For the last several days, I've been getting lots of random pop-up ads in Microsoft Edge. Some of the sites the tabs to go are clkrev.com, wonderlandads.com, terraclicks.com, isanalyze.com and various .ru domains. Thank you for any help you can provide.
I have run scans with the following tools, many of which found and removed multiple malicious and suspicious programs, registry entries, etc, but the pop-ups still persist:
- adwcleaner (Removed Mail.Ru, YSearchUtil, and Babylon)
- Malwarebytes (Removed PCKeeper)
- HitmanPro (Log included below FRST logs below)
- HerdProtect (Removed files sintf32.dll and sintfnt.dll; along with Babylon installer)
- Zemana (Nothing found)
- JRT (Nothing found)
I have also deleted Microsoft Edge and reinstalled it via Powershell.
Here is the FRST.txt log:
Ran by chris (administrator) on BASEMENT-PC (22-01-2017 14:36:45)
Running from C:\Users\chris\Desktop
Loaded Profiles: chris (Available Profiles: ronke_000 & chris)
Platform: Windows 10 Pro Version 1607 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Electronic Arts) D:\Origin\OriginWebHelperService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft) C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(MY.COM B.V.) C:\Users\chris\AppData\Local\MyComGames\MyComGames.exe
() C:\Users\chris\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe
() C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Valve Corporation) D:\Steam\Steam.exe
(Valve Corporation) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Oracle Corporation) C:\Program Files\Java\jre1.8.0_101\bin\java.exe
(Valve Corporation) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
() C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe
(www.Bandisoft.com) C:\Program Files (x86)\Bandicam\bdcam.exe
(Valve Corporation) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
(www.Bandisoft.com) C:\Program Files (x86)\Bandicam\bdcam64.bin
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Farbar) C:\Users\chris\Desktop\FRST64 (1).exe
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [8027016 2016-09-16] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-06] (Microsoft Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM\...\Run: [ZAM] => C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [14122736 2017-01-18] (Zemana Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\Run: [MyComGames] => C:\Users\chris\AppData\Local\MyComGames\MyComGames.exe [4998032 2016-12-08] (MY.COM B.V.)
HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\Run: [Gaijin.Net Agent] => C:\Users\chris\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe [1798664 2017-01-03] ()
HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\RunOnce: [Uninstall C:\Users\chris\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\chris\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\amd64"
HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\MountPoints2: {843f9f1d-10e1-11e5-beb7-806e6f6e6963} - "E:\LaunchEAWG.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk [2015-03-19]
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
Tcpip\..\Interfaces\{754b830b-9426-47a7-992a-a87514813b87}: [DhcpNameServer] 10.1.5.1
==================
BHO: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-09-25] (Oracle Corporation)
BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-25] (Oracle Corporation)
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: HKLM-x32 {82774781-8F4E-11D1-AB1C-0000F8773BF0} hxxps://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab
========
FF DefaultProfile: 7vemt281.default
FF ProfilePath: C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default [2017-01-21]
FF DefaultSearchEngine.US: Mozilla\Firefox\Profiles\7vemt281.default -> Bing
FF Homepage: Mozilla\Firefox\Profiles\7vemt281.default -> www.warthunder.com
FF Extension: (HTTPS-Everywhere) - C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\Extensions\[email protected] [2016-06-13]
FF Extension: (uBlock Origin) - C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\Extensions\[email protected] [2016-05-03]
FF Extension: (WOT) - C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-12-15]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-10] ()
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-25] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-25] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-10] ()
FF Plugin HKU\S-1-5-21-1127713466-721098113-725960913-1014: @my.com/Games -> C:\Users\chris\AppData\Local\MyComGames\NPMyComDetector.dll [2016-09-13] (MY.COM B.V.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1445384 2016-10-21] ()
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [245544 2016-05-04] (EasyAntiCheat Ltd)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4317648 2016-12-14] (Malwarebytes)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2119176 2017-01-13] (Electronic Arts)
R2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [2181648 2017-01-13] (Electronic Arts)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 ZAMSvc; C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [14122736 2017-01-18] (Zemana Ltd.)
S2 RtkAudioService; "C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe" [X]
R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0307259.inf_amd64_e75a0a5e82450920\atikmdag.sys [26568856 2016-10-26] (Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0307259.inf_amd64_e75a0a5e82450920\atikmpag.sys [536592 2016-10-26] (Advanced Micro Devices, Inc.)
R3 athur; C:\WINDOWS\System32\drivers\athuw8x.sys [2919936 2013-06-02] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [102912 2015-07-21] (Advanced Micro Devices)
R3 debutfilter; C:\WINDOWS\system32\DRIVERS\debutfilterx64.sys [34512 2017-01-20] ()
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77416 2016-12-14] ()
R3 ISCT; C:\WINDOWS\System32\drivers\ISCTD64.sys [47008 2013-07-30] ()
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [176064 2017-01-20] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [102856 2017-01-22] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [43968 2017-01-22] (Malwarebytes)
R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [250816 2017-01-22] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [91584 2017-01-22] (Malwarebytes)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
S3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] ()
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R1 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [132120 2016-10-18] (Oracle Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [206416 2016-10-18] (Oracle Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R1 ZAM; C:\WINDOWS\System32\drivers\zam64.sys [203680 2017-01-21] (Zemana Ltd.)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2017-01-21] (Zemana Ltd.)
==================== One Month Created files and folders ========
2017-01-22 14:36 - 2017-01-22 14:36 - 00000000 ____D C:\FRST
2017-01-22 14:32 - 2017-01-22 14:36 - 02420736 _____ (Farbar) C:\Users\chris\Desktop\FRST64 (1).exe
2017-01-22 14:02 - 2017-01-22 14:02 - 00000625 _____ C:\Users\chris\Desktop\JRT.txt
2017-01-22 13:34 - 2017-01-22 13:34 - 06771840 _____ (ESET spol. s r.o.) C:\Users\chris\Downloads\esetonlinescanner_enu.exe
2017-01-22 13:34 - 2017-01-22 13:34 - 00000000 ____D C:\Users\chris\AppData\Local\ESET
2017-01-21 13:48 - 2017-01-21 17:59 - 00000000 ____D C:\Users\chris\Documents\Bandicam
2017-01-21 13:48 - 2017-01-21 13:48 - 00000000 ____D C:\Users\chris\AppData\Roaming\BANDISOFT
2017-01-21 13:47 - 2017-01-21 13:47 - 00001057 _____ C:\Users\Public\Desktop\Bandicam.lnk
2017-01-21 13:47 - 2017-01-21 13:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam
2017-01-21 13:47 - 2017-01-21 13:47 - 00000000 ____D C:\Program Files (x86)\BandiMPEG1
2017-01-21 13:47 - 2017-01-21 13:47 - 00000000 ____D C:\Program Files (x86)\Bandicam
2017-01-21 13:46 - 2017-01-21 13:46 - 17175976 _____ (Bandisoft) C:\Users\chris\Downloads\bdcamsetup.exe
2017-01-21 10:24 - 2017-01-21 10:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\herdProtect
2017-01-21 10:24 - 2017-01-21 10:24 - 00000000 ____D C:\Program Files\Reason
2017-01-21 10:20 - 2017-01-22 14:36 - 00069963 _____ C:\WINDOWS\ZAM.krnl.trace
2017-01-21 10:20 - 2017-01-22 14:36 - 00035503 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2017-01-21 10:20 - 2017-01-21 10:20 - 00203680 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zamguard64.sys
2017-01-21 10:20 - 2017-01-21 10:20 - 00203680 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zam64.sys
2017-01-21 10:19 - 2017-01-21 10:20 - 00000000 ____D C:\Program Files (x86)\Zemana AntiMalware
2017-01-21 10:19 - 2017-01-21 10:19 - 00000000 ____D C:\Users\chris\AppData\Local\Zemana
2017-01-21 10:19 - 2017-01-21 10:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware
2017-01-21 10:13 - 2017-01-21 10:18 - 00000000 ____D C:\ProgramData\HitmanPro
2017-01-21 10:00 - 2017-01-22 13:30 - 00000000 ____D C:\AdwCleaner
2017-01-21 09:57 - 2017-01-22 14:01 - 00000000 ____D C:\Users\chris\Desktop\Tools
2017-01-21 09:54 - 2017-01-21 09:54 - 00291606 _____ C:\Users\chris\Downloads\TCPView.zip
2017-01-21 09:53 - 2017-01-21 09:53 - 01932769 _____ C:\Users\chris\Downloads\ProcessExplorer.zip
2017-01-20 20:50 - 2017-01-20 20:51 - 00083992 _____ C:\Users\chris\AppData\Roaming\Debut.dmp
2017-01-20 20:37 - 2017-01-20 20:37 - 00001167 _____ C:\Users\chris\AppData\Roaming\trace_FilterInstaller.txt
2017-01-20 20:37 - 2017-01-20 20:37 - 00000000 _____ C:\Users\chris\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2017-01-20 19:44 - 2017-01-20 20:36 - 00000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2017-01-20 19:44 - 2017-01-20 19:50 - 00000000 ____D C:\Users\chris\AppData\Roaming\NCH Software
2017-01-20 19:44 - 2017-01-20 19:44 - 00034512 _____ C:\WINDOWS\system32\Drivers\debutfilterx64.sys
2017-01-20 19:44 - 2017-01-20 19:44 - 00002281 _____ C:\Users\chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Suite.lnk
2017-01-20 19:44 - 2017-01-20 19:44 - 00002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Suite.lnk
2017-01-20 19:44 - 2017-01-20 19:44 - 00001195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debut Video Capture Software.lnk
2017-01-20 19:44 - 2017-01-20 19:44 - 00000000 ____D C:\ProgramData\NCH Software
2017-01-20 19:44 - 2017-01-20 19:44 - 00000000 ____D C:\Program Files (x86)\NCH Software
2017-01-20 19:43 - 2017-01-20 19:44 - 01681656 _____ (NCH Software) C:\Users\chris\Downloads\debutpsetup (1).exe
2017-01-20 19:19 - 2017-01-20 19:19 - 01681656 _____ (NCH Software) C:\Users\chris\Downloads\debutpsetup.exe
2017-01-20 19:16 - 2017-01-22 14:15 - 00250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-01-20 19:16 - 2017-01-22 14:15 - 00102856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-01-20 19:16 - 2017-01-22 14:15 - 00091584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-01-20 19:16 - 2017-01-22 14:15 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-01-20 19:16 - 2017-01-20 19:16 - 00176064 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-01-20 19:15 - 2017-01-20 19:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-20 19:15 - 2017-01-20 19:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-20 19:15 - 2017-01-20 19:15 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-20 19:15 - 2016-12-14 12:55 - 00077416 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-01-20 19:14 - 2017-01-20 19:15 - 54199488 _____ (Malwarebytes ) C:\Users\chris\Downloads\mb3-setup-consumer-3.0.5.1299.exe
2017-01-19 14:34 - 2017-01-22 14:35 - 00000000 ____D C:\Users\chris\Desktop\tem
2017-01-19 14:26 - 2017-01-19 14:26 - 00000000 ____D C:\Users\chris\AppData\Roaming\Blender Foundation
2017-01-19 14:24 - 2017-01-19 14:34 - 00000000 ____D C:\Users\chris\Downloads\Star Wars Intro byLeyve
2017-01-19 14:23 - 2017-01-19 14:23 - 103607966 _____ C:\Users\chris\Downloads\Star Wars Intro byLeyve.rar
2017-01-19 14:18 - 2017-01-19 14:18 - 00003642 _____ C:\WINDOWS\System32\Tasks\hptop
2017-01-19 14:17 - 2017-01-19 14:17 - 00000068 _____ C:\Users\chris\Downloads\Download_Template.url
2017-01-19 14:16 - 2017-01-19 14:17 - 00000000 ____D C:\Users\chris\Downloads\Download_Template
2017-01-13 21:15 - 2017-01-13 21:15 - 00000000 ____D C:\Users\chris\Desktop\oldwest
2017-01-13 10:17 - 2017-01-13 10:17 - 00000000 ____D C:\WINDOWS\system32\55ffc3c7a45a063807a935c5e6eed..bin
