmasf.dll
[2017/08/31 22:42:09 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdxm.ocx
[2017/08/31 22:42:09 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxmasf.dll
[2017/08/31 22:42:03 | 002,067,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdshext.dll
[2017/08/31 22:42:03 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDShServiceObj.dll
[2017/08/31 22:42:03 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDShextAutoplay.exe
[2017/08/31 22:42:03 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WPDShextAutoplay.exe
[2017/08/31 22:41:56 | 000,669,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hhctrl.ocx
[2017/08/31 22:41:56 | 000,536,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hhctrl.ocx
[2017/08/31 22:41:56 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hhsetup.dll
[2017/08/31 22:41:56 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hhsetup.dll
[2017/08/31 22:41:56 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hh.exe
[2017/08/31 22:41:53 | 001,555,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appraiser.dll
[2017/08/31 22:41:53 | 000,620,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\generaltel.dll
[2017/08/31 22:41:53 | 000,535,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\devinv.dll
[2017/08/31 22:41:53 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\invagent.dll
[2017/08/31 22:41:53 | 000,311,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\centel.dll
[2017/08/31 22:41:53 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepic.dll
[2017/08/31 22:41:53 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acmigration.dll
[2017/08/31 22:41:53 | 000,103,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CompatTelRunner.exe
[2017/08/31 22:41:52 | 001,206,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
[2017/08/31 22:41:52 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pcadm.dll
[2017/08/31 22:41:52 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pcalua.exe
[2017/08/31 22:41:48 | 003,084,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msftedit.dll
[2017/08/31 22:41:48 | 002,471,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msftedit.dll
[2017/08/31 22:41:48 | 000,653,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll
[2017/08/31 22:41:39 | 000,360,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncsi.dll
[2017/08/31 22:41:25 | 000,603,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfds.dll
[2017/08/31 22:41:25 | 000,483,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfds.dll
[2017/08/31 22:41:12 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tzsync.exe
[2017/08/31 22:40:55 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StorageContextHandler.dll
[2017/08/31 22:40:55 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\StorageContextHandler.dll
[2017/08/31 22:40:46 | 001,156,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanmm.dll
[2017/08/31 22:40:46 | 000,627,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pnidui.dll
[2017/08/31 22:40:46 | 000,455,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanconn.dll
[2017/08/31 22:40:46 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wwanpref.dll
[2017/08/31 22:40:29 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.ApplicationModel.Store.dll
[2017/08/31 22:40:29 | 000,223,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.ApplicationModel.Store.dll
[2017/08/31 22:40:29 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidpolicyconverter.exe
[2017/08/31 22:40:29 | 000,074,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidapi.dll
[2017/08/31 22:40:29 | 000,065,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appidapi.dll
[2017/08/31 22:40:29 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidcertstorecheck.exe
[2017/08/31 22:40:28 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSCollect.exe
[2017/08/31 22:40:28 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSReset.exe
[2017/08/31 22:40:23 | 001,090,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MrmCoreR.dll
[2017/08/31 22:40:23 | 000,791,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MrmCoreR.dll
[2017/08/31 22:40:23 | 000,039,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\intelpep.sys
[2017/08/31 22:40:18 | 004,298,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_47.dll
[2017/08/31 22:40:18 | 003,551,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_47.dll
[2017/08/31 22:40:18 | 001,488,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42u.dll
[2017/08/31 22:40:18 | 001,230,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42u.dll
[2017/08/31 22:40:18 | 001,204,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42.dll
[2017/08/31 22:40:18 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\atlthunk.dll
[2017/08/31 22:40:18 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\atlthunk.dll
[2017/08/31 22:40:17 | 001,464,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42.dll
[2017/08/31 22:40:17 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eappcfg.dll
[2017/08/31 22:40:17 | 000,339,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eapphost.dll
[2017/08/31 22:40:17 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eapp3hst.dll
[2017/08/31 22:40:17 | 000,278,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eappcfg.dll
[2017/08/31 22:40:17 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eapphost.dll
[2017/08/31 22:40:17 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eapp3hst.dll
[2017/08/31 22:40:17 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eappgnui.dll
[2017/08/31 22:40:17 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eappgnui.dll
[2017/08/31 22:40:17 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eappprxy.dll
[2017/08/31 22:40:17 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eappprxy.dll
[2017/08/31 22:40:10 | 000,046,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LockScreenContentServer.exe
[2017/08/31 22:02:40 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\ESET
[2017/08/31 21:54:25 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\ESET
[2017/08/31 21:36:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
[2017/08/31 21:36:35 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
[2017/08/31 21:36:35 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2017/08/31 21:30:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Windows Audit Service Update
[2017/08/31 21:24:41 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\Systemrc
[2017/08/31 21:24:39 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\CasinoX
[2017/08/31 21:21:37 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\Temp
[2017/08/31 21:20:45 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2017/08/31 21:20:25 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2017/08/31 21:03:35 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\CrashDumps
[2017/08/31 20:57:09 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\CEF
[2017/08/31 20:56:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BlueStacks
[2017/08/31 20:56:27 | 000,000,000 | ---D | C] -- C:\ProgramData\BlueStacks
[2017/08/31 20:56:24 | 000,000,000 | ---D | C] -- C:\ProgramData\BlueStacksSetup
[2017/08/31 20:56:19 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\Bluestacks
[2017/08/31 14:47:21 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2017/08/31 14:45:55 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2017/08/31 13:48:56 | 000,000,000 | -HSD | C] -- C:\Recovery
[2017/08/31 13:48:45 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2017/08/31 12:38:57 | 001,015,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Media.dll
[2017/08/31 12:38:57 | 000,801,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfplat.dll
[2017/08/31 12:38:57 | 000,544,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll
[2017/08/31 12:38:53 | 009,530,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.UI.Search.dll
[2017/08/31 12:38:52 | 001,337,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Media.dll
[2017/08/31 12:38:52 | 000,962,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfplat.dll
[2017/08/31 12:38:52 | 000,843,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uDWM.dll
[2017/08/31 12:38:52 | 000,125,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmapi.dll
[2017/08/31 12:38:50 | 001,275,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFolder.dll
[2017/08/31 12:38:47 | 006,386,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.UI.Search.dll
[2017/08/31 12:38:30 | 000,887,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFMediaEngine.dll
[2017/08/31 12:38:15 | 003,460,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSService.dll
[2017/08/31 12:38:10 | 003,307,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll
[2017/08/31 12:38:08 | 001,028,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFMediaEngine.dll
[2017/08/31 12:38:03 | 004,483,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIRibbon.dll
[2017/08/31 12:38:03 | 002,890,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll
[2017/08/31 12:37:59 | 004,690,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xpsrchvw.exe
[2017/08/31 12:37:59 | 000,941,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsFilt.dll
[2017/08/31 12:37:57 | 003,138,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVCORE.DLL
[2017/08/31 12:37:55 | 003,561,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIRibbon.dll
[2017/08/31 12:37:53 | 003,056,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xpsservices.dll
[2017/08/31 12:37:52 | 003,118,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WpcMon.exe
[2017/08/31 12:37:51 | 000,165,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpinput.exe
[2017/08/31 12:37:50 | 001,286,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSAudDecMFT.dll
[2017/08/31 12:37:48 | 003,256,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wpc.dll
[2017/08/31 12:37:47 | 002,941,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WpcWebSync.dll
[2017/08/31 12:37:44 | 002,924,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmcndmgr.dll
[2017/08/31 12:37:40 | 002,229,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d9.dll
[2017/08/31 12:37:38 | 001,024,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSAudDecMFT.dll
[2017/08/31 12:37:37 | 001,822,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dui70.dll
[2017/08/31 12:37:36 | 002,072,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OpcServices.dll
[2017/08/31 12:37:35 | 001,919,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2017/08/31 12:37:35 | 001,509,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll
[2017/08/31 12:37:31 | 001,639,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlidsvc.dll
[2017/08/31 12:37:31 | 001,165,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfasfsrcsnk.dll
[2017/08/31 12:37:30 | 000,785,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\blackbox.dll
[2017/08/31 12:37:27 | 002,469,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Wpc.dll
[2017/08/31 12:37:27 | 001,816,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll
[2017/08/31 12:37:26 | 002,364,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcndmgr.dll
[2017/08/31 12:37:26 | 001,461,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dui70.dll
[2017/08/31 12:37:25 | 000,945,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PeerDistCacheProvider.dll
[2017/08/31 12:37:24 | 001,543,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webservices.dll
[2017/08/31 12:37:21 | 000,366,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MDEServer.exe
[2017/08/31 12:37:20 | 003,553,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xpsrchvw.exe
[2017/08/31 12:37:19 | 002,003,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmc.exe
[2017/08/31 12:37:18 | 002,880,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpccpl.dll
[2017/08/31 12:37:18 | 002,464,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2017/08/31 12:37:18 | 001,518,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winmde.dll
[2017/08/31 12:37:16 | 001,540,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diagperf.dll
[2017/08/31 12:37:15 | 001,064,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drmv2clt.dll
[2017/08/31 12:37:14 | 000,959,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfasfsrcsnk.dll
[2017/08/31 12:37:13 | 001,502,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xpssvcs.dll
[2017/08/31 12:37:13 | 000,988,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfsrcsnk.dll
[2017/08/31 12:37:12 | 002,104,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xpsservices.dll
[2017/08/31 12:37:12 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sbe.dll
[2017/08/31 12:37:12 | 000,618,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\blackbox.dll
[2017/08/31 12:37:11 | 001,178,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webservices.dll
[2017/08/31 12:37:10 | 001,289,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMNetMgr.dll
[2017/08/31 12:37:09 | 003,724,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSAT.exe
[2017/08/31 12:37:08 | 001,402,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OpcServices.dll
[2017/08/31 12:37:07 | 001,321,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winmde.dll
[2017/08/31 12:37:07 | 000,857,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfsrcsnk.dll
[2017/08/31 12:37:07 | 000,821,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfmpeg2srcsnk.dll
[2017/08/31 12:37:06 | 001,843,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPDMC.exe
[2017/08/31 12:37:05 | 000,971,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqlceqp40.dll
[2017/08/31 12:37:02 | 000,890,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drmv2clt.dll
[2017/08/31 12:37:01 | 001,576,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\propsys.dll
[2017/08/31 12:37:01 | 001,563,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmc.exe
[2017/08/31 12:37:01 | 001,192,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxtheme.dll
[2017/08/31 12:37:00 | 001,710,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdtctm.dll
[2017/08/31 12:36:59 | 001,358,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srmclient.dll
[2017/08/31 12:36:59 | 001,248,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NaturalLanguage6.dll
[2017/08/31 12:36:59 | 001,056,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WebcamUi.dll
[2017/08/31 12:36:58 | 001,247,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Web.Http.dll
[2017/08/31 12:36:58 | 001,001,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.dll
[2017/08/31 12:36:56 | 001,478,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPDMC.exe
[2017/08/31 12:36:56 | 000,705,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfmpeg2srcsnk.dll
[2017/08/31 12:36:55 | 001,636,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RacEngn.dll
[2017/08/31 12:36:55 | 000,829,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sbe.dll
[2017/08/31 12:36:54 | 001,092,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll
[2017/08/31 12:36:54 | 001,050,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMNetMgr.dll
[2017/08/31 12:36:53 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WorkFoldersShell.dll
[2017/08/31 12:36:52 | 000,742,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqlceqp40.dll
[2017/08/31 12:36:52 | 000,634,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll
[2017/08/31 12:36:52 | 000,580,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmdev.dll
[2017/08/31 12:36:51 | 001,246,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ogldrv.dll
[2017/08/31 12:36:50 | 006,692,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mspaint.exe
[2017/08/31 12:36:50 | 000,881,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\printfilterpipelinesvc.exe
[2017/08/31 12:36:50 | 000,724,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WWAHost.exe
[2017/08/31 12:36:49 | 001,265,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RacEngn.dll
[2017/08/31 12:36:49 | 000,685,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\riched20.dll
[2017/08/31 12:36:48 | 000,772,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MrmIndexer.dll
[2017/08/31 12:36:46 | 001,396,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2017/08/31 12:36:46 | 000,881,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WebcamUi.dll
[2017/08/31 12:36:46 | 000,771,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbc32.dll
[2017/08/31 12:36:46 | 000,645,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msTextPrediction.dll
[2017/08/31 12:36:45 | 001,262,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2017/08/31 12:36:45 | 000,658,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\duser.dll
[2017/08/31 12:36:45 | 000,626,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WWAHost.exe
[2017/08/31 12:36:43 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSMPEG2ENC.DLL
[2017/08/31 12:36:42 | 000,848,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll
[2017/08/31 12:36:42 | 000,740,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Security.Authentication.OnlineId.dll
[2017/08/31 12:36:41 | 001,497,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RecoveryDrive.exe
[2017/08/31 12:36:41 | 000,801,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twinapi.dll
[2017/08/31 12:36:40 | 000,717,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comdlg32.dll
[2017/08/31 12:36:40 | 000,551,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll
[2017/08/31 12:36:39 | 001,096,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ogldrv.dll
[2017/08/31 12:36:39 | 001,065,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d8.dll
[2017/08/31 12:36:38 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceApi.dll
[2017/08/31 12:36:38 | 000,482,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmdev.dll
[2017/08/31 12:36:38 | 000,478,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcupdate_GenuineIntel.dll
[2017/08/31 12:36:37 | 000,873,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\provcore.dll
[2017/08/31 12:36:37 | 000,643,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twinapi.appcore.dll
[2017/08/31 12:36:36 | 006,465,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mspaint.exe
[2017/08/31 12:36:36 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WavDest.dll
[2017/08/31 12:36:35 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PurchaseWindowsLicense.dll
[2017/08/31 12:36:35 | 000,458,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmnet.dll
[2017/08/31 12:36:34 | 001,574,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vssapi.dll
[2017/08/31 12:36:34 | 001,103,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Taskmgr.exe
[2017/08/31 12:36:34 | 001,070,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMPEG2ENC.DLL
[2017/08/31 12:36:34 | 000,854,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll
[2017/08/31 12:36:33 | 001,239,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Taskmgr.exe
[2017/08/31 12:36:33 | 000,730,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clbcatq.dll
[2017/08/31 12:36:32 | 000,672,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbc32.dll
[2017/08/31 12:36:32 | 000,654,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twinapi.dll
[2017/08/31 12:36:32 | 000,602,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MrmIndexer.dll
[2017/08/31 12:36:31 | 001,145,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perftrack.dll
[2017/08/31 12:36:31 | 000,858,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comuid.dll
[2017/08/31 12:36:31 | 000,562,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppReadiness.dll
[2017/08/31 12:36:31 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Shell.Search.UriHandler.dll
[2017/08/31 12:36:30 | 000,899,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFx.dll
[2017/08/31 12:36:30 | 000,827,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Web.Http.dll
[2017/08/31 12:36:30 | 000,654,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comuid.dll
[2017/08/31 12:36:30 | 000,609,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmsdk.dll
[2017/08/31 12:36:30 | 000,606,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpncore.dll
[2017/08/31 12:36:29 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.SmartCards.dll
[2017/08/31 12:36:29 | 000,734,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSWB70804.dll
[2017/08/31 12:36:29 | 000,734,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSWB70404.dll
[2017/08/31 12:36:29 | 000,734,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSWB7001E.dll
[2017/08/31 12:36:29 | 000,734,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSWB70011.dll
[2017/08/31 12:36:28 | 000,799,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqlsrv32.dll
[2017/08/31 12:36:28 | 000,444,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MMDevAPI.dll
[2017/08/31 12:36:27 | 000,982,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xpssvcs.dll
[2017/08/31 12:36:26 | 001,950,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setupapi.dll
[2017/08/31 12:36:26 | 000,546,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqlcese40.dll
[2017/08/31 12:36:26 | 000,409,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll
[2017/08/31 12:36:25 | 001,207,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\printui.dll
[2017/08/31 12:36:25 | 000,967,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\srmclient.dll
[2017/08/31 12:36:24 | 001,085,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\printui.dll
[2017/08/31 12:36:24 | 000,711,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqlsrv32.dll
[2017/08/31 12:36:24 | 000,642,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MDMAgent.exe
[2017/08/31 12:36:24 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mdmregistration.dll
[2017/08/31 12:36:23 | 000,980,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imapi2fs.dll
[2017/08/31 12:36:23 | 000,636,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFx02000.dll
[2017/08/31 12:36:23 | 000,492,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twinapi.appcore.dll
[2017/08/31 12:36:23 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmnet.dll
[2017/08/31 12:36:22 | 001,037,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWorkspace.dll
[2017/08/31 12:36:22 | 000,632,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisdecd.dll
[2017/08/31 12:36:22 | 000,529,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.BackgroundTransfer.ContentPrefetchTask.dll
[2017/08/31 12:36:22 | 000,379,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dcomp.dll
[2017/08/31 12:36:21 | 000,783,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Web.dll
[2017/08/31 12:36:21 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmsdk.dll
[2017/08/31 12:36:20 | 001,252,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\werconcpl.dll
[2017/08/31 12:36:20 | 000,620,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsound.dll
[2017/08/31 12:36:20 | 000,589,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Security.Authentication.OnlineId.dll
[2017/08/31 12:36:19 | 002,764,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gameux.dll
[2017/08/31 12:36:19 | 000,784,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpksetup.exe
[2017/08/31 12:36:19 | 000,608,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.BackgroundTransfer.dll
[2017/08/31 12:36:18 | 007,558,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NL7Data0011.dll
[2017/08/31 12:36:18 | 000,649,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.dll
[2017/08/31 12:36:17 | 000,781,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlidcli.dll
[2017/08/31 12:36:17 | 000,394,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AUDIOKSE.dll
[2017/08/31 12:36:17 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll
[2017/08/31 12:36:17 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll
[2017/08/31 12:36:16 | 002,236,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certmgr.dll
[2017/08/31 12:36:16 | 001,309,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2017/08/31 12:36:16 | 000,433,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqlcese40.dll
[2017/08/31 12:36:15 | 001,091,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\opengl32.dll
[2017/08/31 12:36:15 | 000,761,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imapi2fs.dll
[2017/08/31 12:36:15 | 000,610,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sxs.dll
[2017/08/31 12:36:14 | 002,334,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SyncCenter.dll
[2017/08/31 12:36:14 | 001,054,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2017/08/31 12:36:14 | 000,405,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll
[2017/08/31 12:36:13 | 000,550,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netprofmsvc.dll
[2017/08/31 12:36:12 | 002,597,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gameux.dll
[2017/08/31 12:36:12 | 000,500,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioSes.dll
[2017/08/31 12:36:12 | 000,488,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpeffects.dll
[2017/08/31 12:36:12 | 000,468,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2017/08/31 12:36:12 | 000,208,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsRasterService.dll
[2017/08/31 12:36:11 | 000,688,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Bluetooth.dll
[2017/08/31 12:36:11 | 000,512,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisdecd.dll
[2017/08/31 12:36:10 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiaaut.dll
[2017/08/31 12:36:10 | 000,657,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srmscan.dll
[2017/08/31 12:36:08 | 000,432,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscp.dll
[2017/08/31 12:36:08 | 000,344,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AUDIOKSE.dll
[2017/08/31 12:36:07 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmartCardSimulator.dll
[2017/08/31 12:36:07 | 000,543,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hnetcfg.dll
[2017/08/31 12:36:07 | 000,435,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mswmdm.dll
[2017/08/31 12:36:06 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSAC3ENC.DLL
[2017/08/31 12:36:05 | 001,984,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certmgr.dll
[2017/08/31 12:36:05 | 000,777,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\opengl32.dll
[2017/08/31 12:36:05 | 000,565,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Web.dll
[2017/08/31 12:36:05 | 000,524,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSWB70011.dll
[2017/08/31 12:36:05 | 000,390,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\difxapi.dll
[2017/08/31 12:36:04 | 002,829,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netshell.dll
[2017/08/31 12:36:04 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ddraw.dll
[2017/08/31 12:36:04 | 000,524,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSWB70804.dll
[2017/08/31 12:36:04 | 000,524,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSWB70404.dll
[2017/08/31 12:36:04 | 000,524,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSWB7001E.dll
[2017/08/31 12:36:03 | 002,213,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SyncCenter.dll
[2017/08/31 12:36:03 | 001,038,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aclui.dll
[2017/08/31 12:36:03 | 000,664,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MsSpellCheckingFacility.dll
[2017/08/31 12:36:03 | 000,662,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DMRServer.exe
[2017/08/31 12:36:03 | 000,430,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wevtapi.dll
[2017/08/31 12:36:03 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleacc.dll
[2017/08/31 12:36:02 | 004,621,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0414.dll
[2017/08/31 12:36:02 | 004,620,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0816.dll
[2017/08/31 12:36:02 | 004,616,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0416.dll
[2017/08/31 12:36:02 | 004,616,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData001d.dll
[2017/08/31 12:36:01 | 004,621,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0010.dll
[2017/08/31 12:36:01 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\catsrv.dll
[2017/08/31 12:36:01 | 000,463,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Usb.dll
[2017/08/31 12:36:00 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe
[2017/08/31 12:36:00 | 000,591,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.Connectivity.dll
[2017/08/31 12:36:00 | 000,524,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppxApplicabilityEngine.dll
[2017/08/31 12:36:00 | 000,517,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wbemcomn.dll
[2017/08/31 12:35:59 | 000,563,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdohlp.dll
[2017/08/31 12:35:58 | 002,902,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll
[2017/08/31 12:35:58 | 001,058,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gpedit.dll
[2017/08/31 12:35:58 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll
[2017/08/31 12:35:58 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll
[2017/08/31 12:35:57 | 000,995,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tapi3.dll
[2017/08/31 12:35:57 | 000,546,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.PointOfService.dll
[2017/08/31 12:35:57 | 000,442,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Networking.BackgroundTransfer.dll
[2017/08/31 12:35:57 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSAC3ENC.DLL
[2017/08/31 12:35:56 | 000,687,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscui.dll
[2017/08/31 12:35:56 | 000,591,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Graphics.Printing.dll
[2017/08/31 12:35:56 | 000,569,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe
[2017/08/31 12:35:56 | 000,557,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ipsmsnap.dll
[2017/08/31 12:35:56 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mswmdm.dll
[2017/08/31 12:35:55 | 000,652,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSCOMEX.dll
[2017/08/31 12:35:55 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlidprov.dll
[2017/08/31 12:35:55 | 000,404,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SyncInfrastructure.dll
[2017/08/31 12:35:55 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax
[2017/08/31 12:35:54 | 002,848,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themeui.dll
[2017/08/31 12:35:54 | 000,809,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TSWorkspace.dll
[2017/08/31 12:35:54 | 000,470,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Networking.dll
[2017/08/31 12:35:54 | 000,454,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hnetcfg.dll
[2017/08/31 12:35:54 | 000,401,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\catsrv.dll
[2017/08/31 12:35:53 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.SmartCards.dll
[2017/08/31 12:35:52 | 000,725,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpeffects.dll
[2017/08/31 12:35:52 | 000,547,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imapi2.dll
[2017/08/31 12:35:52 | 000,426,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsmf.dll
[2017/08/31 12:35:52 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\upnp.dll
[2017/08/31 12:35:51 | 002,140,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0007.dll
[2017/08/31 12:35:51 | 000,943,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WFS.exe
[2017/08/31 12:35:51 | 000,573,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdrm.dll
[2017/08/31 12:35:50 | 002,480,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData000d.dll
[2017/08/31 12:35:50 | 001,861,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Display.dll
[2017/08/31 12:35:50 | 000,589,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PhotoScreensaver.scr
[2017/08/31 12:35:49 | 006,259,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0009.dll
[2017/08/31 12:35:49 | 000,902,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\aclui.dll
[2017/08/31 12:35:49 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BCP47Langs.dll
[2017/08/31 12:35:49 | 000,356,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFCaptureEngine.dll
[2017/08/31 12:35:48 | 002,714,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netshell.dll
[2017/08/31 12:35:48 | 000,809,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgent.dll
[2017/08/31 12:35:48 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReInfo.dll
[2017/08/31 12:35:47 | 000,872,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tapi3.dll
[2017/08/31 12:35:47 | 000,585,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PrintDialogs.dll
[2017/08/31 12:35:47 | 000,479,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StikyNot.exe
[2017/08/31 12:35:46 | 001,106,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gpedit.dll
[2017/08/31 12:35:46 | 000,920,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\azroles.dll
[2017/08/31 12:35:45 | 001,335,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsecedit.dll
[2017/08/31 12:35:45 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\provcore.dll
[2017/08/31 12:35:45 | 000,430,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Networking.Connectivity.dll
[2017/08/31 12:35:44 | 000,569,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppxPackaging.dll
[2017/08/31 12:35:44 | 000,254,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2017/08/31 12:35:44 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DscCore.dll
[2017/08/31 12:35:43 | 000,633,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UserLanguagesCpl.dll
[2017/08/31 12:35:43 | 000,579,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wiaaut.dll
[2017/08/31 12:35:43 | 000,562,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe
[2017/08/31 12:35:43 | 000,451,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Graphics.Printing.dll
[2017/08/31 12:35:43 | 000,349,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscp.dll
[2017/08/31 12:35:43 | 000,272,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\audiodg.exe
[2017/08/31 12:35:42 | 009,732,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData000a.dll
[2017/08/31 12:35:42 | 002,403,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData000c.dll
[2017/08/31 12:35:41 | 001,479,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsecedit.dll
[2017/08/31 12:35:41 | 000,420,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AppxApplicabilityEngine.dll
[2017/08/31 12:35:41 | 000,393,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ninput.dll
[2017/08/31 12:35:40 | 002,329,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NL7Data0404.dll
[2017/08/31 12:35:40 | 001,242,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll
[2017/08/31 12:35:40 | 001,171,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstsc.exe
[2017/08/31 12:35:40 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\upnp.dll
[2017/08/31 12:35:40 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\offfilt.dll
[2017/08/31 12:35:39 | 001,086,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstsc.exe
[2017/08/31 12:35:39 | 000,680,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\objsel.dll
[2017/08/31 12:35:39 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax
[2017/08/31 12:35:38 | 007,331,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NL7Data0011.dll
[2017/08/31 12:35:38 | 000,360,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.Proximity.dll
[2017/08/31 12:35:38 | 000,320,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFCaptureEngine.dll
[2017/08/31 12:35:37 | 000,548,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\glmf32.dll
[2017/08/31 12:35:37 | 000,543,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe
[2017/08/31 12:35:37 | 000,439,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ipsmsnap.dll
[2017/08/31 12:35:37 | 000,251,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dcomp.dll
[2017/08/31 12:35:36 | 003,438,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NL7Data0804.dll
[2017/08/31 12:35:36 | 001,826,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Display.dll
[2017/08/31 12:35:36 | 000,286,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll
[2017/08/31 12:35:35 | 000,520,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WWanAPI.dll
[2017/08/31 12:35:35 | 000,320,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wevtapi.dll
[2017/08/31 12:35:34 | 000,582,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AdmTmpl.dll
[2017/08/31 12:35:34 | 000,464,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Bluetooth.dll
[2017/08/31 12:35:34 | 000,280,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpencom.dll
[2017/08/31 12:35:34 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winsku.dll
[2017/08/31 12:35:34 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Shell.Search.UriHandler.dll
[2017/08/31 12:35:33 | 000,981,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdt.exe
[2017/08/31 12:35:33 | 000,887,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dim700.dll
[2017/08/31 12:35:33 | 000,794,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\azroles.dll
[2017/08/31 12:35:33 | 000,287,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qasf.dll
[2017/08/31 12:35:32 | 001,008,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\reseteng.dll
[2017/08/31 12:35:32 | 000,795,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasdlg.dll
[2017/08/31 12:35:32 | 000,453,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\azroleui.dll
[2017/08/31 12:35:31 | 000,497,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AppxPackaging.dll
[2017/08/31 12:35:31 | 000,442,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imapi2.dll
[2017/08/31 12:35:31 | 000,374,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wcmsvc.dll
[2017/08/31 12:35:31 | 000,367,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDSp.dll
[2017/08/31 12:35:31 | 000,256,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Media.MediaControl.dll
[2017/08/31 12:35:30 | 000,521,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll
[2017/08/31 12:35:30 | 000,367,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsmf.dll
[2017/08/31 12:35:30 | 000,359,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsta.dll
[2017/08/31 12:35:30 | 000,311,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFPlay.dll
[2017/08/31 12:35:29 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PhotoScreensaver.scr
[2017/08/31 12:35:29 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WLanConn.dll
[2017/08/31 12:35:29 | 000,430,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSCOMPOSE.dll
[2017/08/31 12:35:29 | 000,228,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax
[2017/08/31 12:35:28 | 000,621,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsFilt.dll
[2017/08/31 12:35:28 | 000,587,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\filemgmt.dll
[2017/08/31 12:35:28 | 000,374,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WmpDui.dll
[2017/08/31 12:35:28 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\framedynos.dll
[2017/08/31 12:35:28 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TetheringMgr.dll
[2017/08/31 12:35:27 | 001,241,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PeerDistSh.dll
[2017/08/31 12:35:27 | 000,508,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll
[2017/08/31 12:35:27 | 000,499,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdelta.dll
[2017/08/31 12:35:27 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PeerDistCleaner.dll
[2017/08/31 12:35:27 | 000,422,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\efscore.dll
[2017/08/31 12:35:26 | 000,963,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasgcw.dll
[2017/08/31 12:35:26 | 000,560,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wimgapi.dll
[2017/08/31 12:35:26 | 000,408,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DfpCommon.dll
[2017/08/31 12:35:25 | 002,075,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0027.dll
[2017/08/31 12:35:25 | 002,073,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0026.dll
[2017/08/31 12:35:25 | 002,073,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0024.dll
[2017/08/31 12:35:25 | 002,073,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData001b.dll
[2017/08/31 12:35:25 | 002,073,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0018.dll
[2017/08/31 12:35:25 | 002,073,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData000f.dll
[2017/08/31 12:35:25 | 002,073,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0003.dll
[2017/08/31 12:35:25 | 002,073,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0002.dll
[2017/08/31 12:35:24 | 002,073,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0c1a.dll
[2017/08/31 12:35:24 | 002,073,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData081a.dll
[2017/08/31 12:35:24 | 002,073,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData001a.dll
[2017/08/31 12:35:24 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll
[2017/08/31 12:35:24 | 000,350,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncryptprov.dll
[2017/08/31 12:35:24 | 000,332,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsku.dll
[2017/08/31 12:35:23 | 003,235,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0039.dll
[2017/08/31 12:35:23 | 003,209,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0047.dll
[2017/08/31 12:35:23 | 003,209,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0046.dll
[2017/08/31 12:35:23 | 003,209,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0020.dll
[2017/08/31 12:35:23 | 000,482,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioEng.dll
[2017/08/31 12:35:23 | 000,225,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mftranscode.dll
[2017/08/31 12:35:22 | 003,231,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData004b.dll
[2017/08/31 12:35:22 | 003,209,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData004e.dll
[2017/08/31 12:35:22 | 003,209,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData004c.dll
[2017/08/31 12:35:22 | 003,209,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData004a.dll
[2017/08/31 12:35:22 | 003,209,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0045.dll
[2017/08/31 12:35:21 | 003,209,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0049.dll
[2017/08/31 12:35:21 | 000,687,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcrt.dll
[2017/08/31 12:35:21 | 000,476,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xwizards.dll
[2017/08/31 12:35:21 | 000,429,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sdohlp.dll
[2017/08/31 12:35:21 | 000,335,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SyncInfrastructure.dll
[2017/08/31 12:35:20 | 001,926,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0022.dll
[2017/08/31 12:35:20 | 001,904,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData003e.dll
[2017/08/31 12:35:20 | 001,904,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData002a.dll
[2017/08/31 12:35:20 | 001,904,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0021.dll
[2017/08/31 12:35:19 | 000,212,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.System.Profile.HardwareId.dll
[2017/08/31 12:35:18 | 001,041,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdt.exe
[2017/08/31 12:35:18 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PrintDialogs.dll
[2017/08/31 12:35:18 | 000,342,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskraid.exe
[2017/08/31 12:35:18 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdv.dll
[2017/08/31 12:35:18 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SensorsApi.dll
[2017/08/31 12:35:18 | 000,230,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xmllite.dll
[2017/08/31 12:35:18 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfdvdec.dll
[2017/08/31 12:35:17 | 000,856,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasgcw.dll
[2017/08/31 12:35:17 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netdiagfx.dll
[2017/08/31 12:35:16 | 002,036,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0007.dll
[2017/08/31 12:35:16 | 001,431,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DxpTaskSync.dll
[2017/08/31 12:35:16 | 000,604,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcp60.dll
[2017/08/31 12:35:16 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.PointOfService.dll
[2017/08/31 12:35:16 | 000,336,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drmmgrtn.dll
[2017/08/31 12:35:16 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax
[2017/08/31 12:35:15 | 000,960,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ReAgent.dll
[2017/08/31 12:35:15 | 000,712,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhcfg.dll
[2017/08/31 12:35:15 | 000,422,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PCPTpm12.dll
[2017/08/31 12:35:15 | 000,393,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll
[2017/08/31 12:35:15 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ninput.dll
[2017/08/31 12:35:15 | 000,204,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ReInfo.dll
[2017/08/31 12:35:15 | 000,202,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mftranscode.dll
[2017/08/31 12:35:14 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrptadm.dll
[2017/08/31 12:35:14 | 000,336,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvproc.dll
[2017/08/31 12:35:14 | 000,310,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Usb.dll
[2017/08/31 12:35:13 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prnfldr.dll
[2017/08/31 12:35:13 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TimeBrokerServer.dll
[2017/08/31 12:35:13 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\offfilt.dll
[2017/08/31 12:35:12 | 000,770,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ipsecsnp.dll
[2017/08/31 12:35:12 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\filemgmt.dll
[2017/08/31 12:35:12 | 000,431,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\termmgr.dll
[2017/08/31 12:35:11 | 000,795,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanpref.dll
[2017/08/31 12:35:11 | 000,550,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UserLanguagesCpl.dll
[2017/08/31 12:35:11 | 000,489,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dlnashext.dll
[2017/08/31 12:35:11 | 000,435,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\glmf32.dll
[2017/08/31 12:35:11 | 000,416,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sharemediacpl.dll
[2017/08/31 12:35:11 | 000,361,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlidprov.dll
[2017/08/31 12:35:11 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.Vpn.dll
[2017/08/31 12:35:10 | 000,542,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FXSCOMEX.dll
[2017/08/31 12:35:10 | 000,316,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscandui.dll
[2017/08/31 12:35:10 | 000,249,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdv.dll
[2017/08/31 12:35:10 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfdvdec.dll
[2017/08/31 12:35:09 | 000,494,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2017/08/31 12:35:09 | 000,412,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WLanConn.dll
[2017/08/31 12:35:09 | 000,371,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpnapps.dll
[2017/08/31 12:35:09 | 000,336,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\azroleui.dll
[2017/08/31 12:35:09 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncryptprov.dll
[2017/08/31 12:35:08 | 009,604,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData000a.dll
[2017/08/31 12:35:08 | 000,493,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe
[2017/08/31 12:35:08 | 000,388,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
[2017/08/31 12:35:08 | 000,349,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll
[2017/08/31 12:35:08 | 000,207,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmime.dll
[2017/08/31 12:35:07 | 000,559,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlidcli.dll
[2017/08/31 12:35:07 | 000,463,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DXP.dll
[2017/08/31 12:35:07 | 000,298,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Graphics.dll
[2017/08/31 12:35:07 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.System.Profile.HardwareId.dll
[2017/08/31 12:35:06 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AdmTmpl.dll
[2017/08/31 12:35:06 | 000,433,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\P2PGraph.dll
[2017/08/31 12:35:06 | 000,370,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.ApplicationModel.dll
[2017/08/31 12:35:06 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Networking.Proximity.dll
[2017/08/31 12:35:06 | 000,306,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFHost.exe
[2017/08/31 12:35:06 | 000,020,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CompPkgSup.dll
[2017/08/31 12:35:05 | 000,833,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\osk.exe
[2017/08/31 12:35:05 | 000,524,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icsvc.dll
[2017/08/31 12:35:05 | 000,459,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appmgr.dll
[2017/08/31 12:35:05 | 000,416,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WWanAPI.dll
[2017/08/31 12:35:05 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinSATAPI.dll
[2017/08/31 12:35:04 | 004,531,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0416.dll
[2017/08/31 12:35:04 | 004,530,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData001d.dll
[2017/08/31 12:35:04 | 004,530,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0414.dll
[2017/08/31 12:35:04 | 004,529,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0816.dll
[2017/08/31 12:35:04 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usbmon.dll
[2017/08/31 12:35:03 | 004,530,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0010.dll
[2017/08/31 12:35:03 | 001,913,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DisplaySwitch.exe
[2017/08/31 12:35:03 | 000,924,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nettrace.dll
[2017/08/31 12:35:03 | 000,401,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dim.dll
[2017/08/31 12:35:03 | 000,397,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdelta.dll
[2017/08/31 12:35:03 | 000,252,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\framedynos.dll
[2017/08/31 12:35:03 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpencom.dll
[2017/08/31 12:35:02 | 000,471,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\energy.dll
[2017/08/31 12:35:02 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscandui.dll
[2017/08/31 12:35:02 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qasf.dll
[2017/08/31 12:35:01 | 002,387,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData000d.dll
[2017/08/31 12:35:01 | 000,481,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\srmscan.dll
[2017/08/31 12:35:01 | 000,372,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\P2PGraph.dll
[2017/08/31 12:35:01 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Sensors.dll
[2017/08/31 12:35:01 | 000,260,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFPlay.dll
[2017/08/31 12:35:01 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhengine.dll
[2017/08/31 12:35:00 | 000,475,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizeng.dll
[2017/08/31 12:35:00 | 000,381,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSATAPI.dll
[2017/08/31 12:35:00 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmd.exe
[2017/08/31 12:35:00 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comsnap.dll
[2017/08/31 12:35:00 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\BCP47Langs.dll
[2017/08/31 12:34:59 | 000,846,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ipsecsnp.dll
[2017/08/31 12:34:59 | 000,387,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvproc.dll
[2017/08/31 12:34:59 | 000,339,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shlwapi.dll
[2017/08/31 12:34:59 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SensorsClassExtension.dll
[2017/08/31 12:34:58 | 000,819,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmsys.cpl
[2017/08/31 12:34:58 | 000,608,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvstore.dll
[2017/08/31 12:34:58 | 000,558,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\objsel.dll
[2017/08/31 12:34:58 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrptadm.dll
[2017/08/31 12:34:58 | 000,191,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Media.MediaControl.dll
[2017/08/31 12:34:58 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsRasterService.dll
[2017/08/31 12:34:57 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WlanMM.dll
[2017/08/31 12:34:57 | 000,399,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlangpui.dll
[2017/08/31 12:34:57 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2017/08/31 12:34:57 | 000,305,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpendp.dll
[2017/08/31 12:34:57 | 000,205,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmvdspa.dll
[2017/08/31 12:34:56 | 000,920,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FirewallControlPanel.dll
[2017/08/31 12:34:56 | 000,763,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmsys.cpl
[2017/08/31 12:34:56 | 000,273,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mbsmsapi.dll
[2017/08/31 12:34:56 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqlceoledb40.dll
[2017/08/31 12:34:55 | 002,307,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData000c.dll
[2017/08/31 12:34:55 | 000,894,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionCenter.dll
[2017/08/31 12:34:55 | 000,361,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MbaeApiPublic.dll
[2017/08/31 12:34:55 | 000,294,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bdeunlock.exe
[2017/08/31 12:34:55 | 000,284,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srmstormod.dll
[2017/08/31 12:34:54 | 000,553,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfh264enc.dll
[2017/08/31 12:34:54 | 000,497,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authfwcfg.dll
[2017/08/31 12:34:54 | 000,483,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2017/08/31 12:34:54 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe
[2017/08/31 12:34:54 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dlnashext.dll
[2017/08/31 12:34:54 | 000,274,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scecli.dll
[2017/08/31 12:34:53 | 000,480,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msutb.dll
[2017/08/31 12:34:53 | 000,378,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\termmgr.dll
[2017/08/31 12:34:53 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Dxpserver.exe
[2017/08/31 12:34:53 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\activeds.dll
[2017/08/31 12:34:53 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
[2017/08/31 12:34:53 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PackageStateRoaming.dll
[2017/08/31 12:34:53 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmredir.dll
[2017/08/31 12:34:52 | 000,865,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FirewallControlPanel.dll
[2017/08/31 12:34:52 | 000,517,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\devmgr.dll
[2017/08/31 12:34:52 | 000,477,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlangpui.dll