2017-01-10 13:39 - 2016-12-21 01:08 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-01-10 13:39 - 2016-12-21 01:08 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-01-10 13:39 - 2016-12-21 01:04 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-01-10 13:39 - 2016-12-21 00:49 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-01-10 13:39 - 2016-12-21 00:46 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-01-10 13:39 - 2016-12-21 00:43 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-01-10 13:39 - 2016-12-21 00:43 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-01-10 13:39 - 2016-12-21 00:43 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-01-10 13:39 - 2016-12-21 00:43 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-01-10 13:39 - 2016-12-21 00:42 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-01-10 13:39 - 2016-12-21 00:42 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-01-10 13:39 - 2016-12-21 00:42 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-01-10 13:39 - 2016-12-21 00:42 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-01-10 13:39 - 2016-12-21 00:42 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-01-10 13:39 - 2016-12-21 00:41 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-01-10 13:39 - 2016-12-21 00:37 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-01-10 13:39 - 2016-12-21 00:15 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-01-10 13:39 - 2016-12-21 00:14 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2017-01-10 13:39 - 2016-12-21 00:13 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-01-10 13:39 - 2016-12-21 00:12 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-01-10 13:39 - 2016-12-21 00:10 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-01-10 13:39 - 2016-12-21 00:09 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2017-01-10 13:39 - 2016-12-21 00:09 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-01-10 13:39 - 2016-12-21 00:07 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-01-10 13:39 - 2016-12-21 00:06 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-01-10 13:39 - 2016-12-21 00:06 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-01-10 13:39 - 2016-12-21 00:06 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-01-10 13:39 - 2016-12-21 00:06 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-01-10 13:39 - 2016-12-21 00:05 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-01-10 13:39 - 2016-12-21 00:05 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-01-10 13:39 - 2016-12-21 00:05 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-01-10 13:39 - 2016-12-21 00:01 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-01-10 13:39 - 2016-12-21 00:00 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2017-01-10 13:39 - 2016-12-20 23:59 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-01-10 13:39 - 2016-12-20 23:59 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-01-10 13:39 - 2016-12-20 23:58 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-01-10 13:39 - 2016-12-20 23:57 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2017-01-10 13:39 - 2016-12-20 23:56 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2017-01-10 13:39 - 2016-12-20 23:56 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-01-10 13:39 - 2016-12-20 23:55 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-01-10 13:39 - 2016-12-20 23:55 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-01-10 13:39 - 2016-12-20 23:54 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-01-10 13:39 - 2016-12-20 23:53 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-01-10 13:39 - 2016-12-20 23:53 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-01-10 13:39 - 2016-12-20 23:53 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-01-10 13:39 - 2016-12-20 23:51 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-01-10 13:39 - 2016-12-20 23:51 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-01-10 13:39 - 2016-12-20 23:51 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-01-10 13:39 - 2016-12-20 23:50 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-01-10 13:39 - 2016-12-20 23:49 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-01-10 13:39 - 2016-12-20 23:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-01-10 13:39 - 2016-12-20 23:49 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-01-10 13:39 - 2016-12-20 23:47 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-01-10 13:39 - 2016-12-20 22:59 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2017-01-10 13:39 - 2016-12-20 22:09 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-01-10 13:39 - 2016-12-20 22:02 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-01-10 13:39 - 2016-12-20 22:01 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-01-10 13:39 - 2016-12-20 21:46 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2017-01-10 13:39 - 2016-12-20 21:43 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-01-10 13:39 - 2016-12-20 21:41 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2017-01-10 13:39 - 2016-12-20 21:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-01-10 13:39 - 2016-12-20 21:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-01-10 13:39 - 2016-12-20 21:40 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2017-01-10 13:39 - 2016-12-20 21:40 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-01-10 13:39 - 2016-12-20 21:40 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-01-10 13:39 - 2016-12-20 21:39 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-01-10 13:39 - 2016-12-20 21:39 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-01-10 13:39 - 2016-12-20 21:38 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2017-01-10 13:39 - 2016-12-20 21:35 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-01-10 13:39 - 2016-12-20 21:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2017-01-10 13:39 - 2016-12-20 21:34 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-01-10 13:39 - 2016-12-20 21:33 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-01-10 13:39 - 2016-12-20 21:32 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-01-10 13:39 - 2016-12-20 21:30 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2017-01-10 13:39 - 2016-12-20 21:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-01-10 13:39 - 2016-12-20 21:27 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-01-10 13:39 - 2016-12-20 21:26 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2017-01-10 13:39 - 2016-12-20 21:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-01-10 13:39 - 2016-12-20 21:25 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-01-10 13:39 - 2016-12-20 21:24 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-01-10 13:39 - 2016-12-20 21:24 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-01-10 13:39 - 2016-12-20 21:24 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-01-10 13:39 - 2016-12-20 21:24 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-01-10 13:39 - 2016-12-20 21:22 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-01-10 13:39 - 2016-12-20 21:22 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-01-10 13:39 - 2016-12-13 22:41 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-01-10 13:39 - 2016-12-13 22:41 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-01-10 13:39 - 2016-12-13 22:34 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 02169184 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 01669984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 01400160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-01-10 13:39 - 2016-12-13 22:33 - 01054048 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00992096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVManifest.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00822624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2017-01-10 13:39 - 2016-12-13 22:33 - 00813408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00779616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00752992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00571744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00513376 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00406368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2017-01-10 13:39 - 2016-12-13 22:33 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
2017-01-10 13:39 - 2016-12-13 22:33 - 00190816 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVDllSurrogate.exe
2017-01-10 13:39 - 2016-12-13 22:26 - 01469792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2017-01-10 13:39 - 2016-12-13 22:23 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-01-10 13:39 - 2016-12-13 22:21 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-01-10 13:39 - 2016-12-13 22:19 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-01-10 13:39 - 2016-12-13 22:18 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-01-10 13:39 - 2016-12-13 22:18 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-01-10 13:39 - 2016-12-13 22:17 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-01-10 13:39 - 2016-12-13 22:14 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-01-10 13:39 - 2016-12-13 22:14 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-01-10 13:39 - 2016-12-13 22:14 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-01-10 13:39 - 2016-12-13 22:08 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-01-10 13:39 - 2016-12-13 22:06 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-01-10 13:39 - 2016-12-13 22:01 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-01-10 13:39 - 2016-12-13 22:01 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2017-01-10 13:39 - 2016-12-13 22:01 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2017-01-10 13:39 - 2016-12-13 21:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-01-10 13:39 - 2016-12-13 21:46 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-01-10 13:39 - 2016-12-13 21:46 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-01-10 13:39 - 2016-12-13 21:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2017-01-10 13:39 - 2016-12-13 21:43 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-01-10 13:39 - 2016-12-13 21:42 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-01-10 13:39 - 2016-12-13 21:42 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-01-10 13:39 - 2016-12-13 21:42 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-10 13:39 - 2016-12-13 21:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2017-01-10 13:39 - 2016-12-13 21:41 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-01-10 13:39 - 2016-12-13 21:40 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-01-10 13:39 - 2016-12-13 21:40 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-01-10 13:39 - 2016-12-13 21:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-01-10 13:39 - 2016-12-13 21:40 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-01-10 13:39 - 2016-12-13 21:40 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-10 13:39 - 2016-12-13 21:39 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-01-10 13:39 - 2016-12-13 21:39 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-01-10 13:39 - 2016-12-13 21:39 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-01-10 13:39 - 2016-12-13 21:38 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-01-10 13:39 - 2016-12-13 21:38 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-01-10 13:39 - 2016-12-13 21:38 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-01-10 13:39 - 2016-12-13 21:38 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2017-01-10 13:39 - 2016-12-13 21:37 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-01-10 13:39 - 2016-12-13 21:36 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-01-10 13:39 - 2016-12-13 21:36 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-01-10 13:39 - 2016-12-13 21:36 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-01-10 13:39 - 2016-12-13 21:35 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-01-10 13:39 - 2016-12-13 21:35 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-01-10 13:39 - 2016-12-13 21:35 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-01-10 13:39 - 2016-12-13 21:35 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2017-01-10 13:39 - 2016-12-13 21:32 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2017-01-10 13:39 - 2016-12-13 21:32 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-01-10 13:39 - 2016-12-13 21:26 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-01-10 13:39 - 2016-12-13 21:26 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-01-10 13:39 - 2016-12-13 21:25 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-01-10 13:39 - 2016-12-13 21:24 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-01-10 13:39 - 2016-12-13 21:24 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-01-10 13:39 - 2016-12-13 21:23 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-01-10 13:39 - 2016-12-13 21:23 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-01-10 13:39 - 2016-12-13 21:22 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-01-10 13:39 - 2016-12-13 21:22 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2017-01-10 13:39 - 2016-12-13 21:22 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-01-10 13:39 - 2016-12-13 21:22 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-01-10 13:39 - 2016-12-13 21:22 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-01-10 13:39 - 2016-12-13 21:22 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-01-10 13:39 - 2016-12-13 21:21 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-01-10 13:39 - 2016-11-02 05:01 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-01-10 13:39 - 2016-11-02 04:00 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-01-10 13:39 - 2016-11-02 03:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-01-10 13:39 - 2016-11-02 03:22 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-01-10 13:39 - 2016-11-02 03:21 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-01-10 13:39 - 2016-08-01 21:30 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-01-01 12:21 - 2017-01-01 12:21 - 00000201 _____ C:\Users\chris\Desktop\Mount & Blade Warband.url
2016-12-31 10:47 - 2016-12-31 10:47 - 00000000 ____D C:\Users\chris\Documents\Banished
2016-12-31 09:48 - 2016-12-31 09:48 - 00000202 _____ C:\Users\chris\Desktop\Banished.url
2016-12-29 21:07 - 2016-12-29 21:07 - 00642712 _____ (Microsoft Corporation) C:\Users\chris\Downloads\gfwlivesetup.exe
2016-12-29 16:48 - 2016-12-29 16:48 - 00000000 ____D C:\Users\chris\Documents\Battlestations-Pacific
2016-12-29 16:47 - 2016-12-29 16:47 - 00000000 ____D C:\Users\chris\Documents\Games for Windows - LIVE Demos
2016-12-28 17:48 - 2016-12-28 17:48 - 00000000 ____D C:\Users\chris\Documents\Paradox Interactive
2016-12-28 17:40 - 2016-12-28 17:40 - 00000202 _____ C:\Users\chris\Desktop\Hearts of Iron IV.url
2016-12-25 13:23 - 2016-12-25 13:23 - 00000000 ____D C:\Users\chris\AppData\Local\CrashReportClient
2016-12-24 17:37 - 2016-12-24 17:37 - 00000000 ____D C:\Users\chris\AppData\Local\Astro
2016-12-24 17:34 - 2016-12-24 17:34 - 00000202 _____ C:\Users\chris\Desktop\ASTRONEER.url
2017-01-22 14:20 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-01-22 14:20 - 2015-08-01 17:57 - 01658700 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-22 14:17 - 2016-08-13 20:40 - 00000000 ____D C:\Users\chris
2017-01-22 14:15 - 2016-04-11 15:02 - 00000000 ____D C:\Users\chris\AppData\Local\MyComGames
2017-01-22 14:14 - 2016-08-13 20:43 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-22 14:14 - 2016-08-13 20:38 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin
2017-01-22 14:14 - 2016-07-15 23:04 - 01048576 _____ C:\WINDOWS\system32\config\BBI
2017-01-22 14:07 - 2015-08-02 16:00 - 00000000 ____D C:\Users\chris\AppData\Local\Packages
2017-01-22 13:52 - 2016-08-13 20:37 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-01-21 17:48 - 2015-09-27 11:21 - 00001136 _____ C:\Users\chris\Desktop\nativelog.txt
2017-01-21 16:25 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\system32\AppLocker
2017-01-21 13:59 - 2015-08-22 13:23 - 00000000 ____D C:\Users\chris\AppData\Roaming\.minecraft
2017-01-21 09:51 - 2015-08-14 09:29 - 00000000 ____D C:\Users\chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-01-20 20:52 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-01-20 20:51 - 2016-07-16 04:45 - 00000000 ____D C:\WINDOWS\INF
2017-01-20 20:38 - 2015-06-05 15:20 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-01-20 19:24 - 2015-07-22 13:38 - 00000000 ____D C:\ProgramData\Origin
2017-01-20 19:19 - 2015-08-02 16:34 - 00000000 ____D C:\Users\chris\AppData\Roaming\Origin
2017-01-20 11:47 - 2015-11-17 13:26 - 00001000 _____ C:\Users\Public\Desktop\STAR WARS Battlefront.lnk
2017-01-19 14:32 - 2016-05-10 11:53 - 00000000 ____D C:\tmp
2017-01-19 14:18 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-01-19 14:18 - 2013-08-22 08:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-01-18 15:57 - 2016-12-13 15:56 - 00003282 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-01-18 15:57 - 2015-08-02 16:01 - 00002404 _____ C:\Users\chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-01-18 15:57 - 2015-08-02 16:01 - 00000000 ___RD C:\Users\chris\OneDrive
2017-01-11 21:18 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\rescache
2017-01-10 18:27 - 2016-08-13 20:37 - 00203376 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\Provisioning
2017-01-10 18:27 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-01-10 18:27 - 2015-08-01 11:30 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2017-01-10 18:25 - 2016-07-16 04:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-10 18:22 - 2015-03-19 21:08 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-01-10 18:21 - 2015-03-19 21:08 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-01-10 02:21 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-01-10 02:21 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-01-05 20:14 - 2016-05-04 19:30 - 00563960 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys
2017-01-01 13:15 - 2015-08-27 15:32 - 00000000 ____D C:\Users\chris\Documents\Mount&Blade Warband Savegames
2016-12-31 14:34 - 2016-03-01 19:56 - 00000000 ____D C:\Users\chris\Desktop\minecraft_server
2016-12-31 14:27 - 2016-08-13 20:40 - 00524288 ___SH C:\Users\chris\NTUSER.DAT{c279ba0a-61d8-11e6-b915-8be4a007404b}.TMContainer00000000000000000002.regtrans-ms
2016-12-29 16:47 - 2016-08-13 20:40 - 00000000 ____D C:\Users\chris\AppData\Local\Microsoft
2016-12-29 16:47 - 2016-07-16 04:47 - 00000000 ___SD C:\ProgramData\Microsoft
2016-12-29 16:47 - 2016-07-16 04:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-12-29 16:47 - 2015-08-02 16:36 - 00000000 ____D C:\Users\chris\AppData\Local\Diagnostics
2016-12-29 16:47 - 2014-02-23 20:19 - 00251201 _____ C:\WINDOWS\DirectX.log
2016-12-29 16:42 - 2016-07-16 04:47 - 00000000 __RSD C:\WINDOWS\assembly
2016-12-28 14:16 - 2013-02-24 15:37 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-28 14:14 - 2014-03-02 13:52 - 00000000 ____D C:\Program Files (x86)\LucasArts
2016-12-24 17:37 - 2015-12-24 14:49 - 00000000 ____D C:\Users\chris\AppData\Local\UnrealEngine
2017-01-20 20:37 - 2017-01-20 20:37 - 0001167 _____ () C:\Users\chris\AppData\Roaming\trace_FilterInstaller.txt
2017-01-20 20:37 - 2017-01-20 20:37 - 0000000 _____ () C:\Users\chris\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2014-03-02 13:50 - 2006-01-20 12:06 - 4489216 _____ () C:\ProgramData\EAW Deathstar.scr
2014-03-04 19:09 - 2006-01-20 11:20 - 1028096 _____ () C:\ProgramData\EAW Vehicles.scr
====================
2013-08-04 23:15 - 2013-08-04 23:15 - 4292136 _____ (www.Bandisoft.com) C:\Users\chris\AppData\Local\Temp\bdfilters.dll
2017-01-21 10:43 - 2017-01-21 10:43 - 0019968 _____ (Red Hat®, Inc.) C:\Users\chris\AppData\Local\Temp\jansi-64-git-Bukkit-67b2424-1878795799796374101.dll
2017-01-22 14:16 - 2017-01-22 14:16 - 0019968 _____ (Red Hat®, Inc.) C:\Users\chris\AppData\Local\Temp\jansi-64-git-Bukkit-67b2424-740604415620245011.dll
2016-08-27 15:24 - 2016-08-27 15:24 - 0017408 ____N (Red Hat®, Inc.) C:\Users\ronke_000\AppData\Local\Temp\jansi-32-git-Bukkit-67b2424-8566737310073182276.dll
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
And here is the Addition.txt log:
Ran by chris (22-01-2017 14:37:18)
Running from C:\Users\chris\Desktop
Windows 10 Pro Version 1607 (X64) (2016-08-14 03:45:20)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
chris (S-1-5-21-1127713466-721098113-725960913-1014 - Administrator - Enabled) => C:\Users\chris
DefaultAccount (S-1-5-21-1127713466-721098113-725960913-503 - Limited - Disabled)
Guest (S-1-5-21-1127713466-721098113-725960913-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1127713466-721098113-725960913-1004 - Limited - Enabled)
ronke_000 (S-1-5-21-1127713466-721098113-725960913-1006 - Administrator - Enabled) => C:\Users\ronke_000
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Age of Empires III (HKLM-x32\...\InstallShield_{70F8B183-99EB-4304-BA35-080E2DFFD2A3}) (Version: 1.00.0000 - Microsoft Game Studios)
Age of Empires III (x32 Version: 1.00.0000 - Microsoft Game Studios) Hidden
AMD Catalyst Install Manager (HKLM\...\{66AFB595-BC05-2913-7696-6D58F9B733E1}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Settings (HKLM\...\WUCCCApp) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.)
Armored Warfare MyCom (HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\Armored Warfare MyCom) (Version: 1.80 - My.com B.V.)
ASTRONEER (HKLM\...\Steam App 361420) (Version: - System Era Softworks)
Bandicam (HKLM-x32\...\Bandicam) (Version: 3.3.0.1175 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)
Banished (HKLM\...\Steam App 242920) (Version: - Shining Rock Software LLC)
BeamNG.drive (HKLM-x32\...\Steam App 284160) (Version: - BeamNG)
Blender 2.77 (HKLM\...\Steam App 365670) (Version: - Blender Foundation)
Catalyst Control Center Next Localization BR (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden
Civilization III (HKLM-x32\...\{0AD84416-63A4-4CF3-BDDF-8FA866711FB0}) (Version: - )
Civilization: Call To Power (HKLM-x32\...\Activision_CivCTPUninstallKey) (Version: - )
Debut Video Capture Software (HKLM-x32\...\Debut) (Version: 3.07 - NCH Software)
Elite Dangerous (HKLM-x32\...\Steam App 359320) (Version: - Frontier Developments)
Empire Earth - The Art of Conquest (HKLM-x32\...\{B49C924C-A651-4378-94F6-5D9BF44A959F}) (Version: - )
Empire Earth (HKLM-x32\...\{2447500B-22D7-47BD-9B13-1A927F43A267}) (Version: - )
Empire: Total War (HKLM-x32\...\Steam App 10500) (Version: - The Creative Assembly)
Endless Sky (HKLM-x32\...\Steam App 404410) (Version: - Michael Zahniser)
Fractured Space (HKLM-x32\...\Steam App 310380) (Version: - Edge Case Games Ltd.)
Gear Up (HKLM-x32\...\Steam App 214420) (Version: - Doctor Entertainment AB)
Hearts of Iron IV (HKLM\...\Steam App 394360) (Version: - Paradox Development Studio)
herdProtect Anti-Malware Scanner (HKLM-x32\...\herdProtectScan) (Version: 1.0 - Reason Company Software Inc.)
Homeworld Remastered Collection (HKLM\...\Steam App 244160) (Version: - Gearbox Software)
Intel® Chipset Device Software (x32 Version: 10.0.13 - Intel® Corporation) Hidden
Intel® Network Connections 19.0.27.0 (HKLM\...\PROSetDX) (Version: 19.0.27.0 - Intel)
Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version: - Squad)
King's Quest Collection (HKLM-x32\...\{29BB5153-133B-4C82-AF51-BF303F2BFD63}) (Version: 1.00.0000 - Sierra)
King's Quest I: Quest for the Crown (4.1c) (HKLM-x32\...\{486CC64F-030A-4C9A-8716-87E26D28FKQ1}_is1) (Version: 4.1 - AGD Interactive, LLC)
King's Quest II: Romancing the Stones (3.1c) (HKLM-x32\...\{486CC64F-030A-4C9A-8716-87E26D28FKQ2}_is1) (Version: 3.1 - AGD Interactive, LLC)
King's Quest III Redux: To Heir is Human (1.1) (HKLM-x32\...\{486CC64F-030A-4C9A-8716-87E26D28FKQ3REDUX}_is1) (Version: 1.1 - AGD Interactive, LLC)
LAV Filters 0.63.0 (HKLM-x32\...\lavfilters_is1) (Version: 0.63.0 - Hendrik Leppkes)
Malwarebytes version 3.0.5.1299 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.5.1299 - Malwarebytes)
MechWarrior Online (HKLM\...\Steam App 342200) (Version: - Piranha Games Inc.)
Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version: - )
Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version: - )
Microsoft OneDrive (HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Moonbase Alpha (HKLM-x32\...\Steam App 39000) (Version: - Virtual Heroes)
Mount & Blade: Warband (HKLM\...\Steam App 48700) (Version: - TaleWorlds Entertainment)
Mozilla Firefox 47.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 47.0 (x86 en-US)) (Version: 47.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.0.5999 - Mozilla)
My.com Game Center (HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\MyComGames) (Version: 3.176 - My.com B.V.)
NVIDIA PhysX (HKLM-x32\...\{DEA314C4-0929-4250-BC92-98E4C105F28D}) (Version: 9.10.0129 - NVIDIA Corporation)
Offworld Trading Company (HKLM-x32\...\Steam App 271240) (Version: - Mohawk Games)
Oracle VM VirtualBox 5.1.8 (HKLM\...\{65402252-5DA1-4360-A144-E09BB16AC7A9}) (Version: 5.1.8 - Oracle Corporation)
Order of War (HKLM\...\Steam App 34600) (Version: - Wargaming.net)
Origin (HKLM-x32\...\Origin) (Version: 10.3.5.6379 - Electronic Arts, Inc.)
Outpost 2 (HKLM-x32\...\Outpost 2) (Version: - )
PlanetSide 2 (HKLM\...\Steam App 218230) (Version: - Daybreak Game Company)
PlanetSide 2 (HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\DG0-PlanetSide 2) (Version: - Sony Online Entertainment)
Portal 2 (HKLM\...\Steam App 620) (Version: - Valve)
Quest for Glory II: Trial by Fire (2.0) (HKLM-x32\...\{486CC64F-030A-4C9A-8716-87E26D28FQFG2VGA}_is1) (Version: 2.0 - AGD Interactive, LLC)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Robocraft (HKLM\...\Steam App 301520) (Version: - Freejam)
RollerCoaster Tycoon 3 (HKLM-x32\...\{907B4640-266B-4A21-92FB-CD1A86CD0F63}) (Version: 1.00.000 - )
Rome: Total War (HKLM-x32\...\Steam App 4760) (Version: - The Creative Assembly)
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version: - 2K Games, Inc.)