[2017/08/31 12:34:52 | 000,380,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwizeng.dll
[2017/08/31 12:34:52 | 000,318,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netjoin.dll
[2017/08/31 12:34:52 | 000,315,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cfgmgr32.dll
[2017/08/31 12:34:52 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppXDeploymentClient.dll
[2017/08/31 12:34:52 | 000,240,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hgprint.dll
[2017/08/31 12:34:52 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prncache.dll
[2017/08/31 12:34:51 | 000,520,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localsec.dll
[2017/08/31 12:34:51 | 000,515,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfh264enc.dll
[2017/08/31 12:34:51 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\devmgr.dll
[2017/08/31 12:34:51 | 000,279,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netjoin.dll
[2017/08/31 12:34:51 | 000,275,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wdscore.dll
[2017/08/31 12:34:51 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lltdapi.dll
[2017/08/31 12:34:50 | 000,860,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NL7Data001E.dll
[2017/08/31 12:34:50 | 000,771,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appwiz.cpl
[2017/08/31 12:34:50 | 000,423,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msutb.dll
[2017/08/31 12:34:50 | 000,397,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xwizards.dll
[2017/08/31 12:34:50 | 000,371,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appmgr.dll
[2017/08/31 12:34:50 | 000,316,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certreq.exe
[2017/08/31 12:34:49 | 001,389,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DxpTaskSync.dll
[2017/08/31 12:34:49 | 000,522,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VAN.dll
[2017/08/31 12:34:49 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WPDSp.dll
[2017/08/31 12:34:49 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppIdPolicyEngineApi.dll
[2017/08/31 12:34:49 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drmmgrtn.dll
[2017/08/31 12:34:49 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scecli.dll
[2017/08/31 12:34:48 | 002,238,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NL7Data0404.dll
[2017/08/31 12:34:48 | 000,289,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WmpDui.dll
[2017/08/31 12:34:48 | 000,246,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CryptoWinRT.dll
[2017/08/31 12:34:48 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Graphics.dll
[2017/08/31 12:34:48 | 000,224,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adsldp.dll
[2017/08/31 12:34:48 | 000,200,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SensorsApi.dll
[2017/08/31 12:34:48 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmvdspa.dll
[2017/08/31 12:34:47 | 001,906,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DisplaySwitch.exe
[2017/08/31 12:34:47 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appwiz.cpl
[2017/08/31 12:34:47 | 000,260,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vaultsvc.dll
[2017/08/31 12:34:47 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Media.SpeechSynthesis.dll
[2017/08/31 12:34:47 | 000,217,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSVideoDSP.dll
[2017/08/31 12:34:47 | 000,031,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CameraSettingsUIHost.exe
[2017/08/31 12:34:47 | 000,027,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemSettingsRemoveDevice.exe
[2017/08/31 12:34:46 | 001,305,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wcnwiz.dll
[2017/08/31 12:34:46 | 000,839,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ActionCenter.dll
[2017/08/31 12:34:46 | 000,321,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\efscore.dll
[2017/08/31 12:34:46 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dmvdsitf.dll
[2017/08/31 12:34:45 | 000,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iuilp.dll
[2017/08/31 12:34:45 | 000,364,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PCPTpm12.dll
[2017/08/31 12:34:45 | 000,331,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DaOtpCredentialProvider.dll
[2017/08/31 12:34:45 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskraid.exe
[2017/08/31 12:34:45 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\InputSwitch.dll
[2017/08/31 12:34:45 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\activeds.dll
[2017/08/31 12:34:45 | 000,205,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpchttp.dll
[2017/08/31 12:34:45 | 000,171,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\thumbcache.dll
[2017/08/31 12:34:44 | 003,355,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NL7Data0804.dll
[2017/08/31 12:34:44 | 001,170,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PeerDistSh.dll
[2017/08/31 12:34:44 | 000,774,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msctfuimanager.dll
[2017/08/31 12:34:44 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msoeacct.dll
[2017/08/31 12:34:43 | 000,957,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WlanMM.dll
[2017/08/31 12:34:43 | 000,755,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\osk.exe
[2017/08/31 12:34:43 | 000,732,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanpref.dll
[2017/08/31 12:34:43 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlidcredprov.dll
[2017/08/31 12:34:43 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdprint.dll
[2017/08/31 12:34:43 | 000,286,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wpnapps.dll
[2017/08/31 12:34:43 | 000,282,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhcat.dll
[2017/08/31 12:34:42 | 000,361,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2017/08/31 12:34:42 | 000,332,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscobj.dll
[2017/08/31 12:34:42 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sti.dll
[2017/08/31 12:34:42 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.ApplicationModel.dll
[2017/08/31 12:34:42 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Sensors.dll
[2017/08/31 12:34:41 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0c1a.dll
[2017/08/31 12:34:41 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData081a.dll
[2017/08/31 12:34:41 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData001b.dll
[2017/08/31 12:34:41 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0018.dll
[2017/08/31 12:34:41 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0003.dll
[2017/08/31 12:34:41 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0002.dll
[2017/08/31 12:34:41 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prnfldr.dll
[2017/08/31 12:34:41 | 000,309,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TtlsCfg.dll
[2017/08/31 12:34:41 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adsldp.dll
[2017/08/31 12:34:40 | 002,012,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0026.dll
[2017/08/31 12:34:40 | 002,012,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData000f.dll
[2017/08/31 12:34:40 | 001,999,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0027.dll
[2017/08/31 12:34:40 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0024.dll
[2017/08/31 12:34:40 | 001,997,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData001a.dll
[2017/08/31 12:34:40 | 000,239,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssha.dll
[2017/08/31 12:34:39 | 000,364,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authfwcfg.dll
[2017/08/31 12:34:39 | 000,347,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_8.dll
[2017/08/31 12:34:39 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmd.exe
[2017/08/31 12:34:39 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NAPMONTR.DLL
[2017/08/31 12:34:38 | 000,484,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmdial32.dll
[2017/08/31 12:34:38 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wevtutil.exe
[2017/08/31 12:34:38 | 000,214,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Storage.ApplicationData.dll
[2017/08/31 12:34:38 | 000,200,192 | ---- | C] (Windows (R) Win 7 DDK provider) -- C:\Windows\SysNative\DscCoreConfProv.dll
[2017/08/31 12:34:37 | 000,515,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceCenter.dll
[2017/08/31 12:34:37 | 000,272,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpendp.dll
[2017/08/31 12:34:37 | 000,236,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comsnap.dll
[2017/08/31 12:34:37 | 000,234,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\miutils.dll
[2017/08/31 12:34:36 | 001,364,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\connect.dll
[2017/08/31 12:34:36 | 000,565,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptui.dll
[2017/08/31 12:34:36 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdtcuiu.dll
[2017/08/31 12:34:36 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\migflt.dll
[2017/08/31 12:34:36 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WwaApi.dll
[2017/08/31 12:34:36 | 000,188,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\miutils.dll
[2017/08/31 12:34:35 | 000,292,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adsnt.dll
[2017/08/31 12:34:35 | 000,254,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.HumanInterfaceDevice.dll
[2017/08/31 12:34:35 | 000,029,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PickerHost.exe
[2017/08/31 12:34:35 | 000,018,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SlideToShutDown.exe
[2017/08/31 12:34:34 | 003,814,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\accessibilitycpl.dll
[2017/08/31 12:34:34 | 003,149,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0039.dll
[2017/08/31 12:34:34 | 000,796,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mblctr.exe
[2017/08/31 12:34:34 | 000,280,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hotspotauth.dll
[2017/08/31 12:34:34 | 000,233,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ProximityUxHost.exe
[2017/08/31 12:34:34 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dinput8.dll
[2017/08/31 12:34:33 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData004e.dll
[2017/08/31 12:34:33 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData004c.dll
[2017/08/31 12:34:33 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData004b.dll
[2017/08/31 12:34:33 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0049.dll
[2017/08/31 12:34:33 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0047.dll
[2017/08/31 12:34:33 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0045.dll
[2017/08/31 12:34:33 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0020.dll
[2017/08/31 12:34:32 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData004a.dll
[2017/08/31 12:34:32 | 003,132,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0046.dll
[2017/08/31 12:34:32 | 000,672,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wimgapi.dll
[2017/08/31 12:34:32 | 000,517,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wimserv.exe
[2017/08/31 12:34:32 | 000,370,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srchadmin.dll
[2017/08/31 12:34:32 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasmontr.dll
[2017/08/31 12:34:31 | 001,609,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsData0000.dll
[2017/08/31 12:34:31 | 000,624,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdbui.dll
[2017/08/31 12:34:31 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xwtpdui.dll
[2017/08/31 12:34:30 | 001,829,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData003e.dll
[2017/08/31 12:34:30 | 001,829,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData002a.dll
[2017/08/31 12:34:30 | 001,829,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0022.dll
[2017/08/31 12:34:30 | 001,829,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0021.dll
[2017/08/31 12:34:30 | 000,433,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wksprt.exe
[2017/08/31 12:34:30 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AppXDeploymentClient.dll
[2017/08/31 12:34:30 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PackageStateRoaming.dll
[2017/08/31 12:34:29 | 000,269,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cewmdm.dll
[2017/08/31 12:34:29 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdtcuiu.dll
[2017/08/31 12:34:29 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceTypes.dll
[2017/08/31 12:34:28 | 000,461,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VAN.dll
[2017/08/31 12:34:27 | 000,724,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msctfuimanager.dll
[2017/08/31 12:34:27 | 000,380,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshipsec.dll
[2017/08/31 12:34:27 | 000,306,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasmontr.dll
[2017/08/31 12:34:27 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cscobj.dll
[2017/08/31 12:34:27 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqlceoledb40.dll
[2017/08/31 12:34:26 | 000,302,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pcsvDevice.dll
[2017/08/31 12:34:26 | 000,289,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dmdskmgr.dll
[2017/08/31 12:34:26 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mbsmsapi.dll
[2017/08/31 12:34:25 | 000,263,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wavemsp.dll
[2017/08/31 12:34:25 | 000,234,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cewmdm.dll
[2017/08/31 12:34:25 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sbeio.dll
[2017/08/31 12:34:25 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apprepsync.dll
[2017/08/31 12:34:24 | 000,272,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\framedyn.dll
[2017/08/31 12:34:24 | 000,269,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MbaeApiPublic.dll
[2017/08/31 12:34:24 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSyncMetastore.dll
[2017/08/31 12:34:24 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PlayToManager.dll
[2017/08/31 12:34:23 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Vault.dll
[2017/08/31 12:34:23 | 000,463,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemSettings.Handlers.dll
[2017/08/31 12:34:23 | 000,178,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSSync.dll
[2017/08/31 12:34:23 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskpart.exe
[2017/08/31 12:34:22 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RADCUI.dll
[2017/08/31 12:34:22 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSDMon.dll
[2017/08/31 12:34:22 | 000,259,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fdprint.dll
[2017/08/31 12:34:22 | 000,255,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NAPMONTR.DLL
[2017/08/31 12:34:22 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srumsvc.dll
[2017/08/31 12:34:22 | 000,161,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rpchttp.dll
[2017/08/31 12:34:22 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IDStore.dll
[2017/08/31 12:34:22 | 000,142,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxva2.dll
[2017/08/31 12:34:21 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\srchadmin.dll
[2017/08/31 12:34:21 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxdiagn.dll
[2017/08/31 12:34:21 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netdiagfx.dll
[2017/08/31 12:34:21 | 000,203,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrdc.dll
[2017/08/31 12:34:21 | 000,187,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSVideoDSP.dll
[2017/08/31 12:34:20 | 001,232,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wcnwiz.dll
[2017/08/31 12:34:20 | 000,241,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqmapi.dll
[2017/08/31 12:34:20 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmdskmgr.dll
[2017/08/31 12:34:20 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmvdsitf.dll
[2017/08/31 12:34:19 | 000,317,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbcjt32.dll
[2017/08/31 12:34:19 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\resutils.dll
[2017/08/31 12:34:19 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrobj.dll
[2017/08/31 12:34:19 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VBICodec.ax
[2017/08/31 12:34:18 | 000,487,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DeviceCenter.dll
[2017/08/31 12:34:18 | 000,297,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqmapi.dll
[2017/08/31 12:34:18 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSWB7.dll
[2017/08/31 12:34:18 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Scanners.dll
[2017/08/31 12:34:18 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrobj.dll
[2017/08/31 12:34:18 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wevtutil.exe
[2017/08/31 12:34:17 | 000,879,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasdlg.dll
[2017/08/31 12:34:17 | 000,782,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NL7Data001E.dll
[2017/08/31 12:34:17 | 000,354,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adsnt.dll
[2017/08/31 12:34:17 | 000,267,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apds.dll
[2017/08/31 12:34:17 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mibincodec.dll
[2017/08/31 12:34:17 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sbeio.dll
[2017/08/31 12:34:16 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DaOtpCredentialProvider.dll
[2017/08/31 12:34:16 | 000,250,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FXSAPI.dll
[2017/08/31 12:34:16 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\framedyn.dll
[2017/08/31 12:34:16 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\riched32.dll
[2017/08/31 12:34:15 | 002,134,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SensorsCpl.dll
[2017/08/31 12:34:15 | 000,774,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TabletPC.cpl
[2017/08/31 12:34:15 | 000,309,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\provthrd.dll
[2017/08/31 12:34:15 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dinput8.dll
[2017/08/31 12:34:15 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\srumsvc.dll
[2017/08/31 12:34:15 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisrndr.ax
[2017/08/31 12:34:14 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drvstore.dll
[2017/08/31 12:34:14 | 000,475,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SnippingTool.exe
[2017/08/31 12:34:14 | 000,447,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpps.dll
[2017/08/31 12:34:14 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSCOVER.exe
[2017/08/31 12:34:14 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\InputSwitch.dll
[2017/08/31 12:34:14 | 000,201,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Enumeration.dll
[2017/08/31 12:34:14 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSClient.dll
[2017/08/31 12:34:14 | 000,164,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Storage.ApplicationData.dll
[2017/08/31 12:34:13 | 000,585,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\recimg.exe
[2017/08/31 12:34:13 | 000,414,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmdlgs.dll
[2017/08/31 12:34:13 | 000,323,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnrollUI.dll
[2017/08/31 12:34:13 | 000,224,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WpdMtp.dll
[2017/08/31 12:34:13 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wdscore.dll
[2017/08/31 12:34:13 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prntvpt.dll
[2017/08/31 12:34:12 | 003,788,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\accessibilitycpl.dll
[2017/08/31 12:34:12 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnrollUI.dll
[2017/08/31 12:34:12 | 000,211,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QSHVHOST.DLL
[2017/08/31 12:34:12 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlidcredprov.dll
[2017/08/31 12:34:12 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinSyncMetastore.dll
[2017/08/31 12:34:12 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WwaApi.dll
[2017/08/31 12:34:11 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_8.dll
[2017/08/31 12:34:11 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xwtpdui.dll
[2017/08/31 12:34:11 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmidx.dll
[2017/08/31 12:34:10 | 001,047,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DiagCpl.dll
[2017/08/31 12:34:10 | 000,831,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certca.dll
[2017/08/31 12:34:10 | 000,384,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certreq.exe
[2017/08/31 12:34:10 | 000,272,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\esentutl.exe
[2017/08/31 12:34:10 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Media.SpeechSynthesis.dll
[2017/08/31 12:34:10 | 000,161,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winmmbase.dll
[2017/08/31 12:34:09 | 000,425,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\raschap.dll
[2017/08/31 12:34:09 | 000,413,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WerFault.exe
[2017/08/31 12:34:09 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tcpmon.dll
[2017/08/31 12:34:09 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dskquoui.dll
[2017/08/31 12:34:09 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prntvpt.dll
[2017/08/31 12:34:09 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CryptoWinRT.dll
[2017/08/31 12:34:08 | 001,548,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NlsData0000.dll
[2017/08/31 12:34:08 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcorehc.dll
[2017/08/31 12:34:08 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\itircl.dll
[2017/08/31 12:34:08 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceSyncProvider.dll
[2017/08/31 12:34:08 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmidx.dll
[2017/08/31 12:34:08 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskpart.exe
[2017/08/31 12:34:08 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msnetobj.dll
[2017/08/31 12:34:07 | 000,445,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp60.dll
[2017/08/31 12:34:07 | 000,348,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\verifier.dll
[2017/08/31 12:34:07 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\itircl.dll
[2017/08/31 12:34:07 | 000,132,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RTWorkQ.dll
[2017/08/31 12:34:06 | 000,454,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\localsec.dll
[2017/08/31 12:34:06 | 000,407,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\das.dll
[2017/08/31 12:34:06 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scansetting.dll
[2017/08/31 12:34:06 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mdmregistration.dll
[2017/08/31 12:34:05 | 000,846,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Magnify.exe
[2017/08/31 12:34:05 | 000,253,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scansetting.dll
[2017/08/31 12:34:05 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\resutils.dll
[2017/08/31 12:34:05 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFPlatform.dll
[2017/08/31 12:34:05 | 000,211,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\deviceregistration.dll
[2017/08/31 12:34:05 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rascfg.dll
[2017/08/31 12:34:05 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PlayToManager.dll
[2017/08/31 12:34:05 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IDStore.dll
[2017/08/31 12:34:04 | 000,449,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shwebsvc.dll
[2017/08/31 12:34:04 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wiadefui.dll
[2017/08/31 12:34:04 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxdiagn.dll
[2017/08/31 12:34:04 | 000,236,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TtlsCfg.dll
[2017/08/31 12:34:04 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Scanners.dll
[2017/08/31 12:34:03 | 000,779,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Magnify.exe
[2017/08/31 12:34:03 | 000,347,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mtxclu.dll
[2017/08/31 12:34:03 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSClient.dll
[2017/08/31 12:34:02 | 000,363,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanui.dll
[2017/08/31 12:34:02 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mcbuilder.exe
[2017/08/31 12:34:02 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsadmin.exe
[2017/08/31 12:34:02 | 000,196,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntmarta.dll
[2017/08/31 12:34:02 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PeerDistWSDDiscoProv.dll
[2017/08/31 12:34:02 | 000,145,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabinet.dll
[2017/08/31 12:34:02 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmstyle.dll
[2017/08/31 12:34:02 | 000,017,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psapi.dll
[2017/08/31 12:34:01 | 001,207,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aitstatic.exe
[2017/08/31 12:34:01 | 000,278,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wkspbroker.exe
[2017/08/31 12:34:01 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.HumanInterfaceDevice.dll
[2017/08/31 12:34:01 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemSettings.DeviceEncryptionHandlers.dll
[2017/08/31 12:34:01 | 000,157,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fundisc.dll
[2017/08/31 12:34:01 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psmsrv.dll
[2017/08/31 12:34:01 | 000,116,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxva2.dll
[2017/08/31 12:34:01 | 000,022,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PurchaseWindowsLicense.exe
[2017/08/31 12:34:00 | 000,849,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontext.dll
[2017/08/31 12:34:00 | 000,514,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DevicePairing.dll
[2017/08/31 12:34:00 | 000,216,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SndVol.exe
[2017/08/31 12:34:00 | 000,209,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PeerDist.dll
[2017/08/31 12:34:00 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mibincodec.dll
[2017/08/31 12:33:59 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psr.exe
[2017/08/31 12:33:59 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxdiag.exe
[2017/08/31 12:33:59 | 000,203,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IdListen.dll
[2017/08/31 12:33:59 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cic.dll
[2017/08/31 12:33:59 | 000,155,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\devobj.dll
[2017/08/31 12:33:59 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CloudStorageWizard.exe
[2017/08/31 12:33:58 | 001,296,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\connect.dll
[2017/08/31 12:33:58 | 000,371,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\verifier.dll
[2017/08/31 12:33:58 | 000,333,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxdiag.exe
[2017/08/31 12:33:58 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wavemsp.dll
[2017/08/31 12:33:58 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sdiageng.dll
[2017/08/31 12:33:58 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSyncProviders.dll
[2017/08/31 12:33:58 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\biwinrt.dll
[2017/08/31 12:33:57 | 000,812,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontext.dll
[2017/08/31 12:33:57 | 000,402,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dsquery.dll
[2017/08/31 12:33:57 | 000,280,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3gpui.dll
[2017/08/31 12:33:57 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nlhtml.dll
[2017/08/31 12:33:57 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\deviceaccess.dll
[2017/08/31 12:33:57 | 000,111,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RTWorkQ.dll
[2017/08/31 12:33:56 | 000,313,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NAPSTAT.EXE
[2017/08/31 12:33:56 | 000,224,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tscfgwmi.dll
[2017/08/31 12:33:56 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdiageng.dll
[2017/08/31 12:33:56 | 000,166,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\softkbd.dll
[2017/08/31 12:33:56 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\efswrt.dll
[2017/08/31 12:33:56 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msctfui.dll
[2017/08/31 12:33:56 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Management.Workplace.WorkplaceSettings.dll
[2017/08/31 12:33:55 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcbuilder.exe
[2017/08/31 12:33:55 | 000,255,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QAGENT.DLL
[2017/08/31 12:33:55 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dmusic.dll
[2017/08/31 12:33:55 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\windows.immersiveshell.serviceprovider.dll
[2017/08/31 12:33:55 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SPInf.dll
[2017/08/31 12:33:55 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NetworkStatus.dll
[2017/08/31 12:33:54 | 000,291,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RADCUI.dll
[2017/08/31 12:33:54 | 000,190,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SndVol.exe
[2017/08/31 12:33:54 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrdc.dll
[2017/08/31 12:33:54 | 000,161,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceWiaCompat.dll
[2017/08/31 12:33:54 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlancfg.dll
[2017/08/31 12:33:54 | 000,134,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winmmbase.dll
[2017/08/31 12:33:54 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisrndr.ax
[2017/08/31 12:33:53 | 002,118,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SensorsCpl.dll
[2017/08/31 12:33:53 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\provthrd.dll
[2017/08/31 12:33:53 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AppIdPolicyEngineApi.dll
[2017/08/31 12:33:53 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Storage.Compression.dll
[2017/08/31 12:33:53 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msnetobj.dll
[2017/08/31 12:33:52 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BioCredProv.dll
[2017/08/31 12:33:52 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bisrv.dll
[2017/08/31 12:33:52 | 000,240,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
[2017/08/31 12:33:52 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\softkbd.dll
[2017/08/31 12:33:52 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msctfui.dll
[2017/08/31 12:33:51 | 000,425,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shwebsvc.dll
[2017/08/31 12:33:51 | 000,382,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsqmcons.exe
[2017/08/31 12:33:51 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TetheringStation.dll
[2017/08/31 12:33:51 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssha.dll
[2017/08/31 12:33:51 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imapi.dll
[2017/08/31 12:33:51 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbnetlib.dll
[2017/08/31 12:33:51 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AltTab.dll
[2017/08/31 12:33:50 | 000,601,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psr.exe
[2017/08/31 12:33:50 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\difxapi.dll
[2017/08/31 12:33:50 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\esentutl.exe
[2017/08/31 12:33:50 | 000,239,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\windowslivelogin.dll
[2017/08/31 12:33:50 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\auditcse.dll
[2017/08/31 12:33:50 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\deviceaccess.dll
[2017/08/31 12:33:50 | 000,171,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscinterop.dll
[2017/08/31 12:33:49 | 000,460,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiadefui.dll
[2017/08/31 12:33:49 | 000,433,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsquery.dll
[2017/08/31 12:33:49 | 000,281,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drt.dll
[2017/08/31 12:33:49 | 000,208,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpnprv.dll
[2017/08/31 12:33:49 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dskquoui.dll
[2017/08/31 12:33:48 | 000,396,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mtxclu.dll
[2017/08/31 12:33:48 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clusapi.dll
[2017/08/31 12:33:48 | 000,239,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\els.dll
[2017/08/31 12:33:48 | 000,228,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dhcpcore6.dll
[2017/08/31 12:33:48 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TtlsAuth.dll
[2017/08/31 12:33:48 | 000,201,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\srmstormod.dll
[2017/08/31 12:33:48 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrrun.dll
[2017/08/31 12:33:48 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinSyncProviders.dll
[2017/08/31 12:33:47 | 001,197,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcenter.dll
[2017/08/31 12:33:47 | 000,184,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NetSetupApi.dll
[2017/08/31 12:33:47 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dsprop.dll
[2017/08/31 12:33:47 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LockScreenContent.dll
[2017/08/31 12:33:47 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\negoexts.dll
[2017/08/31 12:33:47 | 000,105,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpr.dll
[2017/08/31 12:33:46 | 000,591,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsdyn.dll
[2017/08/31 12:33:46 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fveui.dll
[2017/08/31 12:33:46 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\unattend.dll
[2017/08/31 12:33:46 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3gpui.dll
[2017/08/31 12:33:46 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsprop.dll
[2017/08/31 12:33:46 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Enumeration.dll
[2017/08/31 12:33:46 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\negoexts.dll
[2017/08/31 12:33:46 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\atl.dll
[2017/08/31 12:33:45 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BthHFSrv.dll
[2017/08/31 12:33:45 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dafWfdProvider.dll
[2017/08/31 12:33:45 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcorehc.dll
[2017/08/31 12:33:45 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vssadmin.exe
[2017/08/31 12:33:45 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqlcecompact40.dll
[2017/08/31 12:33:45 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\immersivetpmvscmgrsvr.exe
[2017/08/31 12:33:45 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tpmvscmgrsvr.exe
[2017/08/31 12:33:45 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rmttpmvscmgrsvr.exe
[2017/08/31 12:33:45 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmusic.dll
[2017/08/31 12:33:44 | 003,317,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bootux.dll
[2017/08/31 12:33:44 | 000,279,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mycomput.dll
[2017/08/31 12:33:44 | 000,184,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\els.dll
[2017/08/31 12:33:44 | 000,137,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceSyncProvider.dll
[2017/08/31 12:33:44 | 000,120,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\userenv.dll
[2017/08/31 12:33:44 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSTPager.ax
[2017/08/31 12:33:43 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eudcedit.exe
[2017/08/31 12:33:43 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msieftp.dll
[2017/08/31 12:33:43 | 000,238,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mlang.dll
[2017/08/31 12:33:43 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSWB7.dll
[2017/08/31 12:33:43 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fdWSD.dll
[2017/08/31 12:33:43 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\txflog.dll
[2017/08/31 12:33:42 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DevicePairing.dll
[2017/08/31 12:33:42 | 000,432,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clusapi.dll
[2017/08/31 12:33:42 | 000,392,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\intl.cpl
[2017/08/31 12:33:42 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ndfapi.dll
[2017/08/31 12:33:42 | 000,269,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcore6.dll
[2017/08/31 12:33:42 | 000,228,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drt.dll
[2017/08/31 12:33:42 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdWSD.dll
[2017/08/31 12:33:42 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Tabbtn.dll
[2017/08/31 12:33:41 | 000,200,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceWMDRM.dll
[2017/08/31 12:33:41 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsadmin.exe
[2017/08/31 12:33:41 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhshl.dll
[2017/08/31 12:33:41 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VBICodec.ax
[2017/08/31 12:33:40 | 000,465,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WerFault.exe
[2017/08/31 12:33:40 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msieftp.dll
[2017/08/31 12:33:40 | 000,275,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spp.dll
[2017/08/31 12:33:40 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ssText3d.scr
[2017/08/31 12:33:40 | 000,178,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SimCfg.dll
[2017/08/31 12:33:40 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
[2017/08/31 12:33:40 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CloudStorageWizard.exe
[2017/08/31 12:33:40 | 000,103,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\embeddedapplauncher.exe
[2017/08/31 12:33:40 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cca.dll
[2017/08/31 12:33:39 | 001,157,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcenter.dll
[2017/08/31 12:33:39 | 000,440,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\zipfldr.dll
[2017/08/31 12:33:39 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpdxm.dll
[2017/08/31 12:33:39 | 000,203,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSSync.dll
[2017/08/31 12:33:39 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tpmvscmgr.exe
[2017/08/31 12:33:39 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Kswdmcap.ax
[2017/08/31 12:33:39 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BrokerLib.dll
[2017/08/31 12:33:38 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ddpchunk.dll
[2017/08/31 12:33:38 | 000,210,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imm32.dll
[2017/08/31 12:33:38 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\easwrt.dll
[2017/08/31 12:33:38 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\biwinrt.dll
[2017/08/31 12:33:38 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSDvbNP.ax
[2017/08/31 12:33:38 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ConfigureExpandedStorage.dll
[2017/08/31 12:33:37 | 000,407,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanui.dll
[2017/08/31 12:33:37 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSAPI.dll
[2017/08/31 12:33:37 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tcpipcfg.dll
[2017/08/31 12:33:37 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tcpipcfg.dll
[2017/08/31 12:33:37 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cscript.exe
[2017/08/31 12:33:37 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Mpeg2Data.ax
[2017/08/31 12:33:36 | 000,350,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmcbase.dll
[2017/08/31 12:33:36 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ssText3d.scr
[2017/08/31 12:33:36 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rgb9rast.dll
[2017/08/31 12:33:36 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srmshell.dll
[2017/08/31 12:33:36 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imapi.dll
[2017/08/31 12:33:36 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\efswrt.dll
[2017/08/31 12:33:36 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\amstream.dll
[2017/08/31 12:33:36 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Management.Workplace.WorkplaceSettings.dll
[2017/08/31 12:33:35 | 000,166,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmidcom.dll
[2017/08/31 12:33:35 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SSShim.dll
[2017/08/31 12:33:35 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppxSip.dll
[2017/08/31 12:33:35 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Security.Credentials.UI.UserConsentVerifier.dll
[2017/08/31 12:33:34 | 000,163,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cic.dll
[2017/08/31 12:33:34 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\globinputhost.dll
[2017/08/31 12:33:34 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twext.dll
[2017/08/31 12:33:34 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\profsvcext.dll
[2017/08/31 12:33:34 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bdaplgin.ax
[2017/08/31 12:33:33 | 000,675,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Vault.dll
[2017/08/31 12:33:33 | 000,458,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\powercpl.dll
[2017/08/31 12:33:33 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PeerDist.dll
[2017/08/31 12:33:33 | 000,169,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netiohlp.dll
[2017/08/31 12:33:33 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdeploy.dll
[2017/08/31 12:33:33 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\txflog.dll
[2017/08/31 12:33:32 | 000,483,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercpl.dll
[2017/08/31 12:33:32 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apds.dll
[2017/08/31 12:33:32 | 000,205,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrrun.dll
[2017/08/31 12:33:32 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dinput.dll
[2017/08/31 12:33:32 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\easwrt.dll
[2017/08/31 12:33:32 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mtstocom.exe
[2017/08/31 12:33:32 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DevPropMgr.dll
[2017/08/31 12:33:32 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\amstream.dll
[2017/08/31 12:33:31 | 000,251,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adsldpc.dll
[2017/08/31 12:33:31 | 000,234,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SndVolSSO.dll
[2017/08/31 12:33:31 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mimofcodec.dll
[2017/08/31 12:33:31 | 000,154,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncbservice.dll
[2017/08/31 12:33:31 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dinput.dll
[2017/08/31 12:33:31 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chartv.dll
[2017/08/31 12:33:31 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rshx32.dll
[2017/08/31 12:33:31 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comrepl.dll
[2017/08/31 12:33:31 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbnetlib.dll
[2017/08/31 12:33:31 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscinterop.dll
[2017/08/31 12:33:31 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSTPager.ax
[2017/08/31 12:33:30 | 000,286,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wbadmin.exe
[2017/08/31 12:33:30 | 000,239,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsbas.dll
[2017/08/31 12:33:30 | 000,174,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpdxm.dll
[2017/08/31 12:33:30 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nlhtml.dll
[2017/08/31 12:33:30 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adrclient.dll
[2017/08/31 12:33:30 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mtstocom.exe
[2017/08/31 12:33:30 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\olethk32.dll
[2017/08/31 12:33:29 | 000,512,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SpaceControl.dll
[2017/08/31 12:33:29 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Winlangdb.dll
[2017/08/31 12:33:29 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstask.dll
[2017/08/31 12:33:29 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
[2017/08/31 12:33:29 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msaatext.dll
[2017/08/31 12:33:29 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xwtpw32.dll
[2017/08/31 12:33:29 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwm.exe
[2017/08/31 12:33:29 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wevtfwd.dll
[2017/08/31 12:33:28 | 000,174,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logoncli.dll
[2017/08/31 12:33:28 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dskquota.dll
[2017/08/31 12:33:28 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqlcecompact40.dll
[2017/08/31 12:33:28 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rshx32.dll
[2017/08/31 12:33:28 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comrepl.dll
[2017/08/31 12:33:28 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmcompos.dll
[2017/08/31 12:33:27 | 000,471,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2017/08/31 12:33:27 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationSettings.exe
[2017/08/31 12:33:27 | 000,137,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msched.dll
[2017/08/31 12:33:27 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fde.dll
[2017/08/31 12:33:27 | 000,089,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhost.exe
[2017/08/31 12:33:27 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cca.dll
[2017/08/31 12:33:27 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dllhst3g.exe
[2017/08/31 12:33:26 | 000,472,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\timedate.cpl
[2017/08/31 12:33:26 | 000,469,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dmdlgs.dll
[2017/08/31 12:33:26 | 000,400,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasplap.dll
[2017/08/31 12:33:26 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\p2pnetsh.dll
[2017/08/31 12:33:26 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fms.dll
[2017/08/31 12:33:26 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinRtTracing.dll
[2017/08/31 12:33:26 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Kswdmcap.ax
[2017/08/31 12:33:26 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.WiFiDirect.dll
[2017/08/31 12:33:26 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mpeg2Data.ax
[2017/08/31 12:33:26 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll
[2017/08/31 12:33:25 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\BioCredProv.dll
[2017/08/31 12:33:25 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\p2pnetsh.dll
[2017/08/31 12:33:25 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceWiaCompat.dll
[2017/08/31 12:33:24 | 000,605,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptui.dll
[2017/08/31 12:33:24 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QAGENT.DLL
[2017/08/31 12:33:24 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SimCfg.dll
[2017/08/31 12:33:24 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twext.dll
[2017/08/31 12:33:24 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSDvbNP.ax
[2017/08/31 12:33:23 | 000,311,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcbase.dll
[2017/08/31 12:33:23 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mycomput.dll
[2017/08/31 12:33:23 | 000,163,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fde.dll
[2017/08/31 12:33:23 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmidcom.dll
[2017/08/31 12:33:23 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wkspbrokerAx.dll
[2017/08/31 12:33:23 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\oledlg.dll
[2017/08/31 12:33:22 | 000,273,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NAPSTAT.EXE
[2017/08/31 12:33:22 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdprov.dll
[2017/08/31 12:33:21 | 000,617,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sud.dll
[2017/08/31 12:33:21 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SndVolSSO.dll
[2017/08/31 12:33:21 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.HostName.dll
[2017/08/31 12:33:21 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TtlsAuth.dll
[2017/08/31 12:33:21 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nlmgp.dll
[2017/08/31 12:33:21 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiadss.dll
[2017/08/31 12:33:21 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\advpack.dll
[2017/08/31 12:33:20 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QSHVHOST.DLL
[2017/08/31 12:33:20 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SoundRecorder.exe
[2017/08/31 12:33:20 | 000,129,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdtclog.dll
[2017/08/31 12:33:20 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CallButtons.dll
[2017/08/31 12:33:19 | 000,241,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logoncli.dll
[2017/08/31 12:33:19 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ndfapi.dll
[2017/08/31 12:33:19 | 000,165,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntasn1.dll
[2017/08/31 12:33:19 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AppxSip.dll
[2017/08/31 12:33:18 | 000,517,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmdial32.dll
[2017/08/31 12:33:18 | 000,224,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntasn1.dll
[2017/08/31 12:33:18 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\remotepg.dll
[2017/08/31 12:33:18 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\advpack.dll
[2017/08/31 12:33:18 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fdeploy.dll
[2017/08/31 12:33:18 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmscript.dll
[2017/08/31 12:33:17 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sud.dll
[2017/08/31 12:33:17 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appmgmts.dll
[2017/08/31 12:33:17 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscript.exe
[2017/08/31 12:33:17 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wiadss.dll
[2017/08/31 12:33:16 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\P2P.dll
[2017/08/31 12:33:16 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\desk.cpl
[2017/08/31 12:33:16 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sdiagprv.dll
[2017/08/31 12:33:16 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\net1.exe
[2017/08/31 12:33:16 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\chartv.dll
[2017/08/31 12:33:16 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
[2017/08/31 12:33:16 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\loadperf.dll
[2017/08/31 12:33:16 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\radardt.dll
[2017/08/31 12:33:15 | 000,546,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionCenterCPL.dll
[2017/08/31 12:33:15 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptuiwizard.dll
[2017/08/31 12:33:15 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rekeywiz.exe
[2017/08/31 12:33:15 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vaultcli.dll
[2017/08/31 12:33:15 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kstvtune.ax
[2017/08/31 12:33:15 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdWCN.dll
[2017/08/31 12:33:14 | 000,426,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\intl.cpl
[2017/08/31 12:33:14 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wusa.exe
[2017/08/31 12:33:14 | 000,178,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceWMDRM.dll
[2017/08/31 12:33:14 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WpdMtpUS.dll
[2017/08/31 12:33:14 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xwtpw32.dll
[2017/08/31 12:33:14 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msoert2.dll
[2017/08/31 12:33:14 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avifil32.dll
[2017/08/31 12:33:14 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMapi.dll
[2017/08/31 12:33:13 | 000,209,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercfg.cpl
[2017/08/31 12:33:13 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WLanHC.dll
[2017/08/31 12:33:13 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlancfg.dll
[2017/08/31 12:33:13 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Storage.Compression.dll
[2017/08/31 12:33:13 | 000,126,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winmm.dll
[2017/08/31 12:33:13 | 000,113,664 | ---- | C] (Microsoft) -- C:\Windows\SysNative\SMBHelperClass.dll
[2017/08/31 12:33:12 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstask.dll
[2017/08/31 12:33:12 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsicpl.dll
[2017/08/31 12:33:12 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bthprops.cpl
[2017/08/31 12:33:12 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dafupnp.dll
[2017/08/31 12:33:12 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dskquota.dll
[2017/08/31 12:33:12 | 000,092,672 | ---- | C] (Microsoft) -- C:\Windows\SysNative\VaultRoaming.dll
[2017/08/31 12:33:11 | 000,219,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adsldpc.dll
[2017/08/31 12:33:11 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unregmp2.exe
[2017/08/31 12:33:11 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdiagprv.dll
[2017/08/31 12:33:10 | 000,968,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certca.dll
[2017/08/31 12:33:10 | 000,528,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ActionCenterCPL.dll
[2017/08/31 12:33:10 | 000,292,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3ui.dll
[2017/08/31 12:33:10 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceSetupManager.dll
[2017/08/31 12:33:10 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\powercfg.cpl
[2017/08/31 12:33:10 | 000,178,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\windowslivelogin.dll
[2017/08/31 12:33:10 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QSVRMGMT.DLL
[2017/08/31 12:33:10 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XPSSHHDR.dll
[2017/08/31 12:33:09 | 000,468,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RASMM.dll
[2017/08/31 12:33:09 | 000,191,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\systemreset.exe
[2017/08/31 12:33:09 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prncache.dll
[2017/08/31 12:33:09 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\avifil32.dll
[2017/08/31 12:33:09 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TabbtnEx.dll
[2017/08/31 12:33:09 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Security.Credentials.UI.UserConsentVerifier.dll
[2017/08/31 12:33:09 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bdaplgin.ax
[2017/08/31 12:33:08 | 000,685,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsuiext.dll
[2017/08/31 12:33:08 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\raschap.dll
[2017/08/31 12:33:08 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\newdev.dll
[2017/08/31 12:33:08 | 000,203,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icsigd.dll
[2017/08/31 12:33:08 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\verifier.exe
[2017/08/31 12:33:08 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskkill.exe
[2017/08/31 12:33:08 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ndishc.dll