Sid Meier's Civilization V SDK (HKLM-x32\...\Steam App 16830) (Version: - Firaxis Games)
Sid Meier's Civilization: Beyond Earth (HKLM-x32\...\Steam App 65980) (Version: - Firaxis Games)
Sid Meier's Civilization: Beyond Earth SDK (HKLM-x32\...\Steam App 312800) (Version: - )
Sid Meier's SimGolf (HKLM-x32\...\{8C4504A1-9280-11D5-9F7E-00902712427E}) (Version: - )
SimCity 4 Deluxe (HKLM-x32\...\{A7A34FC9-DF24-4A36-00AD-D4EFE94CC116}) (Version: - )
SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.97.4382 - Electronic Arts)
SNOW (HKLM-x32\...\Steam App 244930) (Version: - Poppermost Productions)
Space Engineers (HKLM-x32\...\Steam App 244850) (Version: - Keen Software House)
Star Swarm Stress Test (HKLM-x32\...\Steam App 267130) (Version: - Oxide Games)
Star Trek Online (HKLM\...\Steam App 9900) (Version: - Cryptic Studios)
Star Wars Empire at War (HKLM-x32\...\{99AE7207-8612-4DBA-A8F8-BAE5C633390D}) (Version: 1.0 - LucasArts)
Star Wars Empire at War Forces of Corruption (HKLM-x32\...\{6592FDEC-2C1A-413A-9985-25FEC2F0848D}) (Version: 1.0 - LucasArts)
STAR WARS™ Battlefront™ (HKLM-x32\...\{E402D891-4E45-4ce9-B41F-DD35864EF170}) (Version: 1.0.7.64833 - Electronic Arts)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SteamVR Performance Test (HKLM\...\Steam App 323910) (Version: - Valve)
Supreme Commander 2 (HKLM-x32\...\Steam App 40100) (Version: - Gas Powered Games)
The Silver Lining (HKLM-x32\...\{26ED4308-E0A5-4AE2-A1BC-7A55BC7DD32F}) (Version: 4.0.0 - Phoenix Online)
Total War: Arena (HKLM-x32\...\Steam App 227520) (Version: - Creative Assembly)
TP-LINK TL-WN721N_TL-WN722N Driver (HKLM-x32\...\{86A7EED0-02D0-4D91-8183-8D2F23F5E6AE}) (Version: 1.3.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Transformers: Fall of Cybertron (HKLM\...\Steam App 213120) (Version: - Mercenary Technologies)
Transformers: War for Cybertron (HKLM\...\Steam App 42650) (Version: - High Moon Studios)
UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden
UE4 Prerequisites (x64) (x32 Version: 1.0.12.0 - Epic Games, Inc.) Hidden
War Thunder (HKLM-x32\...\Steam App 236390) (Version: - Gaijin Entertainment)
War Thunder CDK 0.1 (HKLM-x32\...\{ed8deea4-29fe-1932-9612-e2122d8a62d9}}_is1) (Version: - Gaijin Entertainment)
War Thunder Launcher 1.0.1.502 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version: - Gaijin Entertainment)
WinDirStat 1.1.2 (HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\WinDirStat) (Version: - )
World of Warships (HKU\S-1-5-21-1127713466-721098113-725960913-1014\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814na}_is1) (Version: - Wargaming.net)
Zemana AntiMalware (HKLM-x32\...\{8F0CD7D1-42F3-4195-95CD-833578D45057}_is1) (Version: 2.70.576 - Zemana Ltd.)
Zero G Arena (HKLM\...\Steam App 467820) (Version: - Jonathan Wood)
==================== Scheduled Tasks (Whitelisted) =============
Task: {10FD9049-53FE-47A0-84D6-C86502B08DDC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {12317A79-39C4-4118-B89F-00D6E5C44D38} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {19AE4171-A0E7-45DE-9986-8C69588F59A3} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {2385EF8E-4D05-4B25-BFF1-ED23A55B262C} - \WPD\SqmUpload_S-1-5-21-1127713466-721098113-725960913-1006 -> No File <==== ATTENTION
Task: {300B5839-6D61-4110-9B25-6C22D74E0077} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {3059E708-1548-40A2-97A4-20361A5565AB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {3B0CD19E-C8CC-49CE-8626-7C5F22982B59} - \WPD\SqmUpload_S-1-5-21-1127713466-721098113-725960913-1001 -> No File <==== ATTENTION
Task: {40C6AD26-A7CE-4EBE-A280-E606F1CEEB96} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {51126B5D-1223-4832-8204-1CAC435B3BB5} - System32\Tasks\hptop => launchwinapp.exe hxxp://hptop.ru/magicm
Task: {5D90976E-58D9-41F8-AED6-E1D773498D6F} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-10] (Adobe Systems Incorporated)
Task: {5FE59B87-FC36-4934-93A3-6C3170BF4128} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-01-10] (Microsoft Corporation)
Task: {6F08334C-485B-45DD-BD21-E8548997C495} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {765A0B50-E62A-494C-8B60-D6FBC5568A70} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {9AA3A99C-2AC2-49B1-B131-CF266ED838FE} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {A2D32272-6528-4A46-AE39-D33B79469CA2} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {A5A84739-1D8B-4449-9671-81FA17A3773A} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {AB457DEE-1E33-42CC-BD30-BED186F3B8F5} - \WPD\SqmUpload_S-1-5-21-1127713466-721098113-725960913-1005 -> No File <==== ATTENTION
Task: {B0BCE576-E4BD-4890-957A-BAC04FAF333B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {CF4F077A-AB6E-4D6D-8627-DF29123FC892} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {EB7D9A78-76DB-4270-B258-45C3E086412C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
2016-12-13 15:53 - 2016-12-09 03:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-20 19:15 - 2016-12-14 12:55 - 02259232 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2017-01-20 19:15 - 2016-12-14 12:55 - 02247632 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-01-20 19:15 - 2016-12-14 12:55 - 02813904 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll
2016-12-13 15:53 - 2016-12-09 03:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2017-01-21 10:20 - 2017-01-21 10:20 - 00152944 _____ () C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll
2016-09-13 14:45 - 2016-09-06 21:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-01-10 13:39 - 2016-12-21 00:09 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-01-10 13:39 - 2016-12-21 00:08 - 00693248 _____ () C:\Windows\ShellExperiences\MtcUvc.dll
2017-01-10 13:39 - 2016-12-20 23:54 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-01-10 13:39 - 2016-12-20 23:48 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-01-10 13:39 - 2016-12-20 23:48 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-01-10 13:39 - 2016-12-20 23:48 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-01-10 13:39 - 2016-12-20 23:48 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-01-10 13:39 - 2016-12-20 23:53 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-12-14 09:40 - 2016-12-14 09:40 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-12-14 09:40 - 2016-12-14 09:40 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-12-14 09:40 - 2016-12-14 09:40 - 42130432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-12-14 09:40 - 2016-12-14 09:40 - 02216448 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\roottools.dll
2016-12-14 09:40 - 2016-12-14 09:40 - 00123904 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.Proxies.dll
2016-12-14 09:40 - 2016-12-14 09:40 - 00181248 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\Microsoft.Skype.ImageTool.dll
2016-12-14 09:40 - 2016-12-14 09:40 - 00040960 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\TraceProvider.dll
2016-12-14 09:40 - 2016-12-14 09:40 - 00796672 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\VideoN.dll
2015-06-25 16:34 - 2015-06-25 16:34 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2015-06-25 16:37 - 2015-06-25 16:37 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-06-25 16:35 - 2015-06-25 16:35 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2015-06-25 16:38 - 2015-06-25 16:38 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2016-09-13 01:01 - 2016-09-13 01:01 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2016-12-18 15:16 - 2017-01-03 15:00 - 01798664 _____ () C:\Users\chris\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe
2015-03-19 15:26 - 2013-10-21 10:00 - 00847360 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
2016-09-16 14:38 - 2016-09-16 14:38 - 00155016 _____ () C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe
2016-09-19 19:59 - 2017-01-13 12:00 - 02493440 _____ () D:\Origin\libGLESv2.dll
2016-04-11 15:02 - 2016-04-19 10:11 - 00144896 _____ () C:\Users\chris\AppData\Local\MyComGames\zlib1.dll
2016-04-11 15:02 - 2016-09-13 04:55 - 00076176 _____ () C:\Users\chris\AppData\Local\MyComGames\pxd.dll
2016-04-11 15:02 - 2016-09-13 04:55 - 00186256 _____ () C:\Users\chris\AppData\Local\MyComGames\LightUpdate.dll
2016-04-11 15:02 - 2016-09-13 04:55 - 02318224 _____ () C:\Users\chris\AppData\Local\MyComGames\BigUp2.dll
2016-05-23 11:36 - 2016-05-23 11:36 - 48962048 _____ () C:\Users\chris\AppData\Local\MyComGames\Chrome\3.2623.1401\libcef.dll
2015-03-19 15:26 - 2013-06-28 13:50 - 01411072 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll
2015-03-19 15:26 - 2013-06-28 13:48 - 00193024 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll
2015-03-19 15:26 - 2013-06-28 13:48 - 00138752 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF.dll
2015-03-19 15:26 - 2013-06-28 13:48 - 00115712 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF_WPS_WIN7.DLL
2015-05-25 15:46 - 2016-12-23 11:28 - 00657184 _____ () D:\Steam\SDL2.dll
2015-05-25 15:46 - 2016-08-31 18:02 - 04969248 _____ () D:\Steam\v8.dll
2015-05-25 15:46 - 2017-01-18 18:30 - 02327840 _____ () D:\Steam\video.dll
2015-05-25 15:46 - 2016-08-31 18:02 - 01195296 _____ () D:\Steam\icuuc.dll
2015-05-25 15:46 - 2016-08-31 18:02 - 01563936 _____ () D:\Steam\icui18n.dll
2015-05-25 15:46 - 2016-01-27 00:49 - 02549760 _____ () D:\Steam\libavcodec-56.dll
2015-05-25 15:46 - 2016-01-27 00:49 - 00491008 _____ () D:\Steam\libavformat-56.dll
2015-05-25 15:46 - 2016-01-27 00:49 - 00332800 _____ () D:\Steam\libavresample-2.dll
2015-05-25 15:46 - 2016-01-27 00:49 - 00442880 _____ () D:\Steam\libavutil-54.dll
2015-05-25 15:46 - 2016-01-27 00:49 - 00485888 _____ () D:\Steam\libswscale-3.dll
2015-05-25 15:46 - 2017-01-18 18:30 - 00838432 _____ () D:\Steam\bin\chromehtml.DLL