[2017/08/31 12:33:08 | 000,093,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Security.Credentials.UI.CredentialPicker.dll
[2017/08/31 12:33:07 | 000,671,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dsuiext.dll
[2017/08/31 12:33:07 | 000,205,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\remotepg.dll
[2017/08/31 12:33:07 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fvenotify.exe
[2017/08/31 12:33:07 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\srmshell.dll
[2017/08/31 12:33:07 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnshc.dll
[2017/08/31 12:33:06 | 000,898,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdclt.exe
[2017/08/31 12:33:06 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\discan.dll
[2017/08/31 12:33:06 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nlmgp.dll
[2017/08/31 12:33:06 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ProximityCommon.dll
[2017/08/31 12:33:06 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceClassExtension.dll
[2017/08/31 12:33:06 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuthBroker.dll
[2017/08/31 12:33:06 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msaatext.dll
[2017/08/31 12:33:06 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbccp32.dll
[2017/08/31 12:33:05 | 000,518,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\timedate.cpl
[2017/08/31 12:33:05 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceMetadataRetrievalClient.dll
[2017/08/31 12:33:05 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SSShim.dll
[2017/08/31 12:33:05 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\kstvtune.ax
[2017/08/31 12:33:05 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fdSSDP.dll
[2017/08/31 12:33:04 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\P2P.dll
[2017/08/31 12:33:04 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrahc.dll
[2017/08/31 12:33:04 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptcatsvc.dll
[2017/08/31 12:33:04 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\oleprn.dll
[2017/08/31 12:33:04 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmifw.dll
[2017/08/31 12:33:04 | 000,080,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll
[2017/08/31 12:33:04 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AepRoam.dll
[2017/08/31 12:33:03 | 000,644,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dccw.exe
[2017/08/31 12:33:03 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MicrosoftAccountTokenProvider.dll
[2017/08/31 12:33:03 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvfw32.dll
[2017/08/31 12:33:03 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhsvc.dll
[2017/08/31 12:33:03 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ndfhcdiscovery.dll
[2017/08/31 12:33:03 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wkspbrokerAx.dll
[2017/08/31 12:33:03 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmifw.dll
[2017/08/31 12:33:03 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ddrawex.dll
[2017/08/31 12:33:03 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ndfetw.dll
[2017/08/31 12:33:02 | 000,441,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceStatus.dll
[2017/08/31 12:33:02 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleprn.dll
[2017/08/31 12:33:02 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wecapi.dll
[2017/08/31 12:33:01 | 000,467,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiashext.dll
[2017/08/31 12:33:01 | 000,446,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wiashext.dll
[2017/08/31 12:33:01 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmstp.exe
[2017/08/31 12:33:01 | 000,073,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Security.Credentials.UI.CredentialPicker.dll
[2017/08/31 12:33:01 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spoolss.dll
[2017/08/31 12:33:00 | 000,342,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eudcedit.exe
[2017/08/31 12:33:00 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EhStorShell.dll
[2017/08/31 12:33:00 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rekeywiz.exe
[2017/08/31 12:33:00 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fms.dll
[2017/08/31 12:33:00 | 000,084,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhostex.exe
[2017/08/31 12:33:00 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ksxbar.ax
[2017/08/31 12:32:59 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll
[2017/08/31 12:32:59 | 000,179,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RstrtMgr.dll
[2017/08/31 12:32:59 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\raserver.exe
[2017/08/31 12:32:59 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuthBroker.dll
[2017/08/31 12:32:59 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IdCtrls.dll
[2017/08/31 12:32:59 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ELSCore.dll
[2017/08/31 12:32:59 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\devrtl.dll
[2017/08/31 12:32:59 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ssdpapi.dll
[2017/08/31 12:32:58 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Winlangdb.dll
[2017/08/31 12:32:58 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinMsoIrmProtector.dll
[2017/08/31 12:32:58 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinOpcIrmProtector.dll
[2017/08/31 12:32:58 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FXSXP32.dll
[2017/08/31 12:32:58 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adrclient.dll
[2017/08/31 12:32:58 | 000,097,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptdll.dll
[2017/08/31 12:32:58 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SPInf.dll
[2017/08/31 12:32:58 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prvdmofcomp.dll
[2017/08/31 12:32:58 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CallButtons.dll
[2017/08/31 12:32:58 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BthRadioMedia.dll
[2017/08/31 12:32:57 | 000,320,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3ui.dll
[2017/08/31 12:32:57 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dsdmo.dll
[2017/08/31 12:32:57 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fveprompt.exe
[2017/08/31 12:32:57 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Media.Devices.dll
[2017/08/31 12:32:57 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RDSAppXHelper.dll
[2017/08/31 12:32:57 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Media.Devices.dll
[2017/08/31 12:32:57 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Custom.dll
[2017/08/31 12:32:57 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ELSCore.dll
[2017/08/31 12:32:56 | 000,287,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\modemui.dll
[2017/08/31 12:32:56 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\raserver.exe
[2017/08/31 12:32:56 | 000,090,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfAACEnc.dll
[2017/08/31 12:32:55 | 000,280,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unimdm.tsp
[2017/08/31 12:32:55 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\desk.cpl
[2017/08/31 12:32:55 | 000,168,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\basecsp.dll
[2017/08/31 12:32:55 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Networking.HostName.dll
[2017/08/31 12:32:55 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fmapi.dll
[2017/08/31 12:32:54 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SNTSearch.dll
[2017/08/31 12:32:54 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlandlg.dll
[2017/08/31 12:32:54 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\manage-bde.exe
[2017/08/31 12:32:54 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2017/08/31 12:32:54 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dafWCN.dll
[2017/08/31 12:32:54 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\globinputhost.dll
[2017/08/31 12:32:54 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinRtTracing.dll
[2017/08/31 12:32:54 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskkill.exe
[2017/08/31 12:32:53 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasplap.dll
[2017/08/31 12:32:53 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll
[2017/08/31 12:32:53 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceClassExtension.dll
[2017/08/31 12:32:53 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fphc.dll
[2017/08/31 12:32:53 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinMsoIrmProtector.dll
[2017/08/31 12:32:53 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Robocopy.exe
[2017/08/31 12:32:53 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinOpcIrmProtector.dll
[2017/08/31 12:32:53 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ssdpapi.dll
[2017/08/31 12:32:53 | 000,018,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CompPkgSup.dll
[2017/08/31 12:32:52 | 000,430,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceStatus.dll
[2017/08/31 12:32:52 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdart.dll
[2017/08/31 12:32:52 | 000,101,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfAACEnc.dll
[2017/08/31 12:32:52 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wevtfwd.dll
[2017/08/31 12:32:52 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.WiFiDirect.dll
[2017/08/31 12:32:51 | 000,329,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pwlauncher.dll
[2017/08/31 12:32:51 | 000,209,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DevicePairingFolder.dll
[2017/08/31 12:32:51 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3mm.dll
[2017/08/31 12:32:51 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdBth.dll
[2017/08/31 12:32:51 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logagent.exe
[2017/08/31 12:32:51 | 000,098,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OpenWith.exe
[2017/08/31 12:32:51 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\systeminfo.exe
[2017/08/31 12:32:51 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Background.dll
[2017/08/31 12:32:50 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PkgMgr.exe
[2017/08/31 12:32:50 | 000,163,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apprepapi.dll
[2017/08/31 12:32:50 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WcnApi.dll
[2017/08/31 12:32:50 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceElementSource.dll
[2017/08/31 12:32:50 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wcmcsp.dll
[2017/08/31 12:32:50 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setupugc.exe
[2017/08/31 12:32:50 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\correngine.dll
[2017/08/31 12:32:49 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rascfg.dll
[2017/08/31 12:32:49 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceSetupManagerAPI.dll
[2017/08/31 12:32:49 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ProximityCommon.dll
[2017/08/31 12:32:49 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\systeminfo.exe
[2017/08/31 12:32:49 | 000,092,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KeyboardFilterSvc.dll
[2017/08/31 12:32:49 | 000,085,504 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\SMBHelperClass.dll
[2017/08/31 12:32:49 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhsrchapi.dll
[2017/08/31 12:32:49 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhsrchph.dll
[2017/08/31 12:32:49 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\playlistfolder.dll
[2017/08/31 12:32:48 | 000,561,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfrgui.exe
[2017/08/31 12:32:48 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msconfig.exe
[2017/08/31 12:32:48 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MbaeApi.dll
[2017/08/31 12:32:48 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dmview.ocx
[2017/08/31 12:32:48 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdart.dll
[2017/08/31 12:32:48 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vssadmin.exe
[2017/08/31 12:32:48 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ksxbar.ax
[2017/08/31 12:32:47 | 000,201,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icsigd.dll
[2017/08/31 12:32:47 | 000,196,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\basecsp.dll
[2017/08/31 12:32:47 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxlib.dll
[2017/08/31 12:32:47 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\glu32.dll
[2017/08/31 12:32:47 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mimofcodec.dll
[2017/08/31 12:32:47 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wecutil.exe
[2017/08/31 12:32:47 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ConsentUX.dll
[2017/08/31 12:32:47 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WorkFoldersGPExt.dll
[2017/08/31 12:32:46 | 000,788,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Bubbles.scr
[2017/08/31 12:32:46 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winethc.dll
[2017/08/31 12:32:46 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fdBth.dll
[2017/08/31 12:32:46 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.Sockets.PushEnabledApplication.dll
[2017/08/31 12:32:46 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\threadpoolwinrt.dll
[2017/08/31 12:32:45 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tapi32.dll
[2017/08/31 12:32:45 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DevicePairingFolder.dll
[2017/08/31 12:32:45 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usbceip.dll
[2017/08/31 12:32:45 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdSSDP.dll
[2017/08/31 12:32:45 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EAPQEC.DLL
[2017/08/31 12:32:45 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbccu32.dll
[2017/08/31 12:32:45 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbccr32.dll
[2017/08/31 12:32:45 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IdCtrls.dll
[2017/08/31 12:32:45 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vaultcli.dll
[2017/08/31 12:32:45 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logagent.exe
[2017/08/31 12:32:45 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WABSyncProvider.dll
[2017/08/31 12:32:44 | 000,313,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cttune.exe
[2017/08/31 12:32:44 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Mystify.scr
[2017/08/31 12:32:44 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Ribbons.scr
[2017/08/31 12:32:44 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlidfdp.dll
[2017/08/31 12:32:44 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QUTIL.DLL
[2017/08/31 12:32:44 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samcli.dll
[2017/08/31 12:32:44 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbccr32.dll
[2017/08/31 12:32:44 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\colbact.dll
[2017/08/31 12:32:44 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\g711codc.ax
[2017/08/31 12:32:44 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpninprc.dll
[2017/08/31 12:32:44 | 000,054,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdusb.dll
[2017/08/31 12:32:44 | 000,033,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ploptin.dll
[2017/08/31 12:32:43 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EaseOfAccessDialog.exe
[2017/08/31 12:32:43 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sethc.exe
[2017/08/31 12:32:43 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RstrtMgr.dll
[2017/08/31 12:32:43 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshom.ocx
[2017/08/31 12:32:43 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DAMM.dll
[2017/08/31 12:32:43 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MbaeApi.dll
[2017/08/31 12:32:43 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmview.ocx
[2017/08/31 12:32:43 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Utilman.exe
[2017/08/31 12:32:43 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncobjapi.dll
[2017/08/31 12:32:43 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbccu32.dll
[2017/08/31 12:32:43 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscapi.dll
[2017/08/31 12:32:42 | 000,321,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\unimdm.tsp
[2017/08/31 12:32:42 | 000,172,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kd_02_8086.dll
[2017/08/31 12:32:42 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\verifier.exe
[2017/08/31 12:32:42 | 000,165,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\glu32.dll
[2017/08/31 12:32:42 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SimAuth.dll
[2017/08/31 12:32:42 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scripto.dll
[2017/08/31 12:32:42 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eqossnap.dll
[2017/08/31 12:32:41 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\L2SecHC.dll
[2017/08/31 12:32:41 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netplwiz.dll
[2017/08/31 12:32:41 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NdisImPlatform.dll
[2017/08/31 12:32:41 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scavengeui.dll
[2017/08/31 12:32:41 | 000,106,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msacm32.dll
[2017/08/31 12:32:41 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nlahc.dll
[2017/08/31 12:32:41 | 000,091,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OpenWith.exe
[2017/08/31 12:32:41 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tasklist.exe
[2017/08/31 12:32:40 | 000,122,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptsp.dll
[2017/08/31 12:32:40 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpshell.dll
[2017/08/31 12:32:40 | 000,070,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\profapi.dll
[2017/08/31 12:32:40 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\networkitemfactory.dll
[2017/08/31 12:32:40 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xcopy.exe
[2017/08/31 12:32:40 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xcopy.exe
[2017/08/31 12:32:39 | 001,678,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\networkexplorer.dll
[2017/08/31 12:32:39 | 000,778,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Bubbles.scr
[2017/08/31 12:32:39 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bthprops.cpl
[2017/08/31 12:32:39 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdadiag.dll
[2017/08/31 12:32:39 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QSVRMGMT.DLL
[2017/08/31 12:32:39 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmstp.exe
[2017/08/31 12:32:39 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\colbact.dll
[2017/08/31 12:32:39 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mtxdm.dll
[2017/08/31 12:32:38 | 000,660,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dccw.exe
[2017/08/31 12:32:38 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\korwbrkr.dll
[2017/08/31 12:32:38 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\syncui.dll
[2017/08/31 12:32:38 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mi.dll
[2017/08/31 12:32:38 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ConfigureExpandedStorage.dll
[2017/08/31 12:32:37 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cttune.exe
[2017/08/31 12:32:37 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setupugc.exe
[2017/08/31 12:32:37 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mystify.scr
[2017/08/31 12:32:37 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Ribbons.scr
[2017/08/31 12:32:37 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fphc.dll
[2017/08/31 12:32:37 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TpmInit.exe
[2017/08/31 12:32:37 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srmtrace.dll
[2017/08/31 12:32:37 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netprovisionsp.dll
[2017/08/31 12:32:37 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Syncreg.dll
[2017/08/31 12:32:36 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autoplay.dll
[2017/08/31 12:32:36 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshom.ocx
[2017/08/31 12:32:36 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SimAuth.dll
[2017/08/31 12:32:36 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oledlg.dll
[2017/08/31 12:32:36 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2017/08/31 12:32:36 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll
[2017/08/31 12:32:36 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll
[2017/08/31 12:32:36 | 000,076,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sessionmsg.exe
[2017/08/31 12:32:36 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nduprov.dll
[2017/08/31 12:32:36 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsigd.dll
[2017/08/31 12:32:36 | 000,030,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PrintDialogHost.exe
[2017/08/31 12:32:35 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlandlg.dll
[2017/08/31 12:32:35 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\korwbrkr.dll
[2017/08/31 12:32:35 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\profprov.dll
[2017/08/31 12:32:35 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiascanprofiles.dll
[2017/08/31 12:32:35 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\igdDiag.dll
[2017/08/31 12:32:35 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertPolEng.dll
[2017/08/31 12:32:35 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Custom.dll
[2017/08/31 12:32:34 | 001,129,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscui.cpl
[2017/08/31 12:32:34 | 000,420,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nshipsec.dll
[2017/08/31 12:32:34 | 000,277,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powrprof.dll
[2017/08/31 12:32:34 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mi.dll
[2017/08/31 12:32:34 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll
[2017/08/31 12:32:34 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll
[2017/08/31 12:32:34 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsockhc.dll
[2017/08/31 12:32:34 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertPolEng.dll
[2017/08/31 12:32:34 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3hc.dll
[2017/08/31 12:32:34 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\getmac.exe
[2017/08/31 12:32:33 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netid.dll
[2017/08/31 12:32:33 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3api.dll
[2017/08/31 12:32:33 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Query.dll
[2017/08/31 12:32:33 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Syncreg.dll
[2017/08/31 12:32:33 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\packager.dll
[2017/08/31 12:32:33 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingHost.exe
[2017/08/31 12:32:33 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prvdmofcomp.dll
[2017/08/31 12:32:33 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gacinstall.dll
[2017/08/31 12:32:33 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sfc_os.dll
[2017/08/31 12:32:32 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\charmap.exe
[2017/08/31 12:32:32 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpshell.dll
[2017/08/31 12:32:32 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\getmac.exe
[2017/08/31 12:32:32 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QCLIPROV.DLL
[2017/08/31 12:32:32 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntlanman.dll
[2017/08/31 12:32:32 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ndishc.dll
[2017/08/31 12:32:32 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scripto.dll
[2017/08/31 12:32:32 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WABSyncProvider.dll
[2017/08/31 12:32:32 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\g711codc.ax
[2017/08/31 12:32:32 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbisurf.ax
[2017/08/31 12:32:31 | 001,152,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscui.cpl
[2017/08/31 12:32:31 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\colorui.dll
[2017/08/31 12:32:31 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsdmo.dll
[2017/08/31 12:32:31 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EhStorAPI.dll
[2017/08/31 12:32:31 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WfHC.dll
[2017/08/31 12:32:31 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\synceng.dll
[2017/08/31 12:32:30 | 000,169,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\net1.exe
[2017/08/31 12:32:30 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autoplay.dll
[2017/08/31 12:32:30 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\synceng.dll
[2017/08/31 12:32:30 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\drmk.sys
[2017/08/31 12:32:30 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\olecli32.dll
[2017/08/31 12:32:30 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceConnectApi.dll
[2017/08/31 12:32:30 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\packager.dll
[2017/08/31 12:32:29 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ddptrace.dll
[2017/08/31 12:32:29 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\usbceip.dll
[2017/08/31 12:32:29 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ndfhcdiscovery.dll
[2017/08/31 12:32:29 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\driverquery.exe
[2017/08/31 12:32:29 | 000,067,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RpcRtRemote.dll
[2017/08/31 12:32:29 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\udhisapi.dll
[2017/08/31 12:32:29 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mbussdapi.dll
[2017/08/31 12:32:29 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netprovisionsp.dll
[2017/08/31 12:32:29 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fmifs.dll
[2017/08/31 12:32:28 | 000,274,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\systemcpl.dll
[2017/08/31 12:32:28 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scksp.dll
[2017/08/31 12:32:28 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshext.dll
[2017/08/31 12:32:28 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Media.Renewal.dll
[2017/08/31 12:32:28 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wecapi.dll
[2017/08/31 12:32:28 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Background.dll
[2017/08/31 12:32:27 | 000,287,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\systemcpl.dll
[2017/08/31 12:32:27 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
[2017/08/31 12:32:27 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Dsui.dll
[2017/08/31 12:32:27 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tasklist.exe
[2017/08/31 12:32:27 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WcnApi.dll
[2017/08/31 12:32:27 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cliconfg.dll
[2017/08/31 12:32:27 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\loghours.dll
[2017/08/31 12:32:27 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\threadpoolwinrt.dll
[2017/08/31 12:32:26 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskbarcpl.dll
[2017/08/31 12:32:26 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fsutil.exe
[2017/08/31 12:32:26 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvinst.exe
[2017/08/31 12:32:26 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wiascanprofiles.dll
[2017/08/31 12:32:26 | 000,086,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wkscli.dll
[2017/08/31 12:32:26 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fveskybackup.dll
[2017/08/31 12:32:26 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TapiMigPlugin.dll
[2017/08/31 12:32:26 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\playlistfolder.dll
[2017/08/31 12:32:26 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ConnectedAccountState.dll
[2017/08/31 12:32:26 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dssec.dll
[2017/08/31 12:32:25 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ocsetapi.dll
[2017/08/31 12:32:25 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MicrosoftAccountTokenProvider.dll
[2017/08/31 12:32:25 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apprepsync.dll
[2017/08/31 12:32:25 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fwcfg.dll
[2017/08/31 12:32:25 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XPSSHHDR.dll
[2017/08/31 12:32:25 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\makecab.exe
[2017/08/31 12:32:25 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WlanRadioManager.dll
[2017/08/31 12:32:25 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WwanRadioManager.dll
[2017/08/31 12:32:25 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Networking.Sockets.PushEnabledApplication.dll
[2017/08/31 12:32:25 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\udhisapi.dll
[2017/08/31 12:32:24 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\L2SecHC.dll
[2017/08/31 12:32:24 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlgpclnt.dll
[2017/08/31 12:32:24 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmsynth.dll
[2017/08/31 12:32:24 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlgpclnt.dll
[2017/08/31 12:32:24 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSROUTE.dll
[2017/08/31 12:32:24 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winsockhc.dll
[2017/08/31 12:32:24 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pautoenr.dll
[2017/08/31 12:32:24 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Storprop.dll
[2017/08/31 12:32:24 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3hc.dll
[2017/08/31 12:32:24 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\net.exe
[2017/08/31 12:32:23 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MbaeParserTask.exe
[2017/08/31 12:32:23 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dafBth.dll
[2017/08/31 12:32:23 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciavi32.dll
[2017/08/31 12:32:23 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eqossnap.dll
[2017/08/31 12:32:23 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\frprov.dll
[2017/08/31 12:32:23 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\powercfg.exe
[2017/08/31 12:32:23 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhcleanup.dll
[2017/08/31 12:32:23 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ustprov.dll
[2017/08/31 12:32:23 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mbussdapi.dll
[2017/08/31 12:32:23 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\devrtl.dll
[2017/08/31 12:32:23 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vbisurf.ax
[2017/08/31 12:32:22 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BootMenuUX.dll
[2017/08/31 12:32:22 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DHCPQEC.DLL
[2017/08/31 12:32:22 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\loghours.dll
[2017/08/31 12:32:22 | 000,064,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wtsapi32.dll
[2017/08/31 12:32:22 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\frprov.dll
[2017/08/31 12:32:22 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3cfg.dll
[2017/08/31 12:32:22 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\umpowmi.dll
[2017/08/31 12:32:22 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssign32.dll
[2017/08/31 12:32:22 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dmloader.dll
[2017/08/31 12:32:22 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ustprov.dll
[2017/08/31 12:32:22 | 000,022,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ksuser.dll
[2017/08/31 12:32:21 | 000,269,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scksp.dll
[2017/08/31 12:32:21 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdadiag.dll
[2017/08/31 12:32:21 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wecutil.exe
[2017/08/31 12:32:21 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EAPQEC.DLL
[2017/08/31 12:32:21 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unimdmat.dll
[2017/08/31 12:32:21 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncobjapi.dll
[2017/08/31 12:32:21 | 000,021,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dsrole.dll
[2017/08/31 12:32:20 | 000,186,368 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\SysWow64\l3codecp.acm
[2017/08/31 12:32:20 | 000,170,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netplwiz.dll
[2017/08/31 12:32:20 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\werui.dll
[2017/08/31 12:32:20 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshext.dll
[2017/08/31 12:32:20 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mapistub.dll
[2017/08/31 12:32:20 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\makecab.exe
[2017/08/31 12:32:20 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\usbui.dll
[2017/08/31 12:32:20 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Groupinghc.dll
[2017/08/31 12:32:20 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MsSpellCheckingHost.exe
[2017/08/31 12:32:20 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wkscli.dll
[2017/08/31 12:32:20 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dssec.dll
[2017/08/31 12:32:20 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TapiMigPlugin.dll
[2017/08/31 12:32:19 | 000,624,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\colorui.dll
[2017/08/31 12:32:19 | 000,578,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfrgui.exe
[2017/08/31 12:32:19 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aitagent.exe
[2017/08/31 12:32:19 | 000,149,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srvcli.dll
[2017/08/31 12:32:19 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Dsui.dll
[2017/08/31 12:32:19 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlidfdp.dll
[2017/08/31 12:32:19 | 000,080,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bcd.dll
[2017/08/31 12:32:19 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xmlfilter.dll
[2017/08/31 12:32:19 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\energyprov.dll
[2017/08/31 12:32:18 | 000,305,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wusa.exe
[2017/08/31 12:32:18 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\uxlib.dll
[2017/08/31 12:32:18 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pnpclean.dll
[2017/08/31 12:32:18 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dmsynth.dll
[2017/08/31 12:32:18 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TpmInit.exe
[2017/08/31 12:32:18 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\driverquery.exe
[2017/08/31 12:32:18 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SMSRouter.dll
[2017/08/31 12:32:18 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\l2gpstore.dll
[2017/08/31 12:32:17 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mydocs.dll
[2017/08/31 12:32:17 | 000,089,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vmbkmcl.sys
[2017/08/31 12:32:17 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Pnrphc.dll
[2017/08/31 12:32:17 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bootcfg.exe
[2017/08/31 12:32:17 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Utilman.exe
[2017/08/31 12:32:17 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WfHC.dll
[2017/08/31 12:32:17 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DfsShlEx.dll
[2017/08/31 12:32:17 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ConnectedAccountState.dll
[2017/08/31 12:32:16 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\onexui.dll
[2017/08/31 12:32:16 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\splwow64.exe
[2017/08/31 12:32:16 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\remotesp.tsp
[2017/08/31 12:32:16 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\w32tm.exe
[2017/08/31 12:32:16 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DfsShlEx.dll
[2017/08/31 12:32:16 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\l2nacp.dll
[2017/08/31 12:32:16 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhtask.dll
[2017/08/31 12:32:16 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceConnectApi.dll
[2017/08/31 12:32:16 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msisip.dll
[2017/08/31 12:32:15 | 000,260,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ddputils.dll
[2017/08/31 12:32:15 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gcdef.dll
[2017/08/31 12:32:15 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\isoburn.exe
[2017/08/31 12:32:15 | 000,085,504 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll
[2017/08/31 12:32:15 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QUTIL.DLL
[2017/08/31 12:32:15 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MaintenanceUI.dll
[2017/08/31 12:32:15 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vfwwdm32.dll
[2017/08/31 12:32:14 | 000,201,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mdminst.dll
[2017/08/31 12:32:14 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Robocopy.exe
[2017/08/31 12:32:14 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\recovery.dll
[2017/08/31 12:32:14 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\remotesp.tsp
[2017/08/31 12:32:14 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsRdpWebAccess.dll
[2017/08/31 12:32:14 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dxof.dll
[2017/08/31 12:32:14 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\format.com
[2017/08/31 12:32:14 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmloader.dll
[2017/08/31 12:32:13 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EaseOfAccessDialog.exe
[2017/08/31 12:32:13 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\credui.dll
[2017/08/31 12:32:13 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\radardt.dll
[2017/08/31 12:32:13 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PNPXAssoc.dll
[2017/08/31 12:32:13 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FXSCOM.dll
[2017/08/31 12:32:13 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\regapi.dll
[2017/08/31 12:32:13 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nslookup.exe
[2017/08/31 12:32:13 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QCLIPROV.DLL
[2017/08/31 12:32:13 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Printers.Extensions.dll
[2017/08/31 12:32:12 | 001,086,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\onexui.dll
[2017/08/31 12:32:12 | 000,203,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\onex.dll
[2017/08/31 12:32:12 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netid.dll
[2017/08/31 12:32:12 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fwcfg.dll
[2017/08/31 12:32:12 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dispdiag.exe
[2017/08/31 12:32:12 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DHCPQEC.DLL
[2017/08/31 12:32:12 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WWanHC.dll
[2017/08/31 12:32:12 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\net.exe
[2017/08/31 12:32:12 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\httpapi.dll
[2017/08/31 12:32:11 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winrscmd.dll
[2017/08/31 12:32:11 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcirt.dll
[2017/08/31 12:32:11 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avicap32.dll
[2017/08/31 12:32:11 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DAConn.dll
[2017/08/31 12:32:11 | 000,054,272 | ---- | C] (Twain Working Group) -- C:\Windows\twain_32.dll
[2017/08/31 12:32:11 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\luainstall.dll
[2017/08/31 12:32:11 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bidispl.dll
[2017/08/31 12:32:11 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xmlfilter.dll
[2017/08/31 12:32:11 | 000,044,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netutils.dll
[2017/08/31 12:32:11 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mimefilt.dll
[2017/08/31 12:32:10 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\keymgr.dll
[2017/08/31 12:32:10 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\McxDriv.dll
[2017/08/31 12:32:10 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DWWIN.EXE
[2017/08/31 12:32:10 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apprepapi.dll
[2017/08/31 12:32:10 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gcdef.dll
[2017/08/31 12:32:10 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winbio.dll
[2017/08/31 12:32:10 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xwreg.dll
[2017/08/31 12:32:10 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\isoburn.exe
[2017/08/31 12:32:10 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSCOM.dll
[2017/08/31 12:32:10 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\BluetoothApis.dll
[2017/08/31 12:32:10 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UserAccountControlSettings.dll
[2017/08/31 12:32:10 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SortWindows6Compat.dll
[2017/08/31 12:32:09 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mydocs.dll
[2017/08/31 12:32:09 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\efsadu.dll
[2017/08/31 12:32:09 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spfileq.dll
[2017/08/31 12:32:09 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\umb.dll
[2017/08/31 12:32:09 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\HelpPaneProxy.dll
[2017/08/31 12:32:09 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\l2nacp.dll
[2017/08/31 12:32:09 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdiagschd.dll
[2017/08/31 12:32:09 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bidispl.dll
[2017/08/31 12:32:08 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsutil.dll
[2017/08/31 12:32:08 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcshext.dll
[2017/08/31 12:32:08 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dasHost.exe
[2017/08/31 12:32:08 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netsh.exe
[2017/08/31 12:32:08 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sendmail.dll
[2017/08/31 12:32:08 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhlisten.dll
[2017/08/31 12:32:08 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MsRdpWebAccess.dll
[2017/08/31 12:32:08 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegCtrl.dll
[2017/08/31 12:32:08 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmband.dll
[2017/08/31 12:32:08 | 000,034,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CredentialUIBroker.exe
[2017/08/31 12:32:08 | 000,028,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CameraSettingsUIHost.exe
[2017/08/31 12:32:08 | 000,026,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PickerHost.exe
[2017/08/31 12:32:07 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\syncui.dll
[2017/08/31 12:32:07 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\stclient.dll
[2017/08/31 12:32:07 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SyncHost.exe
[2017/08/31 12:32:07 | 000,045,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CloudNotifications.exe
[2017/08/31 12:32:07 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetNetworkLocation.dll
[2017/08/31 12:32:07 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mciqtz32.dll
[2017/08/31 12:32:07 | 000,040,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EmbeddedAppLauncherConfig.dll
[2017/08/31 12:32:06 | 000,313,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SrpUxNativeSnapIn.dll
[2017/08/31 12:32:06 | 000,188,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\irftp.exe
[2017/08/31 12:32:06 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DevDispItemProvider.dll
[2017/08/31 12:32:06 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wiaacmgr.exe
[2017/08/31 12:32:06 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasdiag.dll
[2017/08/31 12:32:06 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ftp.exe
[2017/08/31 12:32:06 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RoamingSecurity.dll
[2017/08/31 12:32:06 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PlayToStatusProvider.dll
[2017/08/31 12:32:05 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\uireng.dll
[2017/08/31 12:32:05 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmcshext.dll
[2017/08/31 12:32:05 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiaacmgr.exe
[2017/08/31 12:32:05 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ucmhc.dll
[2017/08/31 12:32:05 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\stclient.dll
[2017/08/31 12:32:05 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegCtrl.dll
[2017/08/31 12:32:05 | 000,040,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CloudNotifications.exe
[2017/08/31 12:32:04 | 000,700,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elslad.dll
[2017/08/31 12:32:04 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll
[2017/08/31 12:32:04 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mapistub.dll
[2017/08/31 12:32:04 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mapi32.dll
[2017/08/31 12:32:04 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasdiag.dll
[2017/08/31 12:32:04 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UserAccountControlSettings.dll
[2017/08/31 12:32:04 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sendmail.dll
[2017/08/31 12:32:04 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SyncHost.exe
[2017/08/31 12:32:04 | 000,038,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CredentialUIBroker.exe
[2017/08/31 12:32:04 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vidcap.ax
[2017/08/31 12:32:04 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Printers.Extensions.dll
[2017/08/31 12:32:03 | 000,393,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shrpubw.exe
[2017/08/31 12:32:03 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\werui.dll
[2017/08/31 12:32:03 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3api.dll
[2017/08/31 12:32:03 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spbcd.dll
[2017/08/31 12:32:03 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\btpanui.dll
[2017/08/31 12:32:03 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdPnp.dll
[2017/08/31 12:32:03 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fmifs.dll
[2017/08/31 12:32:03 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\printfilterpipelineprxy.dll
[2017/08/31 12:32:03 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\luainstall.dll
[2017/08/31 12:32:03 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FdDevQuery.dll
[2017/08/31 12:32:02 | 000,150,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpps.dll
[2017/08/31 12:32:02 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvfw32.dll
[2017/08/31 12:32:02 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pcwutl.dll
[2017/08/31 12:32:02 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UXInit.dll
[2017/08/31 12:32:02 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\acppage.dll
[2017/08/31 12:32:02 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fdPnp.dll
[2017/08/31 12:32:02 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciqtz32.dll
[2017/08/31 12:32:01 | 000,131,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\easinvoker.exe
[2017/08/31 12:32:01 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spfileq.dll
[2017/08/31 12:32:01 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\console.dll
[2017/08/31 12:32:01 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\keyiso.dll
[2017/08/31 12:32:01 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\openfiles.exe
[2017/08/31 12:32:01 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AtBroker.exe
[2017/08/31 12:32:01 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ucmhc.dll
[2017/08/31 12:32:01 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\HelpPaneProxy.dll
[2017/08/31 12:32:01 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rrinstaller.exe
[2017/08/31 12:32:01 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mimefilt.dll
[2017/08/31 12:32:01 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ndfetw.dll
[2017/08/31 12:32:00 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3dlg.dll
[2017/08/31 12:32:00 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pautoenr.dll
[2017/08/31 12:32:00 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rrinstaller.exe
[2017/08/31 12:32:00 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PeerDistAD.dll
[2017/08/31 12:32:00 | 000,038,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\svchost.exe
[2017/08/31 12:32:00 | 000,038,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\utildll.dll
[2017/08/31 12:32:00 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceDisplayStatusManager.dll
[2017/08/31 12:31:59 | 000,177,152 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\SysNative\l3codecp.acm
[2017/08/31 12:31:59 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\srmtrace.dll
[2017/08/31 12:31:59 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RDSPnf.exe
[2017/08/31 12:31:59 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptext.dll
[2017/08/31 12:31:59 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\takeown.exe
[2017/08/31 12:31:59 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msimtf.dll
[2017/08/31 12:31:59 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmdl32.exe
[2017/08/31 12:31:59 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bderepair.dll
[2017/08/31 12:31:59 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\signdrv.dll
[2017/08/31 12:31:59 | 000,039,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdmo.dll
[2017/08/31 12:31:58 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll
[2017/08/31 12:31:58 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EhStorAuthn.exe
[2017/08/31 12:31:58 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xwreg.dll
[2017/08/31 12:31:58 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EhStorPwdMgr.dll
[2017/08/31 12:31:58 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\signdrv.dll
[2017/08/31 12:31:58 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RemoveDeviceContextHandler.dll
[2017/08/31 12:31:58 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuthExt.dll
[2017/08/31 12:31:57 | 000,231,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\onex.dll
[2017/08/31 12:31:57 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSUTILITY.dll
[2017/08/31 12:31:57 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winbio.dll
[2017/08/31 12:31:57 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\l2gpstore.dll
[2017/08/31 12:31:57 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcirt.dll
[2017/08/31 12:31:57 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acppage.dll
[2017/08/31 12:31:57 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\docprop.dll
[2017/08/31 12:31:57 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuthExt.dll
[2017/08/31 12:31:57 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DeviceDisplayStatusManager.dll
[2017/08/31 12:31:57 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CredentialMigrationHandler.dll
[2017/08/31 12:31:56 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PlaySndSrv.dll
[2017/08/31 12:31:56 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vsstrace.dll
[2017/08/31 12:31:56 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsvd.dll
[2017/08/31 12:31:56 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Globalization.Fontgroups.dll
[2017/08/31 12:31:56 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppxSysprep.dll
[2017/08/31 12:31:56 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PSModuleDiscoveryProvider.dll
[2017/08/31 12:31:56 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mskeyprotect.dll
[2017/08/31 12:31:56 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpkinstall.exe
[2017/08/31 12:31:56 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WcnNetsh.dll
[2017/08/31 12:31:56 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sxssrv.dll
[2017/08/31 12:31:56 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PlayToStatusProvider.dll
[2017/08/31 12:31:55 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winrscmd.dll
[2017/08/31 12:31:55 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasmbmgr.dll
[2017/08/31 12:31:55 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cngprovider.dll
[2017/08/31 12:31:55 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\capiprovider.dll
[2017/08/31 12:31:55 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpapiprovider.dll
[2017/08/31 12:31:55 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setx.exe
[2017/08/31 12:31:55 | 000,044,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wldp.dll
[2017/08/31 12:31:55 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dataclen.dll
[2017/08/31 12:31:55 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wincredprovider.dll
[2017/08/31 12:31:55 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\traffic.dll
[2017/08/31 12:31:55 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FdDevQuery.dll
[2017/08/31 12:31:55 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UserLanguageProfileCallback.dll
[2017/08/31 12:31:54 | 002,013,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\batmeter.dll
[2017/08/31 12:31:54 | 000,274,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Media.Streaming.ps.dll
[2017/08/31 12:31:54 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drvinst.exe
[2017/08/31 12:31:54 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\w32tm.exe
[2017/08/31 12:31:54 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhevents.dll
[2017/08/31 12:31:54 | 000,069,120 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\SysWow64\l3codeca.acm
[2017/08/31 12:31:54 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll
[2017/08/31 12:31:54 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MbaeXmlParser.dll
[2017/08/31 12:31:54 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Portable.dll
[2017/08/31 12:31:54 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ThumbnailExtractionHost.exe
[2017/08/31 12:31:54 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vidcap.ax
[2017/08/31 12:31:53 | 000,466,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\main.cpl
[2017/08/31 12:31:53 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hdwwiz.cpl
[2017/08/31 12:31:53 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DevDispItemProvider.dll
[2017/08/31 12:31:53 | 000,080,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll
[2017/08/31 12:31:53 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssign32.dll
[2017/08/31 12:31:53 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3dlg.dll
[2017/08/31 12:31:53 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pcaui.dll
[2017/08/31 12:31:53 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hcproviders.dll
[2017/08/31 12:31:53 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CredentialMigrationHandler.dll
[2017/08/31 12:31:52 | 002,022,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\batmeter.dll
[2017/08/31 12:31:52 | 000,250,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srrstr.dll
[2017/08/31 12:31:52 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msctfp.dll
[2017/08/31 12:31:52 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