2016-03-09 13:53 - 2016-07-04 15:17 - 00266560 _____ () D:\Steam\openvr_api.dll
2016-12-12 21:17 - 2017-01-04 20:12 - 68813088 _____ () D:\Steam\bin\cef\cef.win7\libcef.dll
2015-05-25 15:46 - 2017-01-18 18:30 - 00383776 _____ () D:\Steam\steam.dll
2015-05-25 15:46 - 2015-09-24 16:52 - 00119208 _____ () D:\Steam\winh264.dll
AlternateDataStreams: C:\Users\Boys\AppData\Local\History:gs5sys [2816]
AlternateDataStreams: C:\Users\chris\Cookies:gs5sys [2816]
AlternateDataStreams: C:\Users\chris\Desktop\desktop.ini:gs5sys [2816]
AlternateDataStreams: C:\Users\chris\AppData\Local\History:gs5sys [2816]
AlternateDataStreams: C:\Users\chris\Documents\desktop.ini:gs5sys [2816]
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Internet Explorer trusted/restricted ===============
==================== Hosts content: ===============================
==================== Other Areas ============================
DNS Servers: 10.1.5.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== FirewallRules (Whitelisted) ===============
FirewallRules: [{FFDC66C0-DBD2-44DF-9E49-DED9F86E147A}] => D:\Steam\steamapps\common\Zero G Arena\Sta.exe
FirewallRules: [{41F26E95-6775-4E93-AE20-7513E813E0F1}] => D:\Steam\steamapps\common\Zero G Arena\Sta.exe
FirewallRules: [UDP Query User{18D3B6EA-19AC-4D21-A5E9-E856C9FA8BFE}D:\steam\steamapps\common\zero g arena\sta\binaries\win64\sta.exe] => D:\steam\steamapps\common\zero g arena\sta\binaries\win64\sta.exe
FirewallRules: [TCP Query User{09F5B542-4D78-4841-8364-C730461657CD}D:\steam\steamapps\common\zero g arena\sta\binaries\win64\sta.exe] => D:\steam\steamapps\common\zero g arena\sta\binaries\win64\sta.exe
FirewallRules: [{60CCCE77-5C92-4F84-AF04-3646ECEA093A}] => D:\Steam\steamapps\common\Transformers Fall of Cybertron\Binaries\TFOC.exe
FirewallRules: [{25D0F209-5E29-46CD-B1D6-A41D23452A2F}] => D:\Steam\steamapps\common\Transformers Fall of Cybertron\Binaries\TFOC.exe
FirewallRules: [{C76ECC3D-2A6F-480C-B818-862B12953261}] => D:\Steam\steamapps\common\Order of War\oow_final_dx10.exe
FirewallRules: [{11C77020-4CD0-4DC3-BD36-56D4E0A226EC}] => D:\Steam\steamapps\common\Order of War\oow_final_dx10.exe
FirewallRules: [{F9E0F0C6-D1FE-4BDC-B6A9-F6C0D687F94A}] => D:\Steam\steamapps\common\Order of War\oow_report.exe
FirewallRules: [{844D7922-1F4A-4E28-81E4-E3C716164DDE}] => D:\Steam\steamapps\common\Order of War\oow_report.exe
FirewallRules: [{B5EB2C2A-CD8C-4A2A-AA48-D79751BEE9E7}] => D:\Steam\steamapps\common\Order of War\oow_final_dx9.exe
FirewallRules: [{9088F3D0-4719-44F4-B684-0ECF50F4637F}] => D:\Steam\steamapps\common\Order of War\oow_final_dx9.exe
FirewallRules: [{EBF0DAB0-8DD0-408F-90E1-5A9BEA321549}] => D:\Steam\steamapps\common\Order of War\oow_final.exe
FirewallRules: [{A6EDF67D-DCBD-494C-8599-C63781BD575B}] => D:\Steam\steamapps\common\Order of War\oow_final.exe
FirewallRules: [{B92C70B7-2046-4423-950C-F4C33DE4487F}] => D:\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{A5C5B866-C86E-48F0-9248-D490EC1C69E0}] => D:\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{2AEB4D89-C550-4F76-A964-9D436BE2BD46}] => D:\Steam\steamapps\common\Homeworld\HWLauncher\Launcher.exe
FirewallRules: [{4897EDDF-63FE-4F35-B99B-4199D742D22E}] => D:\Steam\steamapps\common\Homeworld\HWLauncher\Launcher.exe
FirewallRules: [{A399D83E-91BA-4053-BD64-F12F9A76C33F}] => D:\Steam\steamapps\common\Rise of Flight 2.0\bin_game\release\ROF.exe
FirewallRules: [{97A17F97-945A-4FBC-8BAA-432DA987ECB9}] => D:\Steam\steamapps\common\Rise of Flight 2.0\bin_game\release\ROF.exe
FirewallRules: [{947CAE77-C9AF-4E9B-B862-12C8EEAEC9AD}] => D:\Steam\steamapps\common\MechWarrior Online\Bin64\MWOClient.exe
FirewallRules: [{206BFF7D-BDC7-4F75-8405-49BED521B18B}] => D:\Steam\steamapps\common\MechWarrior Online\Bin64\MWOClient.exe
FirewallRules: [{09EDC6A9-7B70-47C9-86AC-09D4D910C6F1}] => D:\Steam\steamapps\common\Blender\blender.exe
FirewallRules: [{997F938A-30FC-463A-99E0-BC3E60A4E510}] => D:\Steam\steamapps\common\Blender\blender.exe
FirewallRules: [{EC0C9B18-3749-4695-B2F3-D0D507EF7376}] => D:\Steam\steamapps\common\Robocraft\Robocraft.exe
FirewallRules: [{1F28D618-28FB-4340-A8E1-F1E0101268B0}] => D:\Steam\steamapps\common\Robocraft\Robocraft.exe
FirewallRules: [{8CD1215C-14B0-4C78-88F7-CC83F6BDD022}] => D:\Steam\steamapps\common\Transformers War for Cybertron\Binaries\TWFC.exe
FirewallRules: [{BA6D8535-9DFB-4170-B931-C8E7088DCDCC}] => D:\Steam\steamapps\common\Transformers War for Cybertron\Binaries\TWFC.exe
FirewallRules: [{8C8D2F2B-6C82-48A6-A94F-177BC4922A28}] => D:\Steam\steamapps\common\Transformers War for Cybertron\Binaries\TWFC.exe
FirewallRules: [{F80BF5D3-27ED-4154-AF76-81A308E8B233}] => D:\Steam\steamapps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [{87D15C39-AFC2-4F16-9C0F-AEAC67E9E89B}] => D:\Steam\steamapps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [UDP Query User{64A575C7-C9BA-496C-980A-A717B0CAD806}D:\mygames\armored warfare mycom\bin64\armoredwarfare.exe] => D:\mygames\armored warfare mycom\bin64\armoredwarfare.exe
FirewallRules: [TCP Query User{49CC8805-C9FE-4A8F-B09E-9B43E1216240}D:\mygames\armored warfare mycom\bin64\armoredwarfare.exe] => D:\mygames\armored warfare mycom\bin64\armoredwarfare.exe
FirewallRules: [UDP Query User{69E93E6D-72F2-4FB5-9FFE-C59BD1A74586}C:\users\chris\appdata\local\mycomgames\mycomgames.exe] => C:\users\chris\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [TCP Query User{54CD4969-53D6-4EF3-B31E-912F876B7E72}C:\users\chris\appdata\local\mycomgames\mycomgames.exe] => C:\users\chris\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [{BB711D95-8DC6-410D-B264-79727ED0DE7A}] => D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [{B349D886-E725-4F1D-BCEB-334B5DCA25EA}] => D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [{6BC54F8B-1DE5-4F66-99C5-037BBB922391}] => D:\Steam\steamapps\common\Elite Dangerous\EDLaunch.exe
FirewallRules: [{803508BD-E5D3-4ADA-9710-817D5A39CD99}] => D:\Steam\steamapps\common\Elite Dangerous\EDLaunch.exe
FirewallRules: [{38013245-E0E4-4375-9510-8C5AFAB10812}] => LPort=25565
FirewallRules: [{594B095B-EBDB-4835-8287-638B2A5B00F1}] => LPort=25565
FirewallRules: [UDP Query User{232E7547-9FA5-4FFA-ADF2-0E8A16E36161}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [TCP Query User{6E6E8A58-7097-4569-9A40-48092D17DAB2}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [{3C355F1A-D88C-4E61-BEB2-0EBB79FF5E98}] => D:\Steam\steamapps\common\Total War Arena\launcher\launcher.exe
FirewallRules: [{0E7DEBDA-B481-4469-8A14-81207564184D}] => D:\Steam\steamapps\common\Total War Arena\launcher\launcher.exe
FirewallRules: [{8CFCA6C3-E460-489F-8EA5-118F55201D7F}] => D:\Steam\steamapps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{4BE2FAC9-493B-430D-AF80-2727A59B7F93}] => D:\Steam\steamapps\common\Kerbal Space Program\KSP.exe
FirewallRules: [UDP Query User{429EDCFC-4953-407E-A936-599B7A235F4C}D:\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe] => D:\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe
FirewallRules: [TCP Query User{AEAC5566-B76A-4210-BCAA-6345A96E4FE3}D:\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe] => D:\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe
FirewallRules: [{AAD18D51-1FF3-45B8-AA19-D0A905778BB5}] => D:\Steam\steamapps\common\BeamNG.drive\BeamNG.drive.exe
FirewallRules: [{233E39E8-CBBD-46B0-AE6F-BAD76BD935F2}] => D:\Steam\steamapps\common\BeamNG.drive\BeamNG.drive.exe
FirewallRules: [{C231F817-3844-4C80-846D-636F57BA5CB4}] => D:\Steam\steamapps\common\Star Swarm Benchmark\StarSwarmLauncher.exe
FirewallRules: [{22D9F7AF-A460-42A9-BC67-55EBA5257A2F}] => D:\Steam\steamapps\common\Star Swarm Benchmark\StarSwarmLauncher.exe
FirewallRules: [{A0EF8CD1-6BB1-40C1-B7AD-66772A5C5372}] => D:\Steam\steamapps\common\Supreme Commander 2\bin\SupremeCommander2.exe
FirewallRules: [{1EEE0197-E12E-467E-B23A-CF12C22321C6}] => D:\Steam\steamapps\common\Supreme Commander 2\bin\SupremeCommander2.exe
FirewallRules: [UDP Query User{082E727B-D630-4548-851E-0E84D5B90B92}D:\steam\steamapps\common\space\spacegame\binaries\win64\spserver.exe] => D:\steam\steamapps\common\space\spacegame\binaries\win64\spserver.exe
FirewallRules: [TCP Query User{8259E063-4B22-475C-8934-1C50A06A7CE3}D:\steam\steamapps\common\space\spacegame\binaries\win64\spserver.exe] => D:\steam\steamapps\common\space\spacegame\binaries\win64\spserver.exe
FirewallRules: [{07AA8A0A-A2CF-437F-8B1C-FC902E585A68}] => D:\Steam\steamapps\common\Offworld Trading Company\Offworld.exe
FirewallRules: [{E7024120-6642-481C-8EAB-8A8E5B727076}] => D:\Steam\steamapps\common\Offworld Trading Company\Offworld.exe
FirewallRules: [{669815FB-2935-4219-B0D4-0ECE3588EF90}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe
FirewallRules: [{64105C96-4330-4CD4-9C4A-11BC547A5FCB}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe
FirewallRules: [{7E46632F-6AEE-4EA8-AF09-0DD29B2675C4}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe
FirewallRules: [{086F4855-9B82-4A11-A0C1-2AC6A91C65C4}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe
FirewallRules: [UDP Query User{BA8E3C38-D77C-4806-8D02-4FA211D817DC}D:\steam\steamapps\common\war thunder\win64\aces.exe] => D:\steam\steamapps\common\war thunder\win64\aces.exe
FirewallRules: [TCP Query User{C2D074FA-063E-4D47-9AAA-B78A57C551C0}D:\steam\steamapps\common\war thunder\win64\aces.exe] => D:\steam\steamapps\common\war thunder\win64\aces.exe
FirewallRules: [UDP Query User{E55D6E36-1D21-43E6-835D-5A17C7154169}C:\users\boys\appdata\roaming\gameranger\gameranger\gameranger.exe] => C:\users\boys\appdata\roaming\gameranger\gameranger\gameranger.exe
FirewallRules: [TCP Query User{5F7DF6DC-A214-4BA5-AEF4-93C95E036AE1}C:\users\boys\appdata\roaming\gameranger\gameranger\gameranger.exe] => C:\users\boys\appdata\roaming\gameranger\gameranger\gameranger.exe
FirewallRules: [{1AFC2627-6156-4AD2-A383-86A2FABF6A29}] => D:\Steam\steamapps\common\Sid Meier's Civilization V SDK\Sid Meier's Civilization V SDK.exe