[2017/08/31 12:31:52 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usbui.dll
[2017/08/31 12:31:52 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pcaui.dll
[2017/08/31 12:31:52 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbcbcp.dll
[2017/08/31 12:31:52 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RdpSa.exe
[2017/08/31 12:31:52 | 000,035,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\avrt.dll
[2017/08/31 12:31:52 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msisip.dll
[2017/08/31 12:31:51 | 000,184,832 | ---- | C] (Microsoft Corp.) -- C:\Windows\SysNative\Defrag.exe
[2017/08/31 12:31:51 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbccp32.dll
[2017/08/31 12:31:51 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tcpmonui.dll
[2017/08/31 12:31:51 | 000,051,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wwapi.dll
[2017/08/31 12:31:51 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RemoveDeviceContextHandler.dll
[2017/08/31 12:31:51 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hid.dll
[2017/08/31 12:31:51 | 000,031,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PasswordOnWakeSettingFlyout.exe
[2017/08/31 12:31:51 | 000,029,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PasswordOnWakeSettingFlyout.exe
[2017/08/31 12:31:50 | 000,589,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elslad.dll
[2017/08/31 12:31:50 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NcaSvc.dll
[2017/08/31 12:31:50 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdProxy.dll
[2017/08/31 12:31:50 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmictimeprovider.dll
[2017/08/31 12:31:50 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\whoami.exe
[2017/08/31 12:31:50 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wpcfltr.sys
[2017/08/31 12:31:50 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ndiscapCfg.dll
[2017/08/31 12:31:50 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dataclen.dll
[2017/08/31 12:31:50 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hcproviders.dll
[2017/08/31 12:31:50 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Portable.dll
[2017/08/31 12:31:50 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pwsso.dll
[2017/08/31 12:31:50 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UserLanguageProfileCallback.dll
[2017/08/31 12:31:49 | 000,344,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certCredProvider.dll
[2017/08/31 12:31:49 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SrpUxNativeSnapIn.dll
[2017/08/31 12:31:49 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netiohlp.dll
[2017/08/31 12:31:49 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdsapi.dll
[2017/08/31 12:31:49 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhmanagew.exe
[2017/08/31 12:31:49 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EhStorPwdMgr.dll
[2017/08/31 12:31:49 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\efsadu.dll
[2017/08/31 12:31:49 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\btpanui.dll
[2017/08/31 12:31:49 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tvratings.dll
[2017/08/31 12:31:48 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlrmdr.exe
[2017/08/31 12:31:48 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe
[2017/08/31 12:31:48 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ndiscapCfg.dll
[2017/08/31 12:31:48 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msports.dll
[2017/08/31 12:31:48 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ProximityServicePal.dll
[2017/08/31 12:31:48 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LockScreenContentHost.dll
[2017/08/31 12:31:48 | 000,029,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfpmp.exe
[2017/08/31 12:31:48 | 000,028,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SysResetErr.exe
[2017/08/31 12:31:47 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\NdisImPlatform.sys
[2017/08/31 12:31:47 | 000,095,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcd.dll
[2017/08/31 12:31:47 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercfg.exe
[2017/08/31 12:31:47 | 000,082,432 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\SysNative\l3codeca.acm
[2017/08/31 12:31:47 | 000,063,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwapi.dll
[2017/08/31 12:31:47 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\reg.exe
[2017/08/31 12:31:47 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PrintIsolationProxy.dll
[2017/08/31 12:31:47 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adprovider.dll
[2017/08/31 12:31:47 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pwlauncher.exe
[2017/08/31 12:31:47 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceDriverRetrievalClient.dll
[2017/08/31 12:31:46 | 000,354,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bdechangepin.exe
[2017/08/31 12:31:46 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mciavi32.dll
[2017/08/31 12:31:46 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\avicap32.dll
[2017/08/31 12:31:46 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3cfg.dll
[2017/08/31 12:31:46 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf3216.dll
[2017/08/31 12:31:46 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SortServer2003Compat.dll
[2017/08/31 12:31:46 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtffilt.dll
[2017/08/31 12:31:46 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\olesvr32.dll
[2017/08/31 12:31:46 | 000,029,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\version.dll
[2017/08/31 12:31:46 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ThumbnailExtractionHost.exe
[2017/08/31 12:31:46 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dswave.dll
[2017/08/31 12:31:45 | 000,403,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shrpubw.exe
[2017/08/31 12:31:45 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhautoplay.dll
[2017/08/31 12:31:45 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Globalization.Fontgroups.dll
[2017/08/31 12:31:45 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TSTheme.exe
[2017/08/31 12:31:45 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmmon32.exe
[2017/08/31 12:31:45 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dimsroam.dll
[2017/08/31 12:31:45 | 000,033,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RuntimeBroker.exe
[2017/08/31 12:31:45 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sxsstore.dll
[2017/08/31 12:31:45 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2017/08/31 12:31:45 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AzSqlExt.dll
[2017/08/31 12:31:45 | 000,026,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfpmp.exe
[2017/08/31 12:31:45 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elsTrans.dll
[2017/08/31 12:31:44 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3msm.dll
[2017/08/31 12:31:44 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSDPrintProxy.DLL
[2017/08/31 12:31:44 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\unimdmat.dll
[2017/08/31 12:31:44 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cttunesvr.exe
[2017/08/31 12:31:44 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PSModuleDiscoveryProvider.dll
[2017/08/31 12:31:44 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dtsh.dll
[2017/08/31 12:31:44 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cttunesvr.exe
[2017/08/31 12:31:44 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winbrand.dll
[2017/08/31 12:31:44 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshhttp.dll
[2017/08/31 12:31:44 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elsTrans.dll
[2017/08/31 12:31:44 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sxsstore.dll
[2017/08/31 12:31:43 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\newdev.dll
[2017/08/31 12:31:43 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sethc.exe
[2017/08/31 12:31:43 | 000,212,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cleanmgr.exe
[2017/08/31 12:31:43 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppnp.dll
[2017/08/31 12:31:43 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PlaySndSrv.dll
[2017/08/31 12:31:43 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmutil.dll
[2017/08/31 12:31:43 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gpprnext.dll
[2017/08/31 12:31:43 | 000,034,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KeyboardFilterCore.dll
[2017/08/31 12:31:43 | 000,033,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winnsi.dll
[2017/08/31 12:31:43 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsCtfMonitor.dll
[2017/08/31 12:31:42 | 000,337,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certCredProvider.dll
[2017/08/31 12:31:42 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\joy.cpl
[2017/08/31 12:31:42 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EhStorAuthn.exe
[2017/08/31 12:31:42 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe
[2017/08/31 12:31:42 | 000,061,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\winhv.sys
[2017/08/31 12:31:42 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\feclient.dll
[2017/08/31 12:31:42 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\uicom.dll
[2017/08/31 12:31:42 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\htui.dll
[2017/08/31 12:31:42 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcfg.exe
[2017/08/31 12:31:42 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmiprop.dll
[2017/08/31 12:31:41 | 000,416,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\irprops.cpl
[2017/08/31 12:31:41 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSDScanProxy.dll
[2017/08/31 12:31:41 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpremove.exe
[2017/08/31 12:31:41 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msident.dll
[2017/08/31 12:31:41 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSTheme.exe
[2017/08/31 12:31:41 | 000,043,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\utildll.dll
[2017/08/31 12:31:41 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eventcreate.exe
[2017/08/31 12:31:41 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tvratings.dll
[2017/08/31 12:31:41 | 000,027,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmbuspipe.dll
[2017/08/31 12:31:40 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptext.dll
[2017/08/31 12:31:40 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uicom.dll
[2017/08/31 12:31:40 | 000,041,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KeyboardFilterCore.dll
[2017/08/31 12:31:40 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfctrs.dll
[2017/08/31 12:31:40 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\forfiles.exe
[2017/08/31 12:31:40 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MirrorDrvCompat.dll
[2017/08/31 12:31:40 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gpprnext.dll
[2017/08/31 12:31:40 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winbrand.dll
[2017/08/31 12:31:40 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rtffilt.dll
[2017/08/31 12:31:40 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\more.com
[2017/08/31 12:31:40 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mode.com
[2017/08/31 12:31:39 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\repair-bde.exe
[2017/08/31 12:31:39 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiarpc.dll
[2017/08/31 12:31:39 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3gpclnt.dll
[2017/08/31 12:31:39 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsnmp32.dll
[2017/08/31 12:31:39 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FXSEXT32.dll
[2017/08/31 12:31:39 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dimsjob.dll
[2017/08/31 12:31:39 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfos.dll
[2017/08/31 12:31:39 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sfc.exe
[2017/08/31 12:31:39 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hidphone.tsp
[2017/08/31 12:31:39 | 000,031,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptbase.dll
[2017/08/31 12:31:39 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Dot3Conn.dll
[2017/08/31 12:31:38 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drttransport.dll
[2017/08/31 12:31:38 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cipher.exe
[2017/08/31 12:31:38 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RdpSa.exe
[2017/08/31 12:31:38 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\format.com
[2017/08/31 12:31:38 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\where.exe
[2017/08/31 12:31:38 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AzSqlExt.dll
[2017/08/31 12:31:38 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.ApplicationModel.Background.SystemEventsBroker.dll
[2017/08/31 12:31:38 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BthMtpContextHandler.dll
[2017/08/31 12:31:38 | 000,024,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nsi.dll
[2017/08/31 12:31:38 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshcon.dll
[2017/08/31 12:31:38 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.ApplicationModel.Background.TimeBroker.dll
[2017/08/31 12:31:38 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fc.exe
[2017/08/31 12:31:37 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuthFWGP.dll
[2017/08/31 12:31:37 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sti_ci.dll
[2017/08/31 12:31:37 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drttransport.dll
[2017/08/31 12:31:37 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Magnification.dll
[2017/08/31 12:31:37 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RotMgr.dll
[2017/08/31 12:31:37 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ddodiag.exe
[2017/08/31 12:31:37 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSyncPolicy.dll
[2017/08/31 12:31:37 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LldpNotify.dll
[2017/08/31 12:31:37 | 000,025,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsrole.dll
[2017/08/31 12:31:37 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\more.com
[2017/08/31 12:31:37 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dswave.dll
[2017/08/31 12:31:37 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comp.exe
[2017/08/31 12:31:36 | 000,423,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\irprops.cpl
[2017/08/31 12:31:36 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuthFWGP.dll
[2017/08/31 12:31:36 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWWIN.EXE
[2017/08/31 12:31:36 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3msm.dll
[2017/08/31 12:31:36 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mspatchc.dll
[2017/08/31 12:31:36 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3gpclnt.dll
[2017/08/31 12:31:36 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasphone.exe
[2017/08/31 12:31:36 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\choice.exe
[2017/08/31 12:31:36 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\timeout.exe
[2017/08/31 12:31:36 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clip.exe
[2017/08/31 12:31:35 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdsrv.dll
[2017/08/31 12:31:35 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanprotdim.dll
[2017/08/31 12:31:35 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdrleakdiag.exe
[2017/08/31 12:31:35 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ByteCodeGenerator.exe
[2017/08/31 12:31:35 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MirrorDrvCompat.dll
[2017/08/31 12:31:35 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gpscript.exe
[2017/08/31 12:31:35 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmiprop.dll
[2017/08/31 12:31:35 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comp.exe
[2017/08/31 12:31:35 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fc.exe
[2017/08/31 12:31:35 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MsCtfMonitor.dll
[2017/08/31 12:31:34 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uireng.dll
[2017/08/31 12:31:34 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srhelper.dll
[2017/08/31 12:31:34 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\napdsnap.dll
[2017/08/31 12:31:34 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\capiprovider.dll
[2017/08/31 12:31:34 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpapiprovider.dll
[2017/08/31 12:31:34 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wincredprovider.dll
[2017/08/31 12:31:34 | 000,043,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdmo.dll
[2017/08/31 12:31:34 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\kmddsp.tsp
[2017/08/31 12:31:34 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\runonce.exe
[2017/08/31 12:31:34 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dialer.exe
[2017/08/31 12:31:34 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bthpanapi.dll
[2017/08/31 12:31:34 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mtxlegih.dll
[2017/08/31 12:31:34 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ByteCodeGenerator.exe
[2017/08/31 12:31:34 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mtxdm.dll
[2017/08/31 12:31:34 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmsDeviceAccessRevocation.dll
[2017/08/31 12:31:33 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\joy.cpl
[2017/08/31 12:31:33 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Media.Streaming.ps.dll
[2017/08/31 12:31:33 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UXInit.dll
[2017/08/31 12:31:33 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cngprovider.dll
[2017/08/31 12:31:33 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\radarrs.dll
[2017/08/31 12:31:33 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mskeyprotect.dll
[2017/08/31 12:31:33 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sxshared.dll
[2017/08/31 12:31:33 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\waitfor.exe
[2017/08/31 12:31:33 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshcon.dll
[2017/08/31 12:31:32 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RelPost.exe
[2017/08/31 12:31:32 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mspatchc.dll
[2017/08/31 12:31:32 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msauserext.dll
[2017/08/31 12:31:32 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adprovider.dll
[2017/08/31 12:31:32 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Enumeration.ps.dll
[2017/08/31 12:31:32 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\expand.exe
[2017/08/31 12:31:32 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Magnification.dll
[2017/08/31 12:31:32 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
[2017/08/31 12:31:32 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.ApplicationModel.Background.TimeBroker.dll
[2017/08/31 12:31:31 | 000,217,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cleanmgr.exe
[2017/08/31 12:31:31 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BluetoothApis.dll
[2017/08/31 12:31:31 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetmib1.dll
[2017/08/31 12:31:31 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tlscsp.dll
[2017/08/31 12:31:31 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pwrshplugin.dll
[2017/08/31 12:31:31 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdmlog.dll
[2017/08/31 12:31:31 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cfmifs.dll
[2017/08/31 12:31:30 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdmps.dll
[2017/08/31 12:31:30 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msctfp.dll
[2017/08/31 12:31:30 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drtprov.dll
[2017/08/31 12:31:30 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rundll32.exe
[2017/08/31 12:31:30 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scext.dll
[2017/08/31 12:31:30 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\profext.dll
[2017/08/31 12:31:30 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\docprop.dll
[2017/08/31 12:31:30 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mcicda.dll
[2017/08/31 12:31:30 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\srumapi.dll
[2017/08/31 12:31:30 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mode.com
[2017/08/31 12:31:29 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srumapi.dll
[2017/08/31 12:31:29 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfscli.dll
[2017/08/31 12:31:29 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sfc.exe
[2017/08/31 12:31:29 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbcbcp.dll
[2017/08/31 12:31:29 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetProxyCredential.dll
[2017/08/31 12:31:29 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmlua.dll
[2017/08/31 12:31:29 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmcfg32.dll
[2017/08/31 12:31:29 | 000,033,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel.appcore.dll
[2017/08/31 12:31:29 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.System.Display.dll
[2017/08/31 12:31:29 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingSyncPolicy.dll
[2017/08/31 12:31:29 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmpbk32.dll
[2017/08/31 12:31:29 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ureg.dll
[2017/08/31 12:31:28 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sc.exe
[2017/08/31 12:31:28 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winrs.exe
[2017/08/31 12:31:28 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gpscript.exe
[2017/08/31 12:31:28 | 000,029,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\kernel.appcore.dll
[2017/08/31 12:31:28 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\w32topl.dll
[2017/08/31 12:31:27 | 000,301,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\modemui.dll
[2017/08/31 12:31:27 | 000,195,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PkgMgr.exe
[2017/08/31 12:31:27 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\napdsnap.dll
[2017/08/31 12:31:27 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pwrshplugin.dll
[2017/08/31 12:31:27 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\feclient.dll
[2017/08/31 12:31:27 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dmocx.dll
[2017/08/31 12:31:27 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dimsroam.dll
[2017/08/31 12:31:27 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll
[2017/08/31 12:31:27 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chkwudrv.dll
[2017/08/31 12:31:27 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\easconsent.dll
[2017/08/31 12:31:26 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fsutil.exe
[2017/08/31 12:31:26 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanext.exe
[2017/08/31 12:31:26 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drvcfg.exe
[2017/08/31 12:31:26 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfp.exe
[2017/08/31 12:31:25 | 000,857,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSST.dll
[2017/08/31 12:31:25 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\unregmp2.exe
[2017/08/31 12:31:25 | 000,108,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bootsect.exe
[2017/08/31 12:31:25 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll
[2017/08/31 12:31:25 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\expand.exe
[2017/08/31 12:31:25 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PeerDistHttpTrans.dll
[2017/08/31 12:31:25 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pid.dll
[2017/08/31 12:31:25 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sxstrace.exe
[2017/08/31 12:31:25 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\findstr.exe
[2017/08/31 12:31:25 | 000,025,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\streamci.dll
[2017/08/31 12:31:25 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.System.Display.dll
[2017/08/31 12:31:24 | 000,165,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\keymgr.dll
[2017/08/31 12:31:24 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\charmap.exe
[2017/08/31 12:31:24 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmci.dll
[2017/08/31 12:31:24 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwancfg.dll
[2017/08/31 12:31:24 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\datusage.dll
[2017/08/31 12:31:24 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shutdown.exe
[2017/08/31 12:31:24 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dimsjob.dll
[2017/08/31 12:31:24 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdWNet.dll
[2017/08/31 12:31:24 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\chkdsk.exe
[2017/08/31 12:31:24 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\serwvdrv.dll
[2017/08/31 12:31:23 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netsh.exe
[2017/08/31 12:31:23 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setupcln.dll
[2017/08/31 12:31:23 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XInput1_4.dll
[2017/08/31 12:31:23 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbcconf.dll
[2017/08/31 12:31:23 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsepno.dll
[2017/08/31 12:31:23 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\efsutil.dll
[2017/08/31 12:31:23 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tbs.dll
[2017/08/31 12:31:23 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.System.Profile.SystemManufacturers.dll
[2017/08/31 12:31:22 | 000,380,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptuiwizard.dll
[2017/08/31 12:31:22 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MuiUnattend.exe
[2017/08/31 12:31:22 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SrTasks.exe
[2017/08/31 12:31:22 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\profext.dll
[2017/08/31 12:31:22 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AtBroker.exe
[2017/08/31 12:31:22 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Websocket.dll
[2017/08/31 12:31:22 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tbs.dll
[2017/08/31 12:31:21 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\deskmon.dll
[2017/08/31 12:31:21 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mspatcha.dll
[2017/08/31 12:31:21 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cfmifs.dll
[2017/08/31 12:31:21 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NETSTAT.EXE
[2017/08/31 12:31:21 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shgina.dll
[2017/08/31 12:31:21 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.System.Profile.SystemManufacturers.dll
[2017/08/31 12:31:21 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsldr.exe
[2017/08/31 12:31:21 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eapprovp.dll
[2017/08/31 12:31:21 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsperf.dll
[2017/08/31 12:31:21 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DefaultPrinterProvider.dll
[2017/08/31 12:31:20 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdboot.exe
[2017/08/31 12:31:20 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\findstr.exe
[2017/08/31 12:31:20 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptdlg.dll
[2017/08/31 12:31:20 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NcdProp.dll
[2017/08/31 12:31:20 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shimgvw.dll
[2017/08/31 12:31:20 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tree.com
[2017/08/31 12:31:19 | 001,497,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskcopy.dll
[2017/08/31 12:31:19 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\whoami.exe
[2017/08/31 12:31:19 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmocx.dll
[2017/08/31 12:31:19 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsiCofire.dll
[2017/08/31 12:31:19 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmiclnt.dll
[2017/08/31 12:31:19 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icacls.exe
[2017/08/31 12:31:19 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eapprovp.dll
[2017/08/31 12:31:19 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\serwvdrv.dll
[2017/08/31 12:31:19 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RdpSaProxy.exe
[2017/08/31 12:31:19 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tree.com
[2017/08/31 12:31:18 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cngcredui.dll
[2017/08/31 12:31:18 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tcpmib.dll
[2017/08/31 12:31:18 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DefaultPrinterProvider.dll
[2017/08/31 12:31:18 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\userinit.exe
[2017/08/31 12:31:18 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\encapi.dll
[2017/08/31 12:31:18 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\replace.exe
[2017/08/31 12:31:18 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hnetmon.dll
[2017/08/31 12:31:17 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\deskmon.dll
[2017/08/31 12:31:17 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\runonce.exe
[2017/08/31 12:31:17 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdmlog.dll
[2017/08/31 12:31:17 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SecEdit.exe
[2017/08/31 12:31:17 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\witnesswmiv2provider.dll
[2017/08/31 12:31:17 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfdisk.dll
[2017/08/31 12:31:17 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rpcnsh.dll
[2017/08/31 12:31:17 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\brdgcfg.dll
[2017/08/31 12:31:17 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icmui.dll
[2017/08/31 12:31:17 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmutil.dll
[2017/08/31 12:31:17 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shimgvw.dll
[2017/08/31 12:31:16 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tcpmonui.dll
[2017/08/31 12:31:16 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmlua.dll
[2017/08/31 12:31:16 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cacls.exe
[2017/08/31 12:31:16 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.System.RemoteDesktop.dll
[2017/08/31 12:31:16 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsperf.dll
[2017/08/31 12:31:16 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\attrib.exe
[2017/08/31 12:31:16 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\doskey.exe
[2017/08/31 12:31:15 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vds_ps.dll
[2017/08/31 12:31:15 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PrintIsolationHost.exe
[2017/08/31 12:31:15 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fsutilext.dll
[2017/08/31 12:31:15 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ddodiag.exe
[2017/08/31 12:31:15 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XInput1_4.dll
[2017/08/31 12:31:15 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shgina.dll
[2017/08/31 12:31:15 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icsunattend.exe
[2017/08/31 12:31:14 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cngcredui.dll
[2017/08/31 12:31:14 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\regapi.dll
[2017/08/31 12:31:14 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlidnsp.dll
[2017/08/31 12:31:14 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\esentprf.dll
[2017/08/31 12:31:14 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Websocket.dll
[2017/08/31 12:31:14 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bridgeunattend.exe
[2017/08/31 12:31:14 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shpafact.dll
[2017/08/31 12:31:14 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shpafact.dll
[2017/08/31 12:31:13 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CompMgmtLauncher.exe
[2017/08/31 12:31:13 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setupcln.dll
[2017/08/31 12:31:13 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drtprov.dll
[2017/08/31 12:31:13 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcicda.dll
[2017/08/31 12:31:13 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NcdProp.dll
[2017/08/31 12:31:13 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chkdsk.exe
[2017/08/31 12:31:13 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winrshost.exe
[2017/08/31 12:31:13 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbnmpntw.dll
[2017/08/31 12:31:13 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\compact.exe
[2017/08/31 12:31:13 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiatrace.dll
[2017/08/31 12:31:12 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tcpmib.dll
[2017/08/31 12:31:12 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasmxs.dll
[2017/08/31 12:31:12 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\proquota.exe
[2017/08/31 12:31:12 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\httpapi.dll
[2017/08/31 12:31:12 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CheckNetIsolation.exe
[2017/08/31 12:31:12 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netiougc.exe
[2017/08/31 12:31:12 | 000,021,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tbs.sys
[2017/08/31 12:31:12 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\chkntfs.exe
[2017/08/31 12:31:12 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.System.RemoteDesktop.dll
[2017/08/31 12:31:12 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\find.exe
[2017/08/31 12:31:11 | 000,146,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\msgpioclx.sys
[2017/08/31 12:31:11 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xwizard.exe
[2017/08/31 12:31:11 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tlscsp.dll
[2017/08/31 12:31:11 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perfos.dll
[2017/08/31 12:31:11 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinFax.dll
[2017/08/31 12:31:11 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\snmpapi.dll
[2017/08/31 12:31:11 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbcconf.dll
[2017/08/31 12:31:11 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\encapi.dll
[2017/08/31 12:31:11 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dvdupgrd.exe
[2017/08/31 12:31:11 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\replace.exe
[2017/08/31 12:31:11 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prevhost.exe
[2017/08/31 12:31:10 | 000,638,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIRibbonRes.dll
[2017/08/31 12:31:10 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xwizard.exe
[2017/08/31 12:31:10 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\efslsaext.dll
[2017/08/31 12:31:10 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qmgrprxy.dll
[2017/08/31 12:31:10 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\deskadp.dll
[2017/08/31 12:31:10 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\lodctr.exe
[2017/08/31 12:31:10 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\w32topl.dll
[2017/08/31 12:31:10 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ipconfig.exe
[2017/08/31 12:31:10 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\linkinfo.dll
[2017/08/31 12:31:10 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dsauth.dll
[2017/08/31 12:31:10 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ureg.dll
[2017/08/31 12:31:10 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ifmon.dll
[2017/08/31 12:31:10 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgentc.exe
[2017/08/31 12:31:10 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prevhost.exe
[2017/08/31 12:31:09 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\deskadp.dll
[2017/08/31 12:31:09 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hidphone.tsp
[2017/08/31 12:31:09 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfproc.dll
[2017/08/31 12:31:09 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfcsubs.dll
[2017/08/31 12:31:09 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pnpui.dll
[2017/08/31 12:31:09 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BackgroundTransferHost.exe
[2017/08/31 12:31:09 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\credwiz.exe
[2017/08/31 12:31:09 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EventAggregation.dll
[2017/08/31 12:31:09 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RpcPing.exe
[2017/08/31 12:31:09 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hnetmon.dll
[2017/08/31 12:31:09 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icsunattend.exe
[2017/08/31 12:31:08 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmdl32.exe
[2017/08/31 12:31:08 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfdts.dll
[2017/08/31 12:31:08 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmmon32.exe
[2017/08/31 12:31:08 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\regini.exe
[2017/08/31 12:31:08 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sxstrace.exe
[2017/08/31 12:31:08 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xmlprovi.dll
[2017/08/31 12:31:08 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbcconf.exe
[2017/08/31 12:31:08 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
[2017/08/31 12:31:07 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hotplug.dll
[2017/08/31 12:31:07 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msports.dll
[2017/08/31 12:31:07 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vds_ps.dll
[2017/08/31 12:31:07 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\traffic.dll
[2017/08/31 12:31:07 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\napipsec.dll
[2017/08/31 12:31:07 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfcsubs.dll
[2017/08/31 12:31:07 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysntfy.dll
[2017/08/31 12:31:07 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netbtugc.exe
[2017/08/31 12:31:07 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sisbkup.dll
[2017/08/31 12:31:07 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chkntfs.exe
[2017/08/31 12:31:07 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FileAppxStreamingDataSource.dll
[2017/08/31 12:31:06 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\loadperf.dll
[2017/08/31 12:31:06 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\djoin.exe
[2017/08/31 12:31:06 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tapilua.dll
[2017/08/31 12:31:06 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RdpSaProxy.exe
[2017/08/31 12:31:06 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\attrib.exe
[2017/08/31 12:31:06 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshqos.dll
[2017/08/31 12:31:06 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshqos.dll
[2017/08/31 12:31:06 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IconCodecService.dll
[2017/08/31 12:31:05 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WorkFolders.exe
[2017/08/31 12:31:05 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SpaceAgent.exe
[2017/08/31 12:31:05 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontview.exe
[2017/08/31 12:31:05 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winipsec.dll
[2017/08/31 12:31:05 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll
[2017/08/31 12:31:05 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlidnsp.dll
[2017/08/31 12:31:05 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kmddsp.tsp
[2017/08/31 12:31:05 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\extrac32.exe
[2017/08/31 12:31:05 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmpbk32.dll
[2017/08/31 12:31:05 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\regsvr32.exe
[2017/08/31 12:31:05 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\StorSvc.dll
[2017/08/31 12:31:05 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xmlprovi.dll
[2017/08/31 12:31:04 | 000,254,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXST30.dll
[2017/08/31 12:31:04 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ocsetapi.dll
[2017/08/31 12:31:04 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cipher.exe
[2017/08/31 12:31:04 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WofTasks.dll
[2017/08/31 12:31:04 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MemoryDiagnostic.dll
[2017/08/31 12:31:04 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mgmtapi.dll
[2017/08/31 12:31:04 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ProximityCommonPal.dll
[2017/08/31 12:31:03 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Storprop.dll
[2017/08/31 12:31:03 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmutil.dll
[2017/08/31 12:31:03 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\efsutil.dll
[2017/08/31 12:31:03 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmcfg32.dll
[2017/08/31 12:31:03 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sdiagnhost.exe
[2017/08/31 12:31:03 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\davhlpr.dll
[2017/08/31 12:31:03 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlaninst.dll
[2017/08/31 12:31:03 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mskeyprotcli.dll
[2017/08/31 12:31:02 | 000,157,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wof.sys
[2017/08/31 12:31:02 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pnppolicy.dll
[2017/08/31 12:31:02 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinFax.dll
[2017/08/31 12:31:02 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\syskey.exe
[2017/08/31 12:31:02 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\BackgroundTransferHost.exe
[2017/08/31 12:31:02 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winrshost.exe
[2017/08/31 12:31:02 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ARP.EXE
[2017/08/31 12:31:02 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\capisp.dll
[2017/08/31 12:31:02 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshelper.dll
[2017/08/31 12:31:02 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pstask.dll
[2017/08/31 12:31:01 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DFDWiz.exe
[2017/08/31 12:31:01 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fsutilext.dll
[2017/08/31 12:31:01 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Apphlpdm.dll
[2017/08/31 12:31:01 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpnsruprov.dll
[2017/08/31 12:31:01 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ARP.EXE
[2017/08/31 12:31:01 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sxshared.dll
[2017/08/31 12:31:01 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmstplua.dll
[2017/08/31 12:31:01 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskcomp.com
[2017/08/31 12:31:01 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
[2017/08/31 12:31:01 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ProximityCommonPal.dll
[2017/08/31 12:31:01 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskcopy.com
[2017/08/31 12:31:00 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasphone.exe
[2017/08/31 12:31:00 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bdeui.dll
[2017/08/31 12:31:00 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RdpSaUacHelper.exe
[2017/08/31 12:31:00 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\find.exe
[2017/08/31 12:31:00 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\regsvr32.exe
[2017/08/31 12:31:00 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\print.exe
[2017/08/31 12:30:59 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsmproxy.dll
[2017/08/31 12:30:59 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srwmi.dll
[2017/08/31 12:30:59 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\at.exe
[2017/08/31 12:30:59 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nci.dll
[2017/08/31 12:30:59 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fixmapi.exe
[2017/08/31 12:30:58 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wephostsvc.dll
[2017/08/31 12:30:58 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RdpSaUacHelper.exe
[2017/08/31 12:30:58 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasser.dll
[2017/08/31 12:30:58 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fixmapi.exe
[2017/08/31 12:30:58 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernelceip.dll
[2017/08/31 12:30:58 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmstplua.dll
[2017/08/31 12:30:58 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DefaultDeviceManager.dll
[2017/08/31 12:30:57 | 015,784,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DDORes.dll
[2017/08/31 12:30:57 | 000,349,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdedit.exe
[2017/08/31 12:30:57 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SubscriptionMgr.dll
[2017/08/31 12:30:57 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qmgrprxy.dll
[2017/08/31 12:30:57 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\userinitext.dll
[2017/08/31 12:30:56 | 001,502,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskcopy.dll
[2017/08/31 12:30:56 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ddp_ps.dll
[2017/08/31 12:30:56 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ifmon.dll
[2017/08/31 12:30:56 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\virtdisk.dll
[2017/08/31 12:30:56 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BthSQM.dll
[2017/08/31 12:30:56 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\upnpcont.exe
[2017/08/31 12:30:56 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\doskey.exe
[2017/08/31 12:30:56 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntlanui2.dll
[2017/08/31 12:30:56 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ReAgentTask.dll
[2017/08/31 12:30:56 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TimeSyncTask.dll
[2017/08/31 12:30:56 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\label.exe
[2017/08/31 12:30:56 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\regidle.dll
[2017/08/31 12:30:55 | 000,475,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\main.cpl
[2017/08/31 12:30:55 | 000,212,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mdminst.dll
[2017/08/31 12:30:55 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bthci.dll
[2017/08/31 12:30:55 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sxproxy.dll
[2017/08/31 12:30:55 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eventvwr.exe
[2017/08/31 12:30:55 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\htui.dll
[2017/08/31 12:30:55 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dmutil.dll
[2017/08/31 12:30:55 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uniplat.dll
[2017/08/31 12:30:55 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\energytask.dll
[2017/08/31 12:30:55 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskcomp.com
[2017/08/31 12:30:55 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\slpts.dll
[2017/08/31 12:30:55 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clb.dll
[2017/08/31 12:30:54 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsnmp32.dll
[2017/08/31 12:30:54 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\napipsec.dll
[2017/08/31 12:30:54 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\deviceassociation.dll
[2017/08/31 12:30:54 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OnDemandConnRouteHelper.dll
[2017/08/31 12:30:54 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WcnEapAuthProxy.dll
[2017/08/31 12:30:54 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\userinitext.dll
[2017/08/31 12:30:54 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schedcli.dll
[2017/08/31 12:30:54 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\uniplat.dll
[2017/08/31 12:30:54 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasctrs.dll
[2017/08/31 12:30:53 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hdwwiz.cpl
[2017/08/31 12:30:53 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\openfiles.exe
[2017/08/31 12:30:53 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfscli.dll
[2017/08/31 12:30:53 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mskeyprotcli.dll
[2017/08/31 12:30:53 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wksprtPS.dll
[2017/08/31 12:30:53 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ifsutilx.dll
[2017/08/31 12:30:53 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TtlsExt.dll
[2017/08/31 12:30:53 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CHxReadingStringIME.dll
[2017/08/31 12:30:52 | 015,789,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DDORes.dll
[2017/08/31 12:30:52 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pid.dll
[2017/08/31 12:30:52 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasmxs.dll
[2017/08/31 12:30:52 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aecache.dll
[2017/08/31 12:30:51 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\console.dll
[2017/08/31 12:30:51 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MuiUnattend.exe
[2017/08/31 12:30:51 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\umpoext.dll
[2017/08/31 12:30:51 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vpnikeapi.dll
[2017/08/31 12:30:51 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OnDemandConnRouteHelper.dll
[2017/08/31 12:30:51 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pots.dll
[2017/08/31 12:30:51 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ReAgentc.exe
[2017/08/31 12:30:51 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bi.dll
[2017/08/31 12:30:51 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msiltcfg.dll
[2017/08/31 12:30:51 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\print.exe
[2017/08/31 12:30:51 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CHxReadingStringIME.dll
[2017/08/31 12:30:50 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbctrac.dll
[2017/08/31 12:30:50 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spbcd.dll
[2017/08/31 12:30:50 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setbcdlocale.dll
[2017/08/31 12:30:50 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NetVscCoinstall.dll
[2017/08/31 12:30:50 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PnPUnattend.exe
[2017/08/31 12:30:50 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmiclnt.dll
[2017/08/31 12:30:50 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sxproxy.dll
[2017/08/31 12:30:50 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dispex.dll
[2017/08/31 12:30:50 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shunimpl.dll
[2017/08/31 12:30:50 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntlanui2.dll
[2017/08/31 12:30:50 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PING.EXE
[2017/08/31 12:30:50 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eventcls.dll
[2017/08/31 12:30:49 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sc.exe
[2017/08/31 12:30:49 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vss_ps.dll
[2017/08/31 12:30:49 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dispci.dll
[2017/08/31 12:30:49 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wdiasqmmodule.dll
[2017/08/31 12:30:49 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netiougc.exe
[2017/08/31 12:30:49 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TimeBrokerClient.dll
[2017/08/31 12:30:49 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pcacli.dll
[2017/08/31 12:30:49 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ROUTE.EXE
[2017/08/31 12:30:49 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spopk.dll
[2017/08/31 12:30:49 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TtlsExt.dll
[2017/08/31 12:30:49 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ktmutil.exe
[2017/08/31 12:30:49 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ifsutilx.dll
[2017/08/31 12:30:49 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dhcpcmonitor.dll
[2017/08/31 12:30:48 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbctrac.dll
[2017/08/31 12:30:48 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cliconfg.dll
[2017/08/31 12:30:48 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winipsec.dll
[2017/08/31 12:30:48 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NETSTAT.EXE
[2017/08/31 12:30:48 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\snmpapi.dll
[2017/08/31 12:30:48 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnscacheugc.exe
[2017/08/31 12:30:48 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wcmapi.dll
[2017/08/31 12:30:48 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdiagnhost.exe
[2017/08/31 12:30:48 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CSystemEventsBrokerClient.dll
[2017/08/31 12:30:48 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gptext.dll
[2017/08/31 12:30:48 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vdmdbg.dll
[2017/08/31 12:30:48 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\irclass.dll
[2017/08/31 12:30:48 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eventcls.dll
[2017/08/31 12:30:48 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\syssetup.dll
[2017/08/31 12:30:48 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\subst.exe
[2017/08/31 12:30:47 | 000,468,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nltest.exe
[2017/08/31 12:30:47 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogonext.dll
[2017/08/31 12:30:47 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mspatcha.dll
[2017/08/31 12:30:47 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tpmcompc.dll
[2017/08/31 12:30:47 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptdlg.dll
[2017/08/31 12:30:47 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WcnEapPeerProxy.dll
[2017/08/31 12:30:47 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dvdupgrd.exe
[2017/08/31 12:30:47 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciwave.dll
[2017/08/31 12:30:47 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WINSRPC.DLL
[2017/08/31 12:30:47 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TimeBrokerClient.dll
[2017/08/31 12:30:47 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sscoreext.dll
[2017/08/31 12:30:47 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\panmap.dll
[2017/08/31 12:30:46 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dramp.dll
[2017/08/31 12:30:46 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSTIFF.dll
[2017/08/31 12:30:46 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bootcfg.exe
[2017/08/31 12:30:46 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mobsync.exe
[2017/08/31 12:30:46 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ftp.exe
[2017/08/31 12:30:46 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\deviceassociation.dll
[2017/08/31 12:30:46 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsprx5.dll
[2017/08/31 12:30:46 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WINSRPC.DLL
[2017/08/31 12:30:46 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncuprov.dll
[2017/08/31 12:30:46 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasctrs.dll
[2017/08/31 12:30:46 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\grpconv.exe