FirewallRules: [{410BE202-E56C-4552-BFB3-05112FFCB61B}] => D:\Steam\steamapps\common\Sid Meier's Civilization V SDK\Sid Meier's Civilization V SDK.exe
FirewallRules: [UDP Query User{B7AC8D79-C8F9-4980-B64C-A3AE99B58C80}D:\steam\steamapps\common\war thunder\aces.exe] => D:\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [TCP Query User{F9EA9EFF-C91E-4CE8-A698-45DDDA53E615}D:\steam\steamapps\common\war thunder\aces.exe] => D:\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [{67B829C4-FAE0-489B-97D4-367A79BAE9D9}] => D:\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [{18E112B2-B5F6-4769-BCD6-26D45F957E1C}] => D:\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [{5E9A4BEF-562A-4C2F-A5E1-4E87C779B6E4}] => D:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{22EC0E6D-D982-4821-B69A-A3001CCB28A4}] => D:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{A11B0C44-A144-42AC-8186-58C7EABDDFE4}] => D:\Steam\steamapps\common\GearUp\bin\Traktor.Amalgam.App.exe
FirewallRules: [{6E8D5DCA-A4C3-42AA-9D3F-5F72F9978FD9}] => D:\Steam\steamapps\common\GearUp\bin\Traktor.Amalgam.App.exe
FirewallRules: [{394E9BD0-D3DF-4A54-AFF2-5D0A6EC1BD3A}] => D:\Steam\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{0CF6BDF7-88E1-4FA3-A9AD-B902343D54A8}] => D:\Steam\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [UDP Query User{CF475F89-60CF-4C99-A3E6-108E8667E58E}C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe] => C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe
FirewallRules: [TCP Query User{4262A477-8822-4D43-907C-97C2D3F080DA}C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe] => C:\program files (x86)\lucasarts\star wars battlefront ii\gamedata\battlefrontii.exe
FirewallRules: [UDP Query User{5C838933-7BE4-4225-B4E9-799D5B0B15A7}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{9F8DA947-5BD7-4BB9-9DC2-08CFC489A7C6}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{7CA6A49C-3394-4513-AD84-90C97B3DDF10}] => LPort=5986
FirewallRules: [UDP Query User{85D80EAA-28CD-490C-8C5F-FF96A4EBECDA}D:\sierra\empire earth - the art of conquest\ee-aoc.exe] => D:\sierra\empire earth - the art of conquest\ee-aoc.exe
FirewallRules: [TCP Query User{3392712F-290E-443E-954C-B2F008AF493F}D:\sierra\empire earth - the art of conquest\ee-aoc.exe] => D:\sierra\empire earth - the art of conquest\ee-aoc.exe
FirewallRules: [UDP Query User{71AB9283-9924-46F3-90DB-DFF2ED482D79}D:\sierra\empire earth\empire earth.exe] => D:\sierra\empire earth\empire earth.exe
FirewallRules: [TCP Query User{DBF4E498-79BB-4139-B726-467F266C6A74}D:\sierra\empire earth\empire earth.exe] => D:\sierra\empire earth\empire earth.exe
FirewallRules: [{491F0601-CBA4-41C9-836A-E7719CF20ACD}] => D:\Steam\steamapps\common\Rome Total War Gold\RomeTW-BI.exe
FirewallRules: [{B0299828-1FCA-45BA-8CA0-CC9FC6F44866}] => D:\Steam\steamapps\common\Rome Total War Gold\RomeTW-BI.exe
FirewallRules: [{37E3E02B-3E00-43E7-8576-D934978F3D56}] => D:\Steam\steamapps\common\Rome Total War Gold\RomeTW.exe
FirewallRules: [{0B06EA95-9871-43EB-9E1E-A030AAB4E577}] => D:\Steam\steamapps\common\Rome Total War Gold\RomeTW.exe
FirewallRules: [{E0E6C8FF-534D-4300-9115-8FCA5A35632B}] => D:\Steam\steamapps\common\Empire Total War\Empire.exe
FirewallRules: [{EFF2C91D-F7A0-4903-B061-156B47F5C7F5}] => D:\Steam\steamapps\common\Empire Total War\Empire.exe
FirewallRules: [{C5DC92D6-9CF5-4690-BD4F-A082FB6967DE}] => D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{5765DF7C-C1CE-424F-9935-1990037591FD}] => D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{98E36C3A-040A-4665-9EB7-67A56409527E}] => D:\Steam\Steam.exe
FirewallRules: [{5662B527-816A-4822-9A63-589E2C6AC186}] => D:\Steam\Steam.exe
FirewallRules: [{312A6B27-E8A4-4473-8BDE-BF72210FC20B}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{ADC7D884-D158-4F96-8BAA-2D93DAC46C52}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [UDP Query User{A76DB7A0-7873-4E84-9570-34864B133C0B}C:\program files (x86)\lucasarts\star wars empire at war\gamedata\sweaw.exe] => C:\program files (x86)\lucasarts\star wars empire at war\gamedata\sweaw.exe
FirewallRules: [TCP Query User{57BC8D14-22A2-473E-93BE-373B0A471522}C:\program files (x86)\lucasarts\star wars empire at war\gamedata\sweaw.exe] => C:\program files (x86)\lucasarts\star wars empire at war\gamedata\sweaw.exe
FirewallRules: [UDP Query User{EA05A334-9E5E-4896-AE31-D3C849937F85}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{B5C8329A-0FE0-45E2-A082-9FC059116BCA}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{EC19FA11-E49F-4524-BC02-F52A084DC7A4}C:\program files (x86)\microsoft games\age of empires iii\age3.exe] => C:\program files (x86)\microsoft games\age of empires iii\age3.exe
FirewallRules: [TCP Query User{8CD7A764-2F1A-4C37-8A4D-8BAC418BB9C0}C:\program files (x86)\microsoft games\age of empires iii\age3.exe] => C:\program files (x86)\microsoft games\age of empires iii\age3.exe
FirewallRules: [UDP Query User{D17D17AA-3E16-4A0D-ABF5-31275560FA20}C:\warthunder\launcher.exe] => C:\warthunder\launcher.exe
FirewallRules: [TCP Query User{B9BCE46B-EED0-404B-9DAF-F2FF69185DD4}C:\warthunder\launcher.exe] => C:\warthunder\launcher.exe
FirewallRules: [UDP Query User{2CB64064-8A17-4BEE-83CA-712D3DFFF5BF}C:\warthunder\aces.exe] => C:\warthunder\aces.exe
FirewallRules: [TCP Query User{A1C940BC-1E62-40EC-8A30-084551E050E7}C:\warthunder\aces.exe] => C:\warthunder\aces.exe
FirewallRules: [{DE5EB669-90BD-4025-A592-F61C9E777D1C}] => C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3.exe
FirewallRules: [{238EE600-BBA1-4C5F-9440-847FCC5A2210}] => C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3.exe
FirewallRules: [TCP Query User{648AE4B4-4FF3-45BA-A75A-0E87567D6474}C:\program files (x86)\taldren\starfleet command ii - demo\starfleet2.exe] => C:\program files (x86)\taldren\starfleet command ii - demo\starfleet2.exe
FirewallRules: [UDP Query User{D147F28B-30AF-4DE4-B146-7AE4B1305C7C}C:\program files (x86)\taldren\starfleet command ii - demo\starfleet2.exe] => C:\program files (x86)\taldren\starfleet command ii - demo\starfleet2.exe
FirewallRules: [TCP Query User{C8F29648-F857-4484-AC17-3DE468D60018}C:\windows\syswow64\dplaysvr.exe] => C:\windows\syswow64\dplaysvr.exe
FirewallRules: [UDP Query User{B14AB546-38D9-4339-AD85-D5C308523669}C:\windows\syswow64\dplaysvr.exe] => C:\windows\syswow64\dplaysvr.exe
FirewallRules: [TCP Query User{7F34DE4E-2A71-44A6-B024-548EBCFDB798}C:\games\interplay\starfleet command demo\starfleetdemo.exe] => C:\games\interplay\starfleet command demo\starfleetdemo.exe
FirewallRules: [UDP Query User{DD61A032-6BCD-45C4-98C1-7850A71DBD3B}C:\games\interplay\starfleet command demo\starfleetdemo.exe] => C:\games\interplay\starfleet command demo\starfleetdemo.exe
FirewallRules: [TCP Query User{6E177D92-C8CB-45E7-AB7B-AC25882B889F}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd] => C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd
FirewallRules: [UDP Query User{6CF1CEF5-F0A9-4273-A979-E6A2F53A6F8D}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd] => C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd
FirewallRules: [TCP Query User{DE57A7B1-00EC-4E0E-897E-A65D622375BC}C:\program files (x86)\microsoft games\age of empires ii\empires2.icd] => C:\program files (x86)\microsoft games\age of empires ii\empires2.icd
FirewallRules: [UDP Query User{D33803F0-605C-4895-8FE6-8896842F6330}C:\program files (x86)\microsoft games\age of empires ii\empires2.icd] => C:\program files (x86)\microsoft games\age of empires ii\empires2.icd
FirewallRules: [{E3D48E58-88D2-42CF-A583-BC20C4D1EF18}] => C:\Program Files (x86)\LucasArts\Star Wars Empire at War\GameData\sweaw.exe
FirewallRules: [{C40B6F34-4A0B-4B3C-8A5D-F8708B9933F2}] => C:\Program Files (x86)\LucasArts\Star Wars Empire at War\GameData\sweaw.exe
FirewallRules: [{115E15F9-969E-44CF-B213-2AA9CCE03160}] => C:\WarThunder\launcher.exe
FirewallRules: [{947B9C11-1ED9-447E-931B-6C4D78A82DFD}] => C:\WarThunder\launcher.exe
FirewallRules: [{79FE634B-3FF7-4EAD-82F3-D8D0CBE2A910}] => C:\WarThunder\bpreport.exe
FirewallRules: [{4D162E9D-D2F7-4381-896B-0A603B324FF9}] => C:\WarThunder\bpreport.exe
FirewallRules: [{0A7E2EA3-8BBF-4824-853C-E4A39EE5ABE2}] => LPort=80
FirewallRules: [{649C3AE5-BE0D-4F31-80E3-75F558F50ABB}] => LPort=443
FirewallRules: [{BCE888CE-B716-4CB2-B0D3-39474ADF9CD7}] => LPort=20010
FirewallRules: [{199207F2-97B4-4F22-8638-90501A660201}] => LPort=3478
FirewallRules: [{CF1BB3CF-3A3C-4BE7-B1CB-749E7E0A7473}] => LPort=7850
FirewallRules: [{BA471F21-A415-4CE6-AABB-59B2CF612CB2}] => LPort=7852
FirewallRules: [{B66D1A34-D396-48F3-A9FA-310D47F4F334}] => LPort=7853
FirewallRules: [{09F874C4-DFD4-4F28-A2E6-2BFBF339E87F}] => LPort=27022
FirewallRules: [{08CB1F7F-0B65-4088-BCF9-770E10B9FA68}] => LPort=6881
FirewallRules: [{BAD66533-9CCF-49B7-AD37-820EF079821E}] => LPort=33333
FirewallRules: [{182849F8-CDEF-4F1B-A39D-D3B2D07071E7}] => LPort=20443
FirewallRules: [{5C9EE404-EFCF-4966-B602-AD5C9F23919A}] => LPort=8090
FirewallRules: [{52D9F2B4-3F14-44A7-BE3F-68A8FEF6B5DB}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{82347A25-0C75-4F63-8B70-5FB4CCA0D78B}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{D685599B-1DA0-4755-B4ED-2822C2F6929A}C:\warthunder\aces.exe] => C:\warthunder\aces.exe
FirewallRules: [UDP Query User{87CD3D8C-CF82-4C31-A115-FD42A263AD56}C:\warthunder\aces.exe] => C:\warthunder\aces.exe
FirewallRules: [{8A9823BA-CFB9-4CD4-90C1-5CE204FF9654}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{54FC0125-297A-4A12-993C-D3039A0106A2}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{230F1E0F-6D81-4CF3-831C-EA84F7BA3A02}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{B2FC3808-BC4D-49E1-9254-DFDDDA6117F8}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{CAFBC441-7F78-405A-9BFF-C3243D01FF68}C:\users\chris\appdata\roaming\gameranger\gameranger\gameranger.exe] => C:\users\chris\appdata\roaming\gameranger\gameranger\gameranger.exe