[2017/08/31 12:30:46 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nlmsprep.dll
[2017/08/31 12:30:45 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsicpl.dll
[2017/08/31 12:30:45 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mobsync.exe
[2017/08/31 12:30:45 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSMON.dll
[2017/08/31 12:30:45 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscdll.dll
[2017/08/31 12:30:45 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vpnikeapi.dll
[2017/08/31 12:30:45 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Nlsdl.dll
[2017/08/31 12:30:45 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\grpconv.exe
[2017/08/31 12:30:45 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slpts.dll
[2017/08/31 12:30:45 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dispex.dll
[2017/08/31 12:30:44 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcsvc6.dll
[2017/08/31 12:30:44 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\catsrvps.dll
[2017/08/31 12:30:44 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxpps.dll
[2017/08/31 12:30:44 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SortWindows61.dll
[2017/08/31 12:30:44 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SyncInfrastructureps.dll
[2017/08/31 12:30:44 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\virtdisk.dll
[2017/08/31 12:30:44 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wcmapi.dll
[2017/08/31 12:30:44 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\osbaseln.dll
[2017/08/31 12:30:44 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DDACLSys.dll
[2017/08/31 12:30:44 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\serialui.dll
[2017/08/31 12:30:44 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpapi.dll
[2017/08/31 12:30:44 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcico.dll
[2017/08/31 12:30:44 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\raschapext.dll
[2017/08/31 12:30:43 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ksetup.exe
[2017/08/31 12:30:43 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srm_ps.dll
[2017/08/31 12:30:43 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RpcPing.exe
[2017/08/31 12:30:43 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbcconf.exe
[2017/08/31 12:30:43 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\catsrvps.dll
[2017/08/31 12:30:43 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NcaApi.dll
[2017/08/31 12:30:43 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsprx5.dll
[2017/08/31 12:30:43 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscpxl32.dLL
[2017/08/31 12:30:43 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsprx6.dll
[2017/08/31 12:30:43 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsprx2.dll
[2017/08/31 12:30:43 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsprx7.dll
[2017/08/31 12:30:43 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsprx3.dll
[2017/08/31 12:30:43 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsprx4.dll
[2017/08/31 12:30:42 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KdsCli.dll
[2017/08/31 12:30:42 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpapimig.exe
[2017/08/31 12:30:42 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VmdCoinstall.dll
[2017/08/31 12:30:42 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetmib1.dll
[2017/08/31 12:30:42 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shutdown.exe
[2017/08/31 12:30:42 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schedcli.dll
[2017/08/31 12:30:42 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfnet.dll
[2017/08/31 12:30:42 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mountvol.exe
[2017/08/31 12:30:42 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\recover.exe
[2017/08/31 12:30:41 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\control.exe
[2017/08/31 12:30:41 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DevicePairingWizard.exe
[2017/08/31 12:30:41 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hwrcomp.exe
[2017/08/31 12:30:41 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\efssvc.dll
[2017/08/31 12:30:41 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\userinit.exe
[2017/08/31 12:30:41 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbnmpntw.dll
[2017/08/31 12:30:41 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\umdmxfrm.dll
[2017/08/31 12:30:41 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RmClient.exe
[2017/08/31 12:30:41 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Register-CimProvider.exe
[2017/08/31 12:30:41 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\muifontsetup.dll
[2017/08/31 12:30:40 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\newdev.exe
[2017/08/31 12:30:40 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ndadmin.exe
[2017/08/31 12:30:40 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\esentprf.dll
[2017/08/31 12:30:40 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perfdisk.dll
[2017/08/31 12:30:40 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drprov.dll
[2017/08/31 12:30:40 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icmui.dll
[2017/08/31 12:30:40 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winusb.dll
[2017/08/31 12:30:40 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasadhlp.dll
[2017/08/31 12:30:40 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\srm_ps.dll
[2017/08/31 12:30:40 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\subst.exe
[2017/08/31 12:30:40 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Startupscan.dll
[2017/08/31 12:30:40 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\verclsid.exe
[2017/08/31 12:30:40 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssip32.dll
[2017/08/31 12:30:39 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TaskSchdPS.dll
[2017/08/31 12:30:39 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\klist.exe
[2017/08/31 12:30:39 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sisbkup.dll
[2017/08/31 12:30:39 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\umdmxfrm.dll
[2017/08/31 12:30:39 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wksprtPS.dll
[2017/08/31 12:30:39 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PATHPING.EXE
[2017/08/31 12:30:39 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasautou.exe
[2017/08/31 12:30:39 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\verclsid.exe
[2017/08/31 12:30:39 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscat32.dll
[2017/08/31 12:30:39 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\softpub.dll
[2017/08/31 12:30:39 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmdext.dll
[2017/08/31 12:30:38 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\at.exe
[2017/08/31 12:30:38 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fvecerts.dll
[2017/08/31 12:30:38 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pcacli.dll
[2017/08/31 12:30:38 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\label.exe
[2017/08/31 12:30:38 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pcwrun.exe
[2017/08/31 12:30:38 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tcmsetup.exe
[2017/08/31 12:30:38 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Register-CimProvider.exe
[2017/08/31 12:30:38 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\whhelper.dll
[2017/08/31 12:30:38 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DefaultDeviceManager.dll
[2017/08/31 12:30:38 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TapiSysprep.dll
[2017/08/31 12:30:37 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dmintf.dll
[2017/08/31 12:30:37 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setx.exe
[2017/08/31 12:30:37 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\blb_ps.dll
[2017/08/31 12:30:37 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ndproxystub.dll
[2017/08/31 12:30:37 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VscMgrPS.dll
[2017/08/31 12:30:37 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wininitext.dll
[2017/08/31 12:30:37 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Background.ps.dll
[2017/08/31 12:30:37 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SyncInfrastructureps.dll
[2017/08/31 12:30:37 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pnpts.dll
[2017/08/31 12:30:37 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ndproxystub.dll
[2017/08/31 12:30:37 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmdext.dll
[2017/08/31 12:30:37 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwinsat.dll
[2017/08/31 12:30:36 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nslookup.exe
[2017/08/31 12:30:36 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\newdev.exe
[2017/08/31 12:30:36 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tpmcompc.dll
[2017/08/31 12:30:36 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perfproc.dll
[2017/08/31 12:30:36 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\npmproxy.dll
[2017/08/31 12:30:36 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unlodctr.exe
[2017/08/31 12:30:36 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\osbaseln.dll
[2017/08/31 12:30:36 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davhlpr.dll
[2017/08/31 12:30:36 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perfnet.dll
[2017/08/31 12:30:36 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\upnpcont.exe
[2017/08/31 12:30:36 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netbios.dll
[2017/08/31 12:30:36 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pcaui.exe
[2017/08/31 12:30:36 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsprx6.dll
[2017/08/31 12:30:35 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tabcal.exe
[2017/08/31 12:30:35 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DevicePairingWizard.exe
[2017/08/31 12:30:35 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\takeown.exe
[2017/08/31 12:30:35 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdmps.dll
[2017/08/31 12:30:35 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nlmproxy.dll
[2017/08/31 12:30:35 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmintf.dll
[2017/08/31 12:30:35 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\lsmproxy.dll
[2017/08/31 12:30:35 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\montr_ci.dll
[2017/08/31 12:30:35 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\defragproxy.dll
[2017/08/31 12:30:35 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuthHostProxy.dll
[2017/08/31 12:30:35 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WofUtil.dll
[2017/08/31 12:30:35 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshrm.dll
[2017/08/31 12:30:35 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RdpSaPs.dll
[2017/08/31 12:30:35 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfts.dll
[2017/08/31 12:30:34 | 000,222,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\C_G18030.DLL
[2017/08/31 12:30:34 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UserAccountControlSettings.exe
[2017/08/31 12:30:34 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icacls.exe
[2017/08/31 12:30:34 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mgmtapi.dll
[2017/08/31 12:30:34 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwaninst.dll
[2017/08/31 12:30:34 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshelper.dll
[2017/08/31 12:30:34 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nlmproxy.dll
[2017/08/31 12:30:34 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chcp.com
[2017/08/31 12:30:34 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VscMgrPS.dll
[2017/08/31 12:30:34 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\chcp.com
[2017/08/31 12:30:34 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\oleacchooks.dll
[2017/08/31 12:30:34 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tapiperf.dll
[2017/08/31 12:30:33 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hdwwiz.exe
[2017/08/31 12:30:33 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winrs.exe
[2017/08/31 12:30:33 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cofiredm.dll
[2017/08/31 12:30:33 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nci.dll
[2017/08/31 12:30:33 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceEject.exe
[2017/08/31 12:30:33 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nbtstat.exe
[2017/08/31 12:30:33 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nrpsrv.dll
[2017/08/31 12:30:33 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasdial.exe
[2017/08/31 12:30:33 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\finger.exe
[2017/08/31 12:30:33 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\HOSTNAME.EXE
[2017/08/31 12:30:33 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msidle.dll
[2017/08/31 12:30:33 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nddeapi.dll
[2017/08/31 12:30:32 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pots.dll
[2017/08/31 12:30:32 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vss_ps.dll
[2017/08/31 12:30:32 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CheckNetIsolation.exe
[2017/08/31 12:30:32 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NcaApi.dll
[2017/08/31 12:30:32 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fltMC.exe
[2017/08/31 12:30:32 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spopk.dll
[2017/08/31 12:30:32 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RemoveDeviceElevated.dll
[2017/08/31 12:30:32 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d8thk.dll
[2017/08/31 12:30:32 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TSChannel.dll
[2017/08/31 12:30:32 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\usbperf.dll
[2017/08/31 12:30:32 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msidle.dll
[2017/08/31 12:30:31 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MdRes.exe
[2017/08/31 12:30:31 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DevicePairingProxy.dll
[2017/08/31 12:30:31 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhsvcctl.dll
[2017/08/31 12:30:31 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DevicePairingProxy.dll
[2017/08/31 12:30:31 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SyncHostps.dll
[2017/08/31 12:30:31 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VmApplicationHealthMonitorProxy.dll
[2017/08/31 12:30:31 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mprext.dll
[2017/08/31 12:30:31 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ProximityRtapiPal.dll
[2017/08/31 12:30:31 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshirda.dll
[2017/08/31 12:30:31 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RdpSaPs.dll
[2017/08/31 12:30:31 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SyncHostps.dll
[2017/08/31 12:30:31 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RemoveDeviceElevated.dll
[2017/08/31 12:30:31 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmcodecdspps.dll
[2017/08/31 12:30:30 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncpa.cpl
[2017/08/31 12:30:30 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MultiDigiMon.exe
[2017/08/31 12:30:30 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasautou.exe
[2017/08/31 12:30:30 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SystemEventsBrokerClient.dll
[2017/08/31 12:30:30 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsprx2.dll
[2017/08/31 12:30:30 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnsext.dll
[2017/08/31 12:30:30 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskcopy.com
[2017/08/31 12:30:30 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cfmifsproxy.dll
[2017/08/31 12:30:30 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winrssrv.dll
[2017/08/31 12:30:30 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fdBthProxy.dll
[2017/08/31 12:30:29 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\radarrs.dll
[2017/08/31 12:30:29 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsauth.dll
[2017/08/31 12:30:29 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsprx7.dll
[2017/08/31 12:30:29 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secinit.exe
[2017/08/31 12:30:29 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\efsui.exe
[2017/08/31 12:30:29 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XInput9_1_0.dll
[2017/08/31 12:30:29 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spnet.dll
[2017/08/31 12:30:29 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ir50_32.dll
[2017/08/31 12:30:29 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ir41_32.ax
[2017/08/31 12:30:29 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\acledit.dll
[2017/08/31 12:30:29 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OskSupport.dll
[2017/08/31 12:30:29 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ir50_qc.dll
[2017/08/31 12:30:29 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ir41_qc.dll
[2017/08/31 12:30:29 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ir32_32.dll
[2017/08/31 12:30:29 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\getuname.dll
[2017/08/31 12:30:29 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mtxex.dll
[2017/08/31 12:30:28 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncpa.cpl
[2017/08/31 12:30:28 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wininitext.dll
[2017/08/31 12:30:28 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pcaui.exe
[2017/08/31 12:30:28 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSChannel.dll
[2017/08/31 12:30:28 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cfmifsproxy.dll
[2017/08/31 12:30:28 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcmonitor.dll
[2017/08/31 12:30:28 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsprx4.dll
[2017/08/31 12:30:28 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\C_IS2022.DLL
[2017/08/31 12:30:28 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WlS0WndH.dll
[2017/08/31 12:30:28 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TimeDateMUICallback.dll
[2017/08/31 12:30:28 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ir50_qcx.dll
[2017/08/31 12:30:28 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ir41_qcx.dll
[2017/08/31 12:30:27 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UserAccountControlSettings.exe
[2017/08/31 12:30:27 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PNPXAssocPrx.dll
[2017/08/31 12:30:27 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf3216.dll
[2017/08/31 12:30:27 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perfctrs.dll
[2017/08/31 12:30:27 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpapi.dll
[2017/08/31 12:30:27 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmcodecdspps.dll
[2017/08/31 12:30:27 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\svsvc.dll
[2017/08/31 12:30:27 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sas.dll
[2017/08/31 12:30:26 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\telephon.cpl
[2017/08/31 12:30:26 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbGDCoInstaller.dll
[2017/08/31 12:30:26 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasser.dll
[2017/08/31 12:30:26 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netbtugc.exe
[2017/08/31 12:30:26 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sort.exe
[2017/08/31 12:30:26 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\compact.exe
[2017/08/31 12:30:26 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgwdi.dll
[2017/08/31 12:30:26 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshirda.dll
[2017/08/31 12:30:26 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winrssrv.dll
[2017/08/31 12:30:26 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WlS0WndH.dll
[2017/08/31 12:30:26 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tapiperf.dll
[2017/08/31 12:30:26 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XInput9_1_0.dll
[2017/08/31 12:30:26 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbcji32.dll
[2017/08/31 12:30:25 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MdSched.exe
[2017/08/31 12:30:25 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netvsc63.sys
[2017/08/31 12:30:25 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ndadmin.exe
[2017/08/31 12:30:25 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TaskSchdPS.dll
[2017/08/31 12:30:25 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Nlsdl.dll
[2017/08/31 12:30:25 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpnpinst.exe
[2017/08/31 12:30:25 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fltLib.dll
[2017/08/31 12:30:25 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsock32.dll
[2017/08/31 12:30:25 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsprx3.dll
[2017/08/31 12:30:25 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SensApi.dll
[2017/08/31 12:30:25 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdBthProxy.dll
[2017/08/31 12:30:25 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\recover.exe
[2017/08/31 12:30:25 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nddeapi.dll
[2017/08/31 12:30:25 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\riched32.dll
[2017/08/31 12:30:24 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\baaupdate.exe
[2017/08/31 12:30:24 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntprint.exe
[2017/08/31 12:30:24 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SecEdit.exe
[2017/08/31 12:30:24 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nshhttp.dll
[2017/08/31 12:30:24 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ipconfig.exe
[2017/08/31 12:30:24 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appsruprov.dll
[2017/08/31 12:30:24 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemEventsBrokerClient.dll
[2017/08/31 12:30:24 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshrm.dll
[2017/08/31 12:30:24 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\serialui.dll
[2017/08/31 12:30:24 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\runas.exe
[2017/08/31 12:30:24 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wowreg32.exe
[2017/08/31 12:30:23 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mprmsg.dll
[2017/08/31 12:30:23 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontview.exe
[2017/08/31 12:30:23 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\telephon.cpl
[2017/08/31 12:30:23 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcnsh.dll
[2017/08/31 12:30:23 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setspn.exe
[2017/08/31 12:30:23 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Eap3Host.exe
[2017/08/31 12:30:23 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleacchooks.dll
[2017/08/31 12:30:22 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\miguiresource.dll
[2017/08/31 12:30:22 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Fondue.exe
[2017/08/31 12:30:22 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmci.dll
[2017/08/31 12:30:22 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fthsvc.dll
[2017/08/31 12:30:22 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SortServer2003Compat.dll
[2017/08/31 12:30:22 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetppui.dll
[2017/08/31 12:30:22 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DDACLSys.dll
[2017/08/31 12:30:22 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clb.dll
[2017/08/31 12:30:22 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MRINFO.EXE
[2017/08/31 12:30:22 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sas.dll
[2017/08/31 12:30:22 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msiwer.dll
[2017/08/31 12:30:21 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Narrator.exe
[2017/08/31 12:30:21 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PATHPING.EXE
[2017/08/31 12:30:21 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acledit.dll
[2017/08/31 12:30:21 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odfox32.dll
[2017/08/31 12:30:21 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comcat.dll
[2017/08/31 12:30:21 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odexl32.dll
[2017/08/31 12:30:20 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hwrreg.exe
[2017/08/31 12:30:20 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SortWindows61.dll
[2017/08/31 12:30:20 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\waitfor.exe
[2017/08/31 12:30:20 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\capisp.dll
[2017/08/31 12:30:20 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msidcrl40.dll
[2017/08/31 12:30:20 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odtext32.dll
[2017/08/31 12:30:20 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odpdx32.dll
[2017/08/31 12:30:20 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\oddbse32.dll
[2017/08/31 12:30:20 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msctfime.ime
[2017/08/31 12:30:20 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\osuninst.dll
[2017/08/31 12:30:19 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SortWindows6Compat.dll
[2017/08/31 12:30:19 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hdwwiz.exe
[2017/08/31 12:30:19 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\where.exe
[2017/08/31 12:30:19 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eventcreate.exe
[2017/08/31 12:30:19 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\extrac32.exe
[2017/08/31 12:30:19 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\choice.exe
[2017/08/31 12:30:19 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gptext.dll
[2017/08/31 12:30:19 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\muifontsetup.dll
[2017/08/31 12:30:19 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcfgex.dll
[2017/08/31 12:30:18 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysclass.dll
[2017/08/31 12:30:18 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mprmsg.dll
[2017/08/31 12:30:18 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\forfiles.exe
[2017/08/31 12:30:18 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\timeout.exe
[2017/08/31 12:30:18 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PING.EXE
[2017/08/31 12:30:18 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\irclass.dll
[2017/08/31 12:30:18 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\syssetup.dll
[2017/08/31 12:30:18 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MUILanguageCleanup.dll
[2017/08/31 12:30:18 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmcico.dll
[2017/08/31 12:30:18 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshnetbs.dll
[2017/08/31 12:30:18 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\whhelper.dll
[2017/08/31 12:30:17 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SmartScreenSettings.exe
[2017/08/31 12:30:17 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clip.exe
[2017/08/31 12:30:17 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localui.dll
[2017/08/31 12:30:17 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TRACERT.EXE
[2017/08/31 12:30:17 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usbperf.dll
[2017/08/31 12:30:17 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OskSupport.dll
[2017/08/31 12:30:17 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msctfime.ime
[2017/08/31 12:30:17 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shfolder.dll
[2017/08/31 12:30:17 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mtxex.dll
[2017/08/31 12:30:17 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comcat.dll
[2017/08/31 12:30:17 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AutoWorkplaceN.dll
[2017/08/31 12:30:17 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\osuninst.dll
[2017/08/31 12:30:16 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\reg.exe
[2017/08/31 12:30:16 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFCoinstaller.dll
[2017/08/31 12:30:16 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tzutil.exe
[2017/08/31 12:30:16 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Apphlpdm.dll
[2017/08/31 12:30:16 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sort.exe
[2017/08/31 12:30:16 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\C_IS2022.DLL
[2017/08/31 12:30:16 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\txfw32.dll
[2017/08/31 12:30:16 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TetheringIeProvider.dll
[2017/08/31 12:30:16 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TimeDateMUICallback.dll
[2017/08/31 12:30:16 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\regedt32.exe
[2017/08/31 12:30:16 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BdeSysprep.dll
[2017/08/31 12:30:16 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msimg32.dll
[2017/08/31 12:30:15 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdhcinst.dll
[2017/08/31 12:30:15 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DDOIProxy.dll
[2017/08/31 12:30:15 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\syskey.exe
[2017/08/31 12:30:15 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Netplwiz.exe
[2017/08/31 12:30:15 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlaninst.dll
[2017/08/31 12:30:15 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Startupscan.dll
[2017/08/31 12:30:15 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ktmutil.exe
[2017/08/31 12:30:15 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LangCleanupSysprepAction.dll
[2017/08/31 12:30:15 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ProximityRtapiPal.dll
[2017/08/31 12:30:15 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TapiSysprep.dll
[2017/08/31 12:30:15 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\txfw32.dll
[2017/08/31 12:30:15 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msiwer.dll
[2017/08/31 12:30:15 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\InfDefaultInstall.exe
[2017/08/31 12:30:14 | 000,224,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\C_G18030.DLL
[2017/08/31 12:30:14 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Narrator.exe
[2017/08/31 12:30:14 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cliconfg.exe
[2017/08/31 12:30:14 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpnotify.exe
[2017/08/31 12:30:14 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perfts.dll
[2017/08/31 12:30:14 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msidcrl40.dll
[2017/08/31 12:30:14 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LogonUI.exe
[2017/08/31 12:30:14 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\getuname.dll
[2017/08/31 12:30:14 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDRUM.DLL
[2017/08/31 12:30:13 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eventvwr.exe
[2017/08/31 12:30:13 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ComputerDefaults.exe
[2017/08/31 12:30:13 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nlmsprep.dll
[2017/08/31 12:30:13 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwinsat.dll
[2017/08/31 12:30:13 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\raschapext.dll
[2017/08/31 12:30:13 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acproxy.dll
[2017/08/31 12:30:13 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spnet.dll
[2017/08/31 12:30:13 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CIRCoInst.dll
[2017/08/31 12:30:12 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\miguiresource.dll
[2017/08/31 12:30:12 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsicpl.exe
[2017/08/31 12:30:12 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\LocationNotifications.exe
[2017/08/31 12:30:12 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbcad32.exe
[2017/08/31 12:30:12 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RunLegacyCPLElevated.exe
[2017/08/31 12:30:12 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Custom.ps.dll
[2017/08/31 12:30:12 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\panmap.dll
[2017/08/31 12:30:12 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TapiUnattend.exe
[2017/08/31 12:30:12 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spmpm.dll
[2017/08/31 12:30:12 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\procinst.dll
[2017/08/31 12:30:12 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\regedt32.exe
[2017/08/31 12:30:11 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DpiScaling.exe
[2017/08/31 12:30:11 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpapimig.exe
[2017/08/31 12:30:11 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winver.exe
[2017/08/31 12:30:11 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciseq.dll
[2017/08/31 12:30:11 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasdial.exe
[2017/08/31 12:30:11 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSUNATD.exe
[2017/08/31 12:30:11 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscat32.dll
[2017/08/31 12:30:11 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\softpub.dll
[2017/08/31 12:30:11 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssip32.dll
[2017/08/31 12:30:10 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsicpl.exe
[2017/08/31 12:30:10 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DpiScaling.exe
[2017/08/31 12:30:10 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntprint.exe
[2017/08/31 12:30:10 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tzutil.exe
[2017/08/31 12:30:10 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Enumeration.ps.dll
[2017/08/31 12:30:10 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wowreg32.exe
[2017/08/31 12:30:10 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fsavailux.exe
[2017/08/31 12:30:10 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Background.ps.dll
[2017/08/31 12:30:10 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TCPSVCS.EXE
[2017/08/31 12:30:10 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dvdplay.exe
[2017/08/31 12:30:09 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\LaunchTM.exe
[2017/08/31 12:30:09 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AxInstUI.exe
[2017/08/31 12:30:09 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\credwiz.exe
[2017/08/31 12:30:09 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cliconfg.exe
[2017/08/31 12:30:09 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CallButtons.ProxyStub.dll
[2017/08/31 12:30:09 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secinit.exe
[2017/08/31 12:30:09 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mprext.dll
[2017/08/31 12:30:09 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\backgroundTaskHost.exe
[2017/08/31 12:30:08 | 000,219,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmartScreenSettings.exe
[2017/08/31 12:30:08 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SystemPropertiesRemote.exe
[2017/08/31 12:30:08 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SystemPropertiesProtection.exe
[2017/08/31 12:30:08 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SystemPropertiesHardware.exe
[2017/08/31 12:30:08 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SystemPropertiesDataExecutionPrevention.exe
[2017/08/31 12:30:08 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SystemPropertiesComputerName.exe
[2017/08/31 12:30:08 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SystemPropertiesAdvanced.exe
[2017/08/31 12:30:08 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\easinvoker.proxystub.dll
[2017/08/31 12:30:07 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Fondue.exe
[2017/08/31 12:30:07 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\colorcpl.exe
[2017/08/31 12:30:07 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbcad32.exe
[2017/08/31 12:30:07 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bthudtask.exe
[2017/08/31 12:30:07 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cacls.exe
[2017/08/31 12:30:07 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Netplwiz.exe
[2017/08/31 12:30:07 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DsmUserTask.exe
[2017/08/31 12:30:07 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Custom.ps.dll
[2017/08/31 12:30:07 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\systray.exe
[2017/08/31 12:30:06 | 005,120,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuthFWSnapin.dll
[2017/08/31 12:30:06 | 005,120,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuthFWSnapin.dll
[2017/08/31 12:30:06 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\regini.exe
[2017/08/31 12:30:06 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdrleakdiag.exe
[2017/08/31 12:30:06 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TCPSVCS.EXE
[2017/08/31 12:30:06 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrnsave.scr
[2017/08/31 12:30:06 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\write.exe
[2017/08/31 12:30:05 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OptionalFeatures.exe
[2017/08/31 12:30:05 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sigverif.exe
[2017/08/31 12:30:05 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winver.exe
[2017/08/31 12:30:05 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ComputerDefaults.exe
[2017/08/31 12:30:05 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dialer.exe
[2017/08/31 12:30:05 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VaultCmd.exe
[2017/08/31 12:30:05 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WallpaperHost.exe
[2017/08/31 12:30:05 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\plasrv.exe
[2017/08/31 12:30:04 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DeviceProperties.exe
[2017/08/31 12:30:04 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSchedExe.exe
[2017/08/31 12:30:04 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RunLegacyCPLElevated.exe
[2017/08/31 12:30:04 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lodctr.exe
[2017/08/31 12:30:04 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\unlodctr.exe
[2017/08/31 12:30:04 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fltMC.exe
[2017/08/31 12:30:04 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MRINFO.EXE
[2017/08/31 12:30:04 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmdkey.exe
[2017/08/31 12:30:04 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DDOIProxy.dll
[2017/08/31 12:30:04 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrnsave.scr
[2017/08/31 12:30:04 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\backgroundTaskHost.exe
[2017/08/31 12:30:04 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDRUM.DLL
[2017/08/31 12:30:03 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\colorcpl.exe
[2017/08/31 12:30:03 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemPropertiesRemote.exe
[2017/08/31 12:30:03 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemPropertiesProtection.exe
[2017/08/31 12:30:03 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemPropertiesHardware.exe
[2017/08/31 12:30:03 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemPropertiesDataExecutionPrevention.exe
[2017/08/31 12:30:03 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemPropertiesComputerName.exe
[2017/08/31 12:30:03 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemPropertiesAdvanced.exe
[2017/08/31 12:30:03 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mciseq.dll
[2017/08/31 12:30:03 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ktmw32.dll
[2017/08/31 12:30:03 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RmClient.exe
[2017/08/31 12:30:03 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\write.exe
[2017/08/31 12:30:03 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\write.exe
[2017/08/31 12:30:02 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LaunchTM.exe
[2017/08/31 12:30:02 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceProperties.exe
[2017/08/31 12:30:02 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qwinsta.exe
[2017/08/31 12:30:02 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msg.exe
[2017/08/31 12:30:02 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quser.exe
[2017/08/31 12:30:02 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tskill.exe
[2017/08/31 12:30:02 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tscon.exe
[2017/08/31 12:30:02 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rwinsta.exe
[2017/08/31 12:30:02 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chgusr.exe
[2017/08/31 12:30:02 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PnPutil.exe
[2017/08/31 12:30:02 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\runas.exe
[2017/08/31 12:30:02 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\reset.exe
[2017/08/31 12:30:02 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\change.exe
[2017/08/31 12:30:02 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\query.exe
[2017/08/31 12:30:02 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bootim.exe
[2017/08/31 12:30:02 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDRU1.DLL
[2017/08/31 12:30:01 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\proquota.exe
[2017/08/31 12:30:01 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qprocess.exe
[2017/08/31 12:30:01 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chgport.exe
[2017/08/31 12:30:01 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qappsrv.exe
[2017/08/31 12:30:01 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cofire.exe
[2017/08/31 12:30:01 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsdiscon.exe
[2017/08/31 12:30:01 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chglogon.exe
[2017/08/31 12:30:01 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logoff.exe
[2017/08/31 12:30:01 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmdkey.exe
[2017/08/31 12:30:01 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CallButtons.ProxyStub.dll
[2017/08/31 12:30:01 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dllhst3g.exe
[2017/08/31 12:30:00 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LocationNotifications.exe
[2017/08/31 12:30:00 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mountvol.exe
[2017/08/31 12:30:00 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tcmsetup.exe
[2017/08/31 12:30:00 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TapiUnattend.exe
[2017/08/31 12:30:00 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dvdplay.exe
[2017/08/31 12:30:00 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\help.exe
[2017/08/31 12:30:00 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDYAK.DLL
[2017/08/31 12:30:00 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDBASH.DLL
[2017/08/31 12:30:00 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDRU.DLL
[2017/08/31 12:29:59 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bthudtask.exe
[2017/08/31 12:29:59 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ROUTE.EXE
[2017/08/31 12:29:59 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TRACERT.EXE
[2017/08/31 12:29:59 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\finger.exe
[2017/08/31 12:29:59 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\HOSTNAME.EXE
[2017/08/31 12:29:59 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dcomcnfg.exe
[2017/08/31 12:29:59 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\systray.exe
[2017/08/31 12:29:59 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ctfmon.exe
[2017/08/31 12:29:59 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\help.exe
[2017/08/31 12:29:59 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dcomcnfg.exe
[2017/08/31 12:29:59 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTAT.DLL
[2017/08/31 12:29:58 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuthFWWizFwk.dll
[2017/08/31 12:29:58 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuthFWWizFwk.dll
[2017/08/31 12:29:58 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ktmw32.dll
[2017/08/31 12:29:58 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\efsui.exe
[2017/08/31 12:29:58 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppxStreamingDataSourcePS.dll
[2017/08/31 12:29:58 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TcpipSetup.dll
[2017/08/31 12:29:57 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll
[2017/08/31 12:29:57 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wship6.dll
[2017/08/31 12:29:57 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\InfDefaultInstall.exe
[2017/08/31 12:29:57 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpksetupproxyserv.dll
[2017/08/31 12:29:57 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDYAK.DLL
[2017/08/31 12:29:57 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDRU1.DLL
[2017/08/31 12:29:57 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDBASH.DLL
[2017/08/31 12:29:57 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDRU.DLL
[2017/08/31 12:29:56 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mciwave.dll
[2017/08/31 12:29:56 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSHTCPIP.DLL
[2017/08/31 12:29:56 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RpcNs4.dll
[2017/08/31 12:29:55 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OobeFldr.dll
[2017/08/31 12:29:55 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usp10.dll
[2017/08/31 12:29:55 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dabapi.dll
[2017/08/31 12:29:55 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dabapi.dll
[2017/08/31 12:29:54 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OobeFldr.dll
[2017/08/31 12:29:54 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pstorec.dll
[2017/08/31 12:29:54 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RpcNs4.dll
[2017/08/31 12:29:53 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\C_ISCII.DLL
[2017/08/31 12:29:51 | 000,279,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srm.dll
[2017/08/31 12:29:51 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\C_ISCII.DLL
[2017/08/31 12:29:50 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\srm.dll
[2017/08/31 12:29:50 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceUxRes.dll
[2017/08/31 12:29:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shimeng.dll
[2017/08/31 12:29:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTAT.DLL
[2017/08/31 12:29:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Firewall.cpl
[2017/08/31 12:29:48 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\mslldp.sys
[2017/08/31 12:29:48 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DeviceUxRes.dll
[2017/08/31 12:29:47 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Ndu.sys
[2017/08/31 12:29:46 | 000,638,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIRibbonRes.dll
[2017/08/31 12:29:46 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\TsUsbGD.sys
[2017/08/31 12:29:46 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rootmdm.sys
[2017/08/31 12:29:45 | 002,628,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NlsLexicons0009.dll
[2017/08/31 12:29:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTT102.DLL
[2017/08/31 12:29:44 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ws2help.dll
[2017/08/31 12:29:44 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ws2help.dll
[2017/08/31 12:29:44 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iprop.dll
[2017/08/31 12:29:44 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rnr20.dll
[2017/08/31 12:29:44 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rnr20.dll
[2017/08/31 12:29:43 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTT102.DLL
[2017/08/31 12:20:46 | 004,558,149 | -H-- | C] (Microsoft                                                   ) -- C:\Users\Waseem Latif\Documents\ss32AppData000.exe
[2017/08/31 11:56:56 | 002,819,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingsHandlers.dll
[2017/08/31 11:56:54 | 002,171,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemSettingsAdminFlowUI.dll
[2017/08/31 11:56:54 | 001,348,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppXDeploymentServer.dll
[2017/08/31 11:56:54 | 000,841,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSyncCore.dll
[2017/08/31 11:56:54 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingSyncCore.dll
[2017/08/31 11:56:54 | 000,655,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSync.dll
[2017/08/31 11:56:54 | 000,653,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSyncHost.exe
[2017/08/31 11:56:54 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingSyncHost.exe
[2017/08/31 11:56:54 | 000,520,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingSync.dll
[2017/08/31 11:56:54 | 000,166,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppxAllUserStore.dll
[2017/08/31 11:56:54 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AppxAllUserStore.dll
[2017/08/31 11:56:53 | 002,592,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themecpl.dll
[2017/08/31 11:56:53 | 002,551,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themecpl.dll
[2017/08/31 11:56:53 | 001,278,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usercpl.dll
[2017/08/31 11:56:53 | 001,197,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\usercpl.dll
[2017/08/31 11:56:53 | 000,955,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppXDeploymentExtensions.dll
[2017/08/31 11:56:53 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hgcpl.dll
[2017/08/31 11:56:53 | 000,539,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hgcpl.dll
[2017/08/31 11:56:53 | 000,336,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\stobject.dll
[2017/08/31 11:56:53 | 000,273,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemSettingsAdminFlows.exe
[2017/08/31 11:56:53 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingMonitor.dll
[2017/08/31 11:56:53 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingMonitor.dll
[2017/08/31 11:50:31 | 001,628,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diagtrack.dll
[2017/08/31 11:50:31 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UtcResources.dll
[2017/08/31 11:50:30 | 007,797,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Data.Pdf.dll
[2017/08/31 11:50:30 | 007,078,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\glcndFilter.dll
[2017/08/31 11:50:30 | 005,274,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\glcndFilter.dll
[2017/08/31 11:50:30 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2017/08/31 11:50:30 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2017/08/31 11:50:29 | 005,270,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Data.Pdf.dll
[2017/08/31 11:50:29 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjint40.dll
[2017/08/31 11:50:29 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
[2017/08/31 11:50:29 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2017/08/31 11:50:27 | 001,737,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2017/08/31 11:50:27 | 000,422,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\spaceport.sys
[2017/08/31 11:50:27 | 000,374,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanmsm.dll
[2017/08/31 11:50:27 | 000,086,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pdc.sys
[2017/08/31 11:50:26 | 005,981,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2017/08/31 11:50:24 | 007,440,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2017/08/31 11:50:23 | 002,463,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
[2017/08/31 11:50:23 | 001,946,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll
[2017/08/31 11:50:23 | 001,317,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Media.Streaming.dll
[2017/08/31 11:50:23 | 001,102,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Media.Streaming.dll
[2017/08/31 11:50:23 | 000,994,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ucrtbase.dll
[2017/08/31 11:50:23 | 000,868,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Globalization.dll
[2017/08/31 11:50:23 | 000,449,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wer.dll
[2017/08/31 11:50:23 | 000,066,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-private-l1-1-0.dll
[2017/08/31 11:50:23 | 000,063,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-private-l1-1-0.dll
[2017/08/31 11:50:23 | 000,022,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-math-l1-1-0.dll
[2017/08/31 11:50:23 | 000,020,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-math-l1-1-0.dll
[2017/08/31 11:50:23 | 000,019,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-multibyte-l1-1-0.dll
[2017/08/31 11:50:23 | 000,019,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-multibyte-l1-1-0.dll
[2017/08/31 11:50:23 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-string-l1-1-0.dll
[2017/08/31 11:50:23 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-string-l1-1-0.dll
[2017/08/31 11:50:23 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-stdio-l1-1-0.dll
[2017/08/31 11:50:23 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-stdio-l1-1-0.dll
[2017/08/31 11:50:23 | 000,016,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-runtime-l1-1-0.dll
[2017/08/31 11:50:23 | 000,016,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-runtime-l1-1-0.dll
[2017/08/31 11:50:23 | 000,015,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-convert-l1-1-0.dll
[2017/08/31 11:50:23 | 000,015,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-convert-l1-1-0.dll
[2017/08/31 11:50:23 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-time-l1-1-0.dll
[2017/08/31 11:50:23 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-time-l1-1-0.dll
[2017/08/31 11:50:23 | 000,013,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-filesystem-l1-1-0.dll
[2017/08/31 11:50:23 | 000,013,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-filesystem-l1-1-0.dll
[2017/08/31 11:50:23 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-process-l1-1-0.dll
[2017/08/31 11:50:23 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-process-l1-1-0.dll
[2017/08/31 11:50:23 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-heap-l1-1-0.dll
[2017/08/31 11:50:23 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-heap-l1-1-0.dll
[2017/08/31 11:50:23 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-conio-l1-1-0.dll
[2017/08/31 11:50:23 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-conio-l1-1-0.dll
[2017/08/31 11:50:23 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-utility-l1-1-0.dll
[2017/08/31 11:50:23 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-utility-l1-1-0.dll
[2017/08/31 11:50:23 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-locale-l1-1-0.dll
[2017/08/31 11:50:23 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-locale-l1-1-0.dll
[2017/08/31 11:50:23 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-environment-l1-1-0.dll
[2017/08/31 11:50:23 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-environment-l1-1-0.dll
[2017/08/31 11:50:22 | 002,778,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
[2017/08/31 11:50:22 | 002,315,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll
[2017/08/31 11:50:22 | 001,385,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msctf.dll