FirewallRules: [UDP Query User{2ECEB0C7-3D36-4C7C-981C-69D4E6011AB4}C:\users\chris\appdata\roaming\gameranger\gameranger\gameranger.exe] => C:\users\chris\appdata\roaming\gameranger\gameranger\gameranger.exe
FirewallRules: [{15319CD5-5A93-4E6E-B9BC-C027C28A613A}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth SDK\Sid Meier's Civilization Beyond Earth SDK.exe
FirewallRules: [{46D7E00B-8858-4CFD-90A8-44A08B9A1579}] => D:\Steam\steamapps\common\Sid Meier's Civilization Beyond Earth SDK\Sid Meier's Civilization Beyond Earth SDK.exe
FirewallRules: [TCP Query User{666DF764-3665-4C83-8A55-094461BC6F99}C:\games\world_of_warships\wowslauncher.exe] => C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{D7956348-E78C-4144-80BA-5C28A2F92743}C:\games\world_of_warships\wowslauncher.exe] => C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{70B7B034-5A4F-45B1-A4CC-75A01DF1AB74}D:\games\world_of_warships\wowslauncher.exe] => D:\games\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{D2424CDD-9C0C-416B-9580-9EBED1EC1D0D}D:\games\world_of_warships\wowslauncher.exe] => D:\games\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{C2D4DB85-27A2-4D1B-8934-E4AC8398C330}D:\sierra\empire earth\empire earth.exe] => D:\sierra\empire earth\empire earth.exe
FirewallRules: [UDP Query User{A9EBE749-7826-4289-9927-60856E309608}D:\sierra\empire earth\empire earth.exe] => D:\sierra\empire earth\empire earth.exe
FirewallRules: [{12DD341D-BCFB-4F1D-9E6E-3224F6DCD721}] => D:\Steam\steamapps\common\Moon Base Alpha\Binaries\Win32\MoonBaseAlphaGame.exe
FirewallRules: [{69FFF643-2727-40C8-A91F-0604F7A25599}] => D:\Steam\steamapps\common\Moon Base Alpha\Binaries\Win32\MoonBaseAlphaGame.exe
FirewallRules: [TCP Query User{56D741F4-1204-4A0D-8175-3EE0B1705F4E}D:\steam\steamapps\common\war thunder\win64\aces64.exe] => D:\steam\steamapps\common\war thunder\win64\aces64.exe
FirewallRules: [UDP Query User{3111022F-6666-424D-AF4F-CE72B5F44D3F}D:\steam\steamapps\common\war thunder\win64\aces64.exe] => D:\steam\steamapps\common\war thunder\win64\aces64.exe
FirewallRules: [{01289BDC-FAF5-4FFC-ACB5-D052FB360D91}] => D:\Steam\steamapps\common\Endless Sky\EndlessSky.exe
FirewallRules: [{B0E44A31-4ABE-4B14-9DAE-D37FF18E7081}] => D:\Steam\steamapps\common\Endless Sky\EndlessSky.exe
FirewallRules: [{601F907E-DCC3-446A-82FA-DF4F149CA0B6}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{42ACC533-C871-4C55-84C2-46E264FD5EEA}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{BB64C09D-BF03-4C22-AFAA-4E848DEA1F3C}D:\steam\steamapps\common\total war arena\arena.exe] => D:\steam\steamapps\common\total war arena\arena.exe
FirewallRules: [UDP Query User{C9DEE80F-4300-44BA-8CC9-A9B2CC5DA374}D:\steam\steamapps\common\total war arena\arena.exe] => D:\steam\steamapps\common\total war arena\arena.exe
FirewallRules: [{8D7440B9-6728-46F8-B00D-8F4B50D19151}] => D:\Steam\steamapps\common\SteamVRPerformanceTest\bin\win64\vr.exe
FirewallRules: [{BB30C447-0473-4150-8582-17FE303049A4}] => D:\Steam\steamapps\common\SteamVRPerformanceTest\bin\win64\vr.exe
FirewallRules: [{A38633CD-7AA1-4E56-BB03-63122FD54E61}] => D:\Steam\steamapps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [{909C3999-1DCD-4315-AEAC-5990B91CF697}] => D:\Steam\steamapps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [TCP Query User{84C10E36-68C3-4263-9B7B-5339B173B06F}D:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => D:\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [UDP Query User{72BDDB71-A070-4CC3-A32E-D47CB4A48B24}D:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => D:\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [{2BB661F8-600F-4E7D-9805-C61CFC294161}] => D:\Steam\steamapps\common\Star Trek Online\Star Trek Online.exe
FirewallRules: [{B18DF86E-FD33-4298-9850-1FCE5521FC5B}] => D:\Steam\steamapps\common\Star Trek Online\Star Trek Online.exe
FirewallRules: [TCP Query User{7AB8B750-A73B-45DD-A973-8A09086676B4}D:\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe] => D:\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe
FirewallRules: [UDP Query User{B2F80BD1-7736-447A-A84D-8EE81A5355E2}D:\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe] => D:\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe
FirewallRules: [{7712FF3A-AC08-47E0-B279-C8F85F79AC82}] => D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{486F8E25-5A93-4C46-A3EB-D9362561FF48}] => D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{2859A3D9-4E6F-4506-983C-930FF78661D9}] => D:\Steam\steamapps\common\SNOW\Bin64\playSNOW.exe
FirewallRules: [{A86C6B0E-66D7-4950-A2EA-CF5C76A23D9C}] => D:\Steam\steamapps\common\SNOW\Bin64\playSNOW.exe
FirewallRules: [{66C54C76-0A52-4F90-AE06-277E519AC493}] => D:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
FirewallRules: [{24068677-90F2-40AC-B361-6365F6DDE3FD}] => D:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
FirewallRules: [{13300C16-BD63-463E-91AA-B6B2E9822109}] => D:\Steam\steamapps\common\Offworld Trading Company\StardockLauncher.exe
FirewallRules: [{9C117448-F698-48A6-AAAB-E90D61DA5001}] => D:\Steam\steamapps\common\Offworld Trading Company\StardockLauncher.exe
FirewallRules: [{5BA2803C-366C-4126-A68F-C81C76A25611}] => D:\Steam\steamapps\common\ASTRONEER Early Access\Astro.exe
FirewallRules: [{164C0306-015B-40E4-998A-B15BDEF5AEBF}] => D:\Steam\steamapps\common\ASTRONEER Early Access\Astro.exe
FirewallRules: [TCP Query User{94A5A5C9-F28F-4AAC-8AC2-07130352F6F8}D:\steam\steamapps\common\astroneer early access\astro\binaries\win64\astro-win64-shipping.exe] => D:\steam\steamapps\common\astroneer early access\astro\binaries\win64\astro-win64-shipping.exe
FirewallRules: [UDP Query User{58FF30EE-EE2C-463F-90BE-9733681A3BFA}D:\steam\steamapps\common\astroneer early access\astro\binaries\win64\astro-win64-shipping.exe] => D:\steam\steamapps\common\astroneer early access\astro\binaries\win64\astro-win64-shipping.exe
FirewallRules: [{55C9D716-4EE3-4FC4-8129-413B0C500DCA}] => D:\Games\New folder\swfoc.exe
FirewallRules: [{1877E2A3-D887-4568-B3F3-A5DB6815506C}] => D:\Games\New folder\swfoc.exe
FirewallRules: [{B0E90BCB-FF2A-4B5E-A3DC-527014491BE2}] => D:\Steam\steamapps\common\Hearts of Iron IV\hoi4.exe
FirewallRules: [{AEFA8530-6429-4981-B66D-1B90146A828B}] => D:\Steam\steamapps\common\Hearts of Iron IV\hoi4.exe
FirewallRules: [TCP Query User{60E2FB98-60D9-47E4-8181-8FDC84D287C4}D:\steam\steamapps\common\battlestations pacific\bsp.exe] => D:\steam\steamapps\common\battlestations pacific\bsp.exe
FirewallRules: [UDP Query User{96579F5E-0E4F-4E8B-B17C-095E75D3FD09}D:\steam\steamapps\common\battlestations pacific\bsp.exe] => D:\steam\steamapps\common\battlestations pacific\bsp.exe
FirewallRules: [{4B0D8474-D7C9-485F-99D3-7A88ECE94B26}] => D:\Steam\steamapps\common\Banished\Application-steam-x64.exe
FirewallRules: [{45BD6747-D18C-4E9B-943C-59270E40E16A}] => D:\Steam\steamapps\common\Banished\Application-steam-x64.exe
FirewallRules: [{F933A18B-9C81-4030-87E4-2144AD7BF4A4}] => D:\Steam\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [{5CBFB972-7BE5-485A-9728-9FC4E5172FF8}] => D:\Steam\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [{7A023CAC-6A01-4C7C-B95E-2366876D2FA4}] => D:\Steam\steamapps\common\Space\spacegame\Binaries\Win64\Fractured Space.exe
FirewallRules: [{3B0201FF-9B25-48B6-A3AB-4DC06EE3B76E}] => D:\Steam\steamapps\common\Space\spacegame\Binaries\Win64\Fractured Space.exe
==================== Event log errors: =========================
==================
Error: (01/22/2017 02:25:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: bf6754b6-adcc-4000-9397-11c538cca7d8
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: fbb9a392-ba66-489b-ba42-8e831c586ed1
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: 1f6c20a9-3676-4774-a8a9-2db986a809a1
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: 46c44718-03ed-428b-a191-0369c4c6a9c0
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: 170025b0-9ede-4fee-94bf-90ce85c117c2
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: c2c384c4-39ab-4332-ba57-a316ad7d3780
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: 12e525de-4409-4f1b-a713-295e7ed6dd68
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: 3851aa31-15c9-4ff8-9849-06437c610a7b
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: 768fa5dc-9879-4c92-a624-39bf3c363866
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge
Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000604
Fault offset: 0x0000000000000000
Faulting process id: 0x19b8
Faulting application start time: 0x01d274f56d34ee2a
Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Faulting module path: unknown
Report Id: 09927b87-06ee-4661-a9b8-1d3108762752
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge
System errors:
=============
Error: (01/22/2017 02:30:27 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: Skype Preview.
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Description: The RtkAudioService service failed to start due to the following error:
The system cannot find the file specified.
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{9E175B6D-F52A-11D8-B9A5-505054503030}
and APPID
{9E175B9C-F52A-11D8-B9A5-505054503030}
to the user Basement-PC\chris SID (S-1-5-21-1127713466-721098113-725960913-1014) from address LocalHost (Using LRPC) running in the application container Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe SID (S-1-15-2-3624051433-2125758914-1423191267-1740899205-1073925389-3782572162-737981194). This security permission can be modified using the Component Services administrative tool.
Description: The ZAM Controller Service service terminated unexpectedly. It has done this 1 time(s).
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Description: The eapihdrv service failed to start due to the following error:
This driver has been blocked from loading
CodeIntegrity:
===================================
Date: 2017-01-20 19:16:12.576
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
==================== Memory info ===========================
Percentage of memory in use: 47%
Total physical RAM: 8127.14 MB
Available physical RAM: 4295.22 MB
Total Virtual: 12991.14 MB
Available Virtual: 6526.19 MB
Drive d: (Mass Storage) (Fixed) (Total:1397.26 GB) (Free:1010.58 GB) NTFS
Drive e: (EAWG_1EF) (CDROM) (Total:2.9 GB) (Free:0 GB) CDFS
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 74.5 GB) (Disk ID: AB28F450)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=73.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1397.3 GB) (Disk ID: C9B2809F)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)
www.hitmanpro.com
Windows . . . . . . . : 10.0.0.14393.X64/4
User name . . . . . . : BASEMENT-PC\chris
UAC . . . . . . . . . : Enabled
License . . . . . . . : Free
Scan mode . . . . . . : Normal
Scan duration . . . . : 1m 39s
Disk access mode . . : Direct disk access (SRB)
Cloud . . . . . . . . : Internet
Reboot . . . . . . . : No
Traces . . . . . . . : 388
Files scanned . . . . : 97,557
Remnants scanned . . : 610,294 files / 1,230,145 keys
Size . . . . . . . : 473,933 bytes
Age . . . . . . . : 12.6 days (2017-01-08 19:24:56)
Entropy . . . . . : 7.9
SHA-256 . . . . . : A89B7D720A749721E280B1ADEFE1A241D25B128AAAD6EE10B88B9B4DB431ABE4
Product . . . . . : Protection Stub
Publisher . . . . : Smarte Solutions, Inc.
Description . . . : Protection Stub
Version . . . . . : 3.0.0.0
LanguageID . . . . : 2057
Fuzzy . . . . . . : 33.0
The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
The file name extension of this program is not common.
The Entry Point of this file lies in a resource section. This is an indication of malware infection.
Program contains PE structure anomalies. This is not typical for most programs.
Time indicates that the file appeared recently on this computer.
Cookies _____________________________________________________________________
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\5G3NDQ9M.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\60T0PPJ8.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\6SOZ5B4H.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\7XR85GQN.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\7ZA2RKKX.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\EID66A2T.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\FTRFCMO4.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\GAJWE55O.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\GUC94KI0.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\HAHE7M80.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\Low\SEJMOQE3.txt
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\Low\YF9VR7N8.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\NME2HHEJ.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\Q5W3401Z.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\SC4SZBA1.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\TY2LK32K.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\VLKHKMX8.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\WAJZKH8O.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\XAPQ7LUH.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\XBQ1ZIQ7.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\YFQ6MXXY.cookie
C:\Users\chris\AppData\Local\Microsoft\Windows\INetCookies\ZQ4CHJH2.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\028JKWZK.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\0TRXCXHJ.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\105T2463.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\1CO72KTE.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\1FKEB0W3.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\1J224RJA.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\1NU2Q1KX.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\1PBIA0IS.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\1TYF5K35.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\1VIVKU3B.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\20377ON4.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\20Q115SD.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\24TWP9O9.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\2CLOEAWE.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\2EPL6ZGI.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\2IFPN2N7.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\2RDR1XOC.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\2XNCEHMQ.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\31LS3LQ3.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\35U2Z6HH.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\38CEKRUQ.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\3AAGTMYH.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\3C2WIRLM.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\44HG90CR.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\4BCOI31M.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\4GBXF057.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\4IOEOGRV.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\4ITI74HR.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\4MOK3KGL.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\4X9CT8EX.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\4XW6G6NQ.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\52K42ED7.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\54055MI9.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\55EBBP6O.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\5E3TUB86.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\5L5ZE2O3.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\5PIK3DB8.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\5WXFJP40.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\5ZB1H42E.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\5ZNETBCX.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\5ZO50LAG.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\6EPW91NP.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\6GYX2TZB.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\6I1AQQU1.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\6L9UMRCF.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7184I56I.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\726OSFY0.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7404B7JU.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\75X6D08E.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7CBZ2ODV.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7HFWT60B.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7JV4HW9D.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7RERWTB8.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7SKEUU2X.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7VOXPKYK.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7ZBV7XDT.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\863IB965.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\89ZCUHGY.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\8K84NPFW.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\8TBTJTPT.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\8UGJKN0U.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\8WW9K0WA.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\9000LXPM.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\995BWRGE.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\9C52O1N0.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\9JPSMKLX.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\9Q8IDJ05.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\A66CZ1UM.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\A6IKQXQK.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\A6WMV1RV.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\AM43K041.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\ATENF7SZ.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\AULVE8UK.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\AWF9CB1M.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\AY16L5M1.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\AYGJEJ09.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\B83G7CGS.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\B8NB5GN5.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\B9MAIKSR.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\BEV9B1IS.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\BIXJYOCZ.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\BKI77AS3.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\BKXCLBH7.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\BLQ0ZEEH.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\C8KVQI3E.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\C9F0S252.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\CH5GMU9T.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\CV4V27RC.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\DEU7233N.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\DJSRC02G.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\DZINDIFX.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\E6D7C10H.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\E9IH2641.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\EBYLGB5T.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\EUB9J6GI.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\F0VSP93E.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\F1KNZYYL.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\F3PIH2DU.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\FKBW2XCX.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\G6777SA9.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\G91RXZVC.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\GDQQGC77.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\GK4PJNQG.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\GROQQ0F8.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\GU5LOQT6.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\GY0MFS1H.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\H76VWLWI.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\H9UAIQ12.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\HH57SWN0.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\HNP6DI9U.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\HSN07JPV.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\I02866G0.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\I4YG9K2D.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\I5G7C0A1.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\I7P2M32Y.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\IDM6FZY3.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\IDXXINXX.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\IDYYJKR9.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\ILRIBVTO.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\INN7TGPH.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\IP2QTELN.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\IRY9HF0F.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\IZ3MRV7E.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\J533JM80.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\JD340FN1.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\JLNNX0KW.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\JPIXN82M.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\K08U9KZG.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\K3A9L3IX.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\K54RCO6R.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\K65HO6Y7.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\K71Y5SUU.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\K92N8UGW.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\KHNHID0F.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\KU2U30KJ.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\KWJPTDXG.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\L4HU1X54.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\LOSL4F5L.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\LP6G0KQV.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\LPSIB7LD.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\LWSO5IAJ.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\M4OILDA9.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\M53D4K30.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\MAMSV0T0.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\MP23GWYH.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\ND412105.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\NDOM3NYZ.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\NLU40KZ2.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\NM8IO77L.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\NQ8X0BTG.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\NXE6WT61.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\O47345RA.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\O9E0QXLO.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\O9RML21O.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\OMCGBLFP.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\OYGS7IEL.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\P101VAKH.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\P3T4R75V.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\P52AKYNI.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\PA1RXPKR.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\PFS097NB.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\PLLOE5WG.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\Q6AUOGUZ.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\QAUESUQK.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\QFZO7NSQ.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\QOG5UPQF.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\QP1A94W2.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\QQ6X6Y2J.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\QSRAQE70.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\QUAM8LJQ.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\R8NFAFL1.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\R9U6WWZL.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\RICYOOMF.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\RLDTK24L.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\RO87YIHL.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\RTGRBI9M.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\RZXR74L7.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\SDYDONXF.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\SRT1P7CH.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\SSDN3ZOL.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\SSU1BK3T.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\T3LD29SX.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\T7WG6K75.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\TBYLJQRU.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\TO8XPA6L.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\TOWNBR33.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\TT9HYB95.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\TVKJLI9X.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\TW3T4T6U.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\U1T2YSYY.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\U254HH1R.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\UDG577E4.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\UL4XN80L.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\V4ID6YOY.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\V5LFY2I6.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\V64JH3WE.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\V8MZV1J5.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\VP5BWP25.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\VYKC5BI2.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\W6HAVRVY.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\WINLV9TW.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\WL3F07GB.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\WQ2NFYCB.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\WQ9ON6K4.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\WWL2T0J8.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\WYTEEA42.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\XFT15RJ6.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\XKWRCTXZ.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\XVP5PHIV.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\Y82VE261.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\Y9ADOHHI.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\YEU3G9EV.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\YJZC1NBV.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\YTH21EB8.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\YV8S8E30.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\YW56LX5J.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\Z7BY5T4Y.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\ZAYIYR9A.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\ZMH2Z199.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\ZOWHYMB0.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\ZU48R343.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\ZY241XSQ.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\0NWR2FQ5.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\1TE6FSP9.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\5FJ1ADKO.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\5H4BYJHB.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\7M5F0S3P.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\8JB12Z6Q.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\8V0KO0VS.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\DJG89GU7.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\E4OIR9EQ.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\HQ28R2GD.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\IL9BIK4Q.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\MG9OQ9Y8.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\O0ZNZYZK.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\PRIC8CPO.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\PYT5LV3D.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\UHKQQIE5.cookie
C:\Users\chris\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\YE0MY09D.cookie
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:246059135.log.optimizely.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:acuityplatform.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:ad.360yield.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adadvisor.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adaptv.advertising.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adbrn.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:addthis.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adfarm1.adition.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adform.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adgrx.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adingo.jp
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adnxs.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:ads.deliverimp.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:ads.kiosked.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:ads.pointroll.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:ads.servebom.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adsrvr.org
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adsymptotic.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adtech.de
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adtechjp.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:adtechus.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:advertising.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:agkn.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:altfarm.mediaplex.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:amgdgt.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:at.atwola.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:atdmt.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:atemda.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:audienceiq.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:basebanner.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:bidr.io
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:bidswitch.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:bluekai.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:casalemedia.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:chango.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:collective-media.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:connexity.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:contextweb.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:crwdcntrl.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:demdex.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:domdex.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:dotomi.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:doubleclick.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:dpclk.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:dpm.demdex.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:everesttech.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:eyereturn.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:eyeviewads.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:fastclick.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:flashtalking.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:genieessp.jp
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:genieesspv.jp
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:gssprt.jp
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:gwallet.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:href.asia
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:ib.mookie1.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:imrworldwide.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:korrelate.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:krxd.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:lijit.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:liverail.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:match.rundsp.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:mathtag.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:media6degrees.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:mookie1.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:mxptint.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:nexac.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:openx.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:owneriq.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:pixel-a.sitescout.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:pixel.rubiconproject.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:pixel.sitescout.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:pubmatic.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:revsci.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:rfihub.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:rhythmxchange.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:rlcdn.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:ru4.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:rubiconproject.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:scorecardresearch.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:server.cpmstar.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:serving-sys.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:simpli.fi
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:sitescout.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:skimresources.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:smartadserver.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:swid.switchads.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:sxp.smartclip.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:taboola.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:tap.rubiconproject.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:tap2-cdn.rubiconproject.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:tapad.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:tidaltv.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:track.rtb-media.me
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:tribalfusion.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:tubemogul.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:turn.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:vindicosuite.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:virool.com
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:w55c.net
C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\7vemt281.default\cookies.sqlite:wtp101.com
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:246059135.log.optimizely.com
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:abmr.net
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:addthis.com
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:adnxs.com
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:adsrvr.org
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:bluekai.com
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:chango.com
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:crwdcntrl.net
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:demdex.net
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:doubleclick.net
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:dpm.demdex.net
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:mathtag.com
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:media6degrees.com
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:mookie1.com
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:openx.net
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:oracle.112.2o7.net
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:pixel.rubiconproject.com
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:pubmatic.com
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:rfihub.com
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:rubiconproject.com
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:scorecardresearch.com
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:track.rtb-media.me
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:tubemogul.com
C:\Users\ronke_000\AppData\Roaming\Mozilla\Firefox\Profiles\zujvltn3.default\cookies.sqlite:turn.com