[2017/08/31 11:50:22 | 001,220,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twinui.appcore.dll
[2017/08/31 11:50:22 | 000,738,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
[2017/08/31 11:50:22 | 000,536,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wer.dll
[2017/08/31 11:50:22 | 000,388,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
[2017/08/31 11:50:21 | 001,200,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Globalization.dll
[2017/08/31 11:50:21 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSCard.dll
[2017/08/31 11:50:21 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpapisrv.dll
[2017/08/31 11:50:21 | 000,136,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2017/08/31 11:50:20 | 001,436,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2017/08/31 11:50:20 | 001,135,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2017/08/31 11:50:20 | 000,954,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twinui.appcore.dll
[2017/08/31 11:50:19 | 000,497,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfsvr.dll
[2017/08/31 11:50:18 | 015,431,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2017/08/31 11:50:18 | 013,317,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2017/08/31 11:50:16 | 003,547,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll
[2017/08/31 11:50:16 | 003,320,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
[2017/08/31 11:50:16 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdsdwmdr.dll
[2017/08/31 11:50:15 | 003,631,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tquery.dll
[2017/08/31 11:50:15 | 002,896,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\esent.dll
[2017/08/31 11:50:14 | 003,120,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ExplorerFrame.dll
[2017/08/31 11:50:14 | 002,551,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssrch.dll
[2017/08/31 11:50:14 | 002,537,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\esent.dll
[2017/08/31 11:50:13 | 002,176,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\combase.dll
[2017/08/31 11:50:13 | 001,662,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
[2017/08/31 11:50:13 | 001,311,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjet40.dll
[2017/08/31 11:50:13 | 000,616,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrepl40.dll
[2017/08/31 11:50:13 | 000,343,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrd3x40.dll
[2017/08/31 11:50:13 | 000,310,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrd2x40.dll
[2017/08/31 11:50:13 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjtes40.dll
[2017/08/31 11:50:12 | 002,749,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tquery.dll
[2017/08/31 11:50:12 | 002,712,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ExplorerFrame.dll
[2017/08/31 11:50:12 | 001,920,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssrch.dll
[2017/08/31 11:50:11 | 002,513,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\storagewmi.dll
[2017/08/31 11:50:11 | 001,985,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2017/08/31 11:50:11 | 001,763,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
[2017/08/31 11:50:11 | 001,697,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll
[2017/08/31 11:50:11 | 001,566,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\combase.dll
[2017/08/31 11:50:10 | 001,968,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2017/08/31 11:50:10 | 001,754,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\GdiPlus.dll
[2017/08/31 11:50:10 | 001,501,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll
[2017/08/31 11:50:10 | 001,491,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\GdiPlus.dll
[2017/08/31 11:50:10 | 000,922,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ucrtbase.dll
[2017/08/31 11:50:10 | 000,399,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfsvr.dll
[2017/08/31 11:50:09 | 001,495,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\storagewmi.dll
[2017/08/31 11:50:09 | 001,388,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mispace.dll
[2017/08/31 11:50:09 | 001,364,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll
[2017/08/31 11:50:09 | 001,094,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll
[2017/08/31 11:50:09 | 000,955,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfmp4srcsnk.dll
[2017/08/31 11:50:09 | 000,787,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfmp4srcsnk.dll
[2017/08/31 11:50:09 | 000,531,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ci.dll
[2017/08/31 11:50:08 | 001,292,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certutil.exe
[2017/08/31 11:50:08 | 001,108,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mispace.dll
[2017/08/31 11:50:08 | 001,063,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinTypes.dll
[2017/08/31 11:50:08 | 001,060,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certutil.exe
[2017/08/31 11:50:08 | 000,865,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll
[2017/08/31 11:50:08 | 000,842,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samsrv.dll
[2017/08/31 11:50:07 | 001,541,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\user32.dll
[2017/08/31 11:50:07 | 001,436,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wdc.dll
[2017/08/31 11:50:07 | 001,323,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wdc.dll
[2017/08/31 11:50:07 | 000,925,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autoconv.exe
[2017/08/31 11:50:07 | 000,897,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2017/08/31 11:50:07 | 000,871,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdtcprx.dll
[2017/08/31 11:50:07 | 000,817,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2017/08/31 11:50:07 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2017/08/31 11:50:07 | 000,806,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2017/08/31 11:50:07 | 000,803,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll
[2017/08/31 11:50:07 | 000,663,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2017/08/31 11:50:07 | 000,656,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnsapi.dll
[2017/08/31 11:50:07 | 000,475,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxbde40.dll
[2017/08/31 11:50:07 | 000,375,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mspbde40.dll
[2017/08/31 11:50:07 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msexcl40.dll
[2017/08/31 11:50:07 | 000,272,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstext40.dll
[2017/08/31 11:50:07 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msltus40.dll
[2017/08/31 11:50:06 | 002,240,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2017/08/31 11:50:06 | 002,132,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2017/08/31 11:50:06 | 002,057,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2017/08/31 11:50:06 | 001,674,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
[2017/08/31 11:50:06 | 001,534,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe
[2017/08/31 11:50:06 | 000,840,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netlogon.dll
[2017/08/31 11:50:06 | 000,837,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autoconv.exe
[2017/08/31 11:50:06 | 000,721,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdtcprx.dll
[2017/08/31 11:50:06 | 000,615,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2017/08/31 11:50:06 | 000,557,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\untfs.dll
[2017/08/31 11:50:06 | 000,513,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\untfs.dll
[2017/08/31 11:50:05 | 001,001,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\HelpPane.exe
[2017/08/31 11:50:05 | 000,825,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pmcsnap.dll
[2017/08/31 11:50:05 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2017/08/31 11:50:05 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
[2017/08/31 11:50:05 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2017/08/31 11:50:05 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gpprefcl.dll
[2017/08/31 11:50:05 | 000,590,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wvc.dll
[2017/08/31 11:50:05 | 000,580,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gpprefcl.dll
[2017/08/31 11:50:05 | 000,576,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2017/08/31 11:50:05 | 000,477,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\puiobj.dll
[2017/08/31 11:50:05 | 000,476,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2017/08/31 11:50:05 | 000,468,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssph.dll
[2017/08/31 11:50:05 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssph.dll
[2017/08/31 11:50:05 | 000,358,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wldap32.dll
[2017/08/31 11:50:05 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanmsm.dll
[2017/08/31 11:50:05 | 000,274,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdFilter.sys
[2017/08/31 11:50:04 | 000,922,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\refs.sys
[2017/08/31 11:50:04 | 000,774,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssvp.dll
[2017/08/31 11:50:04 | 000,747,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntshrui.dll
[2017/08/31 11:50:04 | 000,725,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2017/08/31 11:50:04 | 000,607,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rastls.dll
[2017/08/31 11:50:04 | 000,584,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscms.dll
[2017/08/31 11:50:04 | 000,548,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinTypes.dll
[2017/08/31 11:50:04 | 000,530,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rastls.dll
[2017/08/31 11:50:04 | 000,512,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winspool.drv
[2017/08/31 11:50:04 | 000,489,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2017/08/31 11:50:04 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wvc.dll
[2017/08/31 11:50:04 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysmon.ocx
[2017/08/31 11:50:04 | 000,470,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
[2017/08/31 11:50:04 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mprapi.dll
[2017/08/31 11:50:04 | 000,409,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUSettingsProvider.dll
[2017/08/31 11:50:04 | 000,377,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmrdvcore.dll
[2017/08/31 11:50:04 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\puiobj.dll
[2017/08/31 11:50:04 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll
[2017/08/31 11:50:04 | 000,324,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
[2017/08/31 11:50:04 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdvvmtransport.dll
[2017/08/31 11:50:04 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\cmimcext.sys
[2017/08/31 11:50:03 | 001,499,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
[2017/08/31 11:50:03 | 001,370,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe
[2017/08/31 11:50:03 | 000,699,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssvp.dll
[2017/08/31 11:50:03 | 000,517,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uReFS.dll
[2017/08/31 11:50:03 | 000,445,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlansec.dll
[2017/08/31 11:50:03 | 000,445,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certcli.dll
[2017/08/31 11:50:03 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2017/08/31 11:50:03 | 000,416,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sysmon.ocx
[2017/08/31 11:50:03 | 000,383,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlansec.dll
[2017/08/31 11:50:03 | 000,379,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storport.sys
[2017/08/31 11:50:03 | 000,376,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\clfs.sys
[2017/08/31 11:50:03 | 000,375,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\uReFS.dll
[2017/08/31 11:50:03 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mprapi.dll
[2017/08/31 11:50:03 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2017/08/31 11:50:03 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchProtocolHost.exe
[2017/08/31 11:50:03 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certcli.dll
[2017/08/31 11:50:03 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2017/08/31 11:50:03 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ProximityService.dll
[2017/08/31 11:50:03 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wisp.dll
[2017/08/31 11:50:03 | 000,289,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PlayToDevice.dll
[2017/08/31 11:50:03 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WsmWmiPl.dll
[2017/08/31 11:50:03 | 000,254,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll
[2017/08/31 11:50:03 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wisp.dll
[2017/08/31 11:50:03 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
[2017/08/31 11:50:02 | 000,373,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2017/08/31 11:50:02 | 000,371,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msinfo32.exe
[2017/08/31 11:50:02 | 000,334,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msinfo32.exe
[2017/08/31 11:50:02 | 000,315,224 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2017/08/31 11:50:02 | 000,306,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pdh.dll
[2017/08/31 11:50:02 | 000,302,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanapi.dll
[2017/08/31 11:50:02 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2017/08/31 11:50:02 | 000,269,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DafPrintProvider.dll
[2017/08/31 11:50:02 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wincorlib.dll
[2017/08/31 11:50:02 | 000,262,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pdh.dll
[2017/08/31 11:50:02 | 000,260,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ppcsnap.dll
[2017/08/31 11:50:02 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssphtb.dll
[2017/08/31 11:50:02 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanapi.dll
[2017/08/31 11:50:02 | 000,236,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WsmWmiPl.dll
[2017/08/31 11:50:02 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionQueue.dll
[2017/08/31 11:50:02 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ifsutil.dll
[2017/08/31 11:50:02 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PlayToDevice.dll
[2017/08/31 11:50:02 | 000,207,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smbwmiv2.dll
[2017/08/31 11:50:02 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmitomi.dll
[2017/08/31 11:50:02 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2017/08/31 11:50:02 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DafPrintProvider.dll
[2017/08/31 11:50:02 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ifsutil.dll
[2017/08/31 11:50:02 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DAFWSD.dll
[2017/08/31 11:50:02 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ulib.dll
[2017/08/31 11:50:02 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uudf.dll
[2017/08/31 11:50:02 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmitomi.dll
[2017/08/31 11:50:02 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ulib.dll
[2017/08/31 11:50:02 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\uudf.dll
[2017/08/31 11:50:02 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ufat.dll
[2017/08/31 11:50:01 | 000,866,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mswdat10.dll
[2017/08/31 11:50:01 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mswstr10.dll
[2017/08/31 11:50:01 | 000,615,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpd_ci.dll
[2017/08/31 11:50:01 | 000,428,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2017/08/31 11:50:01 | 000,263,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\input.dll
[2017/08/31 11:50:01 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\input.dll
[2017/08/31 11:50:01 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rastapi.dll
[2017/08/31 11:50:01 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prnntfy.dll
[2017/08/31 11:50:01 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rastapi.dll
[2017/08/31 11:50:01 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFilterHost.exe
[2017/08/31 11:50:01 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2017/08/31 11:50:01 | 000,199,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prnntfy.dll
[2017/08/31 11:50:01 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\puiapi.dll
[2017/08/31 11:50:01 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TpmTasks.dll
[2017/08/31 11:50:01 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2017/08/31 11:50:01 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\puiapi.dll
[2017/08/31 11:50:01 | 000,152,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcrypt.dll
[2017/08/31 11:50:01 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wininit.exe
[2017/08/31 11:50:01 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2017/08/31 11:50:01 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2017/08/31 11:50:01 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfmjpegdec.dll
[2017/08/31 11:50:01 | 000,135,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gpapi.dll
[2017/08/31 11:50:01 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ScDeviceEnum.dll
[2017/08/31 11:50:01 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2017/08/31 11:50:01 | 000,117,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdNisDrv.sys
[2017/08/31 11:50:01 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
[2017/08/31 11:50:01 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2017/08/31 11:50:01 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2017/08/31 11:50:01 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hlink.dll
[2017/08/31 11:50:01 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2017/08/31 11:50:01 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ufat.dll
[2017/08/31 11:50:01 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adsmsext.dll
[2017/08/31 11:50:01 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2017/08/31 11:50:01 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2017/08/31 11:50:01 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2017/08/31 11:50:01 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adsmsext.dll
[2017/08/31 11:50:01 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2017/08/31 11:50:01 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjter40.dll
[2017/08/31 11:50:01 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2017/08/31 11:50:00 | 009,323,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2017/08/31 11:50:00 | 009,323,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2017/08/31 11:50:00 | 000,756,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll
[2017/08/31 11:50:00 | 000,756,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll
[2017/08/31 11:50:00 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\GlobCollationHost.dll
[2017/08/31 11:50:00 | 000,289,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\compstui.dll
[2017/08/31 11:50:00 | 000,251,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\microsoft-windows-system-events.dll
[2017/08/31 11:50:00 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WsmAuto.dll
[2017/08/31 11:50:00 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2017/08/31 11:50:00 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2017/08/31 11:50:00 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WsmAuto.dll
[2017/08/31 11:50:00 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2017/08/31 11:50:00 | 000,140,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wermgr.exe
[2017/08/31 11:50:00 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssprxy.dll
[2017/08/31 11:50:00 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2017/08/31 11:50:00 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
[2017/08/31 11:50:00 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shsetup.dll
[2017/08/31 11:50:00 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2017/08/31 11:50:00 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2017/08/31 11:50:00 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shsetup.dll
[2017/08/31 11:50:00 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfmjpegdec.dll
[2017/08/31 11:50:00 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dab.dll
[2017/08/31 11:50:00 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uexfat.dll
[2017/08/31 11:50:00 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
[2017/08/31 11:50:00 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
[2017/08/31 11:50:00 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsiwmi.dll
[2017/08/31 11:50:00 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2017/08/31 11:50:00 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\uexfat.dll
[2017/08/31 11:50:00 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdvvmtransport.dll
[2017/08/31 11:50:00 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsiwmi.dll
[2017/08/31 11:50:00 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\findnetprinters.dll
[2017/08/31 11:50:00 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\findnetprinters.dll
[2017/08/31 11:50:00 | 000,046,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdBoot.sys
[2017/08/31 11:49:59 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\compstui.dll
[2017/08/31 11:49:59 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icm32.dll
[2017/08/31 11:49:59 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2017/08/31 11:49:59 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfmon.exe
[2017/08/31 11:49:59 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2017/08/31 11:49:59 | 000,137,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2017/08/31 11:49:59 | 000,136,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wermgr.exe
[2017/08/31 11:49:59 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpudd.dll
[2017/08/31 11:49:59 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2017/08/31 11:49:59 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsiwmiv2.dll
[2017/08/31 11:49:59 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vmbusr.sys
[2017/08/31 11:49:59 | 000,121,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tm.sys
[2017/08/31 11:49:59 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samlib.dll
[2017/08/31 11:49:59 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssitlb.dll
[2017/08/31 11:49:59 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsiwmiv2.dll
[2017/08/31 11:49:59 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssitlb.dll
[2017/08/31 11:49:59 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuditPolicyGPInterop.dll
[2017/08/31 11:49:59 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSManMigrationPlugin.dll
[2017/08/31 11:49:59 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SCardDlg.dll
[2017/08/31 11:49:59 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storvsp.sys
[2017/08/31 11:49:59 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2017/08/31 11:49:59 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
[2017/08/31 11:49:59 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xolehlp.dll
[2017/08/31 11:49:59 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\offreg.dll
[2017/08/31 11:49:59 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSManMigrationPlugin.dll
[2017/08/31 11:49:59 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuditPolicyGPInterop.dll
[2017/08/31 11:49:59 | 000,057,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\stornvme.sys
[2017/08/31 11:49:59 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2017/08/31 11:49:59 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsidsc.dll
[2017/08/31 11:49:59 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2017/08/31 11:49:59 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xolehlp.dll
[2017/08/31 11:49:59 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
[2017/08/31 11:49:59 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
[2017/08/31 11:49:59 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pdhui.dll
[2017/08/31 11:49:59 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\offreg.dll
[2017/08/31 11:49:59 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sscore.dll
[2017/08/31 11:49:59 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscntrs.dll
[2017/08/31 11:49:59 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cnvfat.dll
[2017/08/31 11:49:59 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cnvfat.dll
[2017/08/31 11:49:59 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscntrs.dll
[2017/08/31 11:49:59 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2017/08/31 11:49:59 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsdchngr.dll
[2017/08/31 11:49:59 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wfdprov.dll
[2017/08/31 11:49:59 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2017/08/31 11:49:59 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsdchngr.dll
[2017/08/31 11:49:58 | 000,237,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2017/08/31 11:49:58 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2017/08/31 11:49:58 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuditNativeSnapIn.dll
[2017/08/31 11:49:58 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Vid.sys
[2017/08/31 11:49:58 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuditNativeSnapIn.dll
[2017/08/31 11:49:58 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perfmon.exe
[2017/08/31 11:49:58 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsicli.exe
[2017/08/31 11:49:58 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SCardDlg.dll
[2017/08/31 11:49:58 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vmbkmclr.sys
[2017/08/31 11:49:58 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsidsc.dll
[2017/08/31 11:49:58 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PrintBrmUi.exe
[2017/08/31 11:49:58 | 000,069,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
[2017/08/31 11:49:58 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vpcivsp.sys
[2017/08/31 11:49:58 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2017/08/31 11:49:58 | 000,044,032 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2017/08/31 11:49:58 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NetEvtFwdr.exe
[2017/08/31 11:49:58 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2017/08/31 11:49:58 | 000,035,840 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2017/08/31 11:49:58 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsmprovhost.exe
[2017/08/31 11:49:58 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2017/08/31 11:49:58 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\BasicRender.sys
[2017/08/31 11:49:58 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsmprovhost.exe
[2017/08/31 11:49:58 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSManHTTPConfig.exe
[2017/08/31 11:49:58 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WsmAgent.dll
[2017/08/31 11:49:58 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll
[2017/08/31 11:49:58 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2017/08/31 11:49:58 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSManHTTPConfig.exe
[2017/08/31 11:49:58 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
[2017/08/31 11:49:58 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsium.dll
[2017/08/31 11:49:58 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WsmAgent.dll
[2017/08/31 11:49:58 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\delegatorprovider.dll
[2017/08/31 11:49:58 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wfdprov.dll
[2017/08/31 11:49:58 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\storagewmi_passthru.dll
[2017/08/31 11:49:58 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\convert.exe
[2017/08/31 11:49:58 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\delegatorprovider.dll
[2017/08/31 11:49:58 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\storagewmi_passthru.dll
[2017/08/31 11:49:58 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlansvcpal.dll
[2017/08/31 11:49:58 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\convert.exe
[2017/08/31 11:49:58 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msshooks.dll
[2017/08/31 11:49:57 | 000,200,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\GlobCollationHost.dll
[2017/08/31 11:49:57 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsicli.exe
[2017/08/31 11:49:57 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\resmon.exe
[2017/08/31 11:49:57 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\resmon.exe
[2017/08/31 11:49:57 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2017/08/31 11:49:57 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sccls.dll
[2017/08/31 11:49:57 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\printui.exe
[2017/08/31 11:49:57 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\printui.exe
[2017/08/31 11:49:57 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pdhui.dll
[2017/08/31 11:49:57 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\winhvr.sys
[2017/08/31 11:49:57 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\werdiagcontroller.dll
[2017/08/31 11:49:57 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\idndl.dll
[2017/08/31 11:49:57 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vid.dll
[2017/08/31 11:49:57 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsium.dll
[2017/08/31 11:49:57 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\werdiagcontroller.dll
[2017/08/31 11:49:57 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsmplpxy.dll
[2017/08/31 11:49:57 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winshfhc.dll
[2017/08/31 11:49:57 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dciman32.dll
[2017/08/31 11:49:57 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmbuspiper.dll
[2017/08/31 11:49:57 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2017/08/31 11:49:57 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smphost.dll
[2017/08/31 11:49:57 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winshfhc.dll
[2017/08/31 11:49:57 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2017/08/31 11:49:57 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rastlsext.dll
[2017/08/31 11:49:57 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsmplpxy.dll
[2017/08/31 11:49:57 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\smphost.dll
[2017/08/31 11:49:57 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanhlp.dll
[2017/08/31 11:49:57 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanhlp.dll
[2017/08/31 11:49:57 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2017/08/31 11:49:57 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsied.dll
[2017/08/31 11:49:57 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msshooks.dll
[2017/08/31 11:49:57 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rastlsext.dll
[2017/08/31 11:49:57 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsied.dll
[2017/08/31 11:49:57 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\normaliz.dll
[2017/08/31 11:49:56 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpolmsg.dll
[2017/08/31 11:49:56 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\auditpolmsg.dll
[2017/08/31 11:49:56 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll
[2017/08/31 11:49:56 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll
[2017/08/31 11:49:56 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
[2017/08/31 11:49:56 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpk.dll
[2017/08/31 11:43:37 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\bthhfenum.sys
[2017/08/31 11:43:23 | 000,413,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Faultrep.dll
[2017/08/31 11:43:23 | 000,372,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Faultrep.dll
[2017/08/31 11:43:23 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioEndpointBuilder.dll
[2017/08/31 11:43:23 | 000,108,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDump.dll
[2017/08/31 11:43:23 | 000,038,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WerFaultSecure.exe
[2017/08/31 11:43:23 | 000,033,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WerFaultSecure.exe
[2017/08/31 08:47:57 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\ElevatedDiagnostics
[2017/08/31 05:25:20 | 001,127,384 | ---- | C] (Google Inc.) -- C:\Windows\SysNative\GoogleInputTools.ime
[2017/08/31 05:25:20 | 000,983,512 | ---- | C] (Google Inc.) -- C:\Windows\SysWow64\GoogleInputTools.ime
[2017/08/31 05:25:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Google
[2017/08/31 05:20:58 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\NVIDIA
[2017/08/31 05:17:45 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1986-12.com.adobe
[2017/08/31 05:17:30 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2017/08/31 05:17:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2017/08/31 05:16:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2017/08/31 05:14:35 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\Macromedia
[2017/08/31 05:14:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2017/08/31 05:14:29 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\Adobe
[2017/08/31 05:12:45 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\TechSmith
[2017/08/31 05:10:08 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\TechSmith
[2017/08/31 05:10:08 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\Documents\Camtasia Studio
[2017/08/31 05:09:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
[2017/08/31 05:09:44 | 000,000,000 | ---D | C] -- C:\ProgramData\TechSmith
[2017/08/31 05:09:44 | 000,000,000 | ---D | C] -- C:\Program Files\TechSmith
[2017/08/31 05:05:42 | 000,000,000 | ---D | C] -- C:\Windows\Migration
[2017/08/31 05:04:33 | 000,030,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aspnet_counters.dll
[2017/08/31 05:04:33 | 000,029,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\aspnet_counters.dll
[2017/08/31 05:04:31 | 000,993,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcr120_clr0400.dll
[2017/08/31 05:04:31 | 000,987,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr120_clr0400.dll
[2017/08/31 05:04:31 | 000,690,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcp120_clr0400.dll
[2017/08/31 05:04:31 | 000,485,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp120_clr0400.dll
[2017/08/31 05:04:31 | 000,018,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr100_clr0400.dll
[2017/08/31 05:04:31 | 000,018,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcr100_clr0400.dll
[2017/08/31 05:01:22 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\Documents\Adobe Photoshop CS6 32 and 64bit FULL(2)
[2017/08/31 04:14:20 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\migisol.dll
[2017/08/31 04:14:20 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\migisol.dll
[2017/08/31 04:14:13 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slc.dll
[2017/08/31 04:14:13 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\f3ahvoas.dll
[2017/08/31 04:14:13 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\f3ahvoas.dll
[2017/08/31 04:13:57 | 000,079,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sdstor.sys
[2017/08/31 04:13:52 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\watchdog.sys
[2017/08/31 04:13:47 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clrhost.dll
[2017/08/31 04:13:46 | 000,142,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
[2017/08/31 04:13:28 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clrhost.dll
[2017/08/31 04:13:22 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\microsoft-windows-kernel-power-events.dll
[2017/08/31 04:13:21 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ext-ms-win-session-winsta-l1-1-0.dll
[2017/08/31 04:13:21 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ext-ms-win-session-winsta-l1-1-0.dll
[2017/08/31 04:13:12 | 000,413,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2017/08/31 04:13:02 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppc.dll
[2017/08/31 04:13:02 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppc.dll
[2017/08/31 04:12:53 | 000,008,192 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ext-ms-win-ntuser-private-l1-1-1.dll
[2017/08/31 04:12:53 | 000,008,192 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ext-ms-win-ntuser-private-l1-1-1.dll
[2017/08/31 04:12:53 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ext-ms-win-ntuser-private-l1-1-0.dll
[2017/08/31 04:12:53 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ext-ms-win-ntuser-private-l1-1-0.dll
[2017/08/31 04:12:53 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ext-ms-win-networking-wcmapi-l1-1-0.dll
[2017/08/31 04:12:53 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ext-ms-win-kernel32-package-l1-1-1.dll
[2017/08/31 04:12:53 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ext-ms-win-kernel32-package-l1-1-1.dll
[2017/08/31 04:12:33 | 000,890,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autochk.exe
[2017/08/31 04:12:33 | 000,874,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autofmt.exe
[2017/08/31 04:12:33 | 000,792,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autochk.exe
[2017/08/31 04:12:33 | 000,780,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autofmt.exe
[2017/08/31 04:12:29 | 000,275,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Dism.exe
[2017/08/31 04:12:29 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsAnytimeUpgradeResults.exe
[2017/08/31 04:12:28 | 000,653,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DismApi.dll
[2017/08/31 04:12:28 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DismApi.dll
[2017/08/31 04:12:28 | 000,211,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Dism.exe
[2017/08/31 04:11:52 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spcompat.dll
[2017/08/31 03:42:48 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\IDM
[2017/08/31 03:42:48 | 000,000,000 | ---D | C] -- C:\ProgramData\IDM
[2017/08/31 03:42:48 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\DMCache
[2017/08/31 03:42:44 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2017/08/31 03:42:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2017/08/31 03:42:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Internet Download Manager
[2017/08/31 03:09:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2017/08/31 02:58:20 | 000,000,000 | ---D | C] -- C:\Program Files\BitTorrent
[2017/08/31 02:58:03 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\Mozilla
[2017/08/31 02:54:52 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\Windows_8
[2017/08/31 02:54:09 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\WinRAR
[2017/08/31 02:49:15 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
[2017/08/31 02:48:25 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\BtaMPM.sys
[2017/08/31 02:47:53 | 000,146,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\SerCx2.sys
[2017/08/31 02:47:06 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\Programs
[2017/08/31 02:42:32 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2017/08/31 02:42:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2017/08/31 02:42:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinRAR
[2017/08/31 02:30:40 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\uTorrent
[2017/08/31 02:28:17 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2017/08/31 02:28:17 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2017/08/31 02:27:55 | 000,447,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppcomapi.dll
[2017/08/31 02:25:25 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\Google
[2017/08/31 02:22:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2017/08/31 02:17:44 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2017/08/31 02:17:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2017/08/31 02:17:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache
[2017/08/31 02:17:31 | 000,609,240 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvStreaming.exe
[2017/08/31 02:17:25 | 000,067,072 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nv3dappshextr.dll
[2017/08/31 02:17:24 | 006,783,776 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll
[2017/08/31 02:17:24 | 003,522,392 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll
[2017/08/31 02:17:24 | 002,559,960 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvcr.dll
[2017/08/31 02:17:24 | 001,084,704 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nv3dappshext.dll
[2017/08/31 02:17:24 | 000,386,520 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll
[2017/08/31 02:17:24 | 000,062,808 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll
[2017/08/31 02:17:11 | 000,075,040 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2017/08/31 02:17:11 | 000,061,912 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2017/08/31 02:17:07 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2017/08/31 02:17:04 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2017/08/31 02:12:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2017/08/31 02:12:25 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\Google
[2017/08/31 02:01:06 | 000,000,000 | R--D | C] -- C:\Users\Waseem Latif\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2017/08/31 02:01:06 | 000,000,000 | R--D | C] -- C:\Users\Waseem Latif\Searches
[2017/08/31 02:01:06 | 000,000,000 | R--D | C] -- C:\Users\Waseem Latif\Contacts
[2017/08/31 02:01:06 | 000,000,000 | R--D | C] -- C:\Users\Waseem Latif\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2017/08/31 02:01:06 | 000,000,000 | -H-D | C] -- C:\Users\Waseem Latif\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2017/08/31 02:01:05 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\VirtualStore
[2017/08/31 02:01:05 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\Packages
[2017/08/31 02:01:05 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\Adobe
[2017/08/31 02:01:04 | 000,000,000 | --SD | C] -- C:\Users\Waseem Latif\AppData\Roaming\Microsoft
[2017/08/31 02:01:04 | 000,000,000 | R--D | C] -- C:\Users\Waseem Latif\Videos
[2017/08/31 02:01:04 | 000,000,000 | R--D | C] -- C:\Users\Waseem Latif\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
[2017/08/31 02:01:04 | 000,000,000 | R--D | C] -- C:\Users\Waseem Latif\Saved Games
[2017/08/31 02:01:04 | 000,000,000 | R--D | C] -- C:\Users\Waseem Latif\Pictures
[2017/08/31 02:01:04 | 000,000,000 | R--D | C] -- C:\Users\Waseem Latif\Music
[2017/08/31 02:01:04 | 000,000,000 | R--D | C] -- C:\Users\Waseem Latif\Links
[2017/08/31 02:01:04 | 000,000,000 | R--D | C] -- C:\Users\Waseem Latif\Favorites
[2017/08/31 02:01:04 | 000,000,000 | R--D | C] -- C:\Users\Waseem Latif\Downloads
[2017/08/31 02:01:04 | 000,000,000 | R--D | C] -- C:\Users\Waseem Latif\Documents
[2017/08/31 02:01:04 | 000,000,000 | R--D | C] -- C:\Users\Waseem Latif\Desktop
[2017/08/31 02:01:04 | 000,000,000 | R--D | C] -- C:\Users\Waseem Latif\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2017/08/31 02:01:04 | 000,000,000 | R--D | C] -- C:\Users\Waseem Latif\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
[2017/08/31 02:01:04 | 000,000,000 | -HSD | C] -- C:\Users\Waseem Latif\AppData\Local\Temporary Internet Files
[2017/08/31 02:01:04 | 000,000,000 | -HSD | C] -- C:\Users\Waseem Latif\Templates
[2017/08/31 02:01:04 | 000,000,000 | -HSD | C] -- C:\Users\Waseem Latif\Start Menu
[2017/08/31 02:01:04 | 000,000,000 | -HSD | C] -- C:\Users\Waseem Latif\SendTo
[2017/08/31 02:01:04 | 000,000,000 | -HSD | C] -- C:\Users\Waseem Latif\Recent
[2017/08/31 02:01:04 | 000,000,000 | -HSD | C] -- C:\Users\Waseem Latif\PrintHood
[2017/08/31 02:01:04 | 000,000,000 | -HSD | C] -- C:\Users\Waseem Latif\NetHood
[2017/08/31 02:01:04 | 000,000,000 | -HSD | C] -- C:\Users\Waseem Latif\Documents\My Videos
[2017/08/31 02:01:04 | 000,000,000 | -HSD | C] -- C:\Users\Waseem Latif\Documents\My Pictures
[2017/08/31 02:01:04 | 000,000,000 | -HSD | C] -- C:\Users\Waseem Latif\Documents\My Music
[2017/08/31 02:01:04 | 000,000,000 | -HSD | C] -- C:\Users\Waseem Latif\My Documents
[2017/08/31 02:01:04 | 000,000,000 | -HSD | C] -- C:\Users\Waseem Latif\Local Settings
[2017/08/31 02:01:04 | 000,000,000 | -HSD | C] -- C:\Users\Waseem Latif\AppData\Local\History
[2017/08/31 02:01:04 | 000,000,000 | -HSD | C] -- C:\Users\Waseem Latif\Cookies
[2017/08/31 02:01:04 | 000,000,000 | -HSD | C] -- C:\Users\Waseem Latif\Application Data
[2017/08/31 02:01:04 | 000,000,000 | -HSD | C] -- C:\Users\Waseem Latif\AppData\Local\Application Data
[2017/08/31 02:01:04 | 000,000,000 | -H-D | C] -- C:\Users\Waseem Latif\AppData
[2017/08/31 02:01:04 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\Temp
[2017/08/31 02:01:04 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2017/08/31 02:01:04 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Local\Microsoft
[2017/08/31 02:01:04 | 000,000,000 | ---D | C] -- C:\Users\Waseem Latif\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2017/08/31 01:53:53 | 000,000,000 | ---D | C] -- C:\Windows\CSC
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2017/09/04 14:47:19 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Waseem Latif\Desktop\OTL.exe
[2017/09/04 14:23:26 | 002,395,648 | ---- | M] (Farbar) -- C:\Users\Waseem Latif\Desktop\FRST64.exe
[2017/09/04 14:05:51 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
[2017/09/04 13:58:05 | 000,820,208 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2017/09/04 13:58:05 | 000,696,010 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2017/09/04 13:58:05 | 000,128,078 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2017/09/04 13:55:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2017/09/04 13:53:02 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2017/09/04 13:52:58 | 1703,940,094 | -HS- | M] () -- C:\hiberfil.sys
[2017/09/04 13:50:48 | 000,000,132 | ---- | M] () -- C:\Users\Waseem Latif\AppData\Roaming\Adobe PNG Format CS6 Prefs
[2017/09/02 02:50:16 | 000,000,002 | RHS- | M] () -- C:\Windows\winstart.bat
[2017/09/02 02:50:16 | 000,000,002 | RHS- | M] () -- C:\Windows\SysWow64\CONFIG.NT
[2017/09/02 02:50:16 | 000,000,002 | RHS- | M] () -- C:\Windows\SysWow64\AUTOEXEC.NT
[2017/09/01 19:25:18 | 000,002,340 | ---- | M] () -- C:\Windows\SysNative\.crusader
[2017/09/01 18:48:17 | 004,968,584 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2017/09/01 16:33:37 | 000,195,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msclmd.dll
[2017/09/01 16:33:36 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msclmd.dll
[2017/08/31 23:43:21 | 000,004,608 | ---- | M] () -- C:\Windows\SECOH-QAD.del
[2017/08/31 21:52:15 | 000,000,425 | ---- | M] () -- C:\Users\Waseem Latif\AppData\Local\UserProducts.xml
[2017/08/31 20:57:04 | 000,001,561 | ---- | M] () -- C:\Users\Public\Desktop\BlueStacks.lnk
[2017/08/31 13:49:00 | 000,000,620 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2017/08/31 13:49:00 | 000,000,620 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2017/08/31 13:48:47 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2017/08/31 12:21:24 | 004,558,149 | -H-- | M] (Microsoft                                                   ) -- C:\Users\Waseem Latif\Documents\ss32AppData000.exe
[2017/08/31 05:25:20 | 001,127,384 | ---- | M] (Google Inc.) -- C:\Windows\SysNative\GoogleInputTools.ime
[2017/08/31 05:25:20 | 000,983,512 | ---- | M] (Google Inc.) -- C:\Windows\SysWow64\GoogleInputTools.ime
[2017/08/31 05:21:06 | 000,001,739 | ---- | M] () -- C:\Users\Waseem Latif\Desktop\Photoshop.lnk
[2017/08/31 05:09:48 | 000,001,093 | ---- | M] () -- C:\Users\Public\Desktop\Camtasia 9.lnk
[2017/08/31 05:04:33 | 000,030,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aspnet_counters.dll
[2017/08/31 05:04:33 | 000,029,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\aspnet_counters.dll
[2017/08/31 05:04:31 | 000,993,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msvcr120_clr0400.dll
[2017/08/31 05:04:31 | 000,987,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr120_clr0400.dll
[2017/08/31 05:04:31 | 000,690,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msvcp120_clr0400.dll
[2017/08/31 05:04:31 | 000,485,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp120_clr0400.dll
[2017/08/31 05:04:31 | 000,018,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr100_clr0400.dll
[2017/08/31 05:04:31 | 000,018,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msvcr100_clr0400.dll
[2017/08/31 03:54:00 | 000,002,299 | ---- | M] () -- C:\Users\Waseem Latif\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2017/08/31 03:20:36 | 000,001,442 | ---- | M] () -- C:\Users\Waseem Latif\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2017/08/31 02:57:26 | 000,018,432 | ---- | M] () -- C:\Users\Waseem Latif\AppData\Local\Main.dat
[2017/08/31 02:56:54 | 000,019,008 | ---- | M] () -- C:\Users\Waseem Latif\AppData\Local\INSTALLATIONCONFIGURATION.del
[2017/08/31 02:56:47 | 000,140,800 | ---- | M] () -- C:\Users\Waseem Latif\AppData\Local\installer.dat
[2017/08/31 02:23:40 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_LocationProvider_01_11_00.Wdf
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2017/09/04 14:05:51 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
[2017/09/02 02:50:16 | 000,000,002 | RHS- | C] () -- C:\Windows\winstart.bat
[2017/09/02 02:50:16 | 000,000,002 | RHS- | C] () -- C:\Windows\SysWow64\CONFIG.NT
[2017/09/02 02:50:16 | 000,000,002 | RHS- | C] () -- C:\Windows\SysWow64\AUTOEXEC.NT
[2017/09/01 19:25:18 | 000,002,340 | ---- | C] () -- C:\Windows\SysNative\.crusader
[2017/09/01 01:47:42 | 000,002,535 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2017/08/31 23:43:21 | 000,004,608 | ---- | C] () -- C:\Windows\SECOH-QAD.del
[2017/08/31 23:38:53 | 000,163,840 | ---- | C] () -- C:\Windows\KMService.exe
[2017/08/31 23:38:53 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\srvany.exe
[2017/08/31 21:52:15 | 000,000,425 | ---- | C] () -- C:\Users\Waseem Latif\AppData\Local\UserProducts.xml
[2017/08/31 20:57:04 | 000,001,561 | ---- | C] () -- C:\Users\Public\Desktop\BlueStacks.lnk
[2017/08/31 13:51:03 | 1703,940,094 | -HS- | C] () -- C:\hiberfil.sys
[2017/08/31 13:48:47 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2017/08/31 13:48:25 | 268,435,456 | -HS- | C] () -- C:\swapfile.sys
[2017/08/31 12:33:07 | 000,142,848 | ---- | C] () -- C:\Windows\SysNative\OEMLicense.dll
[2017/08/31 12:32:55 | 000,096,256 | ---- | C] () -- C:\Windows\SysNative\BthpanContextHandler.dll
[2017/08/31 12:32:54 | 000,107,008 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll
[2017/08/31 12:32:12 | 000,053,248 | ---- | C] () -- C:\Windows\SysNative\BWContextHandler.dll
[2017/08/31 12:32:12 | 000,046,080 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2017/08/31 12:29:43 | 000,050,745 | ---- | C] () -- C:\Windows\SysNative\srms.dat
[2017/08/31 12:29:39 | 000,002,412 | ---- | C] () -- C:\Windows\SysNative\KeyboardFilterShim.sdb
[2017/08/31 11:50:13 | 000,518,144 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2017/08/31 11:50:00 | 000,448,629 | ---- | C] () -- C:\Windows\SysNative\ApnDatabase.xml
[2017/08/31 11:49:56 | 000,016,303 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
[2017/08/31 11:49:56 | 000,016,303 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
[2017/08/31 08:14:22 | 000,000,299 | ---- | C] () -- C:\Users\Waseem Latif\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Recycle Bin.lnk
[2017/08/31 05:42:32 | 000,000,132 | ---- | C] () -- C:\Users\Waseem Latif\AppData\Roaming\Adobe PNG Format CS6 Prefs
[2017/08/31 05:21:06 | 000,001,739 | ---- | C] () -- C:\Users\Waseem Latif\Desktop\Photoshop.lnk
[2017/08/31 05:17:40 | 000,001,091 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
[2017/08/31 05:17:31 | 000,001,053 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
[2017/08/31 05:17:16 | 000,001,539 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
[2017/08/31 05:17:16 | 000,001,369 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
[2017/08/31 05:09:48 | 000,001,093 | ---- | C] () -- C:\Users\Public\Desktop\Camtasia 9.lnk
[2017/08/31 04:14:14 | 000,139,600 | ---- | C] () -- C:\Windows\SysNative\systemsf.ebd
[2017/08/31 04:14:10 | 000,100,197 | ---- | C] () -- C:\Windows\SysNative\RacRules.xml
[2017/08/31 04:13:59 | 000,100,197 | ---- | C] () -- C:\Windows\SysWow64\RacRules.xml
[2017/08/31 04:13:53 | 000,011,109 | ---- | C] () -- C:\Windows\SysWow64\connectedsearch-results.searchconnector-ms
[2017/08/31 04:13:53 | 000,011,109 | ---- | C] () -- C:\Windows\SysNative\connectedsearch-results.searchconnector-ms
[2017/08/31 04:13:53 | 000,007,762 | ---- | C] () -- C:\Windows\SysWow64\connectedsearch-suggestions.searchconnector-ms
[2017/08/31 04:13:53 | 000,007,762 | ---- | C] () -- C:\Windows\SysNative\connectedsearch-suggestions.searchconnector-ms
[2017/08/31 04:13:53 | 000,007,130 | ---- | C] () -- C:\Windows\SysWow64\connectedsearch-zeroinput.searchconnector-ms
[2017/08/31 04:13:53 | 000,007,130 | ---- | C] () -- C:\Windows\SysNative\connectedsearch-zeroinput.searchconnector-ms
[2017/08/31 04:13:16 | 000,002,255 | ---- | C] () -- C:\Windows\SysWow64\WimBootCompress.ini
[2017/08/31 04:13:16 | 000,002,255 | ---- | C] () -- C:\Windows\SysNative\WimBootCompress.ini
[2017/08/31 04:13:15 | 000,262,335 | ---- | C] () -- C:\Windows\SysNative\dfpinc.dat
[2017/08/31 04:12:20 | 000,002,440 | R-S- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileManager.lnk
[2017/08/31 02:57:26 | 000,018,432 | ---- | C] () -- C:\Users\Waseem Latif\AppData\Local\Main.dat
[2017/08/31 02:56:47 | 000,140,800 | ---- | C] () -- C:\Users\Waseem Latif\AppData\Local\installer.dat
[2017/08/31 02:56:47 | 000,019,008 | ---- | C] () -- C:\Users\Waseem Latif\AppData\Local\INSTALLATIONCONFIGURATION.del
[2017/08/31 02:23:40 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_LocationProvider_01_11_00.Wdf
[2017/08/31 02:17:51 | 002,683,736 | ---- | C] () -- C:\Windows\SysNative\nvwmi64.exe
[2017/08/31 02:17:51 | 000,004,425 | ---- | C] () -- C:\Windows\SysNative\nvPerfProvider.man
[2017/08/31 02:17:24 | 003,826,628 | ---- | C] () -- C:\Windows\SysNative\nvcoproc.bin
[2017/08/31 02:13:45 | 000,002,299 | ---- | C] () -- C:\Users\Waseem Latif\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2017/08/31 02:13:45 | 000,002,287 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
[2017/08/31 02:11:45 | 000,001,442 | ---- | C] () -- C:\Users\Waseem Latif\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2017/08/31 02:01:05 | 000,001,430 | ---- | C] () -- C:\Users\Waseem Latif\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2017/08/31 02:01:04 | 000,000,352 | ---- | C] () -- C:\Users\Waseem Latif\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2017/08/31 02:01:04 | 000,000,334 | ---- | C] () -- C:\Users\Waseem Latif\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2017/05/11 16:36:03 | 022,361,848 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2017/05/11 16:32:38 | 019,788,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2014/10/28 18:19:43 | 001,013,760 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2014/10/28 17:59:23 | 000,786,944 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2014/10/28 18:16:01 | 000,512,512 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
[color=#E56717]========== Custom Scans ==========[/color]
 
[color=#E56717]========== Base Services ==========[/color]
SRV:[b]64bit:[/b] - [2014/10/28 19:42:20 | 000,214,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\aelupsvc.dll -- (AeLookupSvc)
SRV:[b]64bit:[/b] - [2016/01/31 11:07:53 | 000,110,080 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appinfo.dll -- (Appinfo)
SRV:[b]64bit:[/b] - [2014/10/28 18:21:02 | 000,096,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\alg.exe -- (ALG)
SRV:[b]64bit:[/b] - [2014/10/28 18:43:34 | 000,933,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\qmgr.dll -- (BITS)
SRV:[b]64bit:[/b] - [2016/02/05 08:11:53 | 000,845,312 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\BFE.DLL -- (BFE)
SRV:[b]64bit:[/b] - [2014/10/28 18:22:40 | 000,062,464 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV - [2014/10/28 18:01:27 | 000,046,592 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\keyiso.dll -- (KeyIso)
SRV:[b]64bit:[/b] - [2014/10/28 18:12:28 | 000,516,608 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\es.dll -- (EventSystem)
SRV - [2014/10/28 17:55:10 | 000,367,616 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\es.dll -- (EventSystem)
SRV:[b]64bit:[/b] - [2014/10/28 18:26:50 | 000,135,168 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\browser.dll -- (Browser)
SRV:[b]64bit:[/b] - [2014/10/28 18:27:24 | 000,131,584 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cryptsvc.dll -- (CryptSvc)
SRV:[b]64bit:[/b] - [2017/04/16 00:22:15 | 000,817,664 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (DcomLaunch)
SRV:[b]64bit:[/b] - [2014/10/28 18:29:06 | 000,365,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)
SRV - [2014/10/28 18:05:58 | 000,292,864 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)
SRV:[b]64bit:[/b] - [2017/06/13 07:16:12 | 000,252,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dnsrslvr.dll -- (Dnscache)
SRV:[b]64bit:[/b] - [2014/10/28 18:14:35 | 000,110,592 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\eapsvc.dll -- (Eaphost)
SRV:[b]64bit:[/b] - [2014/10/28 19:44:23 | 000,033,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hidserv.dll -- (hidserv)
SRV - [2014/10/28 18:59:46 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\hidserv.dll -- (hidserv)
SRV:[b]64bit:[/b] - [2014/10/28 18:07:58 | 000,452,608 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\ipnathlp.dll -- (SharedAccess)
SRV:[b]64bit:[/b] - [2016/05/12 08:59:54 | 000,398,848 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\IPSECSVC.DLL -- (PolicyAgent)
No service found with a name of MsMpSvc
No service found with a name of NisSrv
SRV:[b]64bit:[/b] - [2014/10/28 18:01:45 | 000,706,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\swprv.dll -- (swprv)
SRV:[b]64bit:[/b] - [2014/10/28 18:22:44 | 000,071,168 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\mmcss.dll -- (MMCSS)
SRV:[b]64bit:[/b] - [2014/10/28 17:51:03 | 000,266,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netman.dll -- (Netman)
SRV:[b]64bit:[/b] - [2014/10/28 18:19:20 | 000,550,912 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:[b]64bit:[/b] - [2014/12/05 18:41:58 | 000,391,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nlasvc.dll -- (NlaSvc)
SRV:[b]64bit:[/b] - [2014/10/28 18:29:16 | 000,028,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nsisvc.dll -- (nsi)
SRV:[b]64bit:[/b] - [2014/10/28 19:45:24 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\umpnpmgr.dll -- (PlugPlay)
SRV:[b]64bit:[/b] - [2014/10/28 17:54:15 | 000,827,392 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\spoolsv.exe -- (Spooler)
No service found with a name of ProtectedStorage
No service found with a name of EMDMgmt
SRV:[b]64bit:[/b] - [2014/10/28 19:34:42 | 000,102,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasauto.dll -- (RasAuto)
SRV:[b]64bit:[/b] - [2016/07/07 13:34:09 | 000,542,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasmans.dll -- (RasMan)
SRV:[b]64bit:[/b] - [2017/04/16 00:22:15 | 000,817,664 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (RpcSs)
SRV:[b]64bit:[/b] - [2016/02/06 11:08:28 | 000,031,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\seclogon.dll -- (seclogon)
SRV:[b]64bit:[/b] - [2014/10/28 20:51:48 | 000,047,024 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsass.exe -- (SamSs)
SRV:[b]64bit:[/b] - [2016/01/06 09:47:23 | 000,146,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wscsvc.dll -- (wscsvc)
SRV:[b]64bit:[/b] - [2017/05/02 11:31:23 | 000,329,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\srvsvc.dll -- (LanmanServer)
SRV:[b]64bit:[/b] - [2014/10/28 18:04:06 | 000,640,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\shsvcs.dll -- (ShellHWDetection)
SRV - [2014/10/28 17:49:09 | 000,576,512 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\shsvcs.dll -- (ShellHWDetection)
No service found with a name of slsvc
SRV:[b]64bit:[/b] - [2015/07/31 20:38:35 | 001,265,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\schedsvc.dll -- (Schedule)
SRV:[b]64bit:[/b] - [2014/10/28 19:12:14 | 000,313,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tapisrv.dll -- (TapiSrv)
SRV - [2014/10/28 18:34:59 | 000,254,464 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\tapisrv.dll -- (TapiSrv)
SRV:[b]64bit:[/b] - [2014/10/28 18:26:29 | 000,059,392 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\themeservice.dll -- (Themes)
SRV:[b]64bit:[/b] - [2015/07/09 09:14:45 | 000,228,864 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\profsvc.dll -- (ProfSvc)
SRV:[b]64bit:[/b] - [2016/02/05 07:46:47 | 001,455,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\VSSVC.exe -- (VSS)
SRV:[b]64bit:[/b] - [2015/05/30 12:35:47 | 000,911,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (Audiosrv)
SRV:[b]64bit:[/b] - [2015/05/30 12:36:24 | 000,230,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
No service found with a name of SDRSVC
SRV:[b]64bit:[/b] - [2017/01/12 09:51:17 | 000,119,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:[b]64bit:[/b] - [2015/03/05 19:47:37 | 001,696,256 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wevtsvc.dll -- (EventLog)
SRV:[b]64bit:[/b] - [2016/04/09 14:55:47 | 000,881,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\MPSSVC.dll -- (MpsSvc)
SRV:[b]64bit:[/b] - [2014/10/28 18:59:24 | 000,670,720 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wiaservc.dll -- (stisvc)
SRV:[b]64bit:[/b] - [2016/05/05 10:18:31 | 000,065,024 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msiexec.exe -- (msiserver)
SRV - [2016/05/05 09:37:04 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\msiexec.exe -- (msiserver)
SRV:[b]64bit:[/b] - [2014/10/28 18:18:13 | 000,230,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wbem\WMIsvc.dll -- (Winmgmt)
SRV:[b]64bit:[/b] - [2017/05/11 19:18:29 | 003,714,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wuaueng.dll -- (wuauserv)
SRV:[b]64bit:[/b] - [2014/10/28 18:53:17 | 000,262,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dot3svc.dll -- (dot3svc)
SRV:[b]64bit:[/b] - [2017/06/13 00:50:47 | 001,547,264 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wlansvc.dll -- (WlanSvc)
SRV:[b]64bit:[/b] - [2014/10/28 18:24:29 | 000,289,280 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wkssvc.dll -- (LanmanWorkstation)
 
[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
 
[color=#A23BEC]< MD5 for: EXPLORER.EXE  >[/color]
[2016/08/27 11:26:03 | 002,411,048 | ---- | M] (Microsoft Corporation) MD5=042216FBB8B0CCC7402C3C77E58E1BC9 -- C:\Windows\SysWOW64\explorer.exe
[2016/08/27 11:26:03 | 002,411,048 | ---- | M] (Microsoft Corporation) MD5=042216FBB8B0CCC7402C3C77E58E1BC9 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.18460_none_4cd924758207ca59\explorer.exe
[2014/03/04 04:16:50 | 002,088,160 | ---- | M] (Microsoft Corporation) MD5=119E091B5386379BC5AA598BE9440C75 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17039_none_4d02a60381e74c58\explorer.exe
[2013/10/21 23:03:47 | 002,065,448 | ---- | M] (Microsoft Corporation) MD5=1A0BC9598E4A58FC84570FFF5A108E58 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.16441_none_4ceff22781f6788c\explorer.exe
[2014/10/28 20:10:54 | 002,207,488 | ---- | M] (Microsoft Corporation) MD5=4B37A33F4F5237BF02E537F8D12D1129 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17415_none_4d144c4b81daa3b6\explorer.exe
[2014/02/22 08:50:32 | 002,373,784 | ---- | M] (Microsoft Corporation) MD5=4CE0C733CDCF1D2F78532BBD9CE3441D -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17031_none_42a5f9614d8dbfa5\explorer.exe
[2013/10/22 00:55:27 | 002,328,872 | ---- | M] (Microsoft Corporation) MD5=63DC38C3E4564B2405D562855643ABA2 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.16441_none_429b47d54d95b691\explorer.exe
[2013/09/29 21:14:28 | 002,065,960 | ---- | M] (Microsoft Corporation) MD5=712B0D2ADE5297563168C997DDC2DD13 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.16408_none_4d2233dd81cfba29\explorer.exe
[2014/03/04 05:25:49 | 002,373,784 | ---- | M] (Microsoft Corporation) MD5=81394C91B7B5A7C799E249AE82491F13 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17039_none_42adfbb14d868a5d\explorer.exe
[2014/10/28 20:57:42 | 002,501,368 | ---- | M] (Microsoft Corporation) MD5=85D47EB257B06094F052E0C8AEFA3BEE -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17415_none_42bfa1f94d79e1bb\explorer.exe
[2016/02/08 18:31:39 | 002,412,576 | ---- | M] (Microsoft Corporation) MD5=97A7A0521E059D242907EFB73A844F29 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.18231_none_4cfa90b781ee958f\explorer.exe
[2016/02/08 18:31:44 | 002,757,616 | ---- | M] (Microsoft Corporation) MD5=B3541A5A20C6264781909B1B7FE54836 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.18231_none_42a5e6654d8dd394\explorer.exe
[2013/09/29 21:14:17 | 002,328,328 | ---- | M] (Microsoft Corporation) MD5=C1400519D76A364E974E47BBA62B95B0 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.16408_none_42cd898b4d6ef82e\explorer.exe
[2014/02/22 07:18:25 | 002,088,160 | ---- | M] (Microsoft Corporation) MD5=E0C84A30581BC508E289E4371A723F58 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17031_none_4cfaa3b381ee81a0\explorer.exe
[2016/08/27 12:44:40 | 002,755,504 | ---- | M] (Microsoft Corporation) MD5=ED6B4C95E2A6D67480B9DBB8A8E7D9B4 -- C:\Windows\explorer.exe
[2016/08/27 12:44:40 | 002,755,504 | ---- | M] (Microsoft Corporation) MD5=ED6B4C95E2A6D67480B9DBB8A8E7D9B4 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.18460_none_42847a234da7085e\explorer.exe
 
[color=#A23BEC]< MD5 for: SERVICES  >[/color]
[2013/08/22 08:04:54 | 000,003,777 | ---- | M] () MD5=5EE2D65841D1985E8C1BC68B2EB4357B -- C:\Windows\WinSxS\amd64_microsoft-windows-w..ucture-other-minwin_31bf3856ad364e35_6.3.9600.16384_none_25fdfd813908f8a6\services
 
[color=#A23BEC]< MD5 for: SERVICES.EXE  >[/color]
[2014/10/28 20:53:12 | 000,411,128 | ---- | M] (Microsoft Corporation) MD5=5BF02EBEFEDC706318C96E2E60EDCB91 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_6.3.9600.17415_none_3023c055d060b271\services.exe
[2013/08/22 06:25:40 | 000,405,488 | ---- | M] (Microsoft Corporation) MD5=B4B610BBCB002EC478C6FD80CF915697 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_6.3.9600.16384_none_2fd72579d09a45e9\services.exe
[2015/04/08 15:55:21 | 000,410,128 | ---- | M] (Microsoft Corporation) MD5=E0C7813A97CA7947FF5C18A8F3B61A45 -- C:\Windows\SysNative\services.exe
[2015/04/08 15:55:21 | 000,410,128 | ---- | M] (Microsoft Corporation) MD5=E0C7813A97CA7947FF5C18A8F3B61A45 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_6.3.9600.17794_none_2fcc465dd0a27017\services.exe
 
[color=#A23BEC]< MD5 for: SERVICES.EXE.MUI  >[/color]
[2013/09/29 20:49:50 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=0626E9CF9F010A5E5D5A8E200A59DDDC -- C:\Windows\SysNative\en-US\services.exe.mui
[2013/09/29 20:49:50 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=0626E9CF9F010A5E5D5A8E200A59DDDC -- C:\Windows\WinSxS\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.3.9600.16384_en-us_5abba721f9ec3435\services.exe.mui
 
[color=#A23BEC]< MD5 for: SERVICES.JS  >[/color]
[2013/09/29 20:57:42 | 000,089,002 | ---- | M] () MD5=BCF4AD208163A961EEAF9F67C7DDA943 -- C:\Program Files\WindowsApps\Microsoft.BingFinance_3.0.1.174_x64__8wekyb3d8bbwe\common\js\services.js
[2013/09/29 20:58:10 | 000,089,002 | ---- | M] () MD5=BCF4AD208163A961EEAF9F67C7DDA943 -- C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.1.177_x64__8wekyb3d8bbwe\common\js\services.js
[2013/09/29 20:58:28 | 000,089,002 | ---- | M] () MD5=BCF4AD208163A961EEAF9F67C7DDA943 -- C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.1.176_x64__8wekyb3d8bbwe\common\js\services.js
[2013/09/29 20:57:09 | 000,089,002 | ---- | M] () MD5=BCF4AD208163A961EEAF9F67C7DDA943 -- C:\Program Files\WindowsApps\Microsoft.BingNews_3.0.1.174_x64__8wekyb3d8bbwe\common\js\services.js
[2013/09/29 20:56:53 | 000,089,002 | ---- | M] () MD5=BCF4AD208163A961EEAF9F67C7DDA943 -- C:\Program Files\WindowsApps\Microsoft.BingSports_3.0.1.174_x64__8wekyb3d8bbwe\common\js\services.js
[2013/09/29 20:59:30 | 000,089,002 | ---- | M] () MD5=BCF4AD208163A961EEAF9F67C7DDA943 -- C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.1.174_x64__8wekyb3d8bbwe\common\js\services.js
[2013/09/29 20:57:24 | 000,089,002 | ---- | M] () MD5=BCF4AD208163A961EEAF9F67C7DDA943 -- C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.1.174_x64__8wekyb3d8bbwe\common\js\services.js
 
[color=#A23BEC]< MD5 for: SERVICES.LNK  >[/color]
[2013/08/21 23:54:57 | 000,001,158 | ---- | M] () MD5=5C11B0E362D426FD6E99B07705BA4A48 -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2013/08/21 23:54:57 | 000,001,158 | ---- | M] () MD5=5C11B0E362D426FD6E99B07705BA4A48 -- C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2013/08/21 23:54:57 | 000,001,158 | ---- | M] () MD5=5C11B0E362D426FD6E99B07705BA4A48 -- C:\Windows\WinSxS\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.3.9600.16384_none_c02242af19b1eb57\services.lnk
 
[color=#A23BEC]< MD5 for: SERVICES.MOF  >[/color]
[2013/06/18 07:51:33 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\SysNative\wbem\services.mof
[2013/06/18 07:51:33 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.3.9600.16384_none_c01e2072a140077e\services.mof
 
[color=#A23BEC]< MD5 for: SERVICES.MSC  >[/color]
[2013/09/29 20:49:53 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\SysNative\en-US\services.msc
[2013/06/18 07:47:53 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\SysNative\services.msc
[2013/09/29 20:49:53 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\SysWOW64\en-US\services.msc
[2013/06/18 05:23:54 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\SysWOW64\services.msc
[2013/09/29 20:49:53 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.3.9600.16384_en-us_94fd770dd055ce28\services.msc
[2013/06/18 07:47:53 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\WinSxS\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.3.9600.16384_none_c02242af19b1eb57\services.msc
[2013/06/18 05:23:54 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\WinSxS\wow64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.3.9600.16384_none_ca76ed014e12ad52\services.msc
[2013/09/29 20:49:53 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\WinSxS\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.3.9600.16384_en-us_38dedb8a17f85cf2\services.msc
 
[color=#A23BEC]< MD5 for: SERVICES.PTXML  >[/color]
[2013/08/21 23:45:36 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\SysNative\wdi\perftrack\Services.ptxml
[2013/08/21 23:45:36 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.3.9600.16384_none_c01e2072a140077e\Services.ptxml
 
[color=#A23BEC]< MD5 for: SVCHOST.EXE  >[/color]
[2013/08/21 22:30:58 | 000,031,552 | ---- | M] (Microsoft Corporation) MD5=425E22D9F5C01616AFC92987791B19E9 -- C:\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.3.9600.16384_none_4a5b1e2820e75323\svchost.exe
[2014/10/28 20:17:51 | 000,033,088 | ---- | M] (Microsoft Corporation) MD5=D0ABC231C0B3E88C6B612B28ABBF734D -- C:\Windows\SysWOW64\svchost.exe
[2014/10/28 20:17:51 | 000,033,088 | ---- | M] (Microsoft Corporation) MD5=D0ABC231C0B3E88C6B612B28ABBF734D -- C:\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.3.9600.17415_none_4aa7b90420adbfab\svchost.exe
[2014/10/28 21:11:20 | 000,038,792 | ---- | M] (Microsoft Corporation) MD5=E3A2AD05E24105B35E986CF9CB38EC47 -- C:\Windows\SysNative\svchost.exe
[2014/10/28 21:11:20 | 000,038,792 | ---- | M] (Microsoft Corporation) MD5=E3A2AD05E24105B35E986CF9CB38EC47 -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.3.9600.17415_none_a6c65487d90b30e1\svchost.exe
[2013/08/22 05:45:17 | 000,037,768 | ---- | M] (Microsoft Corporation) MD5=E4CA434F251681590D0538BC21C32D2F -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.3.9600.16384_none_a679b9abd944c459\svchost.exe
 
[color=#A23BEC]< MD5 for: USERINIT.EXE  >[/color]
[2013/08/22 03:03:12 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=08C191B2917862BE90C33E31CB6B6D79 -- C:\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.3.9600.16384_none_cce71a20a5a6fe7f\userinit.exe
[2013/08/21 19:54:12 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=41636F77AD6D9A396EA34E4786B96F2B -- C:\Windows\WinSxS\x86_microsoft-windows-userinit_31bf3856ad364e35_6.3.9600.16384_none_70c87e9ced498d49\userinit.exe
[2014/10/28 18:28:08 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=5C131534A3EA4A461A793FB507A8004F -- C:\Windows\SysNative\userinit.exe
[2014/10/28 18:28:08 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=5C131534A3EA4A461A793FB507A8004F -- C:\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.3.9600.17415_none_cd33b4fca56d6b07\userinit.exe
[2014/10/28 18:05:25 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=D10643FC0095434C819316CA6CD748C0 -- C:\Windows\SysWOW64\userinit.exe
[2014/10/28 18:05:25 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=D10643FC0095434C819316CA6CD748C0 -- C:\Windows\WinSxS\x86_microsoft-windows-userinit_31bf3856ad364e35_6.3.9600.17415_none_71151978ed0ff9d1\userinit.exe
 
[color=#A23BEC]< MD5 for: WINLOGON.EXE  >[/color]
[2014/02/22 02:45:48 | 000,562,176 | ---- | M] (Microsoft Corporation) MD5=306EB21E5B480AE9065EA55AC8C35936 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.3.9600.17031_none_60b45365a8c2ccdb\winlogon.exe
[2015/10/05 11:25:35 | 000,572,928 | ---- | M] (Microsoft Corporation) MD5=3F8645885823692D93765817759BE21C -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.3.9600.18083_none_60802d95a8e9a4df\winlogon.exe
[2013/08/22 02:55:08 | 000,564,736 | ---- | M] (Microsoft Corporation) MD5=7C94FDA3809015B8F2208D2E1C221F17 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.3.9600.16384_none_60816121a8e88269\winlogon.exe
[2016/01/05 08:00:41 | 000,570,880 | ---- | M] (Microsoft Corporation) MD5=B1102BBDDD9C87B3D609D6C08F7A3DBD -- C:\Windows\SysNative\winlogon.exe
[2016/01/05 08:00:41 | 000,570,880 | ---- | M] (Microsoft Corporation) MD5=B1102BBDDD9C87B3D609D6C08F7A3DBD -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.3.9600.18188_none_608530eda8e520b9\winlogon.exe
[2014/10/28 18:22:52 | 000,572,416 | ---- | M] (Microsoft Corporation) MD5=EC498BAE1F0D3E0E401C963F8D76C437 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.3.9600.17415_none_60cdfbfda8aeeef1\winlogon.exe

< End of report